VIRY.CZ

Ahoj,
můžu poprosit o radu? Avira asi před hodinou detekovala vir Adware Gen 7 a přesunula jej do karantény. Vir byl detekován v VisualDiscovery.exe, což vůbec nevím co je. Po odstranění a opětovném projetí Avirou, Spyware Terminatorem a CCleanerem to nic nenachází ale net v prohlížeči stále nejede. Log samozřejmě případně dodám, ale spíš si myslím, jestli vir nepozměnil nějak nastavení přístupu k internetu, přičemž už je pc opravdu čisté. Mám raději tedy nahodit log a nebo byste mi poradili co zkontrolovat nastavení připojení?
Děkuju

Zdravim

Dejte nejprve log z RSIT (pripadne RSITx64) http://forum.viry.cz/viewtopic.php?f=13&t=130786

Nefunguje jen prohlizec, nebo internet celkove (skype, icq atd.)

Děkuju za rychlou odpověď . Nejede pouze prohlížeč(e)

Logfile of random's system information tool 1.10 (written by random/random)
Run by User at 2015-01-12 13:28:30
Microsoft Windows 8.1
System drive C: has 69 GB (66%) free of 105 GB
Total RAM: 4008 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:28:35, on 12. 1. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\Lenovo\Lenovo Transition\Transition.exe
C:\Program Files (x86)\Lenovo\Lenovo Transition\TransitionServer.exe
C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvTrayLoad.exe
C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvController.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe
C:\Program Files\Microsoft Office 15\root\office15\WINWORD.EXE
C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
D:\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.60\opera_crashreporter.exe
C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
C:\Program Files\trend micro\User.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Yoga Picks] C:\Program Files (x86)\Lenovo\Yoga Picks\Yoga Picks.exe -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Avira Systray] C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
O4 - HKCU\..\Run: [Pokki] C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - Global Startup: ISCTSystray.lnk = C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Service Host (Avira.OE.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @oem13.inf,%WIN32_DPTF_PARTICIPANT_PROC_SERVICE_DISPLAY_NAME%;Intel(R) Dynamic Platform and Thermal Framework Processor Participant Service Application (DptfParticipantProcessorService) - Unknown owner - C:\windows\system32\DptfParticipantProcessorService.exe (file missing)
O23 - Service: @oem13.inf,%WIN32_DPTF_POLICY_CONFIGTDP_SERVICE_DISPLAY_NAME%;Intel(R) Dynamic Platform and Thermal Framework Config TDP Service Application (DptfPolicyConfigTDPService) - Unknown owner - C:\windows\system32\DptfPolicyConfigTDPService.exe (file missing)
O23 - Service: @oem13.inf,%WIN32_DPTF_POLICY_CRITICAL_SERVICE_DISPLAY_NAME%;Intel(R) Dynamic Platform and Thermal Framework Critical Service Application (DptfPolicyCriticalService) - Unknown owner - C:\windows\system32\DptfPolicyCriticalService.exe (file missing)
O23 - Service: @oem13.inf,%WIN32_DPTF_POLICY_LPM_SERVICE_DISPLAY_NAME%;Intel(R) Dynamic Platform and Thermal Framework Low Power Mode Service Application (DptfPolicyLpmService) - Unknown owner - C:\windows\system32\DptfPolicyLpmService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Smart Connect Technology Agent (ISCTAgent) - Unknown owner - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
O23 - Service: Intel(R) Update Manager (iumsvc) - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo System Agent Service - LENOVO INCORPORATED. - C:\Program Files\Lenovo\iMController\SystemAgentService.exe
O23 - Service: Lenovo WiFiHotspot Service (LenovoWiFiHotspotSvr) - Unknown owner - C:\Windows\System32\LenovoWiFiHotspotSvr.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: LsvUIService - Lenovo - C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvUIService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: PGService - PointGrab LTD - C:\Program Files (x86)\Lenovo\Motion Control\PGService.exe
O23 - Service: PG_Service_Launcher - PointGrab LTD - C:\Program Files (x86)\Lenovo\Motion Control\PG_Service_Launcher.exe
O23 - Service: Lenovo PhoneCompanionPusher Service (PhoneCompanionPusher) - Lenovo - C:\Program Files\Lenovo Yoga PhoneCompanion\PhoneCompanionPusher.exe
O23 - Service: Lenovo PhoneCompanionVap Service (PhoneCompanionVap) - Lenovo - C:\Program Files\Lenovo Yoga PhoneCompanion\PhoneCompanionVap.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: VeriFaceSrv - Unknown owner - C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ymc - Lenovo - C:\ProgramData\LenovoTransition\Server\x64\ymc.exe
O23 - Service: YogaPicks.AppService - Unknown owner - C:\Program Files (x86)\Lenovo\Yoga Picks\Service\x64\YogaPicks.AppService.exe
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 13547 bytes

======Listing Processes======





wininit.exe

C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\igfxCUIService.exe
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe 416659714768
\??\C:\windows\system32\conhost.exe 0x4
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\system32\DptfParticipantProcessorService.exe
dashost.exe {bf41c76b-162e-4003-a8a8300a12398e2d}
C:\windows\system32\DptfPolicyConfigTDPService.exe
C:\windows\system32\DptfPolicyCriticalService.exe
C:\windows\system32\DptfPolicyLpmService.exe
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe"
"C:\Program Files\Lenovo\iMController\SystemAgentService.exe"
C:\Windows\System32\LenovoWiFiHotspotSvr.exe
"C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvUIService.exe"
"C:\Program Files (x86)\Lenovo\Motion Control\PGService.exe"
"C:\Program Files (x86)\Lenovo\Motion Control\PG_Service_Launcher.exe"
"C:\Program Files\Lenovo Yoga PhoneCompanion\PhoneCompanionPusher.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files (x86)\Lenovo\Motion Control\WebcamSplitterServer.exe" -Embedding
"C:\Program Files\CyberLink\Shared files\RichVideo64.exe"
"C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe"
C:\ProgramData\LenovoTransition\Server\x64\ymc.exe
"C:\Program Files (x86)\Lenovo\Yoga Picks\Service\x64\YogaPicks.AppService.exe"
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\windows\system32\wbem\unsecapp.exe -Embedding
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-39cd3373-ebd3-42bc-a7cb-54b0368be2f6 -SystemEventPortName:HostProcess-433b09f0-afda-4e60-8088-603ca05415d1 -IoCancelEventPortName:HostProcess-f4b30a95-ba1f-4af4-b9ec-84db6ec62c31 -NonStateChangingEventPortName:HostProcess-a4d4755e-a2a3-43fb-96e8-2d488ead38f0 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a07711fc-61bf-419b-a660-154f38a68c65 -DeviceGroupId:WudfDefaultDevicePool
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
adb fork-server server

"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\windows\TEMP\D6BD3B42-8C59-47D2-9996-AA62A5AF23CA\dismhost.exe {A401BBF2-2C40-4FF8-977F-AF1567AD6BD7}
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_000038b8
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
"C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe"

C:\windows\System32\WinLogon.exe -SpecialSession
-hiberboot
taskhostex.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\windows\Explorer.EXE
igfxHK.exe
igfxTray.exe
/QuitInfo:0000000000001180;0000000000001334;
/loadhooks /Parent:000000000000344c
"C:\windows\system32\igfxEM.exe" -Embedding
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Windows\System32\DptfPolicyLpmServiceHelper.exe"
"C:\Windows\System32\rundll32.exe" "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
"C:\Program Files\Lenovo Yoga PhoneCompanion\Yoga Phone Companion.exe"
"C:\Program Files (x86)\Lenovo\Lenovo Transition\Transition.exe" AutoRun
"C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe"
"C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe"
"C:\Program Files (x86)\Lenovo\Lenovo Transition\TransitionServer.exe"
"C:\Windows\System32\StikyNot.exe"
"C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe"
"C:\Program Files (x86)\Lenovo\Yoga Picks\Yoga Picks.exe" -s
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe"
"C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvTrayLoad.exe" /AutoRun
"C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvController.exe" -run
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" "C:\Users\User\Downloads\anheier daly_nadace jako politicke instituce_3-5 (1).pdf"
"C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" --channel=7152.0.1437752378 --type=renderer "C:\Users\User\Downloads\anheier daly_nadace jako politicke instituce_3-5 (1).pdf"
"C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16.0.3327.1030_x64__8wekyb3d8bbwe\onenoteim.exe" -ServerName:microsoft.onenoteim.AppXxqb9ypsz6cs1w07e1pmjy4ww4dy9tpqr.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\UserAccountBroker.exe -Embedding
"C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe" -c
"C:\windows\FileManager\PhotosApp.exe" -ServerName:Microsoft.Windows.PhotoManager
"C:\Program Files\Microsoft Office 15\root\office15\WINWORD.EXE"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-bcf6a66f-e22a-4360-ab0c-e62896873f52 -SystemEventPortName:HostProcess-ae68a03e-960a-4f79-b40e-c37e962828c4 -IoCancelEventPortName:HostProcess-9c01d881-38bd-4461-b62d-533cbfc621c3 -NonStateChangingEventPortName:HostProcess-32b1f1a9-65c5-461e-b076-7e4abb02f9e1 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:846f4993-dd78-43f3-b45b-a4d2ef151b6e -DeviceGroupId:WpdFsGroup
"C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe" /CFG="C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp" /GUIMODE=1
"D:\Spyware Terminator\SpywareTerminatorShield.exe"
"C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe" --ran-launcher /crash-reporter-parent-id=11172
"C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe" --type=gpu-process --channel="11172.0.1122561995\1807046310" --enable-proprietary-media-types-playback --crash-reporter-pid=10396 --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,6,17,39 --gpu-vendor-id=0x8086 --gpu-device-id=0x0a16 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3496 --enable-proprietary-media-types-playback --crash-reporter-pid=10396 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe" --type=renderer --alt-high-dpi-setting=240 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --ppapi-flash-path="C:\windows\SysWOW64\Macromed\Flash\pepflashplayer32_16_0_0_235.dll" --ppapi-flash-version=16.0.0.235 --with-feature:enhanced-autofill --crash-reporter-pid=10396 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="11172.2.710881769\173358030" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe" --type=renderer --alt-high-dpi-setting=240 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --ppapi-flash-path="C:\windows\SysWOW64\Macromed\Flash\pepflashplayer32_16_0_0_235.dll" --ppapi-flash-version=16.0.0.235 --with-feature:enhanced-autofill --crash-reporter-pid=10396 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="11172.3.1591557893\299166179" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe" --type=renderer --alt-high-dpi-setting=240 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --ppapi-flash-path="C:\windows\SysWOW64\Macromed\Flash\pepflashplayer32_16_0_0_235.dll" --ppapi-flash-version=16.0.0.235 --with-feature:enhanced-autofill --crash-reporter-pid=10396 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="11172.4.1690024340\743840993" /prefetch:673131151
"C:\windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"D:\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player PPAPI Notifier.job - C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_16_0_0_235_pepper.exe -check pepperplugin
C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\u2gwrdw5.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2014-12-30 218784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2014-12-30 2334928]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-12-16 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-12-16 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-10-04 13656792]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-09-26 1353432]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-07 36352]
"DptfPolicyLpmServiceHelper"=C:\windows\system32\DptfPolicyLpmServiceHelper.exe [2013-08-02 111976]
"BTMTrayAgent"=C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [2014-03-26 7825720]
"Yoga PhoneCompanion"=C:\Program Files\Lenovo Yoga PhoneCompanion\Yoga Phone Companion.exe [2014-08-13 844304]
"AutoStartTransition"=C:\Program Files (x86)\Lenovo\Lenovo Transition\Transition.exe [2014-08-13 294672]
"Energy Manager"=C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [2014-08-13 59923440]
"Lenovo Utility"=C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [2014-08-13 80880]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Pokki"=C:\Users\User\AppData\Local\Pokki\Engine\Launcher.dll [2014-04-29 1893144]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2014-03-18 457728]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Yoga Picks"=C:\Program Files (x86)\Lenovo\Yoga Picks\Yoga Picks.exe [2014-01-06 119280]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-10-07 507776]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2014-11-24 702768]
"Avira Systray"=C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [2014-11-20 126200]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
ISCTSystray.lnk - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDWFP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VisualDiscovery]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-01-12 13:28:30 ----D---- C:\rsit
2015-01-12 13:28:30 ----D---- C:\Program Files\trend micro
2015-01-12 12:29:55 ----D---- C:\ProgramData\Spyware Terminator
2015-01-09 18:00:35 ----A---- C:\windows\system32\drivers\avnetflt.sys
2015-01-09 17:58:33 ----D---- C:\Users\User\AppData\Roaming\Avira
2015-01-09 17:57:43 ----A---- C:\windows\system32\drivers\avkmgr.sys
2015-01-09 17:57:43 ----A---- C:\windows\system32\drivers\avipbb.sys
2015-01-09 17:57:42 ----A---- C:\windows\system32\drivers\avgntflt.sys
2015-01-09 17:57:41 ----D---- C:\ProgramData\Avira
2015-01-09 17:57:41 ----D---- C:\Program Files (x86)\Avira
2015-01-04 16:17:08 ----HD---- C:\GrandeDevice
2015-01-04 16:17:06 ----A---- C:\windows\system32\xrhr1ausb.dll
2015-01-04 16:17:06 ----A---- C:\windows\system32\xrhr1alm.dll
2015-01-04 11:41:56 ----A---- C:\IFRToolLog.txt
2015-01-04 09:14:17 ----SHD---- C:\Config.Msi
2015-01-02 22:40:07 ----A---- C:\windows\SYSWOW64\taskSchedularLog.txt
2015-01-02 18:06:27 ----D---- C:\Users\User\AppData\Roaming\WinRAR
2015-01-02 17:29:53 ----D---- C:\Users\User\AppData\Roaming\Opera Software
2015-01-02 17:29:24 ----D---- C:\Program Files (x86)\Opera
2014-12-16 08:33:35 ----D---- C:\ProgramData\Microsoft OneDrive
2014-12-16 08:28:39 ----D---- C:\Program Files\Microsoft Office 15
2014-12-16 06:18:37 ----D---- C:\Users\User\AppData\Roaming\Mozilla
2014-12-16 06:18:31 ----D---- C:\ProgramData\Mozilla
2014-12-16 06:18:31 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-16 06:18:29 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-12-16 06:14:57 ----D---- C:\Program Files (x86)\Google
2014-12-16 06:07:56 ----D---- C:\Program Files\WinRAR
2014-12-16 06:06:16 ----D---- C:\Users\User\AppData\Roaming\Hightail for Lenovo
2014-12-16 06:06:11 ----D---- C:\Program Files (x86)\Adobe
2014-12-16 06:06:03 ----D---- C:\ProgramData\Adobe
2014-12-16 06:03:34 ----D---- C:\ProgramData\Sun
2014-12-16 06:03:33 ----A---- C:\windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-12-16 06:03:26 ----D---- C:\ProgramData\Oracle
2014-12-16 06:03:25 ----D---- C:\Program Files (x86)\Java
2014-12-16 05:52:34 ----D---- C:\Users\User\AppData\Roaming\Intel Corporation
2014-12-16 05:52:05 ----D---- C:\Users\User\AppData\Roaming\Macromedia
2014-12-16 05:51:11 ----D---- C:\Users\User\AppData\Roaming\Adobe
2014-12-16 05:51:09 ----A---- C:\windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-12-16 05:51:08 ----D---- C:\Users\User\AppData\Roaming\Intel
2014-12-16 05:51:04 ----SD---- C:\Users\User\AppData\Roaming\Microsoft
2014-12-15 16:00:44 ----A---- C:\windows\system32\Windows.UI.Xaml.dll
2014-12-15 16:00:43 ----A---- C:\windows\SYSWOW64\Windows.UI.Xaml.dll
2014-12-15 16:00:41 ----A---- C:\windows\system32\d3d10warp.dll
2014-12-15 16:00:40 ----A---- C:\windows\system32\mfcore.dll
2014-12-15 16:00:39 ----A---- C:\windows\SYSWOW64\mfcore.dll
2014-12-15 16:00:39 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2014-12-15 16:00:39 ----A---- C:\windows\system32\workfolderssvc.dll
2014-12-15 16:00:39 ----A---- C:\windows\system32\wlansvc.dll
2014-12-15 16:00:39 ----A---- C:\windows\system32\Windows.Media.dll
2014-12-15 16:00:39 ----A---- C:\windows\system32\gpsvc.dll
2014-12-15 16:00:38 ----A---- C:\windows\SYSWOW64\WMVDECOD.DLL
2014-12-15 16:00:38 ----A---- C:\windows\SYSWOW64\Windows.Media.dll
2014-12-15 16:00:38 ----A---- C:\windows\system32\wuaueng.dll
2014-12-15 16:00:38 ----A---- C:\windows\system32\WMVDECOD.DLL
2014-12-15 16:00:38 ----A---- C:\windows\system32\SRH.dll
2014-12-15 16:00:38 ----A---- C:\windows\system32\printui.dll
2014-12-15 16:00:38 ----A---- C:\windows\system32\drivers\srv2.sys
2014-12-15 16:00:38 ----A---- C:\windows\system32\drivers\srv.sys
2014-12-15 16:00:38 ----A---- C:\windows\system32\drivers\ntfs.sys
2014-12-15 16:00:37 ----AC---- C:\windows\system32\drivers\usbccgp.sys
2014-12-15 16:00:37 ----A---- C:\windows\SYSWOW64\wlanmsm.dll
2014-12-15 16:00:37 ----A---- C:\windows\SYSWOW64\Windows.Devices.Bluetooth.dll
2014-12-15 16:00:37 ----A---- C:\windows\SYSWOW64\SRH.dll
2014-12-15 16:00:37 ----A---- C:\windows\SYSWOW64\printui.dll
2014-12-15 16:00:37 ----A---- C:\windows\SYSWOW64\netcfgx.dll
2014-12-15 16:00:37 ----A---- C:\windows\SYSWOW64\AppxPackaging.dll
2014-12-15 16:00:37 ----A---- C:\windows\system32\XpsPrint.dll
2014-12-15 16:00:37 ----A---- C:\windows\system32\WorkfoldersControl.dll
2014-12-15 16:00:37 ----A---- C:\windows\system32\wlanmsm.dll
2014-12-15 16:00:37 ----A---- C:\windows\system32\srvsvc.dll
2014-12-15 16:00:37 ----A---- C:\windows\system32\spoolsv.exe
2014-12-15 16:00:37 ----A---- C:\windows\system32\SHCore.dll
2014-12-15 16:00:37 ----A---- C:\windows\system32\netcfgx.dll
2014-12-15 16:00:37 ----A---- C:\windows\system32\AppxPackaging.dll
2014-12-15 16:00:36 ----AC---- C:\windows\system32\drivers\volsnap.sys
2014-12-15 16:00:36 ----AC---- C:\windows\system32\drivers\spaceport.sys
2014-12-15 16:00:36 ----A---- C:\windows\SYSWOW64\SHCore.dll
2014-12-15 16:00:36 ----A---- C:\windows\SYSWOW64\mftranscode.dll
2014-12-15 16:00:36 ----A---- C:\windows\SYSWOW64\mfplat.dll
2014-12-15 16:00:36 ----A---- C:\windows\SYSWOW64\comdlg32.dll
2014-12-15 16:00:36 ----A---- C:\windows\system32\wuapi.dll
2014-12-15 16:00:36 ----A---- C:\windows\system32\wsecedit.dll
2014-12-15 16:00:36 ----A---- C:\windows\system32\wisp.dll
2014-12-15 16:00:36 ----A---- C:\windows\system32\winresume.exe
2014-12-15 16:00:36 ----A---- C:\windows\system32\winload.exe
2014-12-15 16:00:36 ----A---- C:\windows\system32\usbmon.dll
2014-12-15 16:00:36 ----A---- C:\windows\system32\storagewmi.dll
2014-12-15 16:00:36 ----A---- C:\windows\system32\mftranscode.dll
2014-12-15 16:00:36 ----A---- C:\windows\system32\mfplat.dll
2014-12-15 16:00:36 ----A---- C:\windows\system32\drivers\srvnet.sys
2014-12-15 16:00:36 ----A---- C:\windows\system32\drivers\nwifi.sys
2014-12-15 16:00:36 ----A---- C:\windows\system32\defragsvc.dll
2014-12-15 16:00:36 ----A---- C:\windows\system32\comdlg32.dll
2014-12-15 16:00:36 ----A---- C:\windows\system32\aclui.dll
2014-12-15 16:00:35 ----AC---- C:\windows\system32\drivers\usbhub.sys
2014-12-15 16:00:35 ----AC---- C:\windows\system32\drivers\hdaudbus.sys
2014-12-15 16:00:35 ----A---- C:\windows\SYSWOW64\wuapi.dll
2014-12-15 16:00:35 ----A---- C:\windows\SYSWOW64\wlanapi.dll
2014-12-15 16:00:35 ----A---- C:\windows\SYSWOW64\wisp.dll
2014-12-15 16:00:35 ----A---- C:\windows\SYSWOW64\winmmbase.dll
2014-12-15 16:00:35 ----A---- C:\windows\SYSWOW64\storagewmi.dll
2014-12-15 16:00:35 ----A---- C:\windows\SYSWOW64\mfreadwrite.dll
2014-12-15 16:00:35 ----A---- C:\windows\SYSWOW64\Display.dll
2014-12-15 16:00:35 ----A---- C:\windows\SYSWOW64\bcryptprimitives.dll
2014-12-15 16:00:35 ----A---- C:\windows\SYSWOW64\aclui.dll
2014-12-15 16:00:35 ----A---- C:\windows\system32\WUSettingsProvider.dll
2014-12-15 16:00:35 ----A---- C:\windows\system32\wpdbusenum.dll
2014-12-15 16:00:35 ----A---- C:\windows\system32\WorkFoldersGPExt.dll
2014-12-15 16:00:35 ----A---- C:\windows\system32\winmmbase.dll
2014-12-15 16:00:35 ----A---- C:\windows\system32\winmm.dll
2014-12-15 16:00:35 ----A---- C:\windows\system32\Windows.Networking.dll
2014-12-15 16:00:35 ----A---- C:\windows\system32\WiFiDisplay.dll
2014-12-15 16:00:35 ----A---- C:\windows\system32\VAN.dll
2014-12-15 16:00:35 ----A---- C:\windows\system32\SndVol.exe
2014-12-15 16:00:35 ----A---- C:\windows\system32\SettingSync.dll
2014-12-15 16:00:35 ----A---- C:\windows\system32\osk.exe
2014-12-15 16:00:35 ----A---- C:\windows\system32\mfreadwrite.dll
2014-12-15 16:00:35 ----A---- C:\windows\system32\mfps.dll
2014-12-15 16:00:35 ----A---- C:\windows\system32\dwmapi.dll
2014-12-15 16:00:35 ----A---- C:\windows\system32\drivers\NdisImPlatform.sys
2014-12-15 16:00:35 ----A---- C:\windows\system32\drivers\ndis.sys
2014-12-15 16:00:35 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2014-12-15 16:00:35 ----A---- C:\windows\system32\drivers\ks.sys
2014-12-15 16:00:35 ----A---- C:\windows\system32\Display.dll
2014-12-15 16:00:35 ----A---- C:\windows\system32\conhost.exe
2014-12-15 16:00:35 ----A---- C:\windows\system32\clusapi.dll
2014-12-15 16:00:35 ----A---- C:\windows\system32\bcryptprimitives.dll
2014-12-15 16:00:35 ----A---- C:\windows\system32\AppxSip.dll
2014-12-15 16:00:34 ----AC---- C:\windows\system32\drivers\pci.sys
2014-12-15 16:00:34 ----A---- C:\windows\SYSWOW64\XpsPrint.dll
2014-12-15 16:00:34 ----A---- C:\windows\SYSWOW64\wsecedit.dll
2014-12-15 16:00:34 ----A---- C:\windows\SYSWOW64\winmm.dll
2014-12-15 16:00:34 ----A---- C:\windows\SYSWOW64\WebClnt.dll
2014-12-15 16:00:34 ----A---- C:\windows\SYSWOW64\VAN.dll
2014-12-15 16:00:34 ----A---- C:\windows\SYSWOW64\SndVol.exe
2014-12-15 16:00:34 ----A---- C:\windows\SYSWOW64\dwmapi.dll
2014-12-15 16:00:34 ----A---- C:\windows\SYSWOW64\AppxSip.dll
2014-12-15 16:00:34 ----A---- C:\windows\system32\wups.dll
2014-12-15 16:00:34 ----A---- C:\windows\system32\wucltux.dll
2014-12-15 16:00:34 ----A---- C:\windows\system32\WorkFoldersShell.dll
2014-12-15 16:00:34 ----A---- C:\windows\system32\WebClnt.dll
2014-12-15 16:00:34 ----A---- C:\windows\system32\twinapi.dll
2014-12-15 16:00:34 ----A---- C:\windows\system32\profsvc.dll
2014-12-15 16:00:34 ----A---- C:\windows\system32\mispace.dll
2014-12-15 16:00:34 ----A---- C:\windows\system32\iasnap.dll
2014-12-15 16:00:34 ----A---- C:\windows\system32\gpedit.dll
2014-12-15 16:00:34 ----A---- C:\windows\system32\GdiPlus.dll
2014-12-15 16:00:33 ----A---- C:\windows\SYSWOW64\wshbth.dll
2014-12-15 16:00:33 ----A---- C:\windows\SYSWOW64\Windows.Networking.dll
2014-12-15 16:00:33 ----A---- C:\windows\SYSWOW64\stobject.dll
2014-12-15 16:00:33 ----A---- C:\windows\SYSWOW64\SettingSync.dll
2014-12-15 16:00:33 ----A---- C:\windows\SYSWOW64\rsaenh.dll
2014-12-15 16:00:33 ----A---- C:\windows\SYSWOW64\osk.exe
2014-12-15 16:00:33 ----A---- C:\windows\SYSWOW64\mispace.dll
2014-12-15 16:00:33 ----A---- C:\windows\SYSWOW64\iasnap.dll
2014-12-15 16:00:33 ----A---- C:\windows\SYSWOW64\gpedit.dll
2014-12-15 16:00:33 ----A---- C:\windows\SYSWOW64\clusapi.dll
2014-12-15 16:00:33 ----A---- C:\windows\SYSWOW64\ActionCenter.dll
2014-12-15 16:00:33 ----A---- C:\windows\system32\wwanconn.dll
2014-12-15 16:00:33 ----A---- C:\windows\system32\wups2.dll
2014-12-15 16:00:33 ----A---- C:\windows\system32\wuauclt.exe
2014-12-15 16:00:33 ----A---- C:\windows\system32\wshbth.dll
2014-12-15 16:00:33 ----A---- C:\windows\system32\wlansvcpal.dll
2014-12-15 16:00:33 ----A---- C:\windows\system32\wlanapi.dll
2014-12-15 16:00:33 ----A---- C:\windows\system32\Windows.Devices.Bluetooth.dll
2014-12-15 16:00:33 ----A---- C:\windows\system32\wcmcsp.dll
2014-12-15 16:00:33 ----A---- C:\windows\system32\SystemSettingsAdminFlows.exe
2014-12-15 16:00:33 ----A---- C:\windows\system32\stobject.dll
2014-12-15 16:00:33 ----A---- C:\windows\system32\rsaenh.dll
2014-12-15 16:00:33 ----A---- C:\windows\system32\PrintDialogs.dll
2014-12-15 16:00:33 ----A---- C:\windows\system32\drivers\IPMIDrv.sys
2014-12-15 16:00:33 ----A---- C:\windows\system32\dab.dll
2014-12-15 16:00:33 ----A---- C:\windows\system32\browser.dll
2014-12-15 16:00:33 ----A---- C:\windows\system32\AppxSysprep.dll
2014-12-15 16:00:33 ----A---- C:\windows\system32\ActionCenter.dll
2014-12-15 16:00:32 ----AC---- C:\windows\system32\drivers\bthpan.sys
2014-12-15 16:00:32 ----A---- C:\windows\SYSWOW64\wups.dll
2014-12-15 16:00:32 ----A---- C:\windows\SYSWOW64\PrintDialogs.dll
2014-12-15 16:00:32 ----A---- C:\windows\SYSWOW64\KBDYAK.DLL
2014-12-15 16:00:32 ----A---- C:\windows\SYSWOW64\KBDTAT.DLL
2014-12-15 16:00:32 ----A---- C:\windows\SYSWOW64\KBDRUM.DLL
2014-12-15 16:00:32 ----A---- C:\windows\SYSWOW64\KBDRU1.DLL
2014-12-15 16:00:32 ----A---- C:\windows\SYSWOW64\KBDRU.DLL
2014-12-15 16:00:32 ----A---- C:\windows\SYSWOW64\KBDBASH.DLL
2014-12-15 16:00:32 ----A---- C:\windows\SYSWOW64\GdiPlus.dll
2014-12-15 16:00:32 ----A---- C:\windows\SYSWOW64\BluetoothApis.dll
2014-12-15 16:00:32 ----A---- C:\windows\system32\wwanmm.dll
2014-12-15 16:00:32 ----A---- C:\windows\system32\wlansec.dll
2014-12-15 16:00:32 ----A---- C:\windows\system32\SndVolSSO.dll
2014-12-15 16:00:32 ----A---- C:\windows\system32\KBDYAK.DLL
2014-12-15 16:00:32 ----A---- C:\windows\system32\KBDTAT.DLL
2014-12-15 16:00:32 ----A---- C:\windows\system32\KBDRUM.DLL
2014-12-15 16:00:32 ----A---- C:\windows\system32\KBDRU1.DLL
2014-12-15 16:00:32 ----A---- C:\windows\system32\KBDRU.DLL
2014-12-15 16:00:32 ----A---- C:\windows\system32\KBDBASH.DLL
2014-12-15 16:00:32 ----A---- C:\windows\system32\Defrag.exe
2014-12-15 16:00:32 ----A---- C:\windows\system32\BluetoothApis.dll
2014-12-15 16:00:31 ----A---- C:\windows\SYSWOW64\wudriver.dll
2014-12-15 16:00:31 ----A---- C:\windows\SYSWOW64\KBDTT102.DLL
2014-12-15 16:00:31 ----A---- C:\windows\system32\wudriver.dll
2014-12-15 16:00:31 ----A---- C:\windows\system32\SystemSettingsAdminFlowUI.dll
2014-12-15 16:00:31 ----A---- C:\windows\system32\KBDTT102.DLL
2014-12-15 16:00:15 ----A---- C:\windows\SYSWOW64\poqexec.exe
2014-12-15 16:00:15 ----A---- C:\windows\system32\poqexec.exe
2014-12-15 15:50:33 ----SD---- C:\windows\system32\CompatTel
2014-12-15 15:50:33 ----RD---- C:\windows\BrowserChoice
2014-12-15 15:50:33 ----D---- C:\windows\system32\appraiser
2014-12-15 15:42:17 ----N---- C:\windows\system32\MpSigStub.exe
2014-12-15 15:37:59 ----D---- C:\windows\system32\MRT
2014-12-15 15:37:58 ----A---- C:\windows\system32\MRT.exe
2014-12-15 15:32:40 ----A---- C:\windows\system32\termsrv.dll
2014-12-15 15:30:08 ----A---- C:\windows\system32\WSDMon.dll
2014-12-15 15:30:08 ----A---- C:\windows\system32\tcpmon.dll
2014-12-15 15:30:08 ----A---- C:\windows\system32\drivers\msgpioclx.sys
2014-12-15 15:29:33 ----A---- C:\windows\SYSWOW64\schannel.dll
2014-12-15 15:29:33 ----A---- C:\windows\SYSWOW64\ncryptsslp.dll
2014-12-15 15:29:33 ----A---- C:\windows\system32\schannel.dll
2014-12-15 15:29:33 ----A---- C:\windows\system32\ncryptsslp.dll
2014-12-15 15:29:33 ----A---- C:\windows\system32\dpapisrv.dll
2014-12-15 15:29:32 ----A---- C:\windows\system32\drivers\afd.sys
2014-12-15 15:29:26 ----A---- C:\windows\SYSWOW64\DeviceSetupStatusProvider.dll
2014-12-15 15:29:26 ----A---- C:\windows\system32\DeviceSetupStatusProvider.dll
2014-12-15 15:29:24 ----A---- C:\windows\SYSWOW64\authui.dll
2014-12-15 15:29:24 ----A---- C:\windows\system32\authui.dll
2014-12-15 15:29:23 ----A---- C:\windows\SYSWOW64\msi.dll
2014-12-15 15:29:23 ----A---- C:\windows\system32\msi.dll
2014-12-15 15:29:22 ----A---- C:\windows\system32\msihnd.dll
2014-12-15 15:29:21 ----A---- C:\windows\SYSWOW64\msihnd.dll
2014-12-15 15:29:21 ----A---- C:\windows\system32\consent.exe
2014-12-15 15:29:21 ----A---- C:\windows\system32\appinfo.dll
2014-12-15 15:29:13 ----A---- C:\windows\SYSWOW64\user32.dll
2014-12-15 15:29:13 ----A---- C:\windows\system32\user32.dll
2014-12-15 15:29:13 ----A---- C:\windows\system32\drivers\WdNisDrv.sys
2014-12-15 15:29:13 ----A---- C:\windows\system32\drivers\WdFilter.sys
2014-12-15 15:29:13 ----A---- C:\windows\system32\drivers\WdBoot.sys
2014-12-15 15:29:12 ----A---- C:\windows\SYSWOW64\winshfhc.dll
2014-12-15 15:29:12 ----A---- C:\windows\system32\winshfhc.dll
2014-12-15 15:29:12 ----A---- C:\windows\system32\crypt32.dll
2014-12-15 15:29:11 ----A---- C:\windows\SYSWOW64\crypt32.dll
2014-12-15 15:27:10 ----A---- C:\windows\system32\actxprxy.dll
2014-12-15 15:27:09 ----A---- C:\windows\SYSWOW64\urlmon.dll
2014-12-15 15:27:09 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2014-12-15 15:27:09 ----A---- C:\windows\SYSWOW64\mshtml.dll
2014-12-15 15:27:09 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2014-12-15 15:27:09 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2014-12-15 15:27:09 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2014-12-15 15:27:09 ----A---- C:\windows\SYSWOW64\actxprxy.dll
2014-12-15 15:27:09 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2014-12-15 15:27:09 ----A---- C:\windows\system32\ie4uinit.exe
2014-12-15 15:27:08 ----A---- C:\windows\SYSWOW64\jscript9diag.dll
2014-12-15 15:27:08 ----A---- C:\windows\SYSWOW64\iertutil.dll
2014-12-15 15:27:08 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2014-12-15 15:27:08 ----A---- C:\windows\system32\urlmon.dll
2014-12-15 15:27:08 ----A---- C:\windows\system32\msfeeds.dll
2014-12-15 15:27:08 ----A---- C:\windows\system32\iedkcs32.dll
2014-12-15 15:27:08 ----A---- C:\windows\system32\dxtrans.dll
2014-12-15 15:27:07 ----A---- C:\windows\SYSWOW64\jscript9.dll
2014-12-15 15:27:07 ----A---- C:\windows\SYSWOW64\ieframe.dll
2014-12-15 15:27:07 ----A---- C:\windows\system32\iertutil.dll
2014-12-15 15:27:06 ----A---- C:\windows\SYSWOW64\wininet.dll
2014-12-15 15:27:06 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2014-12-15 15:27:06 ----A---- C:\windows\system32\jsproxy.dll
2014-12-15 15:27:06 ----A---- C:\windows\system32\ieframe.dll
2014-12-15 15:27:06 ----A---- C:\windows\system32\dxtmsft.dll
2014-12-15 15:27:05 ----A---- C:\windows\system32\wininet.dll
2014-12-15 15:27:05 ----A---- C:\windows\system32\mshtmled.dll
2014-12-15 15:27:05 ----A---- C:\windows\system32\jscript9diag.dll
2014-12-15 15:27:05 ----A---- C:\windows\system32\jscript9.dll
2014-12-15 15:27:05 ----A---- C:\windows\system32\ieapfltr.dll
2014-12-15 15:27:04 ----A---- C:\windows\system32\mshtml.dll
2014-12-15 15:27:03 ----A---- C:\windows\SYSWOW64\vbscript.dll
2014-12-15 15:27:03 ----A---- C:\windows\SYSWOW64\jscript.dll
2014-12-15 15:27:03 ----A---- C:\windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-12-15 15:27:03 ----A---- C:\windows\SYSWOW64\inetcomm.dll
2014-12-15 15:27:03 ----A---- C:\windows\system32\vbscript.dll
2014-12-15 15:27:03 ----A---- C:\windows\system32\jscript.dll
2014-12-15 15:27:03 ----A---- C:\windows\system32\inetcomm.dll
2014-12-15 15:27:03 ----A---- C:\windows\system32\ieui.dll
2014-12-15 15:27:03 ----A---- C:\windows\system32\ieetwcollector.exe
2014-12-15 15:27:02 ----A---- C:\windows\SYSWOW64\webcheck.dll
2014-12-15 15:27:02 ----A---- C:\windows\SYSWOW64\msrating.dll
2014-12-15 15:27:02 ----A---- C:\windows\SYSWOW64\msfeedsbs.dll
2014-12-15 15:27:02 ----A---- C:\windows\SYSWOW64\inseng.dll
2014-12-15 15:27:02 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2014-12-15 15:27:02 ----A---- C:\windows\SYSWOW64\ieui.dll
2014-12-15 15:27:02 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2014-12-15 15:27:02 ----A---- C:\windows\SYSWOW64\iepeers.dll
2014-12-15 15:27:02 ----A---- C:\windows\SYSWOW64\hlink.dll
2014-12-15 15:27:02 ----A---- C:\windows\system32\webcheck.dll
2014-12-15 15:27:02 ----A---- C:\windows\system32\msfeedsbs.dll
2014-12-15 15:27:02 ----A---- C:\windows\system32\inseng.dll
2014-12-15 15:27:02 ----A---- C:\windows\system32\ieUnatt.exe
2014-12-15 15:27:02 ----A---- C:\windows\system32\iesysprep.dll
2014-12-15 15:27:02 ----A---- C:\windows\system32\iepeers.dll
2014-12-15 15:27:02 ----A---- C:\windows\system32\hlink.dll
2014-12-15 15:27:01 ----A---- C:\windows\SYSWOW64\wextract.exe
2014-12-15 15:27:01 ----A---- C:\windows\SYSWOW64\url.dll
2014-12-15 15:27:01 ----A---- C:\windows\SYSWOW64\pngfilt.dll
2014-12-15 15:27:01 ----A---- C:\windows\SYSWOW64\occache.dll
2014-12-15 15:27:01 ----A---- C:\windows\SYSWOW64\MshtmlDac.dll
2014-12-15 15:27:01 ----A---- C:\windows\SYSWOW64\mshta.exe
2014-12-15 15:27:01 ----A---- C:\windows\SYSWOW64\msfeedssync.exe
2014-12-15 15:27:01 ----A---- C:\windows\SYSWOW64\licmgr10.dll
2014-12-15 15:27:01 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2014-12-15 15:27:01 ----A---- C:\windows\SYSWOW64\imgutil.dll
2014-12-15 15:27:01 ----A---- C:\windows\SYSWOW64\iexpress.exe
2014-12-15 15:27:01 ----A---- C:\windows\SYSWOW64\iesetup.dll
2014-12-15 15:27:01 ----A---- C:\windows\SYSWOW64\iernonce.dll
2014-12-15 15:27:01 ----A---- C:\windows\SYSWOW64\ieetwproxystub.dll
2014-12-15 15:27:01 ----A---- C:\windows\SYSWOW64\IEAdvpack.dll
2014-12-15 15:27:01 ----A---- C:\windows\system32\wextract.exe
2014-12-15 15:27:01 ----A---- C:\windows\system32\url.dll
2014-12-15 15:27:01 ----A---- C:\windows\system32\pngfilt.dll
2014-12-15 15:27:01 ----A---- C:\windows\system32\occache.dll
2014-12-15 15:27:01 ----A---- C:\windows\system32\msrating.dll
2014-12-15 15:27:01 ----A---- C:\windows\system32\MshtmlDac.dll
2014-12-15 15:27:01 ----A---- C:\windows\system32\mshta.exe
2014-12-15 15:27:01 ----A---- C:\windows\system32\msfeedssync.exe
2014-12-15 15:27:01 ----A---- C:\windows\system32\licmgr10.dll
2014-12-15 15:27:01 ----A---- C:\windows\system32\imgutil.dll
2014-12-15 15:27:01 ----A---- C:\windows\system32\iexpress.exe
2014-12-15 15:27:01 ----A---- C:\windows\system32\iesetup.dll
2014-12-15 15:27:01 ----A---- C:\windows\system32\iernonce.dll
2014-12-15 15:27:01 ----A---- C:\windows\system32\ieetwproxystub.dll
2014-12-15 15:27:01 ----A---- C:\windows\system32\ieetwcollectorres.dll
2014-12-15 15:27:01 ----A---- C:\windows\system32\IEAdvpack.dll
2014-12-15 15:26:56 ----A---- C:\windows\SYSWOW64\UXInit.dll
2014-12-15 15:26:56 ----A---- C:\windows\SYSWOW64\explorer.exe
2014-12-15 15:26:56 ----A---- C:\windows\system32\UXInit.dll
2014-12-15 15:26:56 ----A---- C:\windows\system32\uDWM.dll
2014-12-15 15:26:56 ----A---- C:\windows\explorer.exe
2014-12-15 15:26:55 ----A---- C:\windows\SYSWOW64\WSShared.dll
2014-12-15 15:26:55 ----A---- C:\windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-15 15:26:55 ----A---- C:\windows\system32\WSShared.dll
2014-12-15 15:26:54 ----A---- C:\windows\SYSWOW64\SkyDriveShell.dll
2014-12-15 15:26:54 ----A---- C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-15 15:26:54 ----A---- C:\windows\system32\SkyDriveShell.dll
2014-12-15 15:26:53 ----AC---- C:\windows\system32\drivers\USBHUB3.SYS
2014-12-15 15:26:52 ----A---- C:\windows\SYSWOW64\mstscax.dll
2014-12-15 15:26:52 ----A---- C:\windows\system32\Windows.UI.Search.dll
2014-12-15 15:26:52 ----A---- C:\windows\system32\SyncEngine.dll
2014-12-15 15:26:52 ----A---- C:\windows\system32\SkyDriveTelemetry.dll
2014-12-15 15:26:52 ----A---- C:\windows\system32\mstscax.dll
2014-12-15 15:26:51 ----A---- C:\windows\SYSWOW64\Windows.UI.Search.dll
2014-12-15 15:26:51 ----A---- C:\windows\system32\SkyDrive.exe
2014-12-15 15:26:51 ----A---- C:\windows\system32\ntdll.dll
2014-12-15 15:26:51 ----A---- C:\windows\system32\KernelBase.dll
2014-12-15 15:26:50 ----AC---- C:\windows\system32\drivers\bthport.sys
2014-12-15 15:26:50 ----A---- C:\windows\SYSWOW64\Wldap32.dll
2014-12-15 15:26:50 ----A---- C:\windows\SYSWOW64\SearchFolder.dll
2014-12-15 15:26:50 ----A---- C:\windows\SYSWOW64\propsys.dll
2014-12-15 15:26:50 ----A---- C:\windows\SYSWOW64\ntdll.dll
2014-12-15 15:26:50 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2014-12-15 15:26:50 ----A---- C:\windows\system32\Wldap32.dll
2014-12-15 15:26:50 ----A---- C:\windows\system32\SystemEventsBrokerServer.dll
2014-12-15 15:26:50 ----A---- C:\windows\system32\SearchFolder.dll
2014-12-15 15:26:50 ----A---- C:\windows\system32\rdvidcrl.dll
2014-12-15 15:26:50 ----A---- C:\windows\system32\ProximityService.dll
2014-12-15 15:26:50 ----A---- C:\windows\system32\propsys.dll
2014-12-15 15:26:50 ----A---- C:\windows\system32\pcsvDevice.dll
2014-12-15 15:26:50 ----A---- C:\windows\system32\iphlpsvc.dll
2014-12-15 15:26:50 ----A---- C:\windows\system32\httpprxm.dll
2014-12-15 15:26:50 ----A---- C:\windows\system32\drivers\bridge.sys
2014-12-15 15:26:50 ----A---- C:\windows\system32\bisrv.dll
2014-12-15 15:26:49 ----A---- C:\windows\SYSWOW64\rdvidcrl.dll
2014-12-15 15:26:49 ----A---- C:\windows\system32\adhsvc.dll
2014-12-15 15:26:25 ----A---- C:\windows\system32\d3d9.dll
2014-12-15 15:26:24 ----A---- C:\windows\SYSWOW64\d3d9.dll
2014-12-15 15:26:24 ----A---- C:\windows\system32\vpnike.dll
2014-12-15 15:26:23 ----A---- C:\windows\SYSWOW64\dhcpcore.dll
2014-12-15 15:26:23 ----A---- C:\windows\system32\fveapi.dll
2014-12-15 15:26:23 ----A---- C:\windows\system32\framedynos.dll
2014-12-15 15:26:23 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2014-12-15 15:26:23 ----A---- C:\windows\system32\dhcpcore.dll
2014-12-15 15:26:22 ----A---- C:\windows\SYSWOW64\ncobjapi.dll
2014-12-15 15:26:22 ----A---- C:\windows\SYSWOW64\framedynos.dll
2014-12-15 15:26:22 ----A---- C:\windows\SYSWOW64\dhcpcore6.dll
2014-12-15 15:26:22 ----A---- C:\windows\system32\Robocopy.exe
2014-12-15 15:26:22 ----A---- C:\windows\system32\ncobjapi.dll
2014-12-15 15:26:22 ----A---- C:\windows\system32\framedyn.dll
2014-12-15 15:26:22 ----A---- C:\windows\system32\drivers\vwifimp.sys
2014-12-15 15:26:22 ----A---- C:\windows\system32\drivers\agilevpn.sys
2014-12-15 15:26:22 ----A---- C:\windows\system32\dhcpcsvc.dll
2014-12-15 15:26:22 ----A---- C:\windows\system32\dhcpcore6.dll
2014-12-15 15:26:22 ----A---- C:\windows\system32\BFE.DLL
2014-12-15 15:26:22 ----A---- C:\windows\system32\bdesvc.dll
2014-12-15 15:26:21 ----A---- C:\windows\SYSWOW64\Robocopy.exe
2014-12-15 15:26:21 ----A---- C:\windows\SYSWOW64\framedyn.dll
2014-12-15 15:26:21 ----A---- C:\windows\SYSWOW64\dhcpcsvc6.dll
2014-12-15 15:26:21 ----A---- C:\windows\SYSWOW64\dhcpcsvc.dll
2014-12-15 15:26:21 ----A---- C:\windows\SYSWOW64\d3d8thk.dll
2014-12-15 15:26:21 ----A---- C:\windows\system32\srms.dat
2014-12-15 15:26:21 ----A---- C:\windows\system32\reseteng.dll
2014-12-15 15:26:21 ----A---- C:\windows\system32\IKEEXT.DLL
2014-12-15 15:26:21 ----A---- C:\windows\system32\drivers\vwififlt.sys
2014-12-15 15:26:21 ----A---- C:\windows\system32\dhcpcsvc6.dll
2014-12-15 15:26:21 ----A---- C:\windows\system32\BulkOperationHost.exe
2014-12-15 15:26:02 ----D---- C:\Users\User\AppData\Roaming\Screensaver Factory
2014-12-15 15:25:52 ----A---- C:\windows\system32\invagent.dll
2014-12-15 15:25:52 ----A---- C:\windows\system32\generaltel.dll
2014-12-15 15:25:52 ----A---- C:\windows\system32\devinv.dll
2014-12-15 15:25:52 ----A---- C:\windows\system32\appraiser.dll
2014-12-15 15:25:52 ----A---- C:\windows\system32\aepic.dll
2014-12-15 15:25:52 ----A---- C:\windows\system32\aepdu.dll
2014-12-15 15:25:52 ----A---- C:\windows\system32\aeinv.dll
2014-12-15 15:25:51 ----A---- C:\windows\SYSWOW64\msxml3.dll
2014-12-15 15:25:51 ----A---- C:\windows\SYSWOW64\gdi32.dll
2014-12-15 15:25:51 ----A---- C:\windows\system32\msxml3.dll
2014-12-15 15:25:51 ----A---- C:\windows\system32\gdi32.dll
2014-12-15 15:25:49 ----A---- C:\windows\SYSWOW64\TsWpfWrp.exe
2014-12-15 15:25:49 ----A---- C:\windows\system32\TsWpfWrp.exe
2014-12-15 15:25:45 ----A---- C:\windows\SYSWOW64\drvinst.exe
2014-12-15 15:25:45 ----A---- C:\windows\system32\drvinst.exe
2014-12-15 15:25:45 ----A---- C:\windows\system32\drvcfg.exe
2014-12-15 15:25:42 ----A---- C:\windows\SYSWOW64\rpcrt4.dll
2014-12-15 15:25:42 ----A---- C:\windows\system32\rpcrt4.dll
2014-12-15 15:25:41 ----A---- C:\windows\SYSWOW64\packager.dll
2014-12-15 15:25:41 ----A---- C:\windows\system32\packager.dll
2014-12-15 15:25:39 ----A---- C:\windows\SYSWOW64\msaudite.dll
2014-12-15 15:25:39 ----A---- C:\windows\SYSWOW64\certcli.dll
2014-12-15 15:25:39 ----A---- C:\windows\SYSWOW64\adtschema.dll
2014-12-15 15:25:39 ----A---- C:\windows\system32\rfxvmt.dll
2014-12-15 15:25:39 ----A---- C:\windows\system32\rdpudd.dll
2014-12-15 15:25:39 ----A---- C:\windows\system32\rdpcorets.dll
2014-12-15 15:25:39 ----A---- C:\windows\system32\msaudite.dll
2014-12-15 15:25:39 ----A---- C:\windows\system32\lsasrv.dll
2014-12-15 15:25:39 ----A---- C:\windows\system32\drivers\rdpvideominiport.sys
2014-12-15 15:25:39 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2014-12-15 15:25:39 ----A---- C:\windows\system32\drivers\cng.sys
2014-12-15 15:25:39 ----A---- C:\windows\system32\certcli.dll
2014-12-15 15:25:39 ----A---- C:\windows\system32\adtschema.dll
2014-12-15 15:25:38 ----A---- C:\windows\SYSWOW64\oleaut32.dll
2014-12-15 15:25:38 ----A---- C:\windows\SYSWOW64\dxgi.dll
2014-12-15 15:25:38 ----A---- C:\windows\SYSWOW64\DWrite.dll
2014-12-15 15:25:38 ----A---- C:\windows\system32\oleaut32.dll
2014-12-15 15:25:38 ----A---- C:\windows\system32\FntCache.dll
2014-12-15 15:25:38 ----A---- C:\windows\system32\dxgi.dll
2014-12-15 15:25:38 ----A---- C:\windows\system32\DWrite.dll
2014-12-15 15:25:38 ----A---- C:\windows\system32\dwmcore.dll
2014-12-15 15:25:38 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2014-12-15 15:25:33 ----A---- C:\windows\system32\schedsvc.dll
2014-12-15 15:25:32 ----A---- C:\windows\SYSWOW64\rastls.dll
2014-12-15 15:25:32 ----A---- C:\windows\system32\rastls.dll
2014-12-15 15:25:30 ----AC---- C:\windows\system32\drivers\sdbus.sys
2014-12-15 15:25:30 ----AC---- C:\windows\system32\drivers\intelpep.sys
2014-12-15 15:25:30 ----AC---- C:\windows\system32\drivers\dumpsd.sys
2014-12-15 15:25:30 ----A---- C:\windows\SYSWOW64\Wpc.dll
2014-12-15 15:25:30 ----A---- C:\windows\system32\WpcWebSync.dll
2014-12-15 15:25:30 ----A---- C:\windows\system32\WpcMon.exe
2014-12-15 15:25:30 ----A---- C:\windows\system32\Wpc.dll
2014-12-15 15:25:30 ----A---- C:\windows\system32\drivers\wpcfltr.sys
2014-12-15 15:25:30 ----A---- C:\windows\system32\drivers\pdc.sys
2014-12-15 15:25:26 ----A---- C:\windows\SYSWOW64\AudioSes.dll
2014-12-15 15:25:26 ----A---- C:\windows\SYSWOW64\AUDIOKSE.dll
2014-12-15 15:25:26 ----A---- C:\windows\system32\audiosrv.dll
2014-12-15 15:25:26 ----A---- C:\windows\system32\AudioSes.dll
2014-12-15 15:25:26 ----A---- C:\windows\system32\AUDIOKSE.dll
2014-12-15 15:25:26 ----A---- C:\windows\system32\AudioEng.dll
2014-12-15 15:25:26 ----A---- C:\windows\system32\AudioEndpointBuilder.dll
2014-12-15 15:25:26 ----A---- C:\windows\system32\audiodg.exe
2014-12-15 15:25:25 ----A---- C:\windows\SYSWOW64\AudioEng.dll
2014-12-15 15:25:25 ----A---- C:\windows\system32\win32k.sys
2014-12-15 15:25:25 ----A---- C:\windows\system32\EncDump.dll
2014-12-15 15:25:21 ----A---- C:\windows\SYSWOW64\twinui.dll
2014-12-15 15:25:21 ----A---- C:\windows\SYSWOW64\shell32.dll
2014-12-15 15:25:20 ----A---- C:\windows\system32\twinui.dll
2014-12-15 15:25:20 ----A---- C:\windows\system32\localspl.dll
2014-12-15 15:25:19 ----A---- C:\windows\system32\shell32.dll
2014-12-15 15:25:19 ----A---- C:\windows\system32\ntoskrnl.exe
2014-12-15 15:25:18 ----A---- C:\windows\system32\drivers\tcpip.sys
2014-12-15 15:25:17 ----A---- C:\windows\SYSWOW64\mfmp4srcsnk.dll
2014-12-15 15:25:17 ----A---- C:\windows\SYSWOW64\MFMediaEngine.dll
2014-12-15 15:25:17 ----A---- C:\windows\system32\SettingsHandlers.dll
2014-12-15 15:25:17 ----A---- C:\windows\system32\mfmp4srcsnk.dll
2014-12-15 15:25:17 ----A---- C:\windows\system32\MFMediaEngine.dll
2014-12-15 15:25:16 ----A---- C:\windows\SYSWOW64\puiobj.dll
2014-12-15 15:25:16 ----A---- C:\windows\SYSWOW64\DafPrintProvider.dll
2014-12-15 15:25:16 ----A---- C:\windows\system32\WsmSvc.dll
2014-12-15 15:25:16 ----A---- C:\windows\system32\win32spl.dll
2014-12-15 15:25:16 ----A---- C:\windows\system32\puiobj.dll
2014-12-15 15:25:16 ----A---- C:\windows\system32\drivers\netio.sys
2014-12-15 15:25:16 ----A---- C:\windows\system32\DafPrintProvider.dll
2014-12-15 15:25:15 ----AC---- C:\windows\system32\drivers\USBSTOR.SYS
2014-12-15 15:25:15 ----A---- C:\windows\SYSWOW64\WsmSvc.dll
2014-12-15 15:25:15 ----A---- C:\windows\SYSWOW64\untfs.dll
2014-12-15 15:25:15 ----A---- C:\windows\SYSWOW64\puiapi.dll
2014-12-15 15:25:15 ----A---- C:\windows\SYSWOW64\prnntfy.dll
2014-12-15 15:25:15 ----A---- C:\windows\system32\winbici.dll
2014-12-15 15:25:15 ----A---- C:\windows\system32\untfs.dll
2014-12-15 15:25:15 ----A---- C:\windows\system32\puiapi.dll
2014-12-15 15:25:15 ----A---- C:\windows\system32\prnntfy.dll
2014-12-15 15:25:15 ----A---- C:\windows\system32\FXSCOMEX.dll
2014-12-15 15:25:15 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2014-12-15 15:25:15 ----A---- C:\windows\system32\compstui.dll
2014-12-15 15:25:14 ----A---- C:\windows\SYSWOW64\FXSAPI.dll
2014-12-15 15:25:14 ----A---- C:\windows\system32\FXSAPI.dll
2014-12-15 15:25:10 ----A---- C:\windows\SYSWOW64\msvcr120_clr0400.dll
2014-12-15 15:25:10 ----A---- C:\windows\system32\msvcr120_clr0400.dll
2014-12-15 15:25:06 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2014-12-15 15:25:06 ----A---- C:\windows\system32\WindowsCodecs.dll
2014-12-15 15:25:03 ----AC---- C:\windows\system32\drivers\usbuhci.sys
2014-12-15 15:25:03 ----AC---- C:\windows\system32\drivers\usbport.sys
2014-12-15 15:25:03 ----AC---- C:\windows\system32\drivers\usbehci.sys
2014-12-15 15:25:03 ----AC---- C:\windows\system32\drivers\usbd.sys
2014-12-15 15:25:03 ----A---- C:\windows\SYSWOW64\DaOtpCredentialProvider.dll
2014-12-15 15:25:03 ----A---- C:\windows\system32\WUDFSvc.dll
2014-12-15 15:25:03 ----A---- C:\windows\system32\WUDFPlatform.dll
2014-12-15 15:25:03 ----A---- C:\windows\system32\WUDFHost.exe
2014-12-15 15:25:03 ----A---- C:\windows\system32\hal.dll
2014-12-15 15:25:03 ----A---- C:\windows\system32\drivers\WUDFRd.sys
2014-12-15 15:25:03 ----A---- C:\windows\system32\drivers\WUDFPf.sys
2014-12-15 15:25:03 ----A---- C:\windows\system32\DaOtpCredentialProvider.dll
2014-12-15 15:25:00 ----A---- C:\windows\SYSWOW64\qedit.dll
2014-12-15 15:25:00 ----A---- C:\windows\system32\qedit.dll
2014-12-15 15:24:58 ----A---- C:\windows\SYSWOW64\twinui.appcore.dll
2014-12-15 15:24:58 ----A---- C:\windows\system32\twinui.appcore.dll
2014-12-15 15:24:58 ----A---- C:\windows\system32\twinapi.appcore.dll
2014-12-15 15:24:56 ----A---- C:\windows\system32\wpccpl.dll
2014-12-15 15:24:55 ----A---- C:\windows\SYSWOW64\MrmCoreR.dll
2014-12-15 15:24:55 ----A---- C:\windows\system32\MrmCoreR.dll
2014-12-15 15:24:55 ----A---- C:\windows\system32\MDMAgent.exe
2014-12-15 15:24:04 ----A---- C:\windows\SYSWOW64\pku2u.dll
2014-12-15 15:24:04 ----A---- C:\windows\SYSWOW64\kerberos.dll
2014-12-15 15:24:04 ----A---- C:\windows\system32\pku2u.dll
2014-12-15 15:24:04 ----A---- C:\windows\system32\kerberos.dll

======List of files/folders modified in the last 1 month======

2015-01-12 13:28:34 ----D---- C:\windows\Temp
2015-01-12 13:28:30 ----RD---- C:\Program Files
2015-01-12 13:27:40 ----D---- C:\windows\Inf
2015-01-12 13:27:40 ----AD---- C:\Windows
2015-01-12 13:27:37 ----D---- C:\windows\Prefetch
2015-01-12 13:06:26 ----SHD---- C:\System Volume Information
2015-01-12 13:05:31 ----D---- C:\windows\Microsoft.NET
2015-01-12 13:05:20 ----D---- C:\windows\debug
2015-01-12 13:00:00 ----D---- C:\windows\system32\sru
2015-01-12 12:45:34 ----D---- C:\windows\Panther
2015-01-12 12:45:34 ----D---- C:\windows\Logs
2015-01-12 12:33:28 ----AD---- C:\windows\System32
2015-01-12 12:33:28 ----A---- C:\windows\system32\PerfStringBackup.INI
2015-01-12 12:29:55 ----HD---- C:\ProgramData
2015-01-10 12:11:11 ----HD---- C:\Program Files\WindowsApps
2015-01-10 12:11:11 ----D---- C:\windows\AppReadiness
2015-01-09 23:30:56 ----SHD---- C:\$Recycle.Bin
2015-01-09 18:04:05 ----SHD---- C:\windows\Installer
2015-01-09 18:04:05 ----D---- C:\ProgramData\Package Cache
2015-01-09 18:04:02 ----D---- C:\windows\SysWOW64
2015-01-09 18:00:35 ----D---- C:\windows\system32\drivers
2015-01-09 17:57:41 ----RD---- C:\Program Files (x86)
2015-01-09 09:43:55 ----D---- C:\windows\system32\Tasks
2015-01-06 06:40:18 ----D---- C:\windows\system32\config
2015-01-06 06:38:13 ----D---- C:\windows\WinSxS
2015-01-06 06:32:14 ----D---- C:\windows\system32\catroot2
2015-01-06 06:30:42 ----RD---- C:\windows\assembly
2015-01-06 06:18:43 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2015-01-04 16:17:07 ----D---- C:\windows\system32\DriverStore
2015-01-04 01:00:05 ----D---- C:\ProgramData\CyberLink
2015-01-03 11:18:15 ----D---- C:\windows\Tasks
2015-01-02 21:09:06 ----D---- C:\windows\rescache
2015-01-02 21:01:54 ----D---- C:\windows\CbsTemp
2015-01-02 20:59:46 ----RD---- C:\windows\ImmersiveControlPanel
2015-01-02 20:59:46 ----D---- C:\windows\WinStore
2015-01-02 20:59:46 ----D---- C:\windows\SYSWOW64\WCN
2015-01-02 20:59:46 ----D---- C:\windows\SYSWOW64\wbem
2015-01-02 20:59:46 ----D---- C:\windows\SYSWOW64\slmgr
2015-01-02 20:59:46 ----D---- C:\windows\SYSWOW64\sk-SK
2015-01-02 20:59:46 ----D---- C:\windows\SYSWOW64\oobe
2015-01-02 20:59:46 ----D---- C:\windows\SYSWOW64\drivers
2015-01-02 20:59:46 ----D---- C:\windows\system32\Sysprep
2015-01-02 20:59:46 ----D---- C:\windows\system32\slmgr
2015-01-02 20:59:46 ----D---- C:\windows\system32\sk-SK
2015-01-02 20:59:46 ----D---- C:\windows\system32\migwiz
2015-01-02 20:59:46 ----D---- C:\windows\servicing
2015-01-02 20:59:46 ----D---- C:\windows\PolicyDefinitions
2015-01-02 20:59:46 ----D---- C:\Program Files\Windows Photo Viewer
2015-01-02 20:59:46 ----D---- C:\Program Files\Windows Media Player
2015-01-02 20:59:46 ----D---- C:\Program Files\Windows Mail
2015-01-02 20:59:46 ----D---- C:\Program Files\Windows Journal
2015-01-02 20:59:46 ----D---- C:\Program Files\Windows Defender
2015-01-02 20:59:46 ----D---- C:\Program Files\Internet Explorer
2015-01-02 20:59:46 ----D---- C:\Program Files\Common Files\System
2015-01-02 20:59:46 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2015-01-02 20:59:46 ----D---- C:\Program Files (x86)\Windows Media Player
2015-01-02 20:59:46 ----D---- C:\Program Files (x86)\Windows Mail
2015-01-02 20:59:46 ----D---- C:\Program Files (x86)\Windows Defender
2015-01-02 20:59:46 ----D---- C:\Program Files (x86)\Internet Explorer
2015-01-02 20:59:46 ----AD---- C:\windows\system32\oobe
2015-01-02 20:59:45 ----D---- C:\windows\system32\WCN
2015-01-02 20:59:45 ----D---- C:\windows\system32\wbem
2015-01-02 20:59:45 ----D---- C:\windows\system32\SystemResetPlatform
2015-01-02 20:59:45 ----AD---- C:\windows\Help
2014-12-30 22:38:21 ----D---- C:\windows\system32\drivers\UMDF
2014-12-30 22:14:09 ----D---- C:\windows\system32\catroot
2014-12-27 22:43:51 ----D---- C:\ProgramData\Energy Manager
2014-12-27 22:42:59 ----D---- C:\windows\system32\NDF
2014-12-16 14:02:23 ----D---- C:\windows\system32\wdi
2014-12-16 08:42:19 ----A---- C:\windows\SYSWOW64\VisualDiscoveryOff.ini
2014-12-16 08:42:19 ----A---- C:\windows\SYSWOW64\VisualDiscovery.ini
2014-12-16 08:42:19 ----A---- C:\windows\system32\VisualDiscoveryOff.ini
2014-12-16 08:33:31 ----D---- C:\ProgramData\Microsoft
2014-12-16 08:33:21 ----D---- C:\Program Files (x86)\Common Files
2014-12-16 08:33:20 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-12-16 08:28:47 ----RSD---- C:\windows\Fonts
2014-12-16 05:59:33 ----D---- C:\Program Files\lenovo
2014-12-16 05:58:53 ----D---- C:\Program Files (x86)\Lenovo
2014-12-16 05:57:44 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-12-16 05:56:55 ----HD---- C:\windows\ELAMBKUP
2014-12-16 05:56:28 ----D---- C:\ProgramData\Intel
2014-12-16 05:55:04 ----D---- C:\ProgramData\Lenovo
2014-12-16 05:54:18 ----D---- C:\windows\SoftwareDistribution
2014-12-16 05:51:03 ----AD---- C:\Users
2014-12-15 16:04:08 ----RD---- C:\windows\ToastData
2014-12-15 16:04:08 ----D---- C:\windows\SYSWOW64\setup
2014-12-15 16:04:08 ----D---- C:\windows\SYSWOW64\en-US
2014-12-15 16:04:08 ----D---- C:\windows\SYSWOW64\cs-CZ
2014-12-15 16:04:07 ----D---- C:\windows\system32\setup
2014-12-15 16:04:07 ----D---- C:\windows\system32\en-US
2014-12-15 16:04:07 ----D---- C:\windows\system32\drivers\en-US
2014-12-15 16:04:07 ----D---- C:\windows\system32\drivers\cs-CZ
2014-12-15 16:04:07 ----D---- C:\windows\system32\cs-CZ
2014-12-15 16:04:07 ----D---- C:\windows\system32\Boot
2014-12-15 16:04:06 ----D---- C:\windows\SYSWOW64\InputMethod
2014-12-15 16:04:06 ----D---- C:\windows\apppatch
2014-12-15 15:51:44 ----D---- C:\ProgramData\McAfee
2014-12-15 15:51:44 ----D---- C:\Program Files\Common Files
2014-12-15 15:50:46 ----D---- C:\windows\SYSWOW64\migration
2014-12-15 15:50:46 ----D---- C:\windows\system32\migration
2014-12-15 15:50:42 ----D---- C:\windows\system32\sr-Latn-RS
2014-12-15 15:50:42 ----D---- C:\windows\system32\sr-Latn-CS
2014-12-15 15:50:41 ----D---- C:\windows\MediaViewer
2014-12-15 15:50:41 ----D---- C:\windows\Camera
2014-12-15 15:50:40 ----D---- C:\windows\FileManager
2014-12-15 15:50:33 ----D---- C:\windows\AppCompat
2014-12-15 15:32:05 ----D---- C:\Program Files\Common Files\microsoft shared

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\windows\System32\drivers\iaStorA.sys [2013-08-07 644968]
R1 avipbb;avipbb; C:\windows\system32\DRIVERS\avipbb.sys [2014-11-24 131608]
R1 avkmgr;avkmgr; C:\windows\system32\DRIVERS\avkmgr.sys [2014-11-24 28600]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\windows\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 avgntflt;avgntflt; C:\windows\system32\DRIVERS\avgntflt.sys [2014-11-24 119272]
R2 VDWFP;VDWFP; \??\C:\windows\system32\Drivers\VDWFP64.sys [2014-05-12 39800]
R3 ACPIVPC;@oem27.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\windows\System32\drivers\AcpiVpc.sys [2014-08-13 35600]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2014-03-18 81920]
R3 btmhsf;btmhsf; C:\windows\system32\DRIVERS\btmhsf.sys [2014-04-22 1424184]
R3 DptfDevPch;DptfDevPch; C:\windows\system32\DRIVERS\DptfDevPch.sys [2013-08-02 114680]
R3 DptfDevProc;DptfDevProc; C:\windows\system32\DRIVERS\DptfDevProc.sys [2013-08-02 287160]
R3 DptfManager;DptfManager; C:\windows\system32\DRIVERS\DptfManager.sys [2013-08-02 494272]
R3 ibtusb;@oem22.inf,%ibtusb.SVCDESC_IBT%;Intel(R) Wireless Bluetooth(R) 4.0 + HS Adapter; C:\windows\system32\DRIVERS\ibtusb.sys [2014-05-09 192456]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2014-03-07 3729920]
R3 ikbevent;Intel Upper keyboard Class Filter Driver; C:\windows\system32\DRIVERS\ikbevent.sys [2013-08-09 21408]
R3 imsevent;Intel Upper Mouse Class Filter Driver; C:\windows\system32\DRIVERS\imsevent.sys [2013-08-09 21920]
R3 INETMON;INETMON; \??\C:\windows\System32\Drivers\INETMON.sys [2013-08-08 29088]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2013-10-07 3680728]
R3 ISCT;@oem23.inf,%ISCT.DeviceDesc%;Intel(R) Smart Connect Technology Device Driver; C:\windows\System32\drivers\ISCTD64.sys [2013-08-08 46568]
R3 iwdbus;@oem10.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\windows\System32\drivers\iwdbus.sys [2014-03-01 27032]
R3 MEIx64;@oem5.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\windows\system32\DRIVERS\TeeDriverx64.sys [2013-08-08 99288]
R3 NETwNb64;@oem14.inf,___ %NIC_Service_DispName_WINB_64%;___ Intel(R) Wireless Adapter Driver for Windows 8.1 - 64 Bit; C:\windows\system32\DRIVERS\Netwbw02.sys [2014-06-01 3443680]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\System32\drivers\rfcomm.sys [2014-03-18 167424]
R3 SensorsHIDClassDriver;@sensorshidclassdriver.inf,%WudfSensorsHIDClassDriverDisplayName%;UMDF Reflector service for SensorsHIDClassDriver; C:\windows\system32\DRIVERS\WUDFRd.sys [2014-05-31 227840]
R3 SensorsServiceDriver;@sensorsservicedriver.inf,%WudfSensorsServiceDriverDisplayName%;UMDF Reflector service for SensorsServiceDriver; C:\windows\system32\DRIVERS\WUDFRd.sys [2014-05-31 227840]
R3 SmbDrvI;SmbDrvI; C:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2013-08-29 34544]
R3 SPUVCbv;@oem17.inf,%SPUVCb.ServiceName%;SPUVCb Driver Service; C:\windows\System32\Drivers\SPUVCbv_x64.sys [2013-12-31 1527712]
R3 SynTP;@oem19.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2013-08-29 524016]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\windows\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S3 AX88772;@netax88772.inf,%AX88772.DeviceDesc%;ASIX AX88772 USB2.0 to Fast Ethernet Adapter; C:\windows\system32\DRIVERS\ax88772.sys [2013-07-18 113864]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\windows\System32\drivers\BthEnum.sys [2013-08-22 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\windows\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\windows\System32\drivers\bthpan.sys [2014-07-24 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2014-07-24 1200640]
S3 btmaux;@oem21.inf,%BTMAUX.ServiceDesc%;Intel Bluetooth Auxiliary Service; C:\windows\system32\DRIVERS\btmaux.sys [2014-03-26 140600]
S3 e1iexpress;@net1ic64.inf,%e1iExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\windows\system32\DRIVERS\e1i63x64.sys [2013-06-18 460288]
S3 intaud_WaveExtensible;@oem9.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\windows\system32\drivers\intelaud.sys [2014-03-01 38296]
S3 IntcDAud;@oem7.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2014-03-07 450520]
S3 NETwNe64;@netwew02.inf,___ %NIC_Service_DispName_WIN8_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 8 - 64 Bit; C:\windows\system32\DRIVERS\NETwew02.sys [2013-06-18 4649440]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2013-08-22 44544]
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\windows\System32\Drivers\usbvideo.sys [2013-08-22 212224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2014-11-24 431920]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2014-11-24 431920]
R2 Avira.OE.ServiceHost;Avira Service Host; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [2014-11-20 166192]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2014-03-26 1206648]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2014-03-26 1165688]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2014-11-12 2449592]
R2 DptfParticipantProcessorService;@oem13.inf,%WIN32_DPTF_PARTICIPANT_PROC_SERVICE_DISPLAY_NAME%;Intel(R) Dynamic Platform and Thermal Framework Processor Participant Service Application; C:\windows\system32\DptfParticipantProcessorService.exe [2013-08-02 115632]
R2 DptfPolicyConfigTDPService;@oem13.inf,%WIN32_DPTF_POLICY_CONFIGTDP_SERVICE_DISPLAY_NAME%;Intel(R) Dynamic Platform and Thermal Framework Config TDP Service Application; C:\windows\system32\DptfPolicyConfigTDPService.exe [2013-08-02 116656]
R2 DptfPolicyCriticalService;@oem13.inf,%WIN32_DPTF_POLICY_CRITICAL_SERVICE_DISPLAY_NAME%;Intel(R) Dynamic Platform and Thermal Framework Critical Service Application; C:\windows\system32\DptfPolicyCriticalService.exe [2013-08-02 148688]
R2 DptfPolicyLpmService;@oem13.inf,%WIN32_DPTF_POLICY_LPM_SERVICE_DISPLAY_NAME%;Intel(R) Dynamic Platform and Thermal Framework Low Power Mode Service Application; C:\windows\system32\DptfPolicyLpmService.exe [2013-08-02 124880]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2014-01-18 632048]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-07 15720]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\windows\system32\igfxCUIService.exe [2014-04-15 282096]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-05-12 733696]
R2 ISCTAgent;Intel(R) Smart Connect Technology Agent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [2013-11-08 198120]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-08-08 169432]
R2 Lenovo System Agent Service;Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [2014-05-22 584960]
R2 LenovoWiFiHotspotSvr;Lenovo WiFiHotspot Service; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [2014-08-13 198192]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-08-08 390616]
R2 LsvUIService;LsvUIService; C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvUIService.exe [2014-08-13 70416]
R2 PG_Service_Launcher;PG_Service_Launcher; C:\Program Files (x86)\Lenovo\Motion Control\PG_Service_Launcher.exe [2014-02-25 512776]
R2 PGService;PGService; C:\Program Files (x86)\Lenovo\Motion Control\PGService.exe [2014-02-25 167176]
R2 PhoneCompanionPusher;Lenovo PhoneCompanionPusher Service; C:\Program Files\Lenovo Yoga PhoneCompanion\PhoneCompanionPusher.exe [2014-08-13 249872]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2014-01-18 154864]
R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2012-04-24 390632]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2013-09-13 288472]
R2 VeriFaceSrv;VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe [2014-08-13 68368]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-16 107912]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2014-04-15 279024]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-16 107912]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-05-12 822232]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28 174368]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-11-26 114800]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2014-01-18 284912]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 150600]
S3 PhoneCompanionVap;Lenovo PhoneCompanionVap Service; C:\Program Files\Lenovo Yoga PhoneCompanion\PhoneCompanionVap.exe [2014-08-13 328720]

-----------------EOF-----------------

Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.

# AdwCleaner v4.107 - Report created 12/01/2015 at 13:51:59
# Updated 07/01/2015 by Xplode
# Database : 2015-01-11.2 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : User - LENOVO-PC
# Running from : D:\adwcleaner_4.107.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
Folder Deleted : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Classes\pokki
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Pokki]
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Key Deleted : HKCU\Software\Pokki
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v34.0.5 (x86 cs)


-\\ Google Chrome v39.0.2171.95


-\\ Opera v26.0.1656.60


*************************

AdwCleaner[R0].txt - [2847 octets] - [12/01/2015 13:50:39]
AdwCleaner[S0].txt - [2741 octets] - [12/01/2015 13:51:59]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2801 octets] ##########

Zmenilo se neco?

Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=29&t=137928 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Tak internet už funguje ještě teda přidám ten mbam pro jistotu

To je dobre

Urcite, at tam nenechame zadne zbytky, aby se to nevratilo




15.2. pro neaktivitu http://forum.viry.cz/viewtopic.php?f=12&t=123975