VIRY.CZ

Dobrý den,
prosím o pomoc s PC. Když spustím Windows Update a chci zjistit potřebné aktualizace, tak se ukáže chyba 800F081F. Když zkusím kroky uvedené na adrese http://windows.microsoft.com/cs-cz/wind ... r-800f081f, tak kontrola systému proběhne v pořádku a žádná chyba se neukáže. Když jsem v Internet Exploreru, tak se po nepravidelné době ukáže hláška Program Internet Explorer přestal pracovat. Nejedná se o nějaký vir?

Děkuji

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by klimaj (administrator) on KLIMAJIRI on 14-03-2015 14:24:57
Running from C:\Users\klimaj\Desktop
Loaded Profiles: klimaj (Available profiles: klimaj)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
() C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(ArcSoft, Inc.) C:\Windows\SysWOW64\ArcVCapRender\uArcCapture.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(AMD) C:\Windows\System32\atieclxx.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
() C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Nikon Corporation) C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
(Portrait Displays, Inc) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\SDKCOMServer.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdiSDKHelperx64.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(C. Ghisler & Co.) C:\totalcmd\TOTALCMD.EXE
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_17_0_0_134_ActiveX.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [HPPowerAssistant] => C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [2919992 2011-01-27] (Hewlett-Packard Company)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2679592 2011-02-04] (Synaptics Incorporated)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [615584 2011-01-07] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379040 2011-01-07] (Atheros Commnucations)
HKLM\...\Run: [MfeEpePcMonitor] => C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe [200704 2011-02-09] ()
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2013-07-17] (IDT, Inc.)
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [656920 2011-02-01] (PDF Complete Inc)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [299576 2011-01-28] (Hewlett-Packard Company)
HKLM-x32\...\Run: [File Sanitizer] => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe [12274688 2011-02-07] (Hewlett-Packard)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-26] (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] => c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [DTRun] => c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe [517456 2010-11-24] (ArcSoft Inc.)
HKLM-x32\...\Run: [HPConnectionManager] => c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [94264 2011-04-05] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HPQuickWebProxy] => c:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe [76344 2011-02-11] (Hewlett-Packard Company)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-02-16] (AVAST Software)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707984 2014-11-19] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-10-13] (Advanced Micro Devices, Inc.)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\DeviceNP-x32: DeviceNP.dll [X]
HKU\S-1-5-21-3327799069-671972527-1962127419-1002\...\Run: [] => [X]
HKU\S-1-5-21-3327799069-671972527-1962127419-1002\...\Run: [NokiaSuite.exe] => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-10-02] (Nokia)
HKU\S-1-5-21-3327799069-671972527-1962127419-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-3327799069-671972527-1962127419-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-3327799069-671972527-1962127419-1002\...\MountPoints2: {b67ad878-6144-11e1-af21-101f74ee3bfc} - D:\AutoRun.exe
Lsa: [Notification Packages] EpePcNp64 DPPassFilter scecli
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Nikon Monitor.lnk
ShortcutTarget: Nikon Monitor.lnk -> C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe (Nikon Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\vpngui.exe.lnk
ShortcutTarget: vpngui.exe.lnk -> C:\Windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

AutoConfigURL: [S-1-5-21-3327799069-671972527-1962127419-1002] => http://proxysetup2.szdc.cz/
HKU\S-1-5-21-3327799069-671972527-1962127419-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKU\S-1-5-21-3327799069-671972527-1962127419-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDF
SearchScopes: HKLM-x32 -> {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-01-03] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: File Sanitizer for HP ProtectTools -> {3134413B-49B4-425C-98A5-893C1F195601} -> C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll [2011-02-07] (Hewlett-Packard)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-01-07] (Atheros Commnucations)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-01-03] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKU\S-1-5-21-3327799069-671972527-1962127419-1002 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 88.208.99.2 194.213.193.5 172.16.10.1
Tcpip\..\Interfaces\{CBECFAA0-A66E-433C-9053-DE8EC964F5B0}: [NameServer] 10.4.10.10,10.12.20.20

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-14] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2013-10-02] ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-16] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt [2011-05-10]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-02-27]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\gcswf32.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Nokia Suite Enabler Plugin) - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Profile: C:\Users\klimaj\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\klimaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-07-29]
CHR Extension: (Google Search) - C:\Users\klimaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-07-29]
CHR Extension: (Avast Online Security) - C:\Users\klimaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-10-18]
CHR Extension: (Skype Click to Call) - C:\Users\klimaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-07-31]
CHR Extension: (Google Wallet) - C:\Users\klimaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-26]
CHR Extension: (Gmail) - C:\Users\klimaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-07-29]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-01-03]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-01-07] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [53920 2011-01-07] (Atheros Commnucations) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-01-03] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2015-01-03] (Avast Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 DpHost; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [481104 2011-02-12] (DigitalPersona, Inc.)
S3 FLCDLOCK; c:\Windows\SysWOW64\flcdlock.exe [464480 2011-02-03] (Hewlett-Packard Company)
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
S3 HP ProtectTools Service; c:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [36864 2011-01-12] (Hewlett-Packard Development Company, L.P) [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 HPDayStarterService; c:\Program Files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe [133688 2011-01-28] (Hewlett-Packard Company)
R2 HPFSService; C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe [320000 2011-02-07] (Hewlett-Packard) [File not signed]
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe [281656 2011-01-28] (Hewlett-Packard Company)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 McAfee Endpoint Encryption Agent; C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [1318912 2011-02-09] () [File not signed]
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1127448 2011-02-01] (PDF Complete Inc)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [323072 2013-07-17] (IDT, Inc.) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5436176 2015-02-17] (TeamViewer GmbH)
R2 uArcCapture; C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [502464 2010-11-11] (ArcSoft, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 XobniService; C:\Program Files (x86)\Xobni\XobniService.exe [62184 2011-03-07] (Xobni Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 ARCVCAM; C:\Windows\System32\DRIVERS\ArcSoftVCapture.sys [32192 2010-11-11] (ArcSoft, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-01-03] ()
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21136 2012-10-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2015-01-03] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-01-03] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-01-03] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-01-03] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-01-03] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-01-03] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-01-03] ()
S3 BthMtpEnum; C:\Windows\System32\DRIVERS\BthMtpEnum.sys [64512 2009-07-14] (Microsoft Corporation)
R3 CVPNDRVA; C:\windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] ()
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [63336 2011-02-07] (Hewlett-Packard Company)
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [243200 2009-12-15] (Huawei Technologies Co., Ltd.)
S3 Huawei; C:\Windows\System32\DRIVERS\ewdcsc.sys [29696 2009-12-15] (Huawei Tech. Co., Ltd.)
S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-12-15] (Huawei Technologies Co., Ltd.)
R0 MfeEpePc; C:\Windows\System32\Drivers\MfeEpePc.sys [168008 2011-02-09] (McAfee, Inc.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1826048 2010-12-21] ()
U4 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2015-01-03] (Avast Software)
S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52592 2014-08-15] (Cisco Systems, Inc.)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-14 14:00 - 2015-03-14 14:00 - 00985600 _____ () C:\Users\klimaj\Downloads\MicrosoftFixit50123.msi
2015-03-14 13:57 - 2015-03-14 13:57 - 00000000 __SHD () C:\Users\klimaj\AppData\Local\EmieBrowserModeList
2015-03-14 13:25 - 2015-03-14 13:25 - 00000000 ____D () C:\Program Files\WindowsPowerShell
2015-03-14 13:25 - 2015-03-14 13:25 - 00000000 ____D () C:\Program Files (x86)\WindowsPowerShell
2015-03-14 13:24 - 2015-03-14 13:24 - 00000000 ____D () C:\windows\system32\dsc
2015-03-14 13:24 - 2015-03-14 13:24 - 00000000 ____D () C:\windows\system32\Configuration
2015-03-14 13:19 - 2015-03-14 13:19 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00341504 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00155576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-03-14 13:19 - 2015-03-14 13:19 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-03-14 13:19 - 2015-03-14 13:19 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-03-14 13:19 - 2015-03-14 13:19 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2015-03-14 13:19 - 2015-03-14 13:19 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-03-14 13:19 - 2015-03-14 13:19 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-03-14 13:19 - 2015-03-14 13:19 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-03-14 13:17 - 2015-03-14 13:17 - 03179520 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2015-03-14 13:17 - 2015-03-14 13:17 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2015-03-14 13:17 - 2015-03-14 13:17 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\RdpGroupPolicyExtension.dll
2015-03-14 13:16 - 2015-03-14 13:16 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2015-03-14 13:16 - 2015-03-14 13:16 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2015-03-14 13:15 - 2015-03-14 13:15 - 00215552 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll
2015-03-14 13:15 - 2015-03-14 13:15 - 00171520 _____ (Microsoft Corporation) C:\windows\SysWOW64\ubpm.dll
2015-03-14 13:10 - 2015-03-14 13:10 - 01424896 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2015-03-14 13:10 - 2015-03-14 13:10 - 01230848 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2015-03-14 13:09 - 2015-03-14 13:09 - 03204096 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-03-14 13:08 - 2015-03-14 13:08 - 00372224 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2015-03-14 13:08 - 2015-03-14 13:08 - 00299008 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2015-03-14 13:08 - 2015-03-14 13:08 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2015-03-14 13:08 - 2015-03-14 13:08 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2015-03-14 13:08 - 2015-03-14 13:08 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2015-03-14 13:08 - 2015-03-14 13:08 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2015-03-14 13:08 - 2015-03-14 13:08 - 00034304 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2015-03-14 13:08 - 2015-03-14 13:08 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2015-03-14 13:08 - 2015-03-14 13:08 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2015-03-14 13:08 - 2015-03-14 13:08 - 00010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2015-03-14 13:06 - 2015-03-14 13:06 - 14177280 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2015-03-14 13:06 - 2015-03-14 13:06 - 12875264 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2015-03-14 13:05 - 2015-03-14 13:05 - 01067520 _____ (Microsoft Corporation) C:\windows\system32\msctf.dll
2015-03-14 13:05 - 2015-03-14 13:05 - 00828928 _____ (Microsoft Corporation) C:\windows\SysWOW64\msctf.dll
2015-03-14 13:04 - 2015-03-14 13:04 - 25021440 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-03-14 13:04 - 2015-03-14 13:04 - 19720192 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-03-14 13:04 - 2015-03-14 13:04 - 14398976 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-03-14 13:04 - 2015-03-14 13:04 - 12827648 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-03-14 13:04 - 2015-03-14 13:04 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-03-14 13:04 - 2015-03-14 13:04 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-03-14 13:04 - 2015-03-14 13:04 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-03-14 13:04 - 2015-03-14 13:04 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-03-14 13:04 - 2015-03-14 13:04 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-03-14 13:04 - 2015-03-14 13:04 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-03-14 13:04 - 2015-03-14 13:04 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-03-14 13:04 - 2015-03-14 13:04 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-03-14 13:04 - 2015-03-14 13:04 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-03-14 13:04 - 2015-03-14 13:04 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-03-14 13:04 - 2015-03-14 13:04 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-03-14 13:04 - 2015-03-14 13:04 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-03-14 13:04 - 2015-03-14 13:04 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-03-14 13:03 - 2015-03-14 13:04 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 06035456 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 04300288 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 02886144 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 02358784 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 02278400 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-03-14 13:03 - 2015-03-14 13:03 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-03-14 13:03 - 2015-03-14 13:03 - 01888256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 01548288 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 01311232 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-03-14 13:03 - 2015-03-14 13:03 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00718848 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-03-14 13:03 - 2015-03-14 13:03 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00503296 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00389800 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00342696 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-03-14 13:03 - 2015-03-14 13:03 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-03-14 13:03 - 2015-03-14 13:03 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-03-14 13:03 - 2015-03-14 13:03 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-03-14 13:03 - 2015-03-14 13:03 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 14632960 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 12625920 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL
2015-03-14 13:00 - 2015-03-14 13:00 - 12625408 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmploc.DLL
2015-03-14 13:00 - 2015-03-14 13:00 - 11411968 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmp.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 05554104 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-03-14 13:00 - 2015-03-14 13:00 - 04121600 _____ (Microsoft Corporation) C:\windows\system32\mf.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 03973048 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-03-14 13:00 - 2015-03-14 13:00 - 03917760 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-03-14 13:00 - 2015-03-14 13:00 - 03209728 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 01574400 _____ (Microsoft Corporation) C:\windows\system32\quartz.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 01480192 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 01329664 _____ (Microsoft Corporation) C:\windows\SysWOW64\quartz.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 01202176 _____ (Microsoft Corporation) C:\windows\system32\drmv2clt.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 01174528 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 01069056 _____ (Microsoft Corporation) C:\windows\system32\cryptui.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 01005056 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptui.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00988160 _____ (Microsoft Corporation) C:\windows\SysWOW64\drmv2clt.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00842240 _____ (Microsoft Corporation) C:\windows\system32\blackbox.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00782848 _____ (Microsoft Corporation) C:\windows\system32\wmdrmsdk.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00744960 _____ (Microsoft Corporation) C:\windows\SysWOW64\blackbox.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00693176 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2015-03-14 13:00 - 2015-03-14 13:00 - 00680960 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00663552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\PEAuth.sys
2015-03-14 13:00 - 2015-03-14 13:00 - 00641024 _____ (Microsoft Corporation) C:\windows\system32\msscp.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\evr.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00619056 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2015-03-14 13:00 - 2015-03-14 13:00 - 00617984 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmdrmsdk.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00616360 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2015-03-14 13:00 - 2015-03-14 13:00 - 00532176 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe
2015-03-14 13:00 - 2015-03-14 13:00 - 00519680 _____ (Microsoft Corporation) C:\windows\SysWOW64\qdvd.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00504320 _____ (Microsoft Corporation) C:\windows\SysWOW64\msscp.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00500224 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00497664 _____ (Microsoft Corporation) C:\windows\system32\drmmgrtn.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00489984 _____ (Microsoft Corporation) C:\windows\SysWOW64\evr.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00459336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2015-03-14 13:00 - 2015-03-14 13:00 - 00457400 _____ (Microsoft Corporation) C:\windows\system32\ci.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00442880 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00432128 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00406016 _____ (Microsoft Corporation) C:\windows\SysWOW64\drmmgrtn.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00374784 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00371712 _____ (Microsoft Corporation) C:\windows\system32\qdvd.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00354816 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfplat.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00325632 _____ (Microsoft Corporation) C:\windows\system32\msnetobj.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-03-14 13:00 - 2015-03-14 13:00 - 00296448 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00265216 _____ (Microsoft Corporation) C:\windows\SysWOW64\msnetobj.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00229376 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00195584 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00188416 _____ (Microsoft Corporation) C:\windows\system32\pcasvc.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00187904 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00179200 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00146944 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2015-03-14 13:00 - 2015-03-14 13:00 - 00143872 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe
2015-03-14 13:00 - 2015-03-14 13:00 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-03-14 13:00 - 2015-03-14 13:00 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00103424 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfps.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00094656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mountmgr.sys
2015-03-14 13:00 - 2015-03-14 13:00 - 00082432 _____ (Microsoft Corporation) C:\windows\system32\cryptsp.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00081408 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsp.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2015-03-14 13:00 - 2015-03-14 13:00 - 00058880 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00055808 _____ (Microsoft Corporation) C:\windows\system32\rrinstaller.exe
2015-03-14 13:00 - 2015-03-14 13:00 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\appidapi.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\rrinstaller.exe
2015-03-14 13:00 - 2015-03-14 13:00 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00037376 _____ (Microsoft Corporation) C:\windows\system32\pcadm.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00032256 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe
2015-03-14 13:00 - 2015-03-14 13:00 - 00023040 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfpmp.exe
2015-03-14 13:00 - 2015-03-14 13:00 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2015-03-14 13:00 - 2015-03-14 13:00 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\pcawrk.exe
2015-03-14 13:00 - 2015-03-14 13:00 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\msmmsp.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00009728 _____ (Microsoft Corporation) C:\windows\system32\spwmp.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00009728 _____ (Microsoft Corporation) C:\windows\system32\pcalua.exe
2015-03-14 13:00 - 2015-03-14 13:00 - 00008704 _____ (Microsoft Corporation) C:\windows\system32\pcaevts.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\spwmp.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00005120 _____ (Microsoft Corporation) C:\windows\system32\msdxm.ocx
2015-03-14 13:00 - 2015-03-14 13:00 - 00005120 _____ (Microsoft Corporation) C:\windows\system32\dxmasf.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00004096 _____ (Microsoft Corporation) C:\windows\SysWOW64\msdxm.ocx
2015-03-14 13:00 - 2015-03-14 13:00 - 00004096 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxmasf.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\mferror.dll
2015-03-14 13:00 - 2015-03-14 13:00 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\mferror.dll
2015-03-14 12:57 - 2015-03-14 12:57 - 00406528 _____ (Microsoft Corporation) C:\windows\system32\scesrv.dll
2015-03-14 12:57 - 2015-03-14 12:57 - 00308224 _____ (Microsoft Corporation) C:\windows\SysWOW64\scesrv.dll
2015-03-14 12:51 - 2015-03-14 12:51 - 00210432 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2015-03-14 12:50 - 2015-03-14 12:50 - 00303616 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
2015-03-14 12:50 - 2015-03-14 12:50 - 00156672 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncsi.dll
2015-03-14 12:50 - 2015-03-14 12:50 - 00141312 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2015-03-14 12:50 - 2015-03-14 12:50 - 00052224 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll
2015-03-14 12:49 - 2015-03-14 12:49 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2015-03-14 12:48 - 2015-03-14 12:48 - 00241152 _____ (Microsoft Corporation) C:\windows\system32\pku2u.dll
2015-03-14 12:48 - 2015-03-14 12:48 - 00186880 _____ (Microsoft Corporation) C:\windows\SysWOW64\pku2u.dll
2015-03-14 12:47 - 2015-03-14 12:47 - 01882624 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2015-03-14 12:47 - 2015-03-14 12:47 - 01237504 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2015-03-14 12:47 - 2015-03-14 12:47 - 00683520 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
2015-03-14 12:47 - 2015-03-14 12:47 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2015-03-14 12:47 - 2015-03-14 12:47 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2015-03-14 12:45 - 2015-03-14 12:45 - 00861696 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2015-03-14 12:45 - 2015-03-14 12:45 - 00571904 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2015-03-14 12:45 - 2015-03-14 12:45 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
2015-03-14 12:45 - 2015-03-14 12:45 - 00067584 _____ (Microsoft Corporation) C:\windows\SysWOW64\packager.dll
2015-03-14 12:44 - 2015-03-14 12:44 - 00878080 _____ (Microsoft Corporation) C:\windows\system32\IMJP10K.DLL
2015-03-14 12:44 - 2015-03-14 12:44 - 00701440 _____ (Microsoft Corporation) C:\windows\SysWOW64\IMJP10K.DLL
2015-03-14 12:42 - 2015-03-14 12:42 - 06583296 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2015-03-14 12:42 - 2015-03-14 12:42 - 05702656 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2015-03-14 12:40 - 2015-03-14 12:40 - 00455168 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2015-03-14 12:40 - 2015-03-14 12:40 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\winsta.dll
2015-03-14 12:40 - 2015-03-14 12:40 - 00212480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpwd.sys
2015-03-14 12:40 - 2015-03-14 12:40 - 00157696 _____ (Microsoft Corporation) C:\windows\SysWOW64\winsta.dll
2015-03-14 12:40 - 2015-03-14 12:40 - 00150528 _____ (Microsoft Corporation) C:\windows\system32\rdpcorekmts.dll
2015-03-14 12:40 - 2015-03-14 12:40 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2015-03-14 12:38 - 2015-03-14 12:38 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
2015-03-14 12:38 - 2015-03-14 12:38 - 00372736 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll
2015-03-14 12:37 - 2015-03-14 12:37 - 01943696 _____ (Microsoft Corporation) C:\windows\system32\dfshim.dll
2015-03-14 12:37 - 2015-03-14 12:37 - 01131664 _____ (Microsoft Corporation) C:\windows\SysWOW64\dfshim.dll
2015-03-14 12:37 - 2015-03-14 12:37 - 00156824 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscorier.dll
2015-03-14 12:37 - 2015-03-14 12:37 - 00156312 _____ (Microsoft Corporation) C:\windows\system32\mscorier.dll
2015-03-14 12:37 - 2015-03-14 12:37 - 00081560 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscories.dll
2015-03-14 12:37 - 2015-03-14 12:37 - 00073880 _____ (Microsoft Corporation) C:\windows\system32\mscories.dll
2015-03-14 12:33 - 2015-03-14 12:33 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2015-03-14 12:33 - 2015-03-14 12:33 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2015-03-14 12:19 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\windows\system32\TSWorkspace.dll
2015-03-14 12:19 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSWorkspace.dll
2015-03-14 12:18 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbFlt.sys
2015-03-14 12:18 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-03-14 12:18 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-03-14 12:18 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\MsRdpWebAccess.dll
2015-03-14 12:18 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\windows\system32\wksprtPS.dll
2015-03-14 12:18 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2015-03-14 12:18 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\TsUsbGDCoInstaller.dll
2015-03-14 12:18 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2015-03-14 12:18 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\MsRdpWebAccess.dll
2015-03-14 12:18 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wksprtPS.dll
2015-03-14 12:18 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\windows\system32\wksprt.exe
2015-03-14 12:18 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2015-03-14 12:18 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe
2015-03-14 12:18 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2015-03-14 12:18 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe
2015-03-14 12:17 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2015-03-14 12:16 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpendp_winip.dll
2015-03-14 12:16 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\windows\system32\rdpendp_winip.dll
2015-03-14 12:11 - 2013-09-27 04:19 - 00057344 _____ (Microsoft Corporation) C:\windows\system32\ncobjapi.dll
2015-03-14 12:11 - 2013-09-27 02:36 - 00046592 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncobjapi.dll
2015-03-14 12:10 - 2013-09-27 04:37 - 00001536 _____ (Microsoft Corporation) C:\windows\system32\winrsmgr.dll
2015-03-14 12:10 - 2013-09-27 04:36 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\WsmRes.dll
2015-03-14 12:10 - 2013-09-27 04:18 - 00108544 _____ (Microsoft Corporation) C:\windows\system32\mi.dll
2015-03-14 12:10 - 2013-09-27 04:18 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
2015-03-14 12:10 - 2013-09-27 04:16 - 00082944 _____ (Microsoft Corporation) C:\windows\system32\wecapi.dll
2015-03-14 12:10 - 2013-09-27 04:16 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\wsmplpxy.dll
2015-03-14 12:10 - 2013-09-27 04:16 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\winrssrv.dll
2015-03-14 12:10 - 2013-09-27 04:12 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\wevtfwd.dll
2015-03-14 12:10 - 2013-09-27 04:03 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\Register-CimProvider.exe
2015-03-14 12:10 - 2013-09-27 03:59 - 00104960 _____ (Microsoft Corporation) C:\windows\system32\wecutil.exe
2015-03-14 12:10 - 2013-09-27 03:58 - 00213504 _____ (Microsoft Corporation) C:\windows\system32\wecsvc.dll
2015-03-14 12:10 - 2013-09-27 03:53 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\prvdmofcomp.dll
2015-03-14 12:10 - 2013-09-27 03:40 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\WsmAgent.dll
2015-03-14 12:10 - 2013-09-27 03:27 - 00023040 _____ (Microsoft Corporation) C:\windows\system32\winrshost.exe
2015-03-14 12:10 - 2013-09-27 03:20 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\winrs.exe
2015-03-14 12:10 - 2013-09-27 03:19 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\wsmprovhost.exe
2015-03-14 12:10 - 2013-09-27 03:18 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\WSManHTTPConfig.exe
2015-03-14 12:10 - 2013-09-27 03:17 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\winrscmd.dll
2015-03-14 12:10 - 2013-09-27 03:17 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\PSModuleDiscoveryProvider.dll
2015-03-14 12:10 - 2013-09-27 03:05 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\pwrshplugin.dll
2015-03-14 12:10 - 2013-09-27 02:53 - 00001536 _____ (Microsoft Corporation) C:\windows\SysWOW64\winrsmgr.dll
2015-03-14 12:10 - 2013-09-27 02:52 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmRes.dll
2015-03-14 12:10 - 2013-09-27 02:36 - 00013824 _____ (Microsoft Corporation) C:\windows\SysWOW64\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
2015-03-14 12:10 - 2013-09-27 02:35 - 00091648 _____ (Microsoft Corporation) C:\windows\SysWOW64\mi.dll
2015-03-14 12:10 - 2013-09-27 02:34 - 00062976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wecapi.dll
2015-03-14 12:10 - 2013-09-27 02:34 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\wsmplpxy.dll
2015-03-14 12:10 - 2013-09-27 02:34 - 00010752 _____ (Microsoft Corporation) C:\windows\SysWOW64\winrssrv.dll
2015-03-14 12:10 - 2013-09-27 02:31 - 00083968 _____ (Microsoft Corporation) C:\windows\SysWOW64\wevtfwd.dll
2015-03-14 12:10 - 2013-09-27 02:25 - 00013824 _____ (Microsoft Corporation) C:\windows\SysWOW64\Register-CimProvider.exe
2015-03-14 12:10 - 2013-09-27 02:21 - 00079872 _____ (Microsoft Corporation) C:\windows\SysWOW64\wecutil.exe
2015-03-14 12:10 - 2013-09-27 02:15 - 00057856 _____ (Microsoft Corporation) C:\windows\SysWOW64\prvdmofcomp.dll
2015-03-14 12:10 - 2013-09-27 02:04 - 00022528 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmAgent.dll
2015-03-14 12:10 - 2013-09-27 01:54 - 00020480 _____ (Microsoft Corporation) C:\windows\SysWOW64\winrshost.exe
2015-03-14 12:10 - 2013-09-27 01:49 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\winrs.exe
2015-03-14 12:10 - 2013-09-27 01:49 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\wsmprovhost.exe
2015-03-14 12:10 - 2013-09-27 01:48 - 00031744 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSManHTTPConfig.exe
2015-03-14 12:10 - 2013-09-27 01:47 - 00093184 _____ (Microsoft Corporation) C:\windows\SysWOW64\winrscmd.dll
2015-03-14 12:10 - 2013-09-27 01:47 - 00038400 _____ (Microsoft Corporation) C:\windows\SysWOW64\PSModuleDiscoveryProvider.dll
2015-03-14 12:10 - 2013-09-27 01:37 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\pwrshplugin.dll
2015-03-14 12:10 - 2013-09-16 08:34 - 00204105 _____ () C:\windows\SysWOW64\winrm.vbs
2015-03-14 12:10 - 2013-09-16 08:34 - 00204105 _____ () C:\windows\system32\winrm.vbs
2015-03-14 12:10 - 2013-09-16 08:34 - 00004675 _____ () C:\windows\SysWOW64\wsmanconfig_schema.xml
2015-03-14 12:10 - 2013-09-16 08:34 - 00004675 _____ () C:\windows\system32\wsmanconfig_schema.xml
2015-03-14 12:10 - 2013-09-16 08:33 - 00004148 _____ () C:\windows\system32\psmodulediscoveryprovider.mof
2015-03-14 12:09 - 2013-09-27 04:20 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\mimofcodec.dll
2015-03-14 12:09 - 2013-09-27 04:17 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\mibincodec.dll
2015-03-14 12:09 - 2013-09-27 03:53 - 00203776 _____ (Microsoft Corporation) C:\windows\system32\wmitomi.dll
2015-03-14 12:09 - 2013-09-27 03:50 - 00158720 _____ (Microsoft Corporation) C:\windows\system32\wmidcom.dll
2015-03-14 12:09 - 2013-09-27 03:49 - 00476672 _____ (Microsoft Corporation) C:\windows\system32\wbemcomn2.dll
2015-03-14 12:09 - 2013-09-27 03:48 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\miutils.dll
2015-03-14 12:09 - 2013-09-27 03:46 - 00247296 _____ (Microsoft Corporation) C:\windows\system32\framedynos.dll
2015-03-14 12:09 - 2013-09-27 03:45 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\framedyn.dll
2015-03-14 12:09 - 2013-09-27 03:34 - 00197632 _____ (Microsoft Corporation) C:\windows\system32\DscCoreConfProv.dll
2015-03-14 12:09 - 2013-09-27 03:21 - 00600064 _____ (Microsoft Corporation) C:\windows\system32\WsmGCDeps.dll
2015-03-14 12:09 - 2013-09-27 03:19 - 00156672 _____ (Microsoft Corporation) C:\windows\system32\WsmAuto.dll
2015-03-14 12:09 - 2013-09-27 03:17 - 00274944 _____ (Microsoft Corporation) C:\windows\system32\WsmWmiPl.dll
2015-03-14 12:09 - 2013-09-27 03:06 - 02475008 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll
2015-03-14 12:09 - 2013-09-27 02:38 - 00111616 _____ (Microsoft Corporation) C:\windows\SysWOW64\mimofcodec.dll
2015-03-14 12:09 - 2013-09-27 02:34 - 00082944 _____ (Microsoft Corporation) C:\windows\SysWOW64\mibincodec.dll
2015-03-14 12:09 - 2013-09-27 02:14 - 00150528 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmitomi.dll
2015-03-14 12:09 - 2013-09-27 02:12 - 00125440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmidcom.dll
2015-03-14 12:09 - 2013-09-27 02:11 - 00371712 _____ (Microsoft Corporation) C:\windows\SysWOW64\wbemcomn2.dll
2015-03-14 12:09 - 2013-09-27 02:11 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\miutils.dll
2015-03-14 12:09 - 2013-09-27 02:09 - 00192512 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedynos.dll
2015-03-14 12:09 - 2013-09-27 02:08 - 00190464 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedyn.dll
2015-03-14 12:09 - 2013-09-27 02:01 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\WSManMigrationPlugin.dll
2015-03-14 12:09 - 2013-09-27 01:50 - 00515584 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmGCDeps.dll
2015-03-14 12:09 - 2013-09-27 01:48 - 00139264 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmAuto.dll
2015-03-14 12:09 - 2013-09-27 01:47 - 00227840 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmWmiPl.dll
2015-03-14 12:09 - 2013-09-27 01:38 - 02026496 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll
2015-03-14 12:09 - 2013-09-27 00:52 - 00057344 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSManMigrationPlugin.dll
2015-03-14 12:09 - 2013-09-26 23:48 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\DscCore.dll
2015-03-14 12:06 - 2015-03-14 13:20 - 00010658 _____ () C:\windows\wsusofflineupdate.log
2015-03-14 07:49 - 2015-03-14 07:49 - 00302011 _____ () C:\Users\klimaj\Downloads\WindowsUpdateDiagnostic (1).diagcab
2015-03-14 07:43 - 2015-03-14 07:43 - 00302011 _____ () C:\Users\klimaj\Downloads\WindowsUpdateDiagnostic.diagcab
2015-03-14 07:28 - 2015-03-14 07:28 - 02211322 _____ () C:\Users\klimaj\Downloads\wsusoffline953.zip
2015-03-14 07:28 - 2015-03-14 07:28 - 00000000 ____D () C:\Users\klimaj\Downloads\wsusoffline953
2015-03-14 07:23 - 2015-03-14 07:24 - 05325696 _____ (Piriform Ltd) C:\Users\klimaj\Downloads\ccsetup503.exe
2015-03-14 07:13 - 2015-03-14 13:34 - 00409912 _____ () C:\windows\system32\FNTCACHE.DAT
2015-03-12 04:51 - 2015-03-12 04:51 - 00001764 _____ () C:\Users\klimaj\Downloads\wsus_computers.reg
2015-03-11 22:31 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_7.dll
2015-03-11 22:31 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_7.dll
2015-03-11 22:31 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_5.dll
2015-03-11 22:31 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_5.dll
2015-03-11 22:30 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_7.dll
2015-03-11 22:30 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_7.dll
2015-03-11 22:30 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_43.dll
2015-03-11 22:30 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_43.dll
2015-03-11 22:30 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_43.dll
2015-03-11 22:30 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_43.dll
2015-03-11 22:30 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\windows\system32\d3dcsx_43.dll
2015-03-11 22:30 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dcsx_43.dll
2015-03-11 22:30 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_43.dll
2015-03-11 22:30 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_43.dll
2015-03-11 22:30 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\windows\system32\d3dx11_43.dll
2015-03-11 22:30 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx11_43.dll
2015-03-11 22:30 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_6.dll
2015-03-11 22:30 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_6.dll
2015-03-11 22:30 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_6.dll
2015-03-11 22:30 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_6.dll
2015-03-11 22:30 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_4.dll
2015-03-11 22:30 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_4.dll
2015-03-11 22:30 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_7.dll
2015-03-11 22:30 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_7.dll
2015-03-11 22:30 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_5.dll
2015-03-11 22:30 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_5.dll
2015-03-11 22:30 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_5.dll
2015-03-11 22:30 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_3.dll
2015-03-11 22:30 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\windows\system32\d3dcsx_42.dll
2015-03-11 22:30 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dcsx_42.dll
2015-03-11 22:30 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_42.dll
2015-03-11 22:30 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_42.dll
2015-03-11 22:30 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_42.dll
2015-03-11 22:30 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_42.dll
2015-03-11 22:30 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\windows\system32\d3dx11_42.dll
2015-03-11 22:30 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx11_42.dll
2015-03-11 22:30 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_4.dll
2015-03-11 22:30 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_4.dll
2015-03-11 22:30 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_4.dll
2015-03-11 22:30 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_4.dll
2015-03-11 22:30 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_6.dll
2015-03-11 22:30 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_6.dll
2015-03-11 22:30 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_41.dll
2015-03-11 22:30 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_41.dll
2015-03-11 22:30 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_41.dll
2015-03-11 22:30 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_41.dll
2015-03-11 22:30 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_3.dll
2015-03-11 22:30 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_3.dll
2015-03-11 22:30 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_3.dll
2015-03-11 22:30 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_3.dll
2015-03-11 22:30 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_2.dll
2015-03-11 22:30 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_2.dll
2015-03-11 22:30 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_5.dll
2015-03-11 22:30 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_5.dll
2015-03-11 22:30 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_40.dll
2015-03-11 22:30 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_40.dll
2015-03-11 22:30 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_40.dll
2015-03-11 22:30 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_40.dll
2015-03-11 22:30 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_40.dll
2015-03-11 22:30 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_40.dll
2015-03-11 22:30 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_2.dll
2015-03-11 22:30 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_2.dll
2015-03-11 22:30 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_1.dll
2015-03-11 22:30 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_1.dll
2015-03-11 22:30 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_2.dll
2015-03-11 22:30 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_2.dll
2015-03-11 22:30 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_39.dll
2015-03-11 22:30 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_39.dll
2015-03-11 22:30 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_39.dll
2015-03-11 22:30 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_39.dll
2015-03-11 22:30 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_39.dll
2015-03-11 22:30 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_39.dll
2015-03-11 22:30 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_1.dll
2015-03-11 22:30 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_1.dll
2015-03-11 22:30 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_1.dll
2015-03-11 22:30 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_1.dll
2015-03-11 22:30 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_0.dll
2015-03-11 22:30 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_0.dll
2015-03-11 22:30 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_4.dll
2015-03-11 22:30 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_4.dll
2015-03-11 22:30 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_38.dll
2015-03-11 22:30 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_38.dll
2015-03-11 22:30 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_38.dll
2015-03-11 22:30 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_38.dll
2015-03-11 22:30 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_38.dll
2015-03-11 22:30 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_38.dll
2015-03-11 22:30 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_0.dll
2015-03-11 22:30 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_0.dll
2015-03-11 22:30 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_0.dll
2015-03-11 22:30 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\windows\system32\xactengine3_0.dll
2015-03-11 22:30 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_3.dll
2015-03-11 22:30 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_3.dll
2015-03-11 22:30 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\windows\system32\D3DX9_37.dll
2015-03-11 22:30 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_37.dll
2015-03-11 22:30 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_37.dll
2015-03-11 22:30 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_37.dll
2015-03-11 22:30 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_37.dll
2015-03-11 22:30 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_37.dll
2015-03-11 22:30 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_10.dll
2015-03-11 22:30 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_10.dll
2015-03-11 22:30 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\windows\system32\X3DAudio1_2.dll
2015-03-11 22:30 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_2.dll
2015-03-11 22:30 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_36.dll
2015-03-11 22:30 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_36.dll
2015-03-11 22:30 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_36.dll
2015-03-11 22:30 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_36.dll
2015-03-11 22:30 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_36.dll
2015-03-11 22:30 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_36.dll
2015-03-11 22:30 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_9.dll
2015-03-11 22:30 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_9.dll
2015-03-11 22:30 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_35.dll
2015-03-11 22:30 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_35.dll
2015-03-11 22:30 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_35.dll
2015-03-11 22:30 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_35.dll
2015-03-11 22:30 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_35.dll
2015-03-11 22:30 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_35.dll
2015-03-11 22:30 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_8.dll
2015-03-11 22:30 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_8.dll
2015-03-11 22:30 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_34.dll
2015-03-11 22:30 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_34.dll
2015-03-11 22:30 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_34.dll
2015-03-11 22:30 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_34.dll
2015-03-11 22:30 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_34.dll
2015-03-11 22:30 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_34.dll
2015-03-11 22:30 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_7.dll
2015-03-11 22:30 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_7.dll
2015-03-11 22:30 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\windows\system32\xinput1_3.dll
2015-03-11 22:30 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\windows\SysWOW64\xinput1_3.dll
2015-03-11 22:30 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_33.dll
2015-03-11 22:30 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_33.dll
2015-03-11 22:30 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_33.dll
2015-03-11 22:30 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_33.dll
2015-03-11 22:30 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_33.dll
2015-03-11 22:30 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_33.dll
2015-03-11 22:30 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_6.dll
2015-03-11 22:30 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_6.dll
2015-03-11 22:29 - 2015-03-11 22:30 - 00009850 _____ () C:\windows\DirectX.log
2015-03-11 22:29 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\windows\system32\x3daudio1_1.dll
2015-03-11 22:29 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\windows\SysWOW64\x3daudio1_1.dll
2015-03-11 22:29 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_5.dll
2015-03-11 22:29 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_5.dll
2015-03-11 22:29 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\windows\system32\d3dx10.dll
2015-03-11 22:29 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10.dll
2015-03-11 22:29 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_31.dll
2015-03-11 22:29 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_31.dll
2015-03-11 22:29 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_4.dll
2015-03-11 22:29 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_4.dll
2015-03-11 22:29 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\windows\system32\xinput1_2.dll
2015-03-11 22:29 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_3.dll
2015-03-11 22:29 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_3.dll
2015-03-11 22:29 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\windows\SysWOW64\xinput1_2.dll
2015-03-11 22:29 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_2.dll
2015-03-11 22:29 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_2.dll
2015-03-11 22:29 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_30.dll
2015-03-11 22:29 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_30.dll
2015-03-11 22:29 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_1.dll
2015-03-11 22:29 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_1.dll
2015-03-11 22:29 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\windows\system32\xinput1_1.dll
2015-03-11 22:29 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\windows\SysWOW64\xinput1_1.dll
2015-03-11 22:29 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_29.dll
2015-03-11 22:29 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_29.dll
2015-03-11 22:29 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\windows\system32\xactengine2_0.dll
2015-03-11 22:29 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine2_0.dll
2015-03-11 22:29 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\windows\system32\x3daudio1_0.dll
2015-03-11 22:29 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\windows\SysWOW64\x3daudio1_0.dll
2015-03-11 22:29 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_28.dll
2015-03-11 22:29 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_28.dll
2015-03-11 22:29 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_27.dll
2015-03-11 22:29 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_27.dll
2015-03-11 22:29 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_26.dll
2015-03-11 22:29 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_26.dll
2015-03-11 22:29 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_25.dll
2015-03-11 22:29 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_25.dll
2015-03-11 22:29 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_24.dll
2015-03-11 22:29 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_24.dll
2015-03-11 21:34 - 2015-03-11 21:34 - 00347816 _____ (Microsoft Corporation) C:\Users\klimaj\Downloads\MicrosoftFixit.wu.Run.exe
2015-03-11 21:24 - 2015-03-11 22:31 - 00000000 ____D () C:\windows\SysWOW64\directx
2015-03-11 21:24 - 2015-03-11 22:28 - 00000000 ___HD () C:\windows\msdownld.tmp
2015-03-11 21:22 - 2015-03-11 21:23 - 11840839 _____ () C:\Users\klimaj\Downloads\Windows6.1-KB2670838-x64.msu
2015-03-11 21:18 - 2015-03-11 21:24 - 00292184 _____ (Microsoft Corporation) C:\Users\klimaj\Downloads\dxwebsetup.exe
2015-03-11 21:17 - 2015-03-11 21:18 - 39739064 _____ (Microsoft Corporation) C:\Users\klimaj\Downloads\Windows-KB890830-x64-V5.21.exe
2015-02-23 04:38 - 2015-03-14 13:34 - 00000146 _____ () C:\windows\setupact.log
2015-02-23 04:38 - 2015-02-23 04:38 - 00000000 _____ () C:\windows\setuperr.log
2015-02-23 04:36 - 2015-02-23 04:36 - 00109296 _____ () C:\Users\klimaj\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-22 22:21 - 2015-02-22 22:22 - 00011513 _____ () C:\Users\klimaj\Desktop\Addition.txt
2015-02-22 22:20 - 2015-03-14 14:24 - 00025887 _____ () C:\Users\klimaj\Desktop\FRST.txt
2015-02-22 22:20 - 2015-03-14 14:24 - 00000000 ____D () C:\Users\klimaj\Desktop\FRST-OlderVersion
2015-02-22 22:13 - 2015-02-22 22:13 - 00000000 ____D () C:\ProgramData\ATI
2015-02-22 21:43 - 2015-02-22 21:43 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2015-02-22 21:43 - 2015-02-22 21:43 - 00000000 ____D () C:\Intel
2015-02-22 21:42 - 2015-02-22 21:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
2015-02-22 21:42 - 2015-02-22 21:42 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2015-02-22 21:38 - 2015-02-22 21:42 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-02-22 19:16 - 2015-02-22 21:30 - 339909456 _____ (Hewlett Packard Company ) C:\Users\klimaj\Downloads\sp55947.exe
2015-02-22 18:35 - 2015-02-22 19:02 - 00000000 ____D () C:\AdwCleaner
2015-02-22 18:32 - 2015-02-22 18:32 - 02126848 _____ () C:\Users\klimaj\Downloads\adwcleaner_4.111 (1).exe
2015-02-22 18:30 - 2015-02-22 18:32 - 02126848 _____ () C:\Users\klimaj\Downloads\adwcleaner_4.111.exe
2015-02-18 07:05 - 2015-03-14 14:25 - 00000000 ____D () C:\FRST
2015-02-18 07:04 - 2015-03-14 14:24 - 02095616 _____ (Farbar) C:\Users\klimaj\Desktop\FRST64.exe
2015-02-16 18:24 - 2015-02-22 19:26 - 00000931 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-02-16 18:24 - 2015-02-22 19:26 - 00000919 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-02-16 18:24 - 2015-02-16 18:24 - 00000000 ____D () C:\Users\klimaj\AppData\Local\TeamViewer
2015-02-16 16:40 - 2015-02-16 16:40 - 00000000 ____D () C:\windows\CheckSur
2015-02-16 16:23 - 2015-02-16 16:37 - 564744309 _____ () C:\Users\klimaj\Downloads\Windows6.1-KB947821-v34-x64.msu
2015-02-16 16:05 - 2015-03-11 21:13 - 00003192 _____ () C:\windows\System32\Tasks\HPCeeScheduleForklimaj
2015-02-16 16:05 - 2015-03-11 21:13 - 00000336 _____ () C:\windows\Tasks\HPCeeScheduleForklimaj.job
2015-02-16 15:58 - 2015-02-16 15:58 - 00002774 _____ () C:\windows\System32\Tasks\CCleanerSkipUAC
2015-02-16 15:56 - 2015-02-16 15:57 - 05325208 _____ (Piriform Ltd) C:\Users\klimaj\Downloads\ccsetup502.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-14 14:14 - 2013-12-04 20:25 - 00000914 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2015-03-14 14:07 - 2011-10-01 03:35 - 01234550 _____ () C:\windows\WindowsUpdate.log
2015-03-14 13:56 - 2009-07-14 05:45 - 00022704 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-14 13:56 - 2009-07-14 05:45 - 00022704 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-14 13:52 - 2012-07-11 09:38 - 00000948 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-14 13:52 - 2011-10-01 03:51 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini
2015-03-14 13:52 - 2009-07-14 06:09 - 00000000 ____D () C:\windows\System32\Tasks\WPD
2015-03-14 13:43 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-14 13:38 - 2011-05-10 21:10 - 00000000 ____D () C:\ProgramData\PDFC
2015-03-14 13:35 - 2012-07-11 09:38 - 00000952 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-14 13:34 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-03-14 13:26 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\SysWOW64\Dism
2015-03-14 13:26 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\Dism
2015-03-14 13:26 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2015-03-14 12:05 - 2012-07-11 09:16 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2015-03-14 12:03 - 2012-02-25 17:02 - 00000000 ____D () C:\Users\klimaj\AppData\Roaming\Skype
2015-03-14 07:41 - 2013-12-04 20:25 - 00778928 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-03-14 07:41 - 2013-12-04 20:25 - 00003852 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-03-14 07:41 - 2012-02-25 16:51 - 00142512 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-14 07:37 - 2012-07-11 09:40 - 00002143 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-03-14 07:27 - 2012-02-25 10:20 - 00000052 _____ () C:\windows\SysWOW64\DOErrors.log
2015-03-14 07:26 - 2014-09-23 10:45 - 00000000 ____D () C:\Users\klimaj\AppData\Local\Adobe
2015-03-14 07:25 - 2012-02-27 14:35 - 00000782 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-03-14 07:25 - 2012-02-27 14:35 - 00000000 ____D () C:\Program Files\CCleaner
2015-03-11 21:16 - 2014-07-08 13:56 - 00003832 _____ () C:\windows\System32\Tasks\Opera scheduled Autoupdate 1391466497
2015-03-11 21:16 - 2013-02-13 15:48 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-03-01 22:54 - 2013-11-20 13:11 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2015-02-24 04:17 - 2012-02-23 19:26 - 00295552 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2015-02-22 21:41 - 2011-10-01 03:46 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2015-02-22 21:30 - 2011-02-02 20:56 - 00000000 ____D () C:\swsetup
2015-02-22 18:52 - 2013-10-17 11:33 - 00000000 ____D () C:\windows\Minidump
2015-02-22 18:52 - 2012-02-25 16:46 - 00000000 ____D () C:\Users\klimaj\AppData\Local\CrashDumps
2015-02-22 18:15 - 2012-02-23 19:44 - 00000000 ____D () C:\Users\klimaj\Documents\Bluetooth Folder
2015-02-16 18:02 - 2014-06-06 11:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-02-16 16:22 - 2011-05-10 21:12 - 00669116 _____ () C:\windows\system32\perfh005.dat
2015-02-16 16:22 - 2011-05-10 21:12 - 00141744 _____ () C:\windows\system32\perfc005.dat
2015-02-16 16:22 - 2009-07-14 06:13 - 01584554 _____ () C:\windows\system32\PerfStringBackup.INI
2015-02-16 16:11 - 2013-10-15 23:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-02-16 16:11 - 2012-12-27 12:14 - 00000000 ___DC () C:\Users\klimaj\AppData\Local\MigWiz
2015-02-16 16:11 - 2012-03-23 22:13 - 00000000 ____D () C:\Users\klimaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2015-02-16 16:11 - 2012-02-27 14:23 - 00000000 ____D () C:\Users\klimaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2015-02-16 16:11 - 2009-07-27 16:04 - 00000000 ____D () C:\windows\Panther
2015-02-16 15:58 - 2012-02-27 14:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-02-16 11:30 - 2012-07-11 09:38 - 00003948 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-16 11:30 - 2012-07-11 09:38 - 00003696 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Files in the root of some directories =======

2012-12-29 15:24 - 2012-12-29 15:24 - 0000268 ___RH () C:\Users\klimaj\AppData\Roaming\Project Templates
2012-11-26 18:41 - 2014-01-01 17:25 - 0003584 _____ () C:\Users\klimaj\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-12-29 15:24 - 2013-08-21 13:59 - 0000020 ____H () C:\ProgramData\PKP_DLdu.DAT
2012-12-29 15:25 - 2012-12-29 15:25 - 0000268 ___RH () C:\ProgramData\Repeat Routines

Some content of TEMP:
====================
C:\Users\klimaj\AppData\Local\Temp\NOSEventMessages.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-11 22:02

==================== End Of Log ============================

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Cleanerem oscanovanáno a vyčištěno. Aktualizace Windows update stále se stejnou chybou.

# AdwCleaner v4.112 - Logfile created 14/03/2015 at 18:22:10
# Updated 09/03/2015 by Xplode
# Database : 2015-03-05.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : klimaj - KLIMAJIRI
# Running from : C:\Users\klimaj\Desktop\adwcleaner_4.112.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17689


-\\ Google Chrome v41.0.2272.89


-\\ Opera v28.0.1750.40


*************************

AdwCleaner[R0].txt - [3508 bytes] - [22/02/2015 18:37:08]
AdwCleaner[R1].txt - [3625 bytes] - [22/02/2015 18:42:33]
AdwCleaner[R2].txt - [1023 bytes] - [22/02/2015 19:00:39]
AdwCleaner[R3].txt - [1075 bytes] - [14/03/2015 18:14:33]
AdwCleaner[S0].txt - [349 bytes] - [22/02/2015 18:40:25]
AdwCleaner[S1].txt - [3333 bytes] - [22/02/2015 18:44:06]
AdwCleaner[S2].txt - [1004 bytes] - [14/03/2015 18:22:10]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1063 bytes] ##########

Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:

Start
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3327799069-671972527-1962127419-1002\...\Run: [] => [X]
HKU\S-1-5-21-3327799069-671972527-1962127419-1002\...\MountPoints2: {b67ad878-6144-11e1-af21-101f74ee3bfc} - D:\AutoRun.exe
HKU\S-1-5-21-3327799069-671972527-1962127419-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDF
SearchScopes: HKLM-x32 -> {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKU\S-1-5-21-3327799069-671972527-1962127419-1002 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\klimaj\AppData\Local\Temp
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Log:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by klimaj at 2015-03-14 19:19:59 Run:1
Running from C:\Users\klimaj\Desktop
Loaded Profiles: klimaj (Available profiles: klimaj)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3327799069-671972527-1962127419-1002\...\Run: [] => [X]
HKU\S-1-5-21-3327799069-671972527-1962127419-1002\...\MountPoints2: {b67ad878-6144-11e1-af21-101f74ee3bfc} - D:\AutoRun.exe
HKU\S-1-5-21-3327799069-671972527-1962127419-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDF
SearchScopes: HKLM-x32 -> {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKU\S-1-5-21-3327799069-671972527-1962127419-1002 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\klimaj\AppData\Local\Temp
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKU\S-1-5-21-3327799069-671972527-1962127419-1002\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
"HKU\S-1-5-21-3327799069-671972527-1962127419-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b67ad878-6144-11e1-af21-101f74ee3bfc}" => Key deleted successfully.
HKCR\CLSID\{b67ad878-6144-11e1-af21-101f74ee3bfc} => Key not found.
HKU\S-1-5-21-3327799069-671972527-1962127419-1002\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
"HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
C:\Program Files (x86)\Skype\Toolbars => Moved successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => value deleted successfully.
"HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value deleted successfully.
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => Key not found.
HKU\S-1-5-21-3327799069-671972527-1962127419-1002\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value deleted successfully.
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Key not found.
"HKCR\PROTOCOLS\Handler\skypec2c" => Key deleted successfully.
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
HKCR\Wow6432Node\PROTOCOLS\Handler\skypec2c => Key not found.
"HKCR\Wow6432Node\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\pdf.dll not found.
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll not found.
C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll not found.
c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll not found.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl" => Key deleted successfully.
"C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx" => File/Directory not found.
C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA => Moved successfully.
C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore => Moved successfully.

"C:\Users\klimaj\AppData\Local\Temp" directory move:

Could not move "C:\Users\klimaj\AppData\Local\Temp" directory. => Scheduled to move on reboot.


=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-03-14 19:23:54)<=

C:\Users\klimaj\AppData\Local\Temp => Moved successfully.

==== End of Fixlog 19:23:58 ====

Smazáno. Nastala nějaká změna?

IE zatím nespadl. Aktualizace Windows update zatím beze změny - když se spustí, tak hláška o nutnosti aktualizace služby Windows update a po zavření a otevření opět stejná chyba.

Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

Chyba přetrvává, před restartem jsem musel potvrdit chybu s přepisem souborů sam

ComboFix 15-03-14.03 - klimaj 14.03.2015 19:40:15.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4030.1825 [GMT 1:00]
Spuštěný z: c:\users\klimaj\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\vpngui.exe.lnk
c:\windows\msdownld.tmp
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-02-14 do 2015-03-14 )))))))))))))))))))))))))))))))
.
.
2015-03-14 18:48 . 2015-03-14 18:48 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-03-14 18:25 . 2015-03-14 18:53 -------- d-----w- c:\users\klimaj\AppData\Local\Temp
2015-03-14 12:57 . 2015-03-14 12:57 -------- d-sh--w- c:\users\klimaj\AppData\Local\EmieBrowserModeList
2015-03-14 12:25 . 2015-03-14 12:25 -------- d-----w- c:\program files\WindowsPowerShell
2015-03-14 12:25 . 2015-03-14 12:25 -------- d-----w- c:\program files (x86)\WindowsPowerShell
2015-03-14 12:24 . 2015-03-14 12:24 -------- d-----w- c:\windows\system32\dsc
2015-03-14 12:24 . 2015-03-14 12:24 -------- d-----w- c:\windows\system32\Configuration
2015-03-14 12:17 . 2015-03-14 12:17 3179520 ----a-w- c:\windows\system32\rdpcorets.dll
2015-03-14 12:17 . 2015-03-14 12:17 243200 ----a-w- c:\windows\system32\rdpudd.dll
2015-03-14 12:17 . 2015-03-14 12:17 16384 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2015-03-14 12:16 . 2015-03-14 12:16 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2015-03-14 12:16 . 2015-03-14 12:16 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2015-03-14 12:15 . 2015-03-14 12:15 215552 ----a-w- c:\windows\system32\ubpm.dll
2015-03-14 12:15 . 2015-03-14 12:15 171520 ----a-w- c:\windows\SysWow64\ubpm.dll
2015-03-14 12:10 . 2015-03-14 12:10 1424896 ----a-w- c:\windows\system32\WindowsCodecs.dll
2015-03-14 12:10 . 2015-03-14 12:10 1230848 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2015-03-14 12:09 . 2015-03-14 12:09 3204096 ----a-w- c:\windows\system32\win32k.sys
2015-03-14 12:08 . 2015-03-14 12:08 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2015-03-14 12:08 . 2015-03-14 12:08 46080 ----a-w- c:\windows\system32\atmlib.dll
2015-03-14 12:08 . 2015-03-14 12:08 41984 ----a-w- c:\windows\system32\lpk.dll
2015-03-14 12:08 . 2015-03-14 12:08 372224 ----a-w- c:\windows\system32\atmfd.dll
2015-03-14 12:08 . 2015-03-14 12:08 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2015-03-14 12:08 . 2015-03-14 12:08 299008 ----a-w- c:\windows\SysWow64\atmfd.dll
2015-03-14 12:08 . 2015-03-14 12:08 25600 ----a-w- c:\windows\SysWow64\lpk.dll
2015-03-14 12:08 . 2015-03-14 12:08 14336 ----a-w- c:\windows\system32\dciman32.dll
2015-03-14 12:08 . 2015-03-14 12:08 10240 ----a-w- c:\windows\SysWow64\dciman32.dll
2015-03-14 12:08 . 2015-03-14 12:08 100864 ----a-w- c:\windows\system32\fontsub.dll
2015-03-14 12:06 . 2015-03-14 12:06 14177280 ----a-w- c:\windows\system32\shell32.dll
2015-03-14 12:05 . 2015-03-14 12:05 828928 ----a-w- c:\windows\SysWow64\msctf.dll
2015-03-14 12:05 . 2015-03-14 12:05 1067520 ----a-w- c:\windows\system32\msctf.dll
2015-03-14 12:03 . 2015-03-14 12:03 950784 ----a-w- c:\program files\Internet Explorer\iedvtool.dll
2015-03-14 12:00 . 2015-03-14 12:00 693176 ----a-w- c:\windows\system32\winload.efi
2015-03-14 11:57 . 2015-03-14 11:57 406528 ----a-w- c:\windows\system32\scesrv.dll
2015-03-14 11:57 . 2015-03-14 11:57 308224 ----a-w- c:\windows\SysWow64\scesrv.dll
2015-03-14 11:51 . 2015-03-14 11:51 210432 ----a-w- c:\windows\system32\profsvc.dll
2015-03-14 11:50 . 2015-03-14 11:50 141312 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2015-03-14 11:50 . 2015-03-14 11:50 52224 ----a-w- c:\windows\SysWow64\nlaapi.dll
2015-03-14 11:50 . 2015-03-14 11:50 303616 ----a-w- c:\windows\system32\nlasvc.dll
2015-03-14 11:50 . 2015-03-14 11:50 156672 ----a-w- c:\windows\SysWow64\ncsi.dll
2015-03-14 11:49 . 2015-03-14 11:49 87040 ----a-w- c:\windows\system32\TSWbPrxy.exe
2015-03-14 11:48 . 2015-03-14 11:48 241152 ----a-w- c:\windows\system32\pku2u.dll
2015-03-14 11:48 . 2015-03-14 11:48 186880 ----a-w- c:\windows\SysWow64\pku2u.dll
2015-03-14 11:47 . 2015-03-14 11:47 2048 ----a-w- c:\windows\SysWow64\msxml3r.dll
2015-03-14 11:47 . 2015-03-14 11:47 2048 ----a-w- c:\windows\system32\msxml3r.dll
2015-03-14 11:47 . 2015-03-14 11:47 1882624 ----a-w- c:\windows\system32\msxml3.dll
2015-03-14 11:47 . 2015-03-14 11:47 1237504 ----a-w- c:\windows\SysWow64\msxml3.dll
2015-03-14 11:47 . 2015-03-14 11:47 683520 ----a-w- c:\windows\system32\termsrv.dll
2015-03-14 11:45 . 2015-03-14 11:45 77824 ----a-w- c:\windows\system32\packager.dll
2015-03-14 11:45 . 2015-03-14 11:45 67584 ----a-w- c:\windows\SysWow64\packager.dll
2015-03-14 11:45 . 2015-03-14 11:45 861696 ----a-w- c:\windows\system32\oleaut32.dll
2015-03-14 11:45 . 2015-03-14 11:45 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2015-03-14 11:44 . 2015-03-14 11:44 878080 ----a-w- c:\windows\system32\IMJP10K.DLL
2015-03-14 11:44 . 2015-03-14 11:44 701440 ----a-w- c:\windows\SysWow64\IMJP10K.DLL
2015-03-14 11:42 . 2015-03-14 11:42 6583296 ----a-w- c:\windows\system32\mstscax.dll
2015-03-14 11:42 . 2015-03-14 11:42 5702656 ----a-w- c:\windows\SysWow64\mstscax.dll
2015-03-14 11:40 . 2015-03-14 11:40 455168 ----a-w- c:\windows\system32\winlogon.exe
2015-03-14 11:40 . 2015-03-14 11:40 235520 ----a-w- c:\windows\system32\winsta.dll
2015-03-14 11:40 . 2015-03-14 11:40 212480 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2015-03-14 11:40 . 2015-03-14 11:40 150528 ----a-w- c:\windows\system32\rdpcorekmts.dll
2015-03-14 11:40 . 2015-03-14 11:40 39936 ----a-w- c:\windows\system32\drivers\tssecsrv.sys
2015-03-14 11:40 . 2015-03-14 11:40 157696 ----a-w- c:\windows\SysWow64\winsta.dll
2015-03-14 11:38 . 2015-03-14 11:38 424448 ----a-w- c:\windows\system32\rastls.dll
2015-03-14 11:38 . 2015-03-14 11:38 372736 ----a-w- c:\windows\SysWow64\rastls.dll
2015-03-14 11:37 . 2015-03-14 11:37 81560 ----a-w- c:\windows\SysWow64\mscories.dll
2015-03-14 11:37 . 2015-03-14 11:37 1943696 ----a-w- c:\windows\system32\dfshim.dll
2015-03-14 11:37 . 2015-03-14 11:37 156824 ----a-w- c:\windows\SysWow64\mscorier.dll
2015-03-14 11:37 . 2015-03-14 11:37 1131664 ----a-w- c:\windows\SysWow64\dfshim.dll
2015-03-14 11:37 . 2015-03-14 11:37 73880 ----a-w- c:\windows\system32\mscories.dll
2015-03-14 11:37 . 2015-03-14 11:37 156312 ----a-w- c:\windows\system32\mscorier.dll
2015-03-14 11:33 . 2015-03-14 11:33 404480 ----a-w- c:\windows\system32\gdi32.dll
2015-03-14 11:33 . 2015-03-14 11:33 311808 ----a-w- c:\windows\SysWow64\gdi32.dll
2015-03-14 11:19 . 2013-09-25 02:23 1030144 ----a-w- c:\windows\system32\TSWorkspace.dll
2015-03-14 11:19 . 2013-09-25 01:57 792576 ----a-w- c:\windows\SysWow64\TSWorkspace.dll
2015-03-14 11:17 . 2012-08-23 14:10 19456 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys
2015-03-14 11:16 . 2012-08-23 11:12 192000 ----a-w- c:\windows\SysWow64\rdpendp_winip.dll
2015-03-14 11:16 . 2012-08-23 10:51 228864 ----a-w- c:\windows\system32\rdpendp_winip.dll
2015-03-14 11:11 . 2013-09-27 03:19 57344 ----a-w- c:\windows\system32\ncobjapi.dll
2015-03-14 11:11 . 2013-09-27 02:51 75776 ----a-w- c:\windows\system32\wbem\NCProv.dll
2015-03-14 11:11 . 2013-09-27 01:36 46592 ----a-w- c:\windows\SysWow64\ncobjapi.dll
2015-03-14 11:09 . 2013-09-27 03:37 162304 ----a-w- c:\windows\system32\wbem\WMIADAP.exe
2015-03-11 21:31 . 2010-06-02 03:55 77656 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2015-03-11 21:31 . 2010-06-02 03:55 74072 ----a-w- c:\windows\SysWow64\XAPOFX1_5.dll
2015-03-11 21:31 . 2010-06-02 03:55 527192 ----a-w- c:\windows\SysWow64\XAudio2_7.dll
2015-03-11 21:31 . 2010-06-02 03:55 518488 ----a-w- c:\windows\system32\XAudio2_7.dll
2015-03-11 21:29 . 2006-12-08 11:02 251672 ----a-w- c:\windows\SysWow64\xactengine2_5.dll
2015-03-11 21:06 . 2015-02-16 03:21 11910896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5F83D506-F95D-45A1-BD77-F743CE5250AE}\mpengine.dll
2015-03-11 20:35 . 2015-03-11 20:35 -------- d-----w- c:\users\klimaj\AppData\Local\ElevatedDiagnostics
2015-02-22 21:13 . 2015-02-22 21:13 -------- d-----w- c:\programdata\ATI
2015-02-22 20:43 . 2015-02-22 20:43 -------- d-----w- C:\Intel
2015-02-22 20:43 . 2015-02-22 20:43 -------- d-----w- c:\program files (x86)\AMD APP
2015-02-22 20:42 . 2015-02-22 20:42 -------- d-----w- c:\program files\Common Files\ATI Technologies
2015-02-22 20:42 . 2015-02-22 20:42 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2015-02-22 20:38 . 2015-02-22 20:42 -------- d-----w- c:\program files\ATI Technologies
2015-02-22 17:35 . 2015-03-14 17:22 -------- d-----w- C:\AdwCleaner
2015-02-18 06:05 . 2015-03-14 18:23 -------- d-----w- C:\FRST
2015-02-16 17:24 . 2015-02-16 17:24 -------- d-----w- c:\users\klimaj\AppData\Local\TeamViewer
2015-02-16 15:40 . 2015-02-16 15:40 -------- d-----w- c:\windows\CheckSur
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-14 06:41 . 2013-12-04 19:25 778928 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-03-14 06:41 . 2012-02-25 15:51 142512 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-03-14 06:36 . 2014-06-27 08:02 163504 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10145.bin
2015-02-24 03:17 . 2012-02-23 18:26 295552 ------w- c:\windows\system32\MpSigStub.exe
2015-01-29 16:49 . 2012-05-29 13:22 116773704 ----a-w- c:\windows\system32\MRT.exe
2015-01-03 10:38 . 2012-02-27 13:41 1050432 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2015-01-03 10:38 . 2014-01-06 19:19 116728 ----a-w- c:\windows\system32\drivers\aswstm.sys
2015-01-03 10:38 . 2015-01-03 10:38 364512 ----a-w- c:\windows\system32\aswBoot.exe
2015-01-03 10:38 . 2014-08-07 12:39 29208 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-01-03 10:38 . 2013-03-11 12:46 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-01-03 10:38 . 2013-03-11 12:46 267632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-01-03 10:38 . 2012-02-27 13:41 436624 ----a-w- c:\windows\system32\drivers\aswsp.sys
2015-01-03 10:38 . 2012-02-27 13:41 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-01-03 10:38 . 2012-02-27 13:40 83280 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2015-01-03 10:38 . 2015-01-03 10:38 43152 ----a-w- c:\windows\avastSS.scr
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NokiaSuite.exe"="c:\program files (x86)\Nokia\Nokia Suite\NokiaSuite.exe" [2013-10-02 1090912]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-12-11 30877280]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2015-02-19 7416088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"PDF Complete"="c:\program files (x86)\PDF Complete\pdfsty.exe" [2011-02-01 656920]
"QLBController"="c:\program files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe" [2011-01-28 299576]
"File Sanitizer"="c:\program files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe" [2011-02-07 12274688]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-01-26 283160]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"DTRun"="c:\program files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe" [2010-11-24 517456]
"HPConnectionManager"="c:\program files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe" [2011-04-05 94264]
"HPQuickWebProxy"="c:\program files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe" [2011-02-11 76344]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-02-16 5227112]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-10-02 421888]
"Cisco AnyConnect Secure Mobility Agent for Windows"="c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" [2014-11-19 707984]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-10-13 343168]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Nikