VIRY.CZ

Zdravím, dělal jsem obnovu továrního nastavení NB (Lenovo G580, Windows 8), protože už byl nějaký zasekaný. Po instalaci jsem nainstaloval aktualizace a pár programů ale od začátku bylo vytížení disku většinou na 99%. Dokázali byste mi nějak pomoci?
Tady je log z RSIT:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Veronika Žižková at 2014-12-14 18:46:19
Microsoft Windows 8
System drive C: has 804 GB (89%) free of 905 GB
Total RAM: 3962 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:46:26, on 14. 12. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.17183)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\USB Camera\VM331STI.EXE
C:\Program Files\trend micro\Veronika Žižková.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @C:\windows\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 7651 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe -k DcomLaunch
"C:\windows\system32\nvvsvc.exe"
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
"dwm.exe"
C:\windows\system32\svchost.exe -k LocalService
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
C:\windows\system32\CxAudMsg64.exe
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-93cab552-acb3-4d0e-96bd-b0da76a11586 -SystemEventPortName:HostProcess-a311f075-9bd1-4e26-9560-a1b5fb1d40fb -IoCancelEventPortName:HostProcess-266db4c9-907b-44e0-80da-5467a66d2d66 -NonStateChangingEventPortName:HostProcess-db0228ce-21af-457c-897a-10dfe0f3b993 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:2fb63338-d527-40ce-852f-61f90c0049b7 -DeviceGroupId:WudfDefaultDevicePool
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session -first
taskeng.exe {65D1DBD2-3E34-4855-BDA7-559BA8079009}
taskhostex.exe
"\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\windows\Explorer.EXE
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
"C:\Program Files (x86)\USB Camera\VM331STI.EXE"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Windows Defender\MsMpEng.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
wmiadap.exe /F /T /R
C:\windows\system32\wbem\wmiprvse.exe
taskhost.exe /RuntimeWide
"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:684
\??\C:\windows\system32\conhost.exe 0x4
"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" ExecuteQueuedItems 2 /LegacyServiceBehavior
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\servicing\TrustedInstaller.exe
C:\windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.2.9200.17074_none_6233bc1f5106b696\TiWorker.exe -Embedding

"C:\Users\Veronika Žižková\Downloads\RSITx64.exe"


======Scheduled tasks folder======

C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2013-02-07 171504]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2013-02-07 399856]
"Persistence"=C:\windows\system32\igfxpers.exe [2013-02-07 441840]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2012-06-15 887968]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-05-20 17079376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-05-20 191568]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dolby Advanced Audio v2"=C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2012-07-26 508656]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331STI.EXE [2012-05-02 548864]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-07-27 167024]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2013-02-05 439296]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-12-14 18:36:36 ----D---- C:\windows\system32\AutoUpdateLicense
2014-12-14 18:35:52 ----RD---- C:\windows\BrowserChoice
2014-12-14 18:11:08 ----D---- C:\Program Files\Microsoft Silverlight
2014-12-14 18:11:07 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-12-14 18:10:01 ----D---- C:\windows\SYSWOW64\NV
2014-12-14 18:10:01 ----D---- C:\windows\system32\NV
2014-12-14 18:03:12 ----A---- C:\windows\system32\wuaueng.dll
2014-12-14 18:03:11 ----A---- C:\windows\SYSWOW64\wuapi.dll
2014-12-14 18:03:11 ----A---- C:\windows\system32\wuwebv.dll
2014-12-14 18:03:11 ----A---- C:\windows\system32\WUSettingsProvider.dll
2014-12-14 18:03:11 ----A---- C:\windows\system32\wucltux.dll
2014-12-14 18:03:11 ----A---- C:\windows\system32\wuauclt.exe
2014-12-14 18:03:11 ----A---- C:\windows\system32\wuapi.dll
2014-12-14 18:03:11 ----A---- C:\windows\system32\storewuauth.dll
2014-12-14 18:03:10 ----A---- C:\windows\SYSWOW64\wuwebv.dll
2014-12-14 18:03:10 ----A---- C:\windows\SYSWOW64\wudriver.dll
2014-12-14 18:03:10 ----A---- C:\windows\system32\wudriver.dll
2014-12-14 18:03:06 ----A---- C:\windows\SYSWOW64\wuapp.exe
2014-12-14 18:03:06 ----A---- C:\windows\system32\wuapp.exe
2014-12-14 18:02:37 ----A---- C:\windows\system32\ntoskrnl.exe
2014-12-14 18:02:33 ----A---- C:\windows\system32\localspl.dll
2014-12-14 18:02:31 ----A---- C:\windows\system32\services.exe
2014-12-14 18:02:28 ----A---- C:\windows\system32\drivers\vhdmp.sys
2014-12-14 18:02:27 ----A---- C:\windows\system32\wuaext.dll
2014-12-14 18:02:27 ----A---- C:\windows\system32\win32spl.dll
2014-12-14 17:55:35 ----D---- C:\windows\PCHEALTH
2014-12-14 17:52:21 ----D---- C:\Program Files\Microsoft Office
2014-12-14 17:52:15 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2014-12-14 17:52:05 ----D---- C:\ProgramData\Microsoft Help
2014-12-14 17:51:48 ----RHD---- C:\MSOCache
2014-12-14 17:40:49 ----D---- C:\drivers
2014-12-14 17:32:51 ----D---- C:\windows\system32\MRT
2014-12-14 17:32:45 ----A---- C:\windows\system32\MRT.exe
2014-12-14 17:19:07 ----A---- C:\windows\SYSWOW64\wups.dll
2014-12-14 17:19:04 ----A---- C:\windows\system32\wups2.dll
2014-12-14 17:19:04 ----A---- C:\windows\system32\wups.dll
2014-12-14 17:12:28 ----D---- C:\Users\Veronika Žižková\AppData\Roaming\Skype
2014-12-14 17:12:17 ----RD---- C:\Program Files (x86)\Skype
2014-12-14 17:12:10 ----D---- C:\ProgramData\Skype
2014-12-14 17:05:05 ----D---- C:\Program Files\trend micro
2014-12-14 17:05:03 ----D---- C:\rsit
2014-12-14 16:58:55 ----D---- C:\Program Files (x86)\Google
2014-12-14 16:46:03 ----A---- C:\windows\system32\drivers\hdaudbus.sys
2014-12-14 16:40:57 ----A---- C:\windows\system32\dwmcore.dll
2014-12-14 16:40:55 ----A---- C:\windows\SYSWOW64\dwmcore.dll
2014-12-14 16:40:53 ----A---- C:\windows\explorer.exe
2014-12-14 16:40:52 ----A---- C:\windows\SYSWOW64\explorer.exe
2014-12-14 16:40:50 ----A---- C:\windows\system32\samsrv.dll
2014-12-14 16:40:49 ----A---- C:\windows\system32\mfcore.dll
2014-12-14 16:40:48 ----A---- C:\windows\SYSWOW64\mfcore.dll
2014-12-14 16:40:45 ----A---- C:\windows\system32\vds.exe
2014-12-14 16:40:45 ----A---- C:\windows\system32\mscms.dll
2014-12-14 16:40:45 ----A---- C:\windows\system32\mfasfsrcsnk.dll
2014-12-14 16:40:44 ----A---- C:\windows\SYSWOW64\mscms.dll
2014-12-14 16:40:44 ----A---- C:\windows\SYSWOW64\mfasfsrcsnk.dll
2014-12-14 16:40:44 ----A---- C:\windows\system32\samlib.dll
2014-12-14 16:40:44 ----A---- C:\windows\system32\MbaeParserTask.exe
2014-12-14 16:40:44 ----A---- C:\windows\system32\DeviceSetupManager.dll
2014-12-14 16:40:43 ----A---- C:\windows\SYSWOW64\samlib.dll
2014-12-14 16:40:43 ----A---- C:\windows\system32\vdsutil.dll
2014-12-14 16:40:43 ----A---- C:\windows\system32\drivers\BthAvrcpTg.sys
2014-12-14 16:40:41 ----A---- C:\windows\system32\drivers\ndis.sys
2014-12-14 16:40:21 ----A---- C:\windows\system32\drivers\ntfs.sys
2014-12-14 16:40:18 ----A---- C:\windows\system32\XpsGdiConverter.dll
2014-12-14 16:40:16 ----A---- C:\windows\SYSWOW64\XpsGdiConverter.dll
2014-12-14 16:40:15 ----A---- C:\windows\SYSWOW64\WSDApi.dll
2014-12-14 16:40:15 ----A---- C:\windows\system32\WSDApi.dll
2014-12-14 16:40:15 ----A---- C:\windows\system32\drivers\storport.sys
2014-12-14 16:40:15 ----A---- C:\windows\system32\drivers\msiscsi.sys
2014-12-14 16:40:14 ----A---- C:\windows\system32\drivers\dfsc.sys
2014-12-14 16:37:00 ----A---- C:\windows\system32\WSShared.dll
2014-12-14 16:37:00 ----A---- C:\windows\system32\AutoUpdate.exe
2014-12-14 16:36:59 ----A---- C:\windows\SYSWOW64\WSShared.dll
2014-12-14 16:36:59 ----A---- C:\windows\system32\WinSetupUI.dll
2014-12-14 16:36:59 ----A---- C:\windows\system32\NotificationUI.exe
2014-12-14 16:36:58 ----A---- C:\windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-14 16:36:58 ----A---- C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-14 16:36:58 ----A---- C:\windows\system32\Windows.ApplicationModel.Store.dll
2014-12-14 16:31:27 ----D---- C:\Users\Veronika Žižková\AppData\Roaming\Atheros
2014-12-14 16:31:15 ----SHD---- C:\$RECYCLE.BIN
2014-12-14 16:30:47 ----D---- C:\Users\Veronika Žižková\AppData\Roaming\Adobe
2014-12-14 16:29:22 ----SD---- C:\Users\Veronika Žižková\AppData\Roaming\Microsoft
2014-12-14 16:29:22 ----D---- C:\Users\Veronika Žižková\AppData\Roaming\Macromedia
2014-12-14 16:27:53 ----A---- C:\windows\SYSWOW64\wusa.exe
2014-12-14 16:27:53 ----A---- C:\windows\system32\wusa.exe
2014-12-14 16:25:05 ----A---- C:\windows\system32\resutils.dll
2014-12-14 16:25:05 ----A---- C:\windows\system32\clusapi.dll
2014-12-14 16:25:04 ----A---- C:\windows\SYSWOW64\resutils.dll
2014-12-14 16:25:04 ----A---- C:\windows\SYSWOW64\clusapi.dll
2014-12-14 16:25:02 ----A---- C:\windows\system32\drivers\spaceport.sys
2014-12-14 16:24:36 ----A---- C:\windows\system32\Windows.UI.Xaml.dll
2014-12-14 16:24:32 ----A---- C:\windows\SYSWOW64\Windows.UI.Xaml.dll
2014-12-14 16:24:31 ----A---- C:\windows\SYSWOW64\UIAutomationCore.dll
2014-12-14 16:24:31 ----A---- C:\windows\system32\UIAutomationCore.dll
2014-12-14 16:24:30 ----A---- C:\windows\system32\ubpm.dll
2014-12-14 16:24:30 ----A---- C:\windows\system32\drivers\tpm.sys
2014-12-14 16:24:30 ----A---- C:\windows\system32\drivers\fvevol.sys
2014-12-14 16:24:29 ----A---- C:\windows\SYSWOW64\ubpm.dll
2014-12-14 16:24:29 ----A---- C:\windows\system32\drivers\crashdmp.sys
2014-12-14 16:21:02 ----A---- C:\windows\system32\drivers\usbvideo.sys
2014-12-14 16:21:02 ----A---- C:\windows\system32\drivers\usbcir.sys
2014-12-14 16:17:15 ----A---- C:\windows\SYSWOW64\msftedit.dll
2014-12-14 16:17:13 ----A---- C:\windows\system32\msftedit.dll
2014-12-14 16:17:10 ----A---- C:\windows\SYSWOW64\winmm.dll
2014-12-14 16:17:10 ----A---- C:\windows\system32\wwanconn.dll
2014-12-14 16:17:10 ----A---- C:\windows\system32\winmmbase.dll
2014-12-14 16:17:10 ----A---- C:\windows\system32\WerFault.exe
2014-12-14 16:17:09 ----A---- C:\windows\SYSWOW64\winmmbase.dll
2014-12-14 16:17:09 ----A---- C:\windows\SYSWOW64\WerFault.exe
2014-12-14 16:17:09 ----A---- C:\windows\system32\wwansvc.dll
2014-12-14 16:17:09 ----A---- C:\windows\system32\WinSCard.dll
2014-12-14 16:17:09 ----A---- C:\windows\system32\winmm.dll
2014-12-14 16:17:09 ----A---- C:\windows\system32\drivers\sdbus.sys
2014-12-14 16:17:09 ----A---- C:\windows\system32\drivers\msgpioclx.sys
2014-12-14 16:17:09 ----A---- C:\windows\system32\drivers\HdAudio.sys
2014-12-14 16:17:09 ----A---- C:\windows\system32\drivers\dumpsd.sys
2014-12-14 16:17:08 ----A---- C:\windows\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2014-12-14 16:17:08 ----A---- C:\windows\system32\Wwanadvui.dll
2014-12-14 16:17:08 ----A---- C:\windows\system32\drivers\USBSTOR.SYS
2014-12-14 16:17:07 ----A---- C:\windows\system32\Windows.Networking.BackgroundTransfer.dll
2014-12-14 16:17:06 ----A---- C:\windows\system32\wwanmm.dll
2014-12-14 16:17:06 ----A---- C:\windows\system32\openfiles.exe
2014-12-14 16:17:06 ----A---- C:\windows\system32\drivers\udfs.sys
2014-12-14 16:17:05 ----A---- C:\windows\SYSWOW64\WinSCard.dll
2014-12-14 16:17:05 ----A---- C:\windows\SYSWOW64\openfiles.exe
2014-12-14 16:17:05 ----A---- C:\windows\SYSWOW64\LocationApi.dll
2014-12-14 16:17:05 ----A---- C:\windows\system32\LocationApi.dll
2014-12-14 16:15:04 ----A---- C:\windows\SYSWOW64\TsWpfWrp.exe
2014-12-14 16:15:04 ----A---- C:\windows\system32\TsWpfWrp.exe
2014-12-14 16:11:27 ----A---- C:\windows\system32\ntdll.dll
2014-12-14 16:11:26 ----A---- C:\windows\SYSWOW64\WMVDECOD.DLL
2014-12-14 16:11:25 ----A---- C:\windows\system32\storagewmi.dll
2014-12-14 16:11:25 ----A---- C:\windows\system32\drivers\volsnap.sys
2014-12-14 16:11:24 ----A---- C:\windows\system32\WMVDECOD.DLL
2014-12-14 16:11:24 ----A---- C:\windows\system32\d3d10warp.dll
2014-12-14 16:11:22 ----A---- C:\windows\SYSWOW64\ntdll.dll
2014-12-14 16:11:22 ----A---- C:\windows\system32\winload.exe
2014-12-14 16:11:21 ----A---- C:\windows\SYSWOW64\dwmapi.dll
2014-12-14 16:11:21 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2014-12-14 16:11:20 ----A---- C:\windows\SYSWOW64\storagewmi.dll
2014-12-14 16:11:20 ----A---- C:\windows\system32\winresume.exe
2014-12-14 16:11:20 ----A---- C:\windows\system32\wcmsvc.dll
2014-12-14 16:11:20 ----A---- C:\windows\system32\dwmapi.dll
2014-12-14 16:11:18 ----A---- C:\windows\system32\wcmcsp.dll
2014-12-14 16:11:18 ----A---- C:\windows\system32\profsvc.dll
2014-12-14 16:11:17 ----A---- C:\windows\system32\defragsvc.dll
2014-12-14 16:11:14 ----A---- C:\windows\SYSWOW64\KBDRUM.DLL
2014-12-14 16:11:14 ----A---- C:\windows\system32\KBDRUM.DLL
2014-12-14 16:11:14 ----A---- C:\windows\system32\Defrag.exe
2014-12-14 16:11:13 ----A---- C:\windows\SYSWOW64\KBDYAK.DLL
2014-12-14 16:11:13 ----A---- C:\windows\SYSWOW64\KBDTAT.DLL
2014-12-14 16:11:13 ----A---- C:\windows\SYSWOW64\KBDRU1.DLL
2014-12-14 16:11:13 ----A---- C:\windows\SYSWOW64\KBDRU.DLL
2014-12-14 16:11:13 ----A---- C:\windows\SYSWOW64\KBDBASH.DLL
2014-12-14 16:11:13 ----A---- C:\windows\system32\KBDYAK.DLL
2014-12-14 16:11:13 ----A---- C:\windows\system32\KBDTAT.DLL
2014-12-14 16:11:13 ----A---- C:\windows\system32\KBDRU1.DLL
2014-12-14 16:11:13 ----A---- C:\windows\system32\KBDRU.DLL
2014-12-14 16:11:13 ----A---- C:\windows\system32\KBDBASH.DLL
2014-12-14 16:07:07 ----A---- C:\windows\system32\win32k.sys
2014-12-14 16:07:01 ----A---- C:\windows\system32\twinui.dll
2014-12-14 16:07:00 ----A---- C:\windows\SYSWOW64\twinui.dll
2014-12-14 16:06:57 ----A---- C:\windows\SYSWOW64\msi.dll
2014-12-14 16:06:57 ----A---- C:\windows\system32\msi.dll
2014-12-14 16:06:56 ----A---- C:\windows\SYSWOW64\authui.dll
2014-12-14 16:06:56 ----A---- C:\windows\system32\authui.dll
2014-12-14 16:06:55 ----A---- C:\windows\SYSWOW64\msihnd.dll
2014-12-14 16:06:55 ----A---- C:\windows\system32\msihnd.dll
2014-12-14 16:04:53 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2014-12-14 16:04:53 ----A---- C:\windows\system32\WindowsCodecs.dll
2014-12-14 16:04:40 ----A---- C:\windows\system32\Robocopy.exe
2014-12-14 16:04:39 ----A---- C:\windows\SYSWOW64\Robocopy.exe
2014-12-14 16:04:35 ----A---- C:\windows\SYSWOW64\ReAgent.dll
2014-12-14 16:04:34 ----A---- C:\windows\system32\reseteng.dll
2014-12-14 16:04:34 ----A---- C:\windows\system32\ReAgent.dll
2014-12-14 16:03:25 ----A---- C:\windows\SYSWOW64\atmlib.dll
2014-12-14 16:03:25 ----A---- C:\windows\SYSWOW64\atmfd.dll
2014-12-14 16:03:25 ----A---- C:\windows\system32\atmlib.dll
2014-12-14 16:03:25 ----A---- C:\windows\system32\atmfd.dll
2014-12-14 16:03:08 ----A---- C:\windows\system32\MPSSVC.dll
2014-12-14 16:03:08 ----A---- C:\windows\system32\FirewallAPI.dll
2014-12-14 16:03:06 ----A---- C:\windows\SYSWOW64\WebClnt.dll
2014-12-14 16:03:06 ----A---- C:\windows\SYSWOW64\FirewallAPI.dll
2014-12-14 16:03:06 ----A---- C:\windows\system32\WebClnt.dll
2014-12-14 16:03:06 ----A---- C:\windows\system32\drivers\disk.sys
2014-12-14 16:03:05 ----A---- C:\windows\SYSWOW64\davclnt.dll
2014-12-14 16:03:05 ----A---- C:\windows\system32\drivers\mpsdrv.sys
2014-12-14 16:03:05 ----A---- C:\windows\system32\davclnt.dll
2014-12-14 15:59:38 ----A---- C:\windows\system32\AppXDeploymentServer.dll
2014-12-14 15:59:37 ----A---- C:\windows\system32\sysmain.dll
2014-12-14 15:59:34 ----A---- C:\windows\system32\drivers\rdbss.sys
2014-12-14 15:59:31 ----A---- C:\windows\system32\netprofmsvc.dll
2014-12-14 15:59:19 ----A---- C:\windows\system32\stobject.dll
2014-12-14 15:59:19 ----A---- C:\windows\system32\netprofm.dll
2014-12-14 15:59:19 ----A---- C:\windows\system32\BCP47Langs.dll
2014-12-14 15:59:18 ----A---- C:\windows\system32\AppXDeploymentExtensions.dll
2014-12-14 15:59:17 ----A---- C:\windows\system32\netplwiz.dll
2014-12-14 15:59:17 ----A---- C:\windows\system32\Magnify.exe
2014-12-14 15:59:16 ----A---- C:\windows\SYSWOW64\netplwiz.dll
2014-12-14 15:59:16 ----A---- C:\windows\system32\psmsrv.dll
2014-12-14 15:59:16 ----A---- C:\windows\system32\mfmp4srcsnk.dll
2014-12-14 15:59:13 ----A---- C:\windows\SYSWOW64\stobject.dll
2014-12-14 15:59:13 ----A---- C:\windows\system32\DevicePairing.dll
2014-12-14 15:59:10 ----A---- C:\windows\SYSWOW64\Magnify.exe
2014-12-14 15:59:10 ----A---- C:\windows\system32\AuthHost.exe
2014-12-14 15:59:09 ----A---- C:\windows\SYSWOW64\netprofm.dll
2014-12-14 15:59:09 ----A---- C:\windows\SYSWOW64\DevicePairing.dll
2014-12-14 15:59:08 ----A---- C:\windows\system32\biwinrt.dll
2014-12-14 15:59:07 ----A---- C:\windows\SYSWOW64\biwinrt.dll
2014-12-14 15:59:04 ----A---- C:\windows\system32\bisrv.dll
2014-12-14 15:59:03 ----A---- C:\windows\SYSWOW64\mfmp4srcsnk.dll
2014-12-14 15:59:02 ----A---- C:\windows\SYSWOW64\BCP47Langs.dll
2014-12-14 15:59:01 ----A---- C:\windows\SYSWOW64\npmproxy.dll
2014-12-14 15:59:01 ----A---- C:\windows\SYSWOW64\muifontsetup.dll
2014-12-14 15:59:01 ----A---- C:\windows\system32\muifontsetup.dll
2014-12-14 15:58:25 ----A---- C:\windows\SYSWOW64\untfs.dll
2014-12-14 15:58:25 ----A---- C:\windows\system32\untfs.dll
2014-12-14 15:58:25 ----A---- C:\windows\system32\autochk.exe
2014-12-14 15:58:24 ----A---- C:\windows\SYSWOW64\autochk.exe
2014-12-14 15:55:05 ----A---- C:\windows\SYSWOW64\actxprxy.dll
2014-12-14 15:55:05 ----A---- C:\windows\system32\actxprxy.dll
2014-12-14 15:54:53 ----A---- C:\windows\system32\drivers\srv2.sys
2014-12-14 15:54:52 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2014-12-14 15:54:51 ----A---- C:\windows\system32\user32.dll
2014-12-14 15:54:51 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2014-12-14 15:54:50 ----A---- C:\windows\system32\srvsvc.dll
2014-12-14 15:54:50 ----A---- C:\windows\system32\msdtctm.dll
2014-12-14 15:54:50 ----A---- C:\windows\system32\drivers\USBHUB3.SYS
2014-12-14 15:54:49 ----A---- C:\windows\SYSWOW64\user32.dll
2014-12-14 15:54:49 ----A---- C:\windows\SYSWOW64\sscore.dll
2014-12-14 15:54:49 ----A---- C:\windows\system32\sscore.dll
2014-12-14 15:54:49 ----A---- C:\windows\system32\drivers\srvnet.sys
2014-12-14 15:54:45 ----A---- C:\windows\system32\drivers\USBXHCI.SYS
2014-12-14 15:54:45 ----A---- C:\windows\system32\drivers\UCX01000.SYS
2014-12-14 15:54:10 ----A---- C:\windows\system32\drivers\afd.sys
2014-12-14 15:52:38 ----A---- C:\windows\system32\consent.exe
2014-12-14 15:52:35 ----A---- C:\windows\SYSWOW64\cryptdlg.dll
2014-12-14 15:52:35 ----A---- C:\windows\system32\cryptdlg.dll
2014-12-14 15:51:50 ----A---- C:\windows\system32\kerberos.dll
2014-12-14 15:51:49 ----A---- C:\windows\SYSWOW64\pku2u.dll
2014-12-14 15:51:49 ----A---- C:\windows\SYSWOW64\kerberos.dll
2014-12-14 15:51:49 ----A---- C:\windows\system32\pku2u.dll
2014-12-14 15:50:49 ----A---- C:\windows\system32\msctf.dll
2014-12-14 15:50:48 ----A---- C:\windows\SYSWOW64\msctf.dll
2014-12-14 15:50:41 ----A---- C:\windows\SYSWOW64\shdocvw.dll
2014-12-14 15:50:41 ----A---- C:\windows\SYSWOW64\SettingSync.dll
2014-12-14 15:50:41 ----A---- C:\windows\SYSWOW64\mbsmsapi.dll
2014-12-14 15:50:41 ----A---- C:\windows\system32\shdocvw.dll
2014-12-14 15:50:41 ----A---- C:\windows\system32\SettingSyncInfo.dll
2014-12-14 15:50:41 ----A---- C:\windows\system32\SettingSync.dll
2014-12-14 15:50:41 ----A---- C:\windows\system32\mbsmsapi.dll
2014-12-14 15:50:32 ----A---- C:\windows\SYSWOW64\wvc.dll
2014-12-14 15:50:32 ----A---- C:\windows\SYSWOW64\wdc.dll
2014-12-14 15:50:32 ----A---- C:\windows\system32\wvc.dll
2014-12-14 15:50:32 ----A---- C:\windows\system32\wdc.dll
2014-12-14 15:50:16 ----A---- C:\windows\system32\tssdisai.dll
2014-12-14 15:50:15 ----A---- C:\windows\system32\poqexec.exe
2014-12-14 15:47:47 ----A---- C:\windows\system32\kernel32.dll
2014-12-14 15:47:45 ----A---- C:\windows\system32\gpedit.dll
2014-12-14 15:47:43 ----A---- C:\windows\SYSWOW64\kernel32.dll
2014-12-14 15:47:43 ----A---- C:\windows\SYSWOW64\gpedit.dll
2014-12-14 15:47:43 ----A---- C:\windows\system32\drivers\IPMIDrv.sys
2014-12-14 15:47:43 ----A---- C:\windows\system32\drivers\hidclass.sys
2014-12-14 15:47:41 ----A---- C:\windows\system32\drivers\mountmgr.sys
2014-12-14 15:33:40 ----A---- C:\windows\system32\audiosrv.dll
2014-12-14 15:33:38 ----A---- C:\windows\system32\AUDIOKSE.dll
2014-12-14 15:33:37 ----A---- C:\windows\system32\EncDump.dll
2014-12-14 15:33:37 ----A---- C:\windows\system32\AudioEndpointBuilder.dll
2014-12-14 15:33:32 ----A---- C:\windows\SYSWOW64\msdrm.dll
2014-12-14 15:33:32 ----A---- C:\windows\system32\msdrm.dll
2014-12-14 15:33:25 ----A---- C:\windows\system32\drivers\portcls.sys
2014-12-14 15:33:17 ----A---- C:\windows\SYSWOW64\crypt32.dll
2014-12-14 15:33:17 ----A---- C:\windows\system32\crypt32.dll
2014-12-14 15:08:31 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2014-12-14 14:04:26 ----A---- C:\windows\SYSWOW64\vsstrace.dll
2014-12-14 14:04:26 ----A---- C:\windows\SYSWOW64\vssapi.dll
2014-12-14 14:04:26 ----A---- C:\windows\system32\VSSVC.exe
2014-12-14 14:04:26 ----A---- C:\windows\system32\vsstrace.dll
2014-12-14 14:04:26 ----A---- C:\windows\system32\vssapi.dll
2014-12-14 12:45:07 ----N---- C:\windows\system32\MpSigStub.exe
2014-12-14 12:43:14 ----A---- C:\windows\SYSWOW64\esent.dll
2014-12-14 12:43:13 ----A---- C:\windows\system32\esent.dll
2014-12-14 12:43:00 ----A---- C:\windows\SYSWOW64\msxml3.dll
2014-12-14 12:43:00 ----A---- C:\windows\system32\msxml3.dll
2014-12-14 12:42:59 ----A---- C:\windows\system32\drivers\usbport.sys
2014-12-14 12:42:59 ----A---- C:\windows\system32\drivers\usbhub.sys
2014-12-14 12:42:58 ----A---- C:\windows\system32\drivers\usbuhci.sys
2014-12-14 12:42:58 ----A---- C:\windows\system32\drivers\usbehci.sys
2014-12-14 12:42:58 ----A---- C:\windows\system32\drivers\usbd.sys
2014-12-14 12:42:58 ----A---- C:\windows\system32\drivers\usbccgp.sys
2014-12-14 12:42:49 ----A---- C:\windows\system32\winlogon.exe
2014-12-14 12:42:49 ----A---- C:\windows\system32\schannel.dll
2014-12-14 12:42:49 ----A---- C:\windows\system32\lsm.dll
2014-12-14 12:42:49 ----A---- C:\windows\system32\drivers\cng.sys
2014-12-14 12:42:48 ----A---- C:\windows\SYSWOW64\usercpl.dll
2014-12-14 12:42:48 ----A---- C:\windows\SYSWOW64\schannel.dll
2014-12-14 12:42:48 ----A---- C:\windows\SYSWOW64\msv1_0.dll
2014-12-14 12:42:48 ----A---- C:\windows\system32\msv1_0.dll
2014-12-14 12:42:47 ----A---- C:\windows\SYSWOW64\wdigest.dll
2014-12-14 12:42:47 ----A---- C:\windows\system32\wdigest.dll
2014-12-14 12:42:47 ----A---- C:\windows\system32\usercpl.dll
2014-12-14 12:42:46 ----A---- C:\windows\SYSWOW64\TSpkg.dll
2014-12-14 12:42:46 ----A---- C:\windows\SYSWOW64\ncryptsslp.dll
2014-12-14 12:42:46 ----A---- C:\windows\SYSWOW64\credssp.dll
2014-12-14 12:42:46 ----A---- C:\windows\system32\TSpkg.dll
2014-12-14 12:42:46 ----A---- C:\windows\system32\ncryptsslp.dll
2014-12-14 12:42:46 ----A---- C:\windows\system32\credssp.dll
2014-12-14 12:42:45 ----A---- C:\windows\system32\workerdd.dll
2014-12-14 12:42:04 ----A---- C:\windows\SYSWOW64\DWrite.dll
2014-12-14 12:42:04 ----A---- C:\windows\system32\DWrite.dll
2014-12-14 12:41:57 ----A---- C:\windows\system32\lsasrv.dll
2014-12-14 12:41:56 ----A---- C:\windows\system32\SHCore.dll
2014-12-14 12:41:56 ----A---- C:\windows\system32\rdpcorets.dll
2014-12-14 12:41:52 ----A---- C:\windows\SYSWOW64\SHCore.dll
2014-12-14 12:41:50 ----A---- C:\windows\SYSWOW64\adtschema.dll
2014-12-14 12:41:50 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2014-12-14 12:41:50 ----A---- C:\windows\system32\adtschema.dll
2014-12-14 12:41:48 ----A---- C:\windows\SYSWOW64\msaudite.dll
2014-12-14 12:41:48 ----A---- C:\windows\system32\rdpudd.dll
2014-12-14 12:41:48 ----A---- C:\windows\system32\msaudite.dll
2014-12-14 12:41:07 ----A---- C:\windows\system32\wmp.dll
2014-12-14 12:41:07 ----A---- C:\windows\system32\tquery.dll
2014-12-14 12:41:05 ----A---- C:\windows\SYSWOW64\wmp.dll
2014-12-14 12:41:05 ----A---- C:\windows\system32\mssrch.dll
2014-12-14 12:41:03 ----A---- C:\windows\SYSWOW64\tquery.dll
2014-12-14 12:41:02 ----A---- C:\windows\SYSWOW64\mssrch.dll
2014-12-14 12:41:00 ----A---- C:\windows\system32\MSAudDecMFT.dll
2014-12-14 12:40:59 ----A---- C:\windows\SYSWOW64\MSAudDecMFT.dll
2014-12-14 12:40:57 ----A---- C:\windows\system32\kd_02_10ec.dll
2014-12-14 12:40:56 ----A---- C:\windows\SYSWOW64\mssph.dll
2014-12-14 12:40:56 ----A---- C:\windows\system32\SearchIndexer.exe
2014-12-14 12:40:56 ----A---- C:\windows\system32\rsaenh.dll
2014-12-14 12:40:55 ----A---- C:\windows\SYSWOW64\SearchProtocolHost.exe
2014-12-14 12:40:55 ----A---- C:\windows\system32\SearchProtocolHost.exe
2014-12-14 12:40:55 ----A---- C:\windows\system32\drivers\PEAuth.sys
2014-12-14 12:40:55 ----A---- C:\windows\system32\AudioSes.dll
2014-12-14 12:40:54 ----A---- C:\windows\SYSWOW64\rsaenh.dll
2014-12-14 12:40:54 ----A---- C:\windows\SYSWOW64\AudioSes.dll
2014-12-14 12:40:54 ----A---- C:\windows\SYSWOW64\AudioEng.dll
2014-12-14 12:40:54 ----A---- C:\windows\system32\Windows.Networking.dll
2014-12-14 12:40:54 ----A---- C:\windows\system32\mssph.dll
2014-12-14 12:40:54 ----A---- C:\windows\system32\dwmredir.dll
2014-12-14 12:40:54 ----A---- C:\windows\system32\conhost.exe
2014-12-14 12:40:54 ----A---- C:\windows\system32\AudioEng.dll
2014-12-14 12:40:54 ----A---- C:\windows\system32\audiodg.exe
2014-12-14 12:40:53 ----A---- C:\windows\SYSWOW64\SearchIndexer.exe
2014-12-14 12:40:53 ----A---- C:\windows\system32\wpncore.dll
2014-12-14 12:40:53 ----A---- C:\windows\system32\RecoveryDrive.exe
2014-12-14 12:40:53 ----A---- C:\windows\system32\MFMediaEngine.dll
2014-12-14 12:40:51 ----A---- C:\windows\SYSWOW64\Windows.Networking.dll
2014-12-14 12:40:51 ----A---- C:\windows\system32\dmvdsitf.dll
2014-12-14 12:40:51 ----A---- C:\windows\system32\ci.dll
2014-12-14 12:40:50 ----A---- C:\windows\SYSWOW64\mssvp.dll
2014-12-14 12:40:50 ----A---- C:\windows\SYSWOW64\MFMediaEngine.dll
2014-12-14 12:40:50 ----A---- C:\windows\system32\XpsRasterService.dll
2014-12-14 12:40:50 ----A---- C:\windows\system32\fhengine.dll
2014-12-14 12:40:49 ----A---- C:\windows\SYSWOW64\wscapi.dll
2014-12-14 12:40:49 ----A---- C:\windows\SYSWOW64\SearchFilterHost.exe
2014-12-14 12:40:49 ----A---- C:\windows\system32\mfreadwrite.dll
2014-12-14 12:40:49 ----A---- C:\windows\system32\drivers\pdc.sys
2014-12-14 12:40:48 ----A---- C:\windows\SYSWOW64\XpsRasterService.dll
2014-12-14 12:40:48 ----A---- C:\windows\system32\SearchFilterHost.exe
2014-12-14 12:40:48 ----A---- C:\windows\system32\kdvm.dll
2014-12-14 12:40:48 ----A---- C:\windows\system32\iuilp.dll
2014-12-14 12:40:46 ----A---- C:\windows\SYSWOW64\mfreadwrite.dll
2014-12-14 12:40:46 ----A---- C:\windows\SYSWOW64\dmvdsitf.dll
2014-12-14 12:40:46 ----A---- C:\windows\system32\wscsvc.dll
2014-12-14 12:40:46 ----A---- C:\windows\system32\kdnet.dll
2014-12-14 12:40:46 ----A---- C:\windows\system32\drivers\wanarp.sys
2014-12-14 12:40:46 ----A---- C:\windows\system32\drivers\hidbth.sys
2014-12-14 12:40:46 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2014-12-14 12:40:45 ----A---- C:\windows\SYSWOW64\mssphtb.dll
2014-12-14 12:40:45 ----A---- C:\windows\SYSWOW64\fmifs.dll
2014-12-14 12:40:45 ----A---- C:\windows\system32\mssvp.dll
2014-12-14 12:40:45 ----A---- C:\windows\system32\GenuineCenter.dll
2014-12-14 12:40:45 ----A---- C:\windows\system32\fmifs.dll
2014-12-14 12:40:45 ----A---- C:\windows\system32\drivers\ndproxy.sys
2014-12-14 12:40:44 ----A---- C:\windows\SYSWOW64\mssprxy.dll
2014-12-14 12:40:44 ----A---- C:\windows\SYSWOW64\msshooks.dll
2014-12-14 12:40:44 ----A---- C:\windows\system32\mssprxy.dll
2014-12-14 12:40:44 ----A---- C:\windows\system32\msshooks.dll
2014-12-14 12:40:44 ----A---- C:\windows\system32\msscntrs.dll
2014-12-14 12:40:43 ----A---- C:\windows\SYSWOW64\tzres.dll
2014-12-14 12:40:43 ----A---- C:\windows\system32\tzres.dll
2014-12-14 12:39:56 ----A---- C:\windows\SYSWOW64\msvcr120_clr0400.dll
2014-12-14 12:39:55 ----A---- C:\windows\system32\msvcr120_clr0400.dll
2014-12-14 12:39:41 ----A---- C:\windows\SYSWOW64\oleaut32.dll
2014-12-14 12:39:41 ----A---- C:\windows\system32\oleaut32.dll
2014-12-14 12:39:35 ----A---- C:\windows\system32\shell32.dll
2014-12-14 12:39:34 ----A---- C:\windows\SYSWOW64\shell32.dll
2014-12-14 12:39:31 ----A---- C:\windows\system32\mfmpeg2srcsnk.dll
2014-12-14 12:39:31 ----A---- C:\windows\system32\dnsapi.dll
2014-12-14 12:39:30 ----A---- C:\windows\SYSWOW64\mfmpeg2srcsnk.dll
2014-12-14 12:39:30 ----A---- C:\windows\SYSWOW64\dnsapi.dll
2014-12-14 12:39:29 ----A---- C:\windows\system32\dnsrslvr.dll
2014-12-14 12:39:09 ----A---- C:\windows\SYSWOW64\rpcrt4.dll
2014-12-14 12:39:09 ----A---- C:\windows\system32\rpcrt4.dll
2014-12-14 12:38:21 ----A---- C:\windows\system32\drivers\usbprint.sys
2014-12-14 12:38:21 ----A---- C:\windows\system32\drivers\hidusb.sys
2014-12-14 12:38:21 ----A---- C:\windows\system32\drivers\hidparse.sys
2014-12-14 12:37:50 ----A---- C:\windows\SYSWOW64\UXInit.dll
2014-12-14 12:37:50 ----A---- C:\windows\SYSWOW64\msrating.dll
2014-12-14 12:37:50 ----A---- C:\windows\SYSWOW64\iesetup.dll
2014-12-14 12:37:50 ----A---- C:\windows\SYSWOW64\iernonce.dll
2014-12-14 12:37:50 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2014-12-14 12:37:50 ----A---- C:\windows\system32\ie4uinit.exe
2014-12-14 12:37:49 ----A---- C:\windows\SYSWOW64\urlmon.dll
2014-12-14 12:37:49 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2014-12-14 12:37:49 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2014-12-14 12:37:49 ----A---- C:\windows\system32\UXInit.dll
2014-12-14 12:37:49 ----A---- C:\windows\system32\urlmon.dll
2014-12-14 12:37:49 ----A---- C:\windows\system32\msrating.dll
2014-12-14 12:37:48 ----A---- C:\windows\SYSWOW64\uxtheme.dll
2014-12-14 12:37:48 ----A---- C:\windows\system32\iernonce.dll
2014-12-14 12:37:47 ----A---- C:\windows\SYSWOW64\wininet.dll
2014-12-14 12:37:47 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2014-12-14 12:37:47 ----A---- C:\windows\SYSWOW64\ieframe.dll
2014-12-14 12:37:47 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2014-12-14 12:37:47 ----A---- C:\windows\system32\uxtheme.dll
2014-12-14 12:37:47 ----A---- C:\windows\system32\jsproxy.dll
2014-12-14 12:37:46 ----A---- C:\windows\system32\wininet.dll
2014-12-14 12:37:46 ----A---- C:\windows\system32\iesysprep.dll
2014-12-14 12:37:46 ----A---- C:\windows\system32\iesetup.dll
2014-12-14 12:37:46 ----A---- C:\windows\system32\iedkcs32.dll
2014-12-14 12:37:45 ----A---- C:\windows\SYSWOW64\iertutil.dll
2014-12-14 12:37:45 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2014-12-14 12:37:45 ----A---- C:\windows\system32\jscript.dll
2014-12-14 12:37:45 ----A---- C:\windows\system32\iertutil.dll
2014-12-14 12:37:45 ----A---- C:\windows\system32\dxtrans.dll
2014-12-14 12:37:44 ----A---- C:\windows\system32\msfeeds.dll
2014-12-14 12:37:44 ----A---- C:\windows\system32\ieframe.dll
2014-12-14 12:37:42 ----A---- C:\windows\system32\mshtmled.dll
2014-12-14 12:37:42 ----A---- C:\windows\system32\dxtmsft.dll
2014-12-14 12:37:40 ----A---- C:\windows\system32\mshtml.dll
2014-12-14 12:37:30 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2014-12-14 12:37:29 ----A---- C:\windows\SYSWOW64\jscript.dll
2014-12-14 12:37:28 ----A---- C:\windows\system32\jscript9.dll
2014-12-14 12:37:24 ----A---- C:\windows\SYSWOW64\jscript9.dll
2014-12-14 12:37:23 ----A---- C:\windows\SYSWOW64\mshtml.dll
2014-12-14 12:37:18 ----A---- C:\windows\system32\d2d1.dll
2014-12-14 12:37:17 ----A---- C:\windows\SYSWOW64\d2d1.dll
2014-12-14 12:37:07 ----A---- C:\windows\SYSWOW64\msvcp120_clr0400.dll
2014-12-14 12:37:07 ----A---- C:\windows\system32\msvcp120_clr0400.dll
2014-12-14 12:36:46 ----A---- C:\windows\system32\drivers\tcpip.sys
2014-12-14 12:36:43 ----A---- C:\windows\system32\WsmSvc.dll
2014-12-14 12:36:41 ----A---- C:\windows\SYSWOW64\WsmSvc.dll
2014-12-14 12:36:41 ----A---- C:\windows\system32\drivers\Classpnp.sys
2014-12-14 12:36:40 ----A---- C:\windows\system32\WsmWmiPl.dll
2014-12-14 12:36:38 ----A---- C:\windows\SYSWOW64\WsmWmiPl.dll
2014-12-14 12:36:38 ----A---- C:\windows\SYSWOW64\rpchttp.dll
2014-12-14 12:36:38 ----A---- C:\windows\SYSWOW64\FXSCOMEX.dll
2014-12-14 12:36:38 ----A---- C:\windows\system32\rpchttp.dll
2014-12-14 12:36:38 ----A---- C:\windows\system32\FXSCOMEX.dll
2014-12-14 12:36:37 ----A---- C:\windows\SYSWOW64\FXSAPI.dll
2014-12-14 12:36:37 ----A---- C:\windows\system32\FXSTIFF.dll
2014-12-14 12:36:37 ----A---- C:\windows\system32\FXST30.dll
2014-12-14 12:36:37 ----A---- C:\windows\system32\FXSAPI.dll
2014-12-14 12:36:25 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2014-12-14 12:36:25 ----A---- C:\windows\system32\cdd.dll
2014-12-14 12:36:09 ----A---- C:\windows\system32\certutil.exe
2014-12-14 12:36:08 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2014-12-14 12:36:08 ----A---- C:\windows\SYSWOW64\certutil.exe
2014-12-14 12:36:08 ----A---- C:\windows\system32\cryptnet.dll
2014-12-14 12:35:27 ----A---- C:\windows\system32\RDWebAI.dll
2014-12-14 12:35:26 ----A---- C:\windows\system32\appserverai.dll
2014-12-14 12:35:25 ----A---- C:\windows\system32\VmHostAI.dll
2014-12-14 12:35:23 ----A---- C:\windows\SYSWOW64\poqexec.exe
2014-12-14 12:34:49 ----A---- C:\windows\system32\wmpmde.dll
2014-12-14 12:34:48 ----A---- C:\windows\system32\winmde.dll
2014-12-14 12:34:47 ----A---- C:\windows\SYSWOW64\netcfgx.dll
2014-12-14 12:34:47 ----A---- C:\windows\system32\Windows.Security.Authentication.OnlineId.dll
2014-12-14 12:34:47 ----A---- C:\windows\system32\Windows.Globalization.dll
2014-12-14 12:34:47 ----A---- C:\windows\system32\TimeBrokerServer.dll
2014-12-14 12:34:47 ----A---- C:\windows\system32\SystemEventsBrokerServer.dll
2014-12-14 12:34:46 ----A---- C:\windows\system32\wpdbusenum.dll
2014-12-14 12:34:46 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2014-12-14 12:34:45 ----A---- C:\windows\SYSWOW64\winmde.dll
2014-12-14 12:34:45 ----A---- C:\windows\SYSWOW64\Windows.Globalization.dll
2014-12-14 12:34:45 ----A---- C:\windows\system32\usbmon.dll
2014-12-14 12:34:45 ----A---- C:\windows\system32\netcfgx.dll
2014-12-14 12:34:45 ----A---- C:\windows\system32\drivers\bthport.sys
2014-12-14 12:34:44 ----A---- C:\windows\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2014-12-14 12:34:44 ----A---- C:\windows\SYSWOW64\drvstore.dll
2014-12-14 12:34:44 ----A---- C:\windows\system32\drvstore.dll
2014-12-14 12:34:43 ----A---- C:\windows\system32\taskhost.exe
2014-12-14 12:34:43 ----A---- C:\windows\system32\discan.dll
2014-12-14 12:34:42 ----A---- C:\windows\system32\drivers\rfcomm.sys
2014-12-14 12:34:41 ----A---- C:\windows\system32\NdisImPlatform.dll
2014-12-14 12:34:40 ----A---- C:\windows\system32\fsquirt.exe
2014-12-14 12:34:40 ----A---- C:\windows\system32\drivers\storahci.sys
2014-12-14 12:34:39 ----A---- C:\windows\SYSWOW64\SettingSyncInfo.dll
2014-12-14 12:34:39 ----A---- C:\windows\system32\WSDPrintProxy.DLL
2014-12-14 12:34:39 ----A---- C:\windows\system32\taskhostex.exe
2014-12-14 12:34:39 ----A---- C:\windows\system32\DevDispItemProvider.dll
2014-12-14 12:34:38 ----A---- C:\windows\system32\drivers\mouhid.sys
2014-12-14 12:34:37 ----A---- C:\windows\SYSWOW64\DevDispItemProvider.dll
2014-12-14 12:34:37 ----A---- C:\windows\system32\drivers\monitor.sys
2014-12-14 12:34:36 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2014-12-14 12:34:36 ----A---- C:\windows\system32\drivers\bthenum.sys
2014-12-14 12:33:48 ----A---- C:\windows\system32\mstscax.dll
2014-12-14 12:33:47 ----A---- C:\windows\SYSWOW64\mstscax.dll
2014-12-14 12:33:47 ----A---- C:\windows\system32\termsrv.dll
2014-12-14 12:33:46 ----A---- C:\windows\SYSWOW64\winsta.dll
2014-12-14 12:33:46 ----A---- C:\windows\SYSWOW64\mstsc.exe
2014-12-14 12:33:46 ----A---- C:\windows\SYSWOW64\aaclient.dll
2014-12-14 12:33:46 ----A---- C:\windows\system32\winsta.dll
2014-12-14 12:33:46 ----A---- C:\windows\system32\mstsc.exe
2014-12-14 12:33:08 ----A---- C:\windows\SYSWOW64\Windows.ApplicationModel.Store.dll
2014-12-14 12:32:13 ----A---- C:\windows\system32\sppsvc.exe
2014-12-14 12:32:12 ----A---- C:\windows\system32\WSService.dll
2014-12-14 12:32:11 ----A---- C:\windows\system32\sppobjs.dll
2014-12-14 12:32:10 ----A---- C:\windows\SYSWOW64\sppc.dll
2014-12-14 12:32:10 ----A---- C:\windows\system32\sppwinob.dll
2014-12-14 12:32:10 ----A---- C:\windows\system32\sppc.dll
2014-12-14 12:32:09 ----A---- C:\windows\SYSWOW64\WSSync.dll
2014-12-14 12:32:09 ----A---- C:\windows\system32\WSSync.dll
2014-12-14 12:32:08 ----A---- C:\windows\system32\WSClient.dll
2014-12-14 12:32:07 ----A---- C:\windows\SYSWOW64\WSClient.dll
2014-12-14 12:32:07 ----A---- C:\windows\system32\drivers\dam.sys
2014-12-14 12:32:06 ----A---- C:\windows\system32\setupcln.dll
2014-12-14 12:32:05 ----A---- C:\windows\SYSWOW64\setupcln.dll
2014-12-14 12:32:05 ----A---- C:\windows\SYSWOW64\OEMLicense.dll
2014-12-14 12:31:08 ----A---- C:\windows\SYSWOW64\duser.dll
2014-12-14 12:31:08 ----A---- C:\windows\system32\wlroamextension.dll
2014-12-14 12:31:08 ----A---- C:\windows\system32\duser.dll
2014-12-14 12:31:06 ----A---- C:\windows\system32\WWanAPI.dll
2014-12-14 12:31:06 ----A---- C:\windows\system32\Windows.Networking.Connectivity.dll
2014-12-14 12:31:06 ----A---- C:\windows\system32\ncsi.dll
2014-12-14 12:31:05 ----A---- C:\windows\system32\hotspotauth.dll
2014-12-14 12:31:04 ----A---- C:\windows\system32\drivers\ks.sys
2014-12-14 12:31:03 ----A---- C:\windows\SYSWOW64\WWanAPI.dll
2014-12-14 12:31:03 ----A---- C:\windows\SYSWOW64\wlroamextension.dll
2014-12-14 12:31:03 ----A---- C:\windows\SYSWOW64\Windows.Networking.Connectivity.dll
2014-12-14 12:31:03 ----A---- C:\windows\system32\tasklist.exe
2014-12-14 12:31:03 ----A---- C:\windows\system32\taskkill.exe
2014-12-14 12:31:02 ----A---- C:\windows\SYSWOW64\taskkill.exe
2014-12-14 12:31:01 ----A---- C:\windows\system32\wpd_ci.dll
2014-12-14 12:31:01 ----A---- C:\windows\system32\wersvc.dll
2014-12-14 12:31:00 ----A---- C:\windows\SYSWOW64\tasklist.exe
2014-12-14 12:30:58 ----A---- C:\windows\SYSWOW64\nlmsprep.dll
2014-12-14 12:30:58 ----A---- C:\windows\SYSWOW64\nlmproxy.dll
2014-12-14 12:30:58 ----A---- C:\windows\SYSWOW64\nlaapi.dll
2014-12-14 12:30:43 ----A---- C:\windows\SYSWOW64\wintrust.dll
2014-12-14 12:30:43 ----A---- C:\windows\SYSWOW64\apprepsync.dll
2014-12-14 12:30:43 ----A---- C:\windows\SYSWOW64\apprepapi.dll
2014-12-14 12:30:43 ----A---- C:\windows\system32\wintrust.dll
2014-12-14 12:30:43 ----A---- C:\windows\system32\cryptsvc.dll
2014-12-14 12:30:43 ----A---- C:\windows\system32\apprepsync.dll
2014-12-14 12:30:43 ----A---- C:\windows\system32\apprepapi.dll
2014-12-14 12:30:26 ----A---- C:\windows\system32\gdi32.dll
2014-12-14 12:30:25 ----A---- C:\windows\SYSWOW64\gdi32.dll
2014-12-14 12:30:00 ----A---- C:\windows\system32\InkEd.dll
2014-12-14 12:29:55 ----A---- C:\windows\system32\schedsvc.dll
2014-12-14 12:29:30 ----A---- C:\windows\system32\GdiPlus.dll
2014-12-14 12:29:29 ----A---- C:\windows\SYSWOW64\GdiPlus.dll
2014-12-14 12:27:42 ----A---- C:\windows\SYSWOW64\scrrun.dll
2014-12-14 12:27:42 ----A---- C:\windows\SYSWOW64\scrobj.dll
2014-12-14 12:27:42 ----A---- C:\windows\SYSWOW64\cscript.exe
2014-12-14 12:27:42 ----A---- C:\windows\system32\scrrun.dll
2014-12-14 12:27:42 ----A---- C:\windows\system32\scrobj.dll
2014-12-14 12:27:42 ----A---- C:\windows\system32\cscript.exe
2014-12-14 12:27:40 ----A---- C:\windows\system32\drivers\http.sys
2014-12-14 12:26:46 ----A---- C:\windows\system32\mmc.exe
2014-12-14 12:26:45 ----A---- C:\windows\system32\wlidsvc.dll
2014-12-14 12:26:44 ----A---- C:\windows\SYSWOW64\mmc.exe
2014-12-14 12:26:40 ----A---- C:\windows\system32\Windows.Media.dll
2014-12-14 12:26:40 ----A---- C:\windows\system32\setupapi.dll
2014-12-14 12:26:39 ----A---- C:\windows\SYSWOW64\setupapi.dll
2014-12-14 12:26:39 ----A---- C:\windows\system32\drivers\partmgr.sys
2014-12-14 12:26:39 ----A---- C:\windows\system32\drivers\msgpiowin32.sys
2014-12-14 12:26:38 ----A---- C:\windows\system32\iphlpsvc.dll
2014-12-14 12:26:37 ----A---- C:\windows\system32\MP4SDECD.DLL
2014-12-14 12:26:37 ----A---- C:\windows\system32\inetpp.dll
2014-12-14 12:26:36 ----A---- C:\windows\SYSWOW64\Windows.Media.dll
2014-12-14 12:26:35 ----A---- C:\windows\SYSWOW64\wiaacmgr.exe
2014-12-14 12:26:35 ----A---- C:\windows\system32\WSDMon.dll
2014-12-14 12:26:35 ----A---- C:\windows\system32\wiaacmgr.exe
2014-12-14 12:26:35 ----A---- C:\windows\system32\ncbservice.dll
2014-12-14 12:26:34 ----A---- C:\windows\SYSWOW64\MP4SDECD.DLL
2014-12-14 12:26:34 ----A---- C:\windows\system32\httpprxm.dll
2014-12-14 12:26:34 ----A---- C:\windows\system32\adhsvc.dll
2014-12-14 12:26:32 ----A---- C:\windows\system32\keepaliveprovider.dll
2014-12-14 12:26:32 ----A---- C:\windows\system32\httpprxp.dll
2014-12-14 12:26:32 ----A---- C:\windows\system32\adhapi.dll
2014-12-14 12:26:02 ----A---- C:\windows\SYSWOW64\nshwfp.dll
2014-12-14 12:26:02 ----A---- C:\windows\SYSWOW64\FWPUCLNT.DLL
2014-12-14 12:26:02 ----A---- C:\windows\system32\nshwfp.dll
2014-12-14 12:26:02 ----A---- C:\windows\system32\IKEEXT.DLL
2014-12-14 12:26:02 ----A---- C:\windows\system32\FWPUCLNT.DLL
2014-12-14 12:26:02 ----A---- C:\windows\system32\BFE.DLL
2014-12-14 12:26:01 ----A---- C:\windows\system32\drivers\wfplwfs.sys
2014-12-14 12:25:33 ----A---- C:\windows\system32\appinfo.dll
2014-12-14 12:24:35 ----A---- C:\windows\system32\drivers\WdFilter.sys
2014-12-14 12:24:34 ----A---- C:\windows\system32\drivers\WdBoot.sys
2014-12-14 12:24:14 ----A---- C:\windows\SYSWOW64\d3d11.dll
2014-12-14 12:24:14 ----A---- C:\windows\system32\d3d11.dll
2014-12-14 12:23:51 ----A---- C:\windows\SYSWOW64\msieftp.dll
2014-12-14 12:23:51 ----A---- C:\windows\system32\msieftp.dll
2014-12-14 12:23:41 ----A---- C:\windows\system32\KernelBase.dll
2014-12-14 12:23:40 ----A---- C:\windows\system32\sspicli.dll
2014-12-14 12:23:40 ----A---- C:\windows\system32\objsel.dll
2014-12-14 12:23:39 ----A---- C:\windows\SYSWOW64\objsel.dll
2014-12-14 12:23:39 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2014-12-14 12:23:39 ----A---- C:\windows\system32\dpapisrv.dll
2014-12-14 12:23:36 ----A---- C:\windows\system32\drivers\ksecdd.sys
2014-12-14 12:23:32 ----A---- C:\windows\SYSWOW64\sspicli.dll
2014-12-14 12:23:32 ----A---- C:\windows\SYSWOW64\dimsroam.dll
2014-12-14 12:23:32 ----A---- C:\windows\system32\sspisrv.dll
2014-12-14 12:23:32 ----A---- C:\windows\system32\lsass.exe
2014-12-14 12:23:32 ----A---- C:\windows\system32\dimsroam.dll
2014-12-14 12:21:18 ----A---- C:\windows\system32\drivers\WdfLdr.sys
2014-12-14 12:21:18 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2014-12-14 12:21:16 ----A---- C:\windows\system32\comctl32.dll
2014-12-14 12:21:15 ----A---- C:\windows\SYSWOW64\comctl32.dll
2014-12-14 12:21:10 ----A---- C:\windows\SYSWOW64\packager.dll
2014-12-14 12:21:10 ----A---- C:\windows\system32\packager.dll
2014-12-14 12:20:59 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2014-12-14 12:20:59 ----A---- C:\windows\system32\imagehlp.dll
2014-12-14 12:20:43 ----A---- C:\windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-12-14 12:20:42 ----A---- C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-12-14 12:19:03 ----A---- C:\windows\system32\qedit.dll
2014-12-14 12:19:02 ----A---- C:\windows\SYSWOW64\qedit.dll
2014-12-14 12:18:59 ----A---- C:\windows\system32\drivers\usb8023.sys
2014-12-14 12:18:37 ----A---- C:\windows\SYSWOW64\WMPhoto.dll
2014-12-14 12:18:36 ----A---- C:\windows\system32\WMPhoto.dll
2014-12-14 12:18:30 ----A---- C:\windows\SYSWOW64\rastls.dll
2014-12-14 12:18:30 ----A---- C:\windows\system32\rastls.dll
2014-12-14 12:18:22 ----A---- C:\windows\system32\osk.exe
2014-12-14 12:18:21 ----A---- C:\windows\SYSWOW64\osk.exe
2014-12-14 09:58:06 ----A---- C:\Recovery.txt
2014-12-14 08:58:29 ----ASH---- C:\swapfile.sys
2014-12-14 08:58:28 ----ASH---- C:\pagefile.sys
2014-12-14 08:58:27 ----SHD---- C:\System Volume Information
2014-12-14 08:58:25 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 month======

2014-12-14 18:46:24 ----D---- C:\windows\Inf
2014-12-14 18:46:24 ----AD---- C:\windows\System32
2014-12-14 18:46:24 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-12-14 18:44:48 ----D---- C:\windows\Microsoft.NET
2014-12-14 18:42:20 ----D---- C:\windows\Temp
2014-12-14 18:42:06 ----A---- C:\windows\SYSWOW64\log.txt
2014-12-14 18:40:58 ----D---- C:\windows\Prefetch
2014-12-14 18:40:46 ----D---- C:\ProgramData\PRICache
2014-12-14 18:40:27 ----D---- C:\windows\system32\config
2014-12-14 18:40:20 ----D---- C:\windows\WinSxS
2014-12-14 18:36:36 ----D---- C:\windows\WinStore
2014-12-14 18:36:36 ----D---- C:\windows\SysWOW64
2014-12-14 18:36:33 ----D---- C:\windows\system32\Drivers
2014-12-14 18:36:22 ----AD---- C:\Windows
2014-12-14 18:36:21 ----D---- C:\windows\system32\Boot
2014-12-14 18:35:45 ----RSD---- C:\windows\Fonts
2014-12-14 18:35:42 ----D---- C:\windows\SYSWOW64\sk-SK
2014-12-14 18:35:42 ----D---- C:\windows\SYSWOW64\cs-CZ
2014-12-14 18:35:42 ----D---- C:\windows\system32\sk-SK
2014-12-14 18:35:41 ----D---- C:\windows\system32\cs-CZ
2014-12-14 18:35:36 ----D---- C:\windows\system32\en-US
2014-12-14 18:35:28 ----D---- C:\windows\system32\DriverStore
2014-12-14 18:35:09 ----D---- C:\windows\CbsTemp
2014-12-14 18:31:39 ----D---- C:\windows\system32\catroot2
2014-12-14 18:24:58 ----RD---- C:\windows\assembly
2014-12-14 18:21:28 ----SHD---- C:\windows\Installer
2014-12-14 18:12:42 ----D---- C:\windows\system32\SecureBootUpdates
2014-12-14 18:12:29 ----SD---- C:\ProgramData\Microsoft
2014-12-14 18:11:08 ----RD---- C:\Program Files
2014-12-14 18:11:07 ----RD---- C:\Program Files (x86)
2014-12-14 18:09:53 ----D---- C:\ProgramData\NVIDIA
2014-12-14 18:06:22 ----D---- C:\Program Files\NVIDIA Corporation
2014-12-14 18:00:01 ----D---- C:\windows\system32\sru
2014-12-14 17:55:36 ----D---- C:\Program Files (x86)\Microsoft Office
2014-12-14 17:55:35 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-12-14 17:54:16 ----D---- C:\windows\system32\Tasks
2014-12-14 17:54:06 ----D---- C:\Program Files\Common Files\microsoft shared
2014-12-14 17:52:18 ----D---- C:\windows\ShellNew
2014-12-14 17:52:05 ----HD---- C:\ProgramData
2014-12-14 17:42:20 ----AD---- C:\windows\system32\oobe
2014-12-14 17:42:07 ----D---- C:\windows\SYSWOW64\en-US
2014-12-14 17:42:06 ----D---- C:\windows\SYSWOW64\wbem
2014-12-14 17:41:59 ----D---- C:\windows\system32\wbem
2014-12-14 17:30:39 ----HD---- C:\Program Files\WindowsApps
2014-12-14 17:25:44 ----D---- C:\Program Files (x86)\Common Files
2014-12-14 17:07:45 ----D---- C:\windows\AUInstallAgent
2014-12-14 16:58:59 ----D---- C:\windows\Tasks
2014-12-14 16:55:51 ----RD---- C:\windows\ToastData
2014-12-14 16:54:53 ----D---- C:\windows\SYSWOW64\Dism
2014-12-14 16:54:53 ----D---- C:\Program Files\Windows Photo Viewer
2014-12-14 16:54:53 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2014-12-14 16:54:49 ----D---- C:\windows\system32\Dism
2014-12-14 16:54:21 ----D---- C:\windows\system32\drivers\en-US
2014-12-14 16:54:21 ----D---- C:\windows\system32\drivers\cs-CZ
2014-12-14 16:46:54 ----D---- C:\Program Files\Common Files
2014-12-14 16:45:01 ----D---- C:\Intel
2014-12-14 16:44:36 ----D---- C:\ProgramData\Intel
2014-12-14 16:44:35 ----D---- C:\Program Files (x86)\Intel
2014-12-14 16:42:37 ----D---- C:\Program Files (x86)\Lenovo
2014-12-14 16:42:04 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-12-14 16:41:05 ----D---- C:\windows\SoftwareDistribution
2014-12-14 16:38:41 ----HD---- C:\windows\ELAMBKUP
2014-12-14 16:37:07 ----D---- C:\Program Files\Lenovo
2014-12-14 16:31:42 ----D---- C:\ProgramData\Atheros
2014-12-14 16:29:33 ----RD---- C:\windows\ImmersiveControlPanel
2014-12-14 16:29:21 ----AD---- C:\Users
2014-12-14 16:24:34 ----D---- C:\windows\debug
2014-12-14 15:09:59 ----D---- C:\windows\servicing
2014-12-14 15:00:51 ----D---- C:\windows\SYSWOW64\migration
2014-12-14 15:00:50 ----D---- C:\windows\system32\migration
2014-12-14 15:00:06 ----D---- C:\windows\PolicyDefinitions
2014-12-14 14:57:01 ----D---- C:\Program Files\Windows Defender
2014-12-14 14:56:52 ----D---- C:\Program Files (x86)\Windows Defender
2014-12-14 14:56:34 ----D---- C:\windows\apppatch
2014-12-14 14:56:13 ----D---- C:\Program Files\Windows Journal
2014-12-14 14:53:01 ----D---- C:\Program Files (x86)\Internet Explorer
2014-12-14 14:52:54 ----D---- C:\Program Files\Internet Explorer
2014-12-14 14:44:01 ----D---- C:\windows\system32\drivers\UMDF
2014-12-14 10:38:01 ----D---- C:\windows\system32\wdi

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\windows\System32\drivers\iaStorA.sys [2012-09-02 647736]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2013-05-20 39008]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2013-12-26 32544]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\windows\system32\DRIVERS\vwififlt.sys [2012-07-26 64000]
R3 ACPIVPC;@oem19.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\windows\System32\drivers\AcpiVpc.sys [2013-05-20 33560]
R3 AthBTPort;@oem18.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\windows\system32\DRIVERS\btath_flt.sys [2013-01-25 89168]
R3 athr;@oem12.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athw8x.sys [2012-09-19 3653632]
R3 BTATH_A2DP;@oem17.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\windows\system32\drivers\btath_a2dp.sys [2013-01-25 346192]
R3 btath_avdt;@oem17.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\windows\system32\drivers\btath_avdt.sys [2013-01-25 115280]
R3 BTATH_BUS;@oem14.inf,%BTATH_BUS.SVCDESC%;Qualcomm Atheros Bluetooth Bus; C:\windows\System32\drivers\btath_bus.sys [2013-01-25 34384]
R3 BTATH_HCRP;@oem20.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\windows\System32\drivers\btath_hcrp.sys [2013-01-25 179432]
R3 BTATH_LWFLT;@oem22.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\windows\system32\DRIVERS\btath_lwflt.sys [2013-01-25 77464]
R3 BTATH_RCP;@oem24.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\windows\System32\drivers\btath_rcp.sys [2013-01-25 136424]
R3 BtFilter;BtFilter; C:\windows\system32\DRIVERS\btfilter.sys [2013-01-25 581200]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\windows\System32\drivers\BthEnum.sys [2013-01-09 51712]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\windows\system32\DRIVERS\BthLEEnum.sys [2012-07-26 202752]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2012-07-26 119808]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2013-01-09 74752]
R3 CnxtHdAudService;@oem7.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\CHDRT64.sys [2012-06-27 1608864]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2013-02-05 8987456]
R3 IntcDAud;@oem5.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 L1C;@oem9.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C63x64.sys [2012-07-19 110744]
R3 MEIx64;@oem3.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\windows\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 nvlddmkm;nvlddmkm; C:\windows\system32\DRIVERS\nvlddmkm.sys [2013-12-26 11311392]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\System32\drivers\rfcomm.sys [2013-03-01 156672]
R3 SmbDrvI;SmbDrvI; C:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2012-08-27 43832]
R3 SynTP;@oem11.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2012-08-27 448312]
R3 vm331avs;@oem13.inf,%USBCamera.DeviceDesc2%;Digital Camera 1; C:\windows\System32\Drivers\vm331avs.sys [2012-08-24 975104]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\windows\system32\DRIVERS\vwifimp.sys [2012-07-26 17920]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2013-03-01 1175040]
S3 e1iexpress;@net1ic64.inf,%E1IExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\windows\system32\DRIVERS\e1i63x64.sys [2012-06-02 333824]
S3 NETwNs64;@netwns64.inf,___ %NIC_Service_DispName_WIN7_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\windows\system32\DRIVERS\NETwNs64.sys [2012-06-02 8604672]
S3 RSUSBVSTOR;@oem8.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUVStor.sys [2012-06-15 315536]
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\windows\System32\Drivers\usbvideo.sys [2013-07-05 210560]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2013-01-25 227456]
R2 CxAudMsg;@C:\windows\system32\CxAudMsg64.exe,-100; C:\windows\system32\CxAudMsg64.exe [2012-06-08 201376]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2013-10-29 920864]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-12-26 1364256]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-14 107912]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2013-02-07 277488]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-26 43616]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-14 107912]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

-----------------EOF-----------------

Zdravím!
Spusťte nejprve tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Děkuji za rychlost, zde je log:

# AdwCleaner v4.105 - Report created 14/12/2014 at 18:55:08
# Updated 08/12/2014 by Xplode
# Database : 2014-12-13.4 [Live]
# Operating System : Windows 8 (64 bits)
# Username : Veronika Žižková - VERONIKA
# Running from : C:\Users\Veronika Žižková\Desktop\adwcleaner_4.105.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.17183


-\\ Google Chrome v39.0.2171.95


*************************

AdwCleaner[R0].txt - [745 octets] - [14/12/2014 18:53:33]
AdwCleaner[S0].txt - [667 octets] - [14/12/2014 18:55:08]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [726 octets] ##########

Toto je OK. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

tady je

Logfile of random's system information tool 1.10 (written by random/random)
Run by Veronika Žižková at 2014-12-14 20:32:58
Microsoft Windows 8
System drive C: has 802 GB (89%) free of 905 GB
Total RAM: 3962 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:33:04, on 14. 12. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.17183)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\USB Camera\VM331STI.EXE
C:\Program Files\trend micro\Veronika Žižková.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @C:\windows\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 7651 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe -k DcomLaunch
"C:\windows\system32\nvvsvc.exe"
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
C:\windows\system32\CxAudMsg64.exe
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
taskeng.exe {154A7532-2F17-4B2C-AA0C-546D86BC2749}
"\Program Files\Synaptics\SynTP\SynTPEnh.exe"
taskhostex.exe
C:\windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-891d2fe1-8435-4714-8d17-9709b08fbca5 -SystemEventPortName:HostProcess-9c7ec112-bc90-4bdd-9c77-27e40a74e996 -IoCancelEventPortName:HostProcess-3423eb77-8360-4a1c-847a-314b0a0a6426 -NonStateChangingEventPortName:HostProcess-e67c0395-fcd0-467c-8dc0-d27151290118 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:36a0e5b6-de7d-4fbb-b1b5-b39cd537d80c -DeviceGroupId:WudfDefaultDevicePool
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 564 568 576 65536 572
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
"C:\Program Files (x86)\USB Camera\VM331STI.EXE"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"

C:\windows\System32\WScript.exe "C:\ProgramData\Lenovo-24621.vbs"
"C:\Users\Veronika Žižková\Desktop\RSITx64 (1).exe"
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2013-02-07 171504]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2013-02-07 399856]
"Persistence"=C:\windows\system32\igfxpers.exe [2013-02-07 441840]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2012-06-15 887968]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-05-20 17079376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-05-20 191568]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dolby Advanced Audio v2"=C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2012-07-26 508656]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331STI.EXE [2012-05-02 548864]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-07-27 167024]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2013-02-05 439296]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-12-14 20:28:34 ----D---- C:\_OTM
2014-12-14 18:56:21 ----A---- C:\windows\system32\FNTCACHE.DAT
2014-12-14 18:53:30 ----D---- C:\AdwCleaner
2014-12-14 18:36:36 ----D---- C:\windows\system32\AutoUpdateLicense
2014-12-14 18:35:52 ----RD---- C:\windows\BrowserChoice
2014-12-14 18:11:08 ----D---- C:\Program Files\Microsoft Silverlight
2014-12-14 18:11:07 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-12-14 18:10:01 ----D---- C:\windows\SYSWOW64\NV
2014-12-14 18:10:01 ----D---- C:\windows\system32\NV
2014-12-14 18:03:12 ----A---- C:\windows\system32\wuaueng.dll
2014-12-14 18:03:11 ----A---- C:\windows\SYSWOW64\wuapi.dll
2014-12-14 18:03:11 ----A---- C:\windows\system32\wuwebv.dll
2014-12-14 18:03:11 ----A---- C:\windows\system32\WUSettingsProvider.dll
2014-12-14 18:03:11 ----A---- C:\windows\system32\wucltux.dll
2014-12-14 18:03:11 ----A---- C:\windows\system32\wuauclt.exe
2014-12-14 18:03:11 ----A---- C:\windows\system32\wuapi.dll
2014-12-14 18:03:11 ----A---- C:\windows\system32\storewuauth.dll
2014-12-14 18:03:10 ----A---- C:\windows\SYSWOW64\wuwebv.dll
2014-12-14 18:03:10 ----A---- C:\windows\SYSWOW64\wudriver.dll
2014-12-14 18:03:10 ----A---- C:\windows\system32\wudriver.dll
2014-12-14 18:03:06 ----A---- C:\windows\SYSWOW64\wuapp.exe
2014-12-14 18:03:06 ----A---- C:\windows\system32\wuapp.exe
2014-12-14 18:02:37 ----A---- C:\windows\system32\ntoskrnl.exe
2014-12-14 18:02:33 ----A---- C:\windows\system32\localspl.dll
2014-12-14 18:02:31 ----A---- C:\windows\system32\services.exe
2014-12-14 18:02:28 ----A---- C:\windows\system32\drivers\vhdmp.sys
2014-12-14 18:02:27 ----A---- C:\windows\system32\wuaext.dll
2014-12-14 18:02:27 ----A---- C:\windows\system32\win32spl.dll
2014-12-14 17:55:35 ----D---- C:\windows\PCHEALTH
2014-12-14 17:52:21 ----D---- C:\Program Files\Microsoft Office
2014-12-14 17:52:15 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2014-12-14 17:52:05 ----D---- C:\ProgramData\Microsoft Help
2014-12-14 17:51:48 ----RHD---- C:\MSOCache
2014-12-14 17:40:49 ----D---- C:\drivers
2014-12-14 17:32:51 ----D---- C:\windows\system32\MRT
2014-12-14 17:32:45 ----A---- C:\windows\system32\MRT.exe
2014-12-14 17:19:07 ----A---- C:\windows\SYSWOW64\wups.dll
2014-12-14 17:19:04 ----A---- C:\windows\system32\wups2.dll
2014-12-14 17:19:04 ----A---- C:\windows\system32\wups.dll
2014-12-14 17:12:28 ----D---- C:\Users\Veronika Žižková\AppData\Roaming\Skype
2014-12-14 17:12:17 ----RD---- C:\Program Files (x86)\Skype
2014-12-14 17:12:10 ----D---- C:\ProgramData\Skype
2014-12-14 17:05:05 ----D---- C:\Program Files\trend micro
2014-12-14 17:05:03 ----D---- C:\rsit
2014-12-14 16:58:55 ----D---- C:\Program Files (x86)\Google
2014-12-14 16:46:03 ----A---- C:\windows\system32\drivers\hdaudbus.sys
2014-12-14 16:40:57 ----A---- C:\windows\system32\dwmcore.dll
2014-12-14 16:40:55 ----A---- C:\windows\SYSWOW64\dwmcore.dll
2014-12-14 16:40:53 ----A---- C:\windows\explorer.exe
2014-12-14 16:40:52 ----A---- C:\windows\SYSWOW64\explorer.exe
2014-12-14 16:40:50 ----A---- C:\windows\system32\samsrv.dll
2014-12-14 16:40:49 ----A---- C:\windows\system32\mfcore.dll
2014-12-14 16:40:48 ----A---- C:\windows\SYSWOW64\mfcore.dll
2014-12-14 16:40:45 ----A---- C:\windows\system32\vds.exe
2014-12-14 16:40:45 ----A---- C:\windows\system32\mscms.dll
2014-12-14 16:40:45 ----A---- C:\windows\system32\mfasfsrcsnk.dll
2014-12-14 16:40:44 ----A---- C:\windows\SYSWOW64\mscms.dll
2014-12-14 16:40:44 ----A---- C:\windows\SYSWOW64\mfasfsrcsnk.dll
2014-12-14 16:40:44 ----A---- C:\windows\system32\samlib.dll
2014-12-14 16:40:44 ----A---- C:\windows\system32\MbaeParserTask.exe
2014-12-14 16:40:44 ----A---- C:\windows\system32\DeviceSetupManager.dll
2014-12-14 16:40:43 ----A---- C:\windows\SYSWOW64\samlib.dll
2014-12-14 16:40:43 ----A---- C:\windows\system32\vdsutil.dll
2014-12-14 16:40:43 ----A---- C:\windows\system32\drivers\BthAvrcpTg.sys
2014-12-14 16:40:41 ----A---- C:\windows\system32\drivers\ndis.sys
2014-12-14 16:40:21 ----A---- C:\windows\system32\drivers\ntfs.sys
2014-12-14 16:40:18 ----A---- C:\windows\system32\XpsGdiConverter.dll
2014-12-14 16:40:16 ----A---- C:\windows\SYSWOW64\XpsGdiConverter.dll
2014-12-14 16:40:15 ----A---- C:\windows\SYSWOW64\WSDApi.dll
2014-12-14 16:40:15 ----A---- C:\windows\system32\WSDApi.dll
2014-12-14 16:40:15 ----A---- C:\windows\system32\drivers\storport.sys
2014-12-14 16:40:15 ----A---- C:\windows\system32\drivers\msiscsi.sys
2014-12-14 16:40:14 ----A---- C:\windows\system32\drivers\dfsc.sys
2014-12-14 16:37:00 ----A---- C:\windows\system32\WSShared.dll
2014-12-14 16:37:00 ----A---- C:\windows\system32\AutoUpdate.exe
2014-12-14 16:36:59 ----A---- C:\windows\SYSWOW64\WSShared.dll
2014-12-14 16:36:59 ----A---- C:\windows\system32\WinSetupUI.dll
2014-12-14 16:36:59 ----A---- C:\windows\system32\NotificationUI.exe
2014-12-14 16:36:58 ----A---- C:\windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-14 16:36:58 ----A---- C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-14 16:36:58 ----A---- C:\windows\system32\Windows.ApplicationModel.Store.dll
2014-12-14 16:31:27 ----D---- C:\Users\Veronika Žižková\AppData\Roaming\Atheros
2014-12-14 16:31:15 ----SHD---- C:\$RECYCLE.BIN
2014-12-14 16:30:47 ----D---- C:\Users\Veronika Žižková\AppData\Roaming\Adobe
2014-12-14 16:29:22 ----SD---- C:\Users\Veronika Žižková\AppData\Roaming\Microsoft
2014-12-14 16:29:22 ----D---- C:\Users\Veronika Žižková\AppData\Roaming\Macromedia
2014-12-14 16:27:53 ----A---- C:\windows\SYSWOW64\wusa.exe
2014-12-14 16:27:53 ----A---- C:\windows\system32\wusa.exe
2014-12-14 16:25:05 ----A---- C:\windows\system32\resutils.dll
2014-12-14 16:25:05 ----A---- C:\windows\system32\clusapi.dll
2014-12-14 16:25:04 ----A---- C:\windows\SYSWOW64\resutils.dll
2014-12-14 16:25:04 ----A---- C:\windows\SYSWOW64\clusapi.dll
2014-12-14 16:25:02 ----A---- C:\windows\system32\drivers\spaceport.sys
2014-12-14 16:24:36 ----A---- C:\windows\system32\Windows.UI.Xaml.dll
2014-12-14 16:24:32 ----A---- C:\windows\SYSWOW64\Windows.UI.Xaml.dll
2014-12-14 16:24:31 ----A---- C:\windows\SYSWOW64\UIAutomationCore.dll
2014-12-14 16:24:31 ----A---- C:\windows\system32\UIAutomationCore.dll
2014-12-14 16:24:30 ----A---- C:\windows\system32\ubpm.dll
2014-12-14 16:24:30 ----A---- C:\windows\system32\drivers\tpm.sys
2014-12-14 16:24:30 ----A---- C:\windows\system32\drivers\fvevol.sys
2014-12-14 16:24:29 ----A---- C:\windows\SYSWOW64\ubpm.dll
2014-12-14 16:24:29 ----A---- C:\windows\system32\drivers\crashdmp.sys
2014-12-14 16:21:02 ----A---- C:\windows\system32\drivers\usbvideo.sys
2014-12-14 16:21:02 ----A---- C:\windows\system32\drivers\usbcir.sys
2014-12-14 16:17:15 ----A---- C:\windows\SYSWOW64\msftedit.dll
2014-12-14 16:17:13 ----A---- C:\windows\system32\msftedit.dll
2014-12-14 16:17:10 ----A---- C:\windows\SYSWOW64\winmm.dll
2014-12-14 16:17:10 ----A---- C:\windows\system32\wwanconn.dll
2014-12-14 16:17:10 ----A---- C:\windows\system32\winmmbase.dll
2014-12-14 16:17:10 ----A---- C:\windows\system32\WerFault.exe
2014-12-14 16:17:09 ----A---- C:\windows\SYSWOW64\winmmbase.dll
2014-12-14 16:17:09 ----A---- C:\windows\SYSWOW64\WerFault.exe
2014-12-14 16:17:09 ----A---- C:\windows\system32\wwansvc.dll
2014-12-14 16:17:09 ----A---- C:\windows\system32\WinSCard.dll
2014-12-14 16:17:09 ----A---- C:\windows\system32\winmm.dll
2014-12-14 16:17:09 ----A---- C:\windows\system32\drivers\sdbus.sys
2014-12-14 16:17:09 ----A---- C:\windows\system32\drivers\msgpioclx.sys
2014-12-14 16:17:09 ----A---- C:\windows\system32\drivers\HdAudio.sys
2014-12-14 16:17:09 ----A---- C:\windows\system32\drivers\dumpsd.sys
2014-12-14 16:17:08 ----A---- C:\windows\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2014-12-14 16:17:08 ----A---- C:\windows\system32\Wwanadvui.dll
2014-12-14 16:17:08 ----A---- C:\windows\system32\drivers\USBSTOR.SYS
2014-12-14 16:17:07 ----A---- C:\windows\system32\Windows.Networking.BackgroundTransfer.dll
2014-12-14 16:17:06 ----A---- C:\windows\system32\wwanmm.dll
2014-12-14 16:17:06 ----A---- C:\windows\system32\openfiles.exe
2014-12-14 16:17:06 ----A---- C:\windows\system32\drivers\udfs.sys
2014-12-14 16:17:05 ----A---- C:\windows\SYSWOW64\WinSCard.dll
2014-12-14 16:17:05 ----A---- C:\windows\SYSWOW64\openfiles.exe
2014-12-14 16:17:05 ----A---- C:\windows\SYSWOW64\LocationApi.dll
2014-12-14 16:17:05 ----A---- C:\windows\system32\LocationApi.dll
2014-12-14 16:15:04 ----A---- C:\windows\SYSWOW64\TsWpfWrp.exe
2014-12-14 16:15:04 ----A---- C:\windows\system32\TsWpfWrp.exe
2014-12-14 16:11:27 ----A---- C:\windows\system32\ntdll.dll
2014-12-14 16:11:26 ----A---- C:\windows\SYSWOW64\WMVDECOD.DLL
2014-12-14 16:11:25 ----A---- C:\windows\system32\storagewmi.dll
2014-12-14 16:11:25 ----A---- C:\windows\system32\drivers\volsnap.sys
2014-12-14 16:11:24 ----A---- C:\windows\system32\WMVDECOD.DLL
2014-12-14 16:11:24 ----A---- C:\windows\system32\d3d10warp.dll
2014-12-14 16:11:22 ----A---- C:\windows\SYSWOW64\ntdll.dll
2014-12-14 16:11:22 ----A---- C:\windows\system32\winload.exe
2014-12-14 16:11:21 ----A---- C:\windows\SYSWOW64\dwmapi.dll
2014-12-14 16:11:21 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2014-12-14 16:11:20 ----A---- C:\windows\SYSWOW64\storagewmi.dll
2014-12-14 16:11:20 ----A---- C:\windows\system32\winresume.exe
2014-12-14 16:11:20 ----A---- C:\windows\system32\wcmsvc.dll
2014-12-14 16:11:20 ----A---- C:\windows\system32\dwmapi.dll
2014-12-14 16:11:18 ----A---- C:\windows\system32\wcmcsp.dll
2014-12-14 16:11:18 ----A---- C:\windows\system32\profsvc.dll
2014-12-14 16:11:17 ----A---- C:\windows\system32\defragsvc.dll
2014-12-14 16:11:14 ----A---- C:\windows\SYSWOW64\KBDRUM.DLL
2014-12-14 16:11:14 ----A---- C:\windows\system32\KBDRUM.DLL
2014-12-14 16:11:14 ----A---- C:\windows\system32\Defrag.exe
2014-12-14 16:11:13 ----A---- C:\windows\SYSWOW64\KBDYAK.DLL
2014-12-14 16:11:13 ----A---- C:\windows\SYSWOW64\KBDTAT.DLL
2014-12-14 16:11:13 ----A---- C:\windows\SYSWOW64\KBDRU1.DLL
2014-12-14 16:11:13 ----A---- C:\windows\SYSWOW64\KBDRU.DLL
2014-12-14 16:11:13 ----A---- C:\windows\SYSWOW64\KBDBASH.DLL
2014-12-14 16:11:13 ----A---- C:\windows\system32\KBDYAK.DLL
2014-12-14 16:11:13 ----A---- C:\windows\system32\KBDTAT.DLL
2014-12-14 16:11:13 ----A---- C:\windows\system32\KBDRU1.DLL
2014-12-14 16:11:13 ----A---- C:\windows\system32\KBDRU.DLL
2014-12-14 16:11:13 ----A---- C:\windows\system32\KBDBASH.DLL
2014-12-14 16:07:07 ----A---- C:\windows\system32\win32k.sys
2014-12-14 16:07:01 ----A---- C:\windows\system32\twinui.dll
2014-12-14 16:07:00 ----A---- C:\windows\SYSWOW64\twinui.dll
2014-12-14 16:06:57 ----A---- C:\windows\SYSWOW64\msi.dll
2014-12-14 16:06:57 ----A---- C:\windows\system32\msi.dll
2014-12-14 16:06:56 ----A---- C:\windows\SYSWOW64\authui.dll
2014-12-14 16:06:56 ----A---- C:\windows\system32\authui.dll
2014-12-14 16:06:55 ----A---- C:\windows\SYSWOW64\msihnd.dll
2014-12-14 16:06:55 ----A---- C:\windows\system32\msihnd.dll
2014-12-14 16:04:53 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2014-12-14 16:04:53 ----A---- C:\windows\system32\WindowsCodecs.dll
2014-12-14 16:04:40 ----A---- C:\windows\system32\Robocopy.exe
2014-12-14 16:04:39 ----A---- C:\windows\SYSWOW64\Robocopy.exe
2014-12-14 16:04:35 ----A---- C:\windows\SYSWOW64\ReAgent.dll
2014-12-14 16:04:34 ----A---- C:\windows\system32\reseteng.dll
2014-12-14 16:04:34 ----A---- C:\windows\system32\ReAgent.dll
2014-12-14 16:03:25 ----A---- C:\windows\SYSWOW64\atmlib.dll
2014-12-14 16:03:25 ----A---- C:\windows\SYSWOW64\atmfd.dll
2014-12-14 16:03:25 ----A---- C:\windows\system32\atmlib.dll
2014-12-14 16:03:25 ----A---- C:\windows\system32\atmfd.dll
2014-12-14 16:03:08 ----A---- C:\windows\system32\MPSSVC.dll
2014-12-14 16:03:08 ----A---- C:\windows\system32\FirewallAPI.dll
2014-12-14 16:03:06 ----A---- C:\windows\SYSWOW64\WebClnt.dll
2014-12-14 16:03:06 ----A---- C:\windows\SYSWOW64\FirewallAPI.dll
2014-12-14 16:03:06 ----A---- C:\windows\system32\WebClnt.dll
2014-12-14 16:03:06 ----A---- C:\windows\system32\drivers\disk.sys
2014-12-14 16:03:05 ----A---- C:\windows\SYSWOW64\davclnt.dll
2014-12-14 16:03:05 ----A---- C:\windows\system32\drivers\mpsdrv.sys
2014-12-14 16:03:05 ----A---- C:\windows\system32\davclnt.dll
2014-12-14 15:59:38 ----A---- C:\windows\system32\AppXDeploymentServer.dll
2014-12-14 15:59:37 ----A---- C:\windows\system32\sysmain.dll
2014-12-14 15:59:34 ----A---- C:\windows\system32\drivers\rdbss.sys
2014-12-14 15:59:31 ----A---- C:\windows\system32\netprofmsvc.dll
2014-12-14 15:59:19 ----A---- C:\windows\system32\stobject.dll
2014-12-14 15:59:19 ----A---- C:\windows\system32\netprofm.dll
2014-12-14 15:59:19 ----A---- C:\windows\system32\BCP47Langs.dll
2014-12-14 15:59:18 ----A---- C:\windows\system32\AppXDeploymentExtensions.dll
2014-12-14 15:59:17 ----A---- C:\windows\system32\netplwiz.dll
2014-12-14 15:59:17 ----A---- C:\windows\system32\Magnify.exe
2014-12-14 15:59:16 ----A---- C:\windows\SYSWOW64\netplwiz.dll
2014-12-14 15:59:16 ----A---- C:\windows\system32\psmsrv.dll
2014-12-14 15:59:16 ----A---- C:\windows\system32\mfmp4srcsnk.dll
2014-12-14 15:59:13 ----A---- C:\windows\SYSWOW64\stobject.dll
2014-12-14 15:59:13 ----A---- C:\windows\system32\DevicePairing.dll
2014-12-14 15:59:10 ----A---- C:\windows\SYSWOW64\Magnify.exe
2014-12-14 15:59:10 ----A---- C:\windows\system32\AuthHost.exe
2014-12-14 15:59:09 ----A---- C:\windows\SYSWOW64\netprofm.dll
2014-12-14 15:59:09 ----A---- C:\windows\SYSWOW64\DevicePairing.dll
2014-12-14 15:59:08 ----A---- C:\windows\system32\biwinrt.dll
2014-12-14 15:59:07 ----A---- C:\windows\SYSWOW64\biwinrt.dll
2014-12-14 15:59:04 ----A---- C:\windows\system32\bisrv.dll
2014-12-14 15:59:03 ----A---- C:\windows\SYSWOW64\mfmp4srcsnk.dll
2014-12-14 15:59:02 ----A---- C:\windows\SYSWOW64\BCP47Langs.dll
2014-12-14 15:59:01 ----A---- C:\windows\SYSWOW64\npmproxy.dll
2014-12-14 15:59:01 ----A---- C:\windows\SYSWOW64\muifontsetup.dll
2014-12-14 15:59:01 ----A---- C:\windows\system32\muifontsetup.dll
2014-12-14 15:58:25 ----A---- C:\windows\SYSWOW64\untfs.dll
2014-12-14 15:58:25 ----A---- C:\windows\system32\untfs.dll
2014-12-14 15:58:25 ----A---- C:\windows\system32\autochk.exe
2014-12-14 15:58:24 ----A---- C:\windows\SYSWOW64\autochk.exe
2014-12-14 15:55:05 ----A---- C:\windows\SYSWOW64\actxprxy.dll
2014-12-14 15:55:05 ----A---- C:\windows\system32\actxprxy.dll
2014-12-14 15:54:53 ----A---- C:\windows\system32\drivers\srv2.sys
2014-12-14 15:54:52 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2014-12-14 15:54:51 ----A---- C:\windows\system32\user32.dll
2014-12-14 15:54:51 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2014-12-14 15:54:50 ----A---- C:\windows\system32\srvsvc.dll
2014-12-14 15:54:50 ----A---- C:\windows\system32\msdtctm.dll
2014-12-14 15:54:50 ----A---- C:\windows\system32\drivers\USBHUB3.SYS
2014-12-14 15:54:49 ----A---- C:\windows\SYSWOW64\user32.dll
2014-12-14 15:54:49 ----A---- C:\windows\SYSWOW64\sscore.dll
2014-12-14 15:54:49 ----A---- C:\windows\system32\sscore.dll
2014-12-14 15:54:49 ----A---- C:\windows\system32\drivers\srvnet.sys
2014-12-14 15:54:45 ----A---- C:\windows\system32\drivers\USBXHCI.SYS
2014-12-14 15:54:45 ----A---- C:\windows\system32\drivers\UCX01000.SYS
2014-12-14 15:54:10 ----A---- C:\windows\system32\drivers\afd.sys
2014-12-14 15:52:38 ----A---- C:\windows\system32\consent.exe
2014-12-14 15:52:35 ----A---- C:\windows\SYSWOW64\cryptdlg.dll
2014-12-14 15:52:35 ----A---- C:\windows\system32\cryptdlg.dll
2014-12-14 15:51:50 ----A---- C:\windows\system32\kerberos.dll
2014-12-14 15:51:49 ----A---- C:\windows\SYSWOW64\pku2u.dll
2014-12-14 15:51:49 ----A---- C:\windows\SYSWOW64\kerberos.dll
2014-12-14 15:51:49 ----A---- C:\windows\system32\pku2u.dll
2014-12-14 15:50:49 ----A---- C:\windows\system32\msctf.dll
2014-12-14 15:50:48 ----A---- C:\windows\SYSWOW64\msctf.dll
2014-12-14 15:50:41 ----A---- C:\windows\SYSWOW64\shdocvw.dll
2014-12-14 15:50:41 ----A---- C:\windows\SYSWOW64\SettingSync.dll
2014-12-14 15:50:41 ----A---- C:\windows\SYSWOW64\mbsmsapi.dll
2014-12-14 15:50:41 ----A---- C:\windows\system32\shdocvw.dll
2014-12-14 15:50:41 ----A---- C:\windows\system32\SettingSyncInfo.dll
2014-12-14 15:50:41 ----A---- C:\windows\system32\SettingSync.dll
2014-12-14 15:50:41 ----A---- C:\windows\system32\mbsmsapi.dll
2014-12-14 15:50:32 ----A---- C:\windows\SYSWOW64\wvc.dll
2014-12-14 15:50:32 ----A---- C:\windows\SYSWOW64\wdc.dll
2014-12-14 15:50:32 ----A---- C:\windows\system32\wvc.dll
2014-12-14 15:50:32 ----A---- C:\windows\system32\wdc.dll
2014-12-14 15:50:16 ----A---- C:\windows\system32\tssdisai.dll
2014-12-14 15:50:15 ----A---- C:\windows\system32\poqexec.exe
2014-12-14 15:47:47 ----A---- C:\windows\system32\kernel32.dll
2014-12-14 15:47:45 ----A---- C:\windows\system32\gpedit.dll
2014-12-14 15:47:43 ----A---- C:\windows\SYSWOW64\kernel32.dll
2014-12-14 15:47:43 ----A---- C:\windows\SYSWOW64\gpedit.dll
2014-12-14 15:47:43 ----A---- C:\windows\system32\drivers\IPMIDrv.sys
2014-12-14 15:47:43 ----A---- C:\windows\system32\drivers\hidclass.sys
2014-12-14 15:47:41 ----A---- C:\windows\system32\drivers\mountmgr.sys
2014-12-14 15:33:40 ----A---- C:\windows\system32\audiosrv.dll
2014-12-14 15:33:38 ----A---- C:\windows\system32\AUDIOKSE.dll
2014-12-14 15:33:37 ----A---- C:\windows\system32\EncDump.dll
2014-12-14 15:33:37 ----A---- C:\windows\system32\AudioEndpointBuilder.dll
2014-12-14 15:33:32 ----A---- C:\windows\SYSWOW64\msdrm.dll
2014-12-14 15:33:32 ----A---- C:\windows\system32\msdrm.dll
2014-12-14 15:33:25 ----A---- C:\windows\system32\drivers\portcls.sys
2014-12-14 15:33:17 ----A---- C:\windows\SYSWOW64\crypt32.dll
2014-12-14 15:33:17 ----A---- C:\windows\system32\crypt32.dll
2014-12-14 15:08:31 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2014-12-14 14:04:26 ----A---- C:\windows\SYSWOW64\vsstrace.dll
2014-12-14 14:04:26 ----A---- C:\windows\SYSWOW64\vssapi.dll
2014-12-14 14:04:26 ----A---- C:\windows\system32\VSSVC.exe
2014-12-14 14:04:26 ----A---- C:\windows\system32\vsstrace.dll
2014-12-14 14:04:26 ----A---- C:\windows\system32\vssapi.dll
2014-12-14 12:45:07 ----N---- C:\windows\system32\MpSigStub.exe
2014-12-14 12:43:14 ----A---- C:\windows\SYSWOW64\esent.dll
2014-12-14 12:43:13 ----A---- C:\windows\system32\esent.dll
2014-12-14 12:43:00 ----A---- C:\windows\SYSWOW64\msxml3.dll
2014-12-14 12:43:00 ----A---- C:\windows\system32\msxml3.dll
2014-12-14 12:42:59 ----A---- C:\windows\system32\drivers\usbport.sys
2014-12-14 12:42:59 ----A---- C:\windows\system32\drivers\usbhub.sys
2014-12-14 12:42:58 ----A---- C:\windows\system32\drivers\usbuhci.sys
2014-12-14 12:42:58 ----A---- C:\windows\system32\drivers\usbehci.sys
2014-12-14 12:42:58 ----A---- C:\windows\system32\drivers\usbd.sys
2014-12-14 12:42:58 ----A---- C:\windows\system32\drivers\usbccgp.sys
2014-12-14 12:42:49 ----A---- C:\windows\system32\winlogon.exe
2014-12-14 12:42:49 ----A---- C:\windows\system32\schannel.dll
2014-12-14 12:42:49 ----A---- C:\windows\system32\lsm.dll
2014-12-14 12:42:49 ----A---- C:\windows\system32\drivers\cng.sys
2014-12-14 12:42:48 ----A---- C:\windows\SYSWOW64\usercpl.dll
2014-12-14 12:42:48 ----A---- C:\windows\SYSWOW64\schannel.dll
2014-12-14 12:42:48 ----A---- C:\windows\SYSWOW64\msv1_0.dll
2014-12-14 12:42:48 ----A---- C:\windows\system32\msv1_0.dll
2014-12-14 12:42:47 ----A---- C:\windows\SYSWOW64\wdigest.dll
2014-12-14 12:42:47 ----A---- C:\windows\system32\wdigest.dll
2014-12-14 12:42:47 ----A---- C:\windows\system32\usercpl.dll
2014-12-14 12:42:46 ----A---- C:\windows\SYSWOW64\TSpkg.dll
2014-12-14 12:42:46 ----A---- C:\windows\SYSWOW64\ncryptsslp.dll
2014-12-14 12:42:46 ----A---- C:\windows\SYSWOW64\credssp.dll
2014-12-14 12:42:46 ----A---- C:\windows\system32\TSpkg.dll
2014-12-14 12:42:46 ----A---- C:\windows\system32\ncryptsslp.dll
2014-12-14 12:42:46 ----A---- C:\windows\system32\credssp.dll
2014-12-14 12:42:45 ----A---- C:\windows\system32\workerdd.dll
2014-12-14 12:42:04 ----A---- C:\windows\SYSWOW64\DWrite.dll
2014-12-14 12:42:04 ----A---- C:\windows\system32\DWrite.dll
2014-12-14 12:41:57 ----A---- C:\windows\system32\lsasrv.dll
2014-12-14 12:41:56 ----A---- C:\windows\system32\SHCore.dll
2014-12-14 12:41:56 ----A---- C:\windows\system32\rdpcorets.dll
2014-12-14 12:41:52 ----A---- C:\windows\SYSWOW64\SHCore.dll
2014-12-14 12:41:50 ----A---- C:\windows\SYSWOW64\adtschema.dll
2014-12-14 12:41:50 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2014-12-14 12:41:50 ----A---- C:\windows\system32\adtschema.dll
2014-12-14 12:41:48 ----A---- C:\windows\SYSWOW64\msaudite.dll
2014-12-14 12:41:48 ----A---- C:\windows\system32\rdpudd.dll
2014-12-14 12:41:48 ----A---- C:\windows\system32\msaudite.dll
2014-12-14 12:41:07 ----A---- C:\windows\system32\wmp.dll
2014-12-14 12:41:07 ----A---- C:\windows\system32\tquery.dll
2014-12-14 12:41:05 ----A---- C:\windows\SYSWOW64\wmp.dll
2014-12-14 12:41:05 ----A---- C:\windows\system32\mssrch.dll
2014-12-14 12:41:03 ----A---- C:\windows\SYSWOW64\tquery.dll
2014-12-14 12:41:02 ----A---- C:\windows\SYSWOW64\mssrch.dll
2014-12-14 12:41:00 ----A---- C:\windows\system32\MSAudDecMFT.dll
2014-12-14 12:40:59 ----A---- C:\windows\SYSWOW64\MSAudDecMFT.dll
2014-12-14 12:40:57 ----A---- C:\windows\system32\kd_02_10ec.dll
2014-12-14 12:40:56 ----A---- C:\windows\SYSWOW64\mssph.dll
2014-12-14 12:40:56 ----A---- C:\windows\system32\SearchIndexer.exe
2014-12-14 12:40:56 ----A---- C:\windows\system32\rsaenh.dll
2014-12-14 12:40:55 ----A---- C:\windows\SYSWOW64\SearchProtocolHost.exe
2014-12-14 12:40:55 ----A---- C:\windows\system32\SearchProtocolHost.exe
2014-12-14 12:40:55 ----A---- C:\windows\system32\drivers\PEAuth.sys
2014-12-14 12:40:55 ----A---- C:\windows\system32\AudioSes.dll
2014-12-14 12:40:54 ----A---- C:\windows\SYSWOW64\rsaenh.dll
2014-12-14 12:40:54 ----A---- C:\windows\SYSWOW64\AudioSes.dll
2014-12-14 12:40:54 ----A---- C:\windows\SYSWOW64\AudioEng.dll
2014-12-14 12:40:54 ----A---- C:\windows\system32\Windows.Networking.dll
2014-12-14 12:40:54 ----A---- C:\windows\system32\mssph.dll
2014-12-14 12:40:54 ----A---- C:\windows\system32\dwmredir.dll
2014-12-14 12:40:54 ----A---- C:\windows\system32\conhost.exe
2014-12-14 12:40:54 ----A---- C:\windows\system32\AudioEng.dll
2014-12-14 12:40:54 ----A---- C:\windows\system32\audiodg.exe
2014-12-14 12:40:53 ----A---- C:\windows\SYSWOW64\SearchIndexer.exe
2014-12-14 12:40:53 ----A---- C:\windows\system32\wpncore.dll
2014-12-14 12:40:53 ----A---- C:\windows\system32\RecoveryDrive.exe
2014-12-14 12:40:53 ----A---- C:\windows\system32\MFMediaEngine.dll
2014-12-14 12:40:51 ----A---- C:\windows\SYSWOW64\Windows.Networking.dll
2014-12-14 12:40:51 ----A---- C:\windows\system32\dmvdsitf.dll
2014-12-14 12:40:51 ----A---- C:\windows\system32\ci.dll
2014-12-14 12:40:50 ----A---- C:\windows\SYSWOW64\mssvp.dll
2014-12-14 12:40:50 ----A---- C:\windows\SYSWOW64\MFMediaEngine.dll
2014-12-14 12:40:50 ----A---- C:\windows\system32\XpsRasterService.dll
2014-12-14 12:40:50 ----A---- C:\windows\system32\fhengine.dll
2014-12-14 12:40:49 ----A---- C:\windows\SYSWOW64\wscapi.dll
2014-12-14 12:40:49 ----A---- C:\windows\SYSWOW64\SearchFilterHost.exe
2014-12-14 12:40:49 ----A---- C:\windows\system32\mfreadwrite.dll
2014-12-14 12:40:49 ----A---- C:\windows\system32\drivers\pdc.sys
2014-12-14 12:40:48 ----A---- C:\windows\SYSWOW64\XpsRasterService.dll
2014-12-14 12:40:48 ----A---- C:\windows\system32\SearchFilterHost.exe
2014-12-14 12:40:48 ----A---- C:\windows\system32\kdvm.dll
2014-12-14 12:40:48 ----A---- C:\windows\system32\iuilp.dll
2014-12-14 12:40:46 ----A---- C:\windows\SYSWOW64\mfreadwrite.dll
2014-12-14 12:40:46 ----A---- C:\windows\SYSWOW64\dmvdsitf.dll
2014-12-14 12:40:46 ----A---- C:\windows\system32\wscsvc.dll
2014-12-14 12:40:46 ----A---- C:\windows\system32\kdnet.dll
2014-12-14 12:40:46 ----A---- C:\windows\system32\drivers\wanarp.sys
2014-12-14 12:40:46 ----A---- C:\windows\system32\drivers\hidbth.sys
2014-12-14 12:40:46 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2014-12-14 12:40:45 ----A---- C:\windows\SYSWOW64\mssphtb.dll
2014-12-14 12:40:45 ----A---- C:\windows\SYSWOW64\fmifs.dll
2014-12-14 12:40:45 ----A---- C:\windows\system32\mssvp.dll
2014-12-14 12:40:45 ----A---- C:\windows\system32\GenuineCenter.dll
2014-12-14 12:40:45 ----A---- C:\windows\system32\fmifs.dll
2014-12-14 12:40:45 ----A---- C:\windows\system32\drivers\ndproxy.sys
2014-12-14 12:40:44 ----A---- C:\windows\SYSWOW64\mssprxy.dll
2014-12-14 12:40:44 ----A---- C:\windows\SYSWOW64\msshooks.dll
2014-12-14 12:40:44 ----A---- C:\windows\system32\mssprxy.dll
2014-12-14 12:40:44 ----A---- C:\windows\system32\msshooks.dll
2014-12-14 12:40:44 ----A---- C:\windows\system32\msscntrs.dll
2014-12-14 12:40:43 ----A---- C:\windows\SYSWOW64\tzres.dll
2014-12-14 12:40:43 ----A---- C:\windows\system32\tzres.dll
2014-12-14 12:39:56 ----A---- C:\windows\SYSWOW64\msvcr120_clr0400.dll
2014-12-14 12:39:55 ----A---- C:\windows\system32\msvcr120_clr0400.dll
2014-12-14 12:39:41 ----A---- C:\windows\SYSWOW64\oleaut32.dll
2014-12-14 12:39:41 ----A---- C:\windows\system32\oleaut32.dll
2014-12-14 12:39:35 ----A---- C:\windows\system32\shell32.dll
2014-12-14 12:39:34 ----A---- C:\windows\SYSWOW64\shell32.dll
2014-12-14 12:39:31 ----A---- C:\windows\system32\mfmpeg2srcsnk.dll
2014-12-14 12:39:31 ----A---- C:\windows\system32\dnsapi.dll
2014-12-14 12:39:30 ----A---- C:\windows\SYSWOW64\mfmpeg2srcsnk.dll
2014-12-14 12:39:30 ----A---- C:\windows\SYSWOW64\dnsapi.dll
2014-12-14 12:39:29 ----A---- C:\windows\system32\dnsrslvr.dll
2014-12-14 12:39:09 ----A---- C:\windows\SYSWOW64\rpcrt4.dll
2014-12-14 12:39:09 ----A---- C:\windows\system32\rpcrt4.dll
2014-12-14 12:38:21 ----A---- C:\windows\system32\drivers\usbprint.sys
2014-12-14 12:38:21 ----A---- C:\windows\system32\drivers\hidusb.sys
2014-12-14 12:38:21 ----A---- C:\windows\system32\drivers\hidparse.sys
2014-12-14 12:37:50 ----A---- C:\windows\SYSWOW64\UXInit.dll
2014-12-14 12:37:50 ----A---- C:\windows\SYSWOW64\msrating.dll
2014-12-14 12:37:50 ----A---- C:\windows\SYSWOW64\iesetup.dll
2014-12-14 12:37:50 ----A---- C:\windows\SYSWOW64\iernonce.dll
2014-12-14 12:37:50 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2014-12-14 12:37:50 ----A---- C:\windows\system32\ie4uinit.exe
2014-12-14 12:37:49 ----A---- C:\windows\SYSWOW64\urlmon.dll
2014-12-14 12:37:49 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2014-12-14 12:37:49 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2014-12-14 12:37:49 ----A---- C:\windows\system32\UXInit.dll
2014-12-14 12:37:49 ----A---- C:\windows\system32\urlmon.dll
2014-12-14 12:37:49 ----A---- C:\windows\system32\msrating.dll
2014-12-14 12:37:48 ----A---- C:\windows\SYSWOW64\uxtheme.dll
2014-12-14 12:37:48 ----A---- C:\windows\system32\iernonce.dll
2014-12-14 12:37:47 ----A---- C:\windows\SYSWOW64\wininet.dll
2014-12-14 12:37:47 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2014-12-14 12:37:47 ----A---- C:\windows\SYSWOW64\ieframe.dll
2014-12-14 12:37:47 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2014-12-14 12:37:47 ----A---- C:\windows\system32\uxtheme.dll
2014-12-14 12:37:47 ----A---- C:\windows\system32\jsproxy.dll
2014-12-14 12:37:46 ----A---- C:\windows\system32\wininet.dll
2014-12-14 12:37:46 ----A---- C:\windows\system32\iesysprep.dll
2014-12-14 12:37:46 ----A---- C:\windows\system32\iesetup.dll
2014-12-14 12:37:46 ----A---- C:\windows\system32\iedkcs32.dll
2014-12-14 12:37:45 ----A---- C:\windows\SYSWOW64\iertutil.dll
2014-12-14 12:37:45 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2014-12-14 12:37:45 ----A---- C:\windows\system32\jscript.dll
2014-12-14 12:37:45 ----A---- C:\windows\system32\iertutil.dll
2014-12-14 12:37:45 ----A---- C:\windows\system32\dxtrans.dll
2014-12-14 12:37:44 ----A---- C:\windows\system32\msfeeds.dll
2014-12-14 12:37:44 ----A---- C:\windows\system32\ieframe.dll
2014-12-14 12:37:42 ----A---- C:\windows\system32\mshtmled.dll
2014-12-14 12:37:42 ----A---- C:\windows\system32\dxtmsft.dll
2014-12-14 12:37:40 ----A---- C:\windows\system32\mshtml.dll
2014-12-14 12:37:30 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2014-12-14 12:37:29 ----A---- C:\windows\SYSWOW64\jscript.dll
2014-12-14 12:37:28 ----A---- C:\windows\system32\jscript9.dll
2014-12-14 12:37:24 ----A---- C:\windows\SYSWOW64\jscript9.dll
2014-12-14 12:37:23 ----A---- C:\windows\SYSWOW64\mshtml.dll
2014-12-14 12:37:18 ----A---- C:\windows\system32\d2d1.dll
2014-12-14 12:37:17 ----A---- C:\windows\SYSWOW64\d2d1.dll
2014-12-14 12:37:07 ----A---- C:\windows\SYSWOW64\msvcp120_clr0400.dll
2014-12-14 12:37:07 ----A---- C:\windows\system32\msvcp120_clr0400.dll
2014-12-14 12:36:46 ----A---- C:\windows\system32\drivers\tcpip.sys
2014-12-14 12:36:43 ----A---- C:\windows\system32\WsmSvc.dll
2014-12-14 12:36:41 ----A---- C:\windows\SYSWOW64\WsmSvc.dll
2014-12-14 12:36:41 ----A---- C:\windows\system32\drivers\Classpnp.sys
2014-12-14 12:36:40 ----A---- C:\windows\system32\WsmWmiPl.dll
2014-12-14 12:36:38 ----A---- C:\windows\SYSWOW64\WsmWmiPl.dll
2014-12-14 12:36:38 ----A---- C:\windows\SYSWOW64\rpchttp.dll
2014-12-14 12:36:38 ----A---- C:\windows\SYSWOW64\FXSCOMEX.dll
2014-12-14 12:36:38 ----A---- C:\windows\system32\rpchttp.dll
2014-12-14 12:36:38 ----A---- C:\windows\system32\FXSCOMEX.dll
2014-12-14 12:36:37 ----A---- C:\windows\SYSWOW64\FXSAPI.dll
2014-12-14 12:36:37 ----A---- C:\windows\system32\FXSTIFF.dll
2014-12-14 12:36:37 ----A---- C:\windows\system32\FXST30.dll
2014-12-14 12:36:37 ----A---- C:\windows\system32\FXSAPI.dll
2014-12-14 12:36:25 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2014-12-14 12:36:25 ----A---- C:\windows\system32\cdd.dll
2014-12-14 12:36:09 ----A---- C:\windows\system32\certutil.exe
2014-12-14 12:36:08 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2014-12-14 12:36:08 ----A---- C:\windows\SYSWOW64\certutil.exe
2014-12-14 12:36:08 ----A---- C:\windows\system32\cryptnet.dll
2014-12-14 12:35:27 ----A---- C:\windows\system32\RDWebAI.dll
2014-12-14 12:35:26 ----A---- C:\windows\system32\appserverai.dll
2014-12-14 12:35:25 ----A---- C:\windows\system32\VmHostAI.dll
2014-12-14 12:35:23 ----A---- C:\windows\SYSWOW64\poqexec.exe
2014-12-14 12:34:49 ----A---- C:\windows\system32\wmpmde.dll
2014-12-14 12:34:48 ----A---- C:\windows\system32\winmde.dll
2014-12-14 12:34:47 ----A---- C:\windows\SYSWOW64\netcfgx.dll
2014-12-14 12:34:47 ----A---- C:\windows\system32\Windows.Security.Authentication.OnlineId.dll
2014-12-14 12:34:47 ----A---- C:\windows\system32\Windows.Globalization.dll
2014-12-14 12:34:47 ----A---- C:\windows\system32\TimeBrokerServer.dll
2014-12-14 12:34:47 ----A---- C:\windows\system32\SystemEventsBrokerServer.dll
2014-12-14 12:34:46 ----A---- C:\windows\system32\wpdbusenum.dll
2014-12-14 12:34:46 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2014-12-14 12:34:45 ----A---- C:\windows\SYSWOW64\winmde.dll
2014-12-14 12:34:45 ----A---- C:\windows\SYSWOW64\Windows.Globalization.dll
2014-12-14 12:34:45 ----A---- C:\windows\system32\usbmon.dll
2014-12-14 12:34:45 ----A---- C:\windows\system32\netcfgx.dll
2014-12-14 12:34:45 ----A---- C:\windows\system32\drivers\bthport.sys
2014-12-14 12:34:44 ----A---- C:\windows\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2014-12-14 12:34:44 ----A---- C:\windows\SYSWOW64\drvstore.dll
2014-12-14 12:34:44 ----A---- C:\windows\system32\drvstore.dll
2014-12-14 12:34:43 ----A---- C:\windows\system32\taskhost.exe
2014-12-14 12:34:43 ----A---- C:\windows\system32\discan.dll
2014-12-14 12:34:42 ----A---- C:\windows\system32\drivers\rfcomm.sys
2014-12-14 12:34:41 ----A---- C:\windows\system32\NdisImPlatform.dll
2014-12-14 12:34:40 ----A---- C:\windows\system32\fsquirt.exe
2014-12-14 12:34:40 ----A---- C:\windows\system32\drivers\storahci.sys
2014-12-14 12:34:39 ----A---- C:\windows\SYSWOW64\SettingSyncInfo.dll
2014-12-14 12:34:39 ----A---- C:\windows\system32\WSDPrintProxy.DLL
2014-12-14 12:34:39 ----A---- C:\windows\system32\taskhostex.exe
2014-12-14 12:34:39 ----A---- C:\windows\system32\DevDispItemProvider.dll
2014-12-14 12:34:38 ----A---- C:\windows\system32\drivers\mouhid.sys
2014-12-14 12:34:37 ----A---- C:\windows\SYSWOW64\DevDispItemProvider.dll
2014-12-14 12:34:37 ----A---- C:\windows\system32\drivers\monitor.sys
2014-12-14 12:34:36 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2014-12-14 12:34:36 ----A---- C:\windows\system32\drivers\bthenum.sys
2014-12-14 12:33:48 ----A---- C:\windows\system32\mstscax.dll
2014-12-14 12:33:47 ----A---- C:\windows\SYSWOW64\mstscax.dll
2014-12-14 12:33:47 ----A---- C:\windows\system32\termsrv.dll
2014-12-14 12:33:46 ----A---- C:\windows\SYSWOW64\winsta.dll
2014-12-14 12:33:46 ----A---- C:\windows\SYSWOW64\mstsc.exe
2014-12-14 12:33:46 ----A---- C:\windows\SYSWOW64\aaclient.dll
2014-12-14 12:33:46 ----A---- C:\windows\system32\winsta.dll
2014-12-14 12:33:46 ----A---- C:\windows\system32\mstsc.exe
2014-12-14 12:33:08 ----A---- C:\windows\SYSWOW64\Windows.ApplicationModel.Store.dll
2014-12-14 12:32:13 ----A---- C:\windows\system32\sppsvc.exe
2014-12-14 12:32:12 ----A---- C:\windows\system32\WSService.dll
2014-12-14 12:32:11 ----A---- C:\windows\system32\sppobjs.dll
2014-12-14 12:32:10 ----A---- C:\windows\SYSWOW64\sppc.dll
2014-12-14 12:32:10 ----A---- C:\windows\system32\sppwinob.dll
2014-12-14 12:32:10 ----A---- C:\windows\system32\sppc.dll
2014-12-14 12:32:09 ----A---- C:\windows\SYSWOW64\WSSync.dll
2014-12-14 12:32:09 ----A---- C:\windows\system32\WSSync.dll
2014-12-14 12:32:08 ----A---- C:\windows\system32\WSClient.dll
2014-12-14 12:32:07 ----A---- C:\windows\SYSWOW64\WSClient.dll
2014-12-14 12:32:07 ----A---- C:\windows\system32\drivers\dam.sys
2014-12-14 12:32:06 ----A---- C:\windows\system32\setupcln.dll
2014-12-14 12:32:05 ----A---- C:\windows\SYSWOW64\setupcln.dll
2014-12-14 12:32:05 ----A---- C:\windows\SYSWOW64\OEMLicense.dll
2014-12-14 12:31:08 ----A---- C:\windows\SYSWOW64\duser.dll
2014-12-14 12:31:08 ----A---- C:\windows\system32\wlroamextension.dll
2014-12-14 12:31:08 ----A---- C:\windows\system32\duser.dll
2014-12-14 12:31:06 ----A---- C:\windows\system32\WWanAPI.dll
2014-12-14 12:31:06 ----A---- C:\windows\system32\Windows.Networking.Connectivity.dll
2014-12-14 12:31:06 ----A---- C:\windows\system32\ncsi.dll
2014-12-14 12:31:05 ----A---- C:\windows\system32\hotspotauth.dll
2014-12-14 12:31:04 ----A---- C:\windows\system32\drivers\ks.sys
2014-12-14 12:31:03 ----A---- C:\windows\SYSWOW64\WWanAPI.dll
2014-12-14 12:31:03 ----A---- C:\windows\SYSWOW64\wlroamextension.dll
2014-12-14 12:31:03 ----A---- C:\windows\SYSWOW64\Windows.Networking.Connectivity.dll
2014-12-14 12:31:03 ----A---- C:\windows\system32\tasklist.exe
2014-12-14 12:31:03 ----A---- C:\windows\system32\taskkill.exe
2014-12-14 12:31:02 ----A---- C:\windows\SYSWOW64\taskkill.exe
2014-12-14 12:31:01 ----A---- C:\windows\system32\wpd_ci.dll
2014-12-14 12:31:01 ----A---- C:\windows\system32\wersvc.dll
2014-12-14 12:31:00 ----A---- C:\windows\SYSWOW64\tasklist.exe
2014-12-14 12:30:58 ----A---- C:\windows\SYSWOW64\nlmsprep.dll
2014-12-14 12:30:58 ----A---- C:\windows\SYSWOW64\nlmproxy.dll
2014-12-14 12:30:58 ----A---- C:\windows\SYSWOW64\nlaapi.dll
2014-12-14 12:30:43 ----A---- C:\windows\SYSWOW64\wintrust.dll
2014-12-14 12:30:43 ----A---- C:\windows\SYSWOW64\apprepsync.dll
2014-12-14 12:30:43 ----A---- C:\windows\SYSWOW64\apprepapi.dll
2014-12-14 12:30:43 ----A---- C:\windows\system32\wintrust.dll
2014-12-14 12:30:43 ----A---- C:\windows\system32\cryptsvc.dll
2014-12-14 12:30:43 ----A---- C:\windows\system32\apprepsync.dll
2014-12-14 12:30:43 ----A---- C:\windows\system32\apprepapi.dll
2014-12-14 12:30:26 ----A---- C:\windows\system32\gdi32.dll
2014-12-14 12:30:25 ----A---- C:\windows\SYSWOW64\gdi32.dll
2014-12-14 12:30:00 ----A---- C:\windows\system32\InkEd.dll
2014-12-14 12:29:55 ----A---- C:\windows\system32\schedsvc.dll
2014-12-14 12:29:30 ----A---- C:\windows\system32\GdiPlus.dll
2014-12-14 12:29:29 ----A---- C:\windows\SYSWOW64\GdiPlus.dll
2014-12-14 12:27:42 ----A---- C:\windows\SYSWOW64\scrrun.dll
2014-12-14 12:27:42 ----A---- C:\windows\SYSWOW64\scrobj.dll
2014-12-14 12:27:42 ----A---- C:\windows\SYSWOW64\cscript.exe
2014-12-14 12:27:42 ----A---- C:\windows\system32\scrrun.dll
2014-12-14 12:27:42 ----A---- C:\windows\system32\scrobj.dll
2014-12-14 12:27:42 ----A---- C:\windows\system32\cscript.exe
2014-12-14 12:27:40 ----A---- C:\windows\system32\drivers\http.sys
2014-12-14 12:26:46 ----A---- C:\windows\system32\mmc.exe
2014-12-14 12:26:45 ----A---- C:\windows\system32\wlidsvc.dll
2014-12-14 12:26:44 ----A---- C:\windows\SYSWOW64\mmc.exe
2014-12-14 12:26:40 ----A---- C:\windows\system32\Windows.Media.dll
2014-12-14 12:26:40 ----A---- C:\windows\system32\setupapi.dll
2014-12-14 12:26:39 ----A---- C:\windows\SYSWOW64\setupapi.dll
2014-12-14 12:26:39 ----A---- C:\windows\system32\drivers\partmgr.sys
2014-12-14 12:26:39 ----A---- C:\windows\system32\drivers\msgpiowin32.sys
2014-12-14 12:26:38 ----A---- C:\windows\system32\iphlpsvc.dll
2014-12-14 12:26:37 ----A---- C:\windows\system32\MP4SDECD.DLL
2014-12-14 12:26:37 ----A---- C:\windows\system32\inetpp.dll
2014-12-14 12:26:36 ----A---- C:\windows\SYSWOW64\Windows.Media.dll
2014-12-14 12:26:35 ----A---- C:\windows\SYSWOW64\wiaacmgr.exe
2014-12-14 12:26:35 ----A---- C:\windows\system32\WSDMon.dll
2014-12-14 12:26:35 ----A---- C:\windows\system32\wiaacmgr.exe
2014-12-14 12:26:35 ----A---- C:\windows\system32\ncbservice.dll
2014-12-14 12:26:34 ----A---- C:\windows\SYSWOW64\MP4SDECD.DLL
2014-12-14 12:26:34 ----A---- C:\windows\system32\httpprxm.dll
2014-12-14 12:26:34 ----A---- C:\windows\system32\adhsvc.dll
2014-12-14 12:26:32 ----A---- C:\windows\system32\keepaliveprovider.dll
2014-12-14 12:26:32 ----A---- C:\windows\system32\httpprxp.dll
2014-12-14 12:26:32 ----A---- C:\windows\system32\adhapi.dll
2014-12-14 12:26:02 ----A---- C:\windows\SYSWOW64\nshwfp.dll
2014-12-14 12:26:02 ----A---- C:\windows\SYSWOW64\FWPUCLNT.DLL
2014-12-14 12:26:02 ----A---- C:\windows\system32\nshwfp.dll
2014-12-14 12:26:02 ----A---- C:\windows\system32\IKEEXT.DLL
2014-12-14 12:26:02 ----A---- C:\windows\system32\FWPUCLNT.DLL
2014-12-14 12:26:02 ----A---- C:\windows\system32\BFE.DLL
2014-12-14 12:26:01 ----A---- C:\windows\system32\drivers\wfplwfs.sys
2014-12-14 12:25:33 ----A---- C:\windows\system32\appinfo.dll
2014-12-14 12:24:35 ----A---- C:\windows\system32\drivers\WdFilter.sys
2014-12-14 12:24:34 ----A---- C:\windows\system32\drivers\WdBoot.sys
2014-12-14 12:24:14 ----A---- C:\windows\SYSWOW64\d3d11.dll
2014-12-14 12:24:14 ----A---- C:\windows\system32\d3d11.dll
2014-12-14 12:23:51 ----A---- C:\windows\SYSWOW64\msieftp.dll
2014-12-14 12:23:51 ----A---- C:\windows\system32\msieftp.dll
2014-12-14 12:23:41 ----A---- C:\windows\system32\KernelBase.dll
2014-12-14 12:23:40 ----A---- C:\windows\system32\sspicli.dll
2014-12-14 12:23:40 ----A---- C:\windows\system32\objsel.dll
2014-12-14 12:23:39 ----A---- C:\windows\SYSWOW64\objsel.dll
2014-12-14 12:23:39 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2014-12-14 12:23:39 ----A---- C:\windows\system32\dpapisrv.dll
2014-12-14 12:23:36 ----A---- C:\windows\system32\drivers\ksecdd.sys
2014-12-14 12:23:32 ----A---- C:\windows\SYSWOW64\sspicli.dll
2014-12-14 12:23:32 ----A---- C:\windows\SYSWOW64\dimsroam.dll
2014-12-14 12:23:32 ----A---- C:\windows\system32\sspisrv.dll
2014-12-14 12:23:32 ----A---- C:\windows\system32\lsass.exe
2014-12-14 12:23:32 ----A---- C:\windows\system32\dimsroam.dll
2014-12-14 12:21:18 ----A---- C:\windows\system32\drivers\WdfLdr.sys
2014-12-14 12:21:18 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2014-12-14 12:21:16 ----A---- C:\windows\system32\comctl32.dll
2014-12-14 12:21:15 ----A---- C:\windows\SYSWOW64\comctl32.dll
2014-12-14 12:21:10 ----A---- C:\windows\SYSWOW64\packager.dll
2014-12-14 12:21:10 ----A---- C:\windows\system32\packager.dll
2014-12-14 12:20:59 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2014-12-14 12:20:59 ----A---- C:\windows\system32\imagehlp.dll
2014-12-14 12:20:43 ----A---- C:\windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-12-14 12:20:42 ----A---- C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-12-14 12:19:03 ----A---- C:\windows\system32\qedit.dll
2014-12-14 12:19:02 ----A---- C:\windows\SYSWOW64\qedit.dll
2014-12-14 12:18:59 ----A---- C:\windows\system32\drivers\usb8023.sys
2014-12-14 12:18:37 ----A---- C:\windows\SYSWOW64\WMPhoto.dll
2014-12-14 12:18:36 ----A---- C:\windows\system32\WMPhoto.dll
2014-12-14 12:18:30 ----A---- C:\windows\SYSWOW64\rastls.dll
2014-12-14 12:18:30 ----A---- C:\windows\system32\rastls.dll
2014-12-14 12:18:22 ----A---- C:\windows\system32\osk.exe
2014-12-14 12:18:21 ----A---- C:\windows\SYSWOW64\osk.exe
2014-12-14 09:58:06 ----A---- C:\Recovery.txt
2014-12-14 08:58:29 ----ASH---- C:\swapfile.sys
2014-12-14 08:58:28 ----ASH---- C:\pagefile.sys
2014-12-14 08:58:27 ----SHD---- C:\System Volume Information
2014-12-14 08:58:25 ----ASH---- C:\hiberfil.sys
2014-11-19 04:31:16 ----A---- C:\windows\SYSWOW64\FM20.DLL

======List of files/folders modified in the last 1 month======

2014-12-14 20:33:03 ----D---- C:\windows\Prefetch
2014-12-14 20:33:01 ----A---- C:\windows\SYSWOW64\log.txt
2014-12-14 20:28:56 ----D---- C:\windows\Temp
2014-12-14 20:28:34 ----D---- C:\windows\Tasks
2014-12-14 20:00:12 ----D---- C:\windows\system32\sru
2014-12-14 19:52:32 ----RD---- C:\windows\assembly
2014-12-14 19:52:32 ----D---- C:\windows\Microsoft.NET
2014-12-14 19:39:01 ----D---- C:\windows\system32\config
2014-12-14 19:34:20 ----SHD---- C:\windows\Installer
2014-12-14 19:33:36 ----D---- C:\windows\CbsTemp
2014-12-14 19:27:47 ----D---- C:\windows\SysWOW64
2014-12-14 19:26:53 ----RSD---- C:\windows\Fonts
2014-12-14 19:22:11 ----D---- C:\windows\WinSxS
2014-12-14 18:57:15 ----D---- C:\windows\Inf
2014-12-14 18:56:21 ----AD---- C:\windows\System32
2014-12-14 18:46:24 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-12-14 18:40:46 ----D---- C:\ProgramData\PRICache
2014-12-14 18:36:36 ----D---- C:\windows\WinStore
2014-12-14 18:36:33 ----D---- C:\windows\system32\Drivers
2014-12-14 18:36:22 ----AD---- C:\Windows
2014-12-14 18:36:21 ----D---- C:\windows\system32\Boot
2014-12-14 18:35:42 ----D---- C:\windows\SYSWOW64\sk-SK
2014-12-14 18:35:42 ----D---- C:\windows\SYSWOW64\cs-CZ
2014-12-14 18:35:42 ----D---- C:\windows\system32\sk-SK
2014-12-14 18:35:41 ----D---- C:\windows\system32\cs-CZ
2014-12-14 18:35:36 ----D---- C:\windows\system32\en-US
2014-12-14 18:35:28 ----D---- C:\windows\system32\DriverStore
2014-12-14 18:31:39 ----D---- C:\windows\system32\catroot2
2014-12-14 18:12:42 ----D---- C:\windows\system32\SecureBootUpdates
2014-12-14 18:12:29 ----SD---- C:\ProgramData\Microsoft
2014-12-14 18:11:08 ----RD---- C:\Program Files
2014-12-14 18:11:07 ----RD---- C:\Program Files (x86)
2014-12-14 18:09:53 ----D---- C:\ProgramData\NVIDIA
2014-12-14 18:06:22 ----D---- C:\Program Files\NVIDIA Corporation
2014-12-14 17:55:36 ----D---- C:\Program Files (x86)\Microsoft Office
2014-12-14 17:55:35 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-12-14 17:54:16 ----D---- C:\windows\system32\Tasks
2014-12-14 17:54:06 ----D---- C:\Program Files\Common Files\microsoft shared
2014-12-14 17:52:18 ----D---- C:\windows\ShellNew
2014-12-14 17:52:05 ----HD---- C:\ProgramData
2014-12-14 17:42:20 ----AD---- C:\windows\system32\oobe
2014-12-14 17:42:07 ----D---- C:\windows\SYSWOW64\en-US
2014-12-14 17:42:06 ----D---- C:\windows\SYSWOW64\wbem
2014-12-14 17:41:59 ----D---- C:\windows\system32\wbem
2014-12-14 17:30:39 ----HD---- C:\Program Files\WindowsApps
2014-12-14 17:25:44 ----D---- C:\Program Files (x86)\Common Files
2014-12-14 17:07:45 ----D---- C:\windows\AUInstallAgent
2014-12-14 16:55:51 ----RD---- C:\windows\ToastData
2014-12-14 16:54:53 ----D---- C:\windows\SYSWOW64\Dism
2014-12-14 16:54:53 ----D---- C:\Program Files\Windows Photo Viewer
2014-12-14 16:54:53 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2014-12-14 16:54:49 ----D---- C:\windows\system32\Dism
2014-12-14 16:54:21 ----D---- C:\windows\system32\drivers\en-US
2014-12-14 16:54:21 ----D---- C:\windows\system32\drivers\cs-CZ
2014-12-14 16:46:54 ----D---- C:\Program Files\Common Files
2014-12-14 16:45:01 ----D---- C:\Intel
2014-12-14 16:44:36 ----D---- C:\ProgramData\Intel
2014-12-14 16:44:35 ----D---- C:\Program Files (x86)\Intel
2014-12-14 16:42:37 ----D---- C:\Program Files (x86)\Lenovo
2014-12-14 16:42:04 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-12-14 16:41:05 ----D---- C:\windows\SoftwareDistribution
2014-12-14 16:38:41 ----HD---- C:\windows\ELAMBKUP
2014-12-14 16:37:07 ----D---- C:\Program Files\Lenovo
2014-12-14 16:31:42 ----D---- C:\ProgramData\Atheros
2014-12-14 16:29:33 ----RD---- C:\windows\ImmersiveControlPanel
2014-12-14 16:29:21 ----AD---- C:\Users
2014-12-14 16:24:34 ----D---- C:\windows\debug
2014-12-14 15:09:59 ----D---- C:\windows\servicing
2014-12-14 15:00:51 ----D---- C:\windows\SYSWOW64\migration
2014-12-14 15:00:50 ----D---- C:\windows\system32\migration
2014-12-14 15:00:06 ----D---- C:\windows\PolicyDefinitions
2014-12-14 14:57:01 ----D---- C:\Program Files\Windows Defender
2014-12-14 14:56:52 ----D---- C:\Program Files (x86)\Windows Defender
2014-12-14 14:56:34 ----D---- C:\windows\apppatch
2014-12-14 14:56:13 ----D---- C:\Program Files\Windows Journal
2014-12-14 14:53:01 ----D---- C:\Program Files (x86)\Internet Explorer
2014-12-14 14:52:54 ----D---- C:\Program Files\Internet Explorer
2014-12-14 14:44:01 ----D---- C:\windows\system32\drivers\UMDF
2014-12-14 10:38:01 ----D---- C:\windows\system32\wdi

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\windows\System32\drivers\iaStorA.sys [2012-09-02 647736]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2013-05-20 39008]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2013-12-26 32544]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\windows\system32\DRIVERS\vwififlt.sys [2012-07-26 64000]
R3 ACPIVPC;@oem19.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\windows\System32\drivers\AcpiVpc.sys [2013-05-20 33560]
R3 AthBTPort;@oem18.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\windows\system32\DRIVERS\btath_flt.sys [2013-01-25 89168]
R3 athr;@oem12.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athw8x.sys [2012-09-19 3653632]
R3 BTATH_A2DP;@oem17.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\windows\system32\drivers\btath_a2dp.sys [2013-01-25 346192]
R3 btath_avdt;@oem17.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\windows\system32\drivers\btath_avdt.sys [2013-01-25 115280]
R3 BTATH_BUS;@oem14.inf,%BTATH_BUS.SVCDESC%;Qualcomm Atheros Bluetooth Bus; C:\windows\System32\drivers\btath_bus.sys [2013-01-25 34384]
R3 BTATH_HCRP;@oem20.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\windows\System32\drivers\btath_hcrp.sys [2013-01-25 179432]
R3 BTATH_LWFLT;@oem22.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\windows\system32\DRIVERS\btath_lwflt.sys [2013-01-25 77464]
R3 BTATH_RCP;@oem24.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\windows\System32\drivers\btath_rcp.sys [2013-01-25 136424]
R3 BtFilter;BtFilter; C:\windows\system32\DRIVERS\btfilter.sys [2013-01-25 581200]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\windows\System32\drivers\BthEnum.sys [2013-01-09 51712]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\windows\system32\DRIVERS\BthLEEnum.sys [2012-07-26 202752]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2012-07-26 119808]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2013-01-09 74752]
R3 CnxtHdAudService;@oem7.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\CHDRT64.sys [2012-06-27 1608864]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2013-02-05 8987456]
R3 IntcDAud;@oem5.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 L1C;@oem9.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C63x64.sys [2012-07-19 110744]
R3 MEIx64;@oem3.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\windows\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 nvlddmkm;nvlddmkm; C:\windows\system32\DRIVERS\nvlddmkm.sys [2013-12-26 11311392]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\System32\drivers\rfcomm.sys [2013-03-01 156672]
R3 SmbDrvI;SmbDrvI; C:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2012-08-27 43832]
R3 SynTP;@oem11.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2012-08-27 448312]
R3 vm331avs;@oem13.inf,%USBCamera.DeviceDesc2%;Digital Camera 1; C:\windows\System32\Drivers\vm331avs.sys [2012-08-24 975104]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\windows\system32\DRIVERS\vwifimp.sys [2012-07-26 17920]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2013-03-01 1175040]
S3 e1iexpress;@net1ic64.inf,%E1IExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\windows\system32\DRIVERS\e1i63x64.sys [2012-06-02 333824]
S3 NETwNs64;@netwns64.inf,___ %NIC_Service_DispName_WIN7_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\windows\system32\DRIVERS\NETwNs64.sys [2012-06-02 8604672]
S3 RSUSBVSTOR;@oem8.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUVStor.sys [2012-06-15 315536]
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\windows\System32\Drivers\usbvideo.sys [2013-07-05 210560]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2013-01-25 227456]
R2 CxAudMsg;@C:\windows\system32\CxAudMsg64.exe,-100; C:\windows\system32\CxAudMsg64.exe [2012-06-08 201376]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2013-10-29 920864]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-12-26 1364256]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-14 107912]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2013-02-07 277488]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-26 43616]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-14 107912]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

-----------------EOF-----------------

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?

no už to neběží na 99%, ale občas to stejně ještě "hrabe", ale to už je možná normální

EDIT: tak stejně to běží na 99%...po restartu jede disk od začátku pořád naplno, že jen na spuštěná správce úloh čekám asi 2 minuty. Když se NB pr minut nechá, tak se to začne uklidňovat, ale trvá to tak 5 minut.

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 14. 12. 2014
Scan Time: 21:55:37
Logfile: log.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2014.12.14.06
Rootkit Database: v2014.12.08.03
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 8
CPU: x64
File System: NTFS
User: Veronika A1iA3kovA!

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 351275
Time Elapsed: 7 min, 5 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

Po stránce malware je PC čistý. Který proces nejvíce systém zatěžuje?

system, hostitelské služby:místní služba, antimalware service executable a pak se občas spouští windows modules installer worker (asi automatické aktualizace)

Zkuste přeinstalovat antivir.

Antivir používám Windows Defender. Zdá se, že teď už vše šlape. Díky za Váš čas.

Rádo se stalo!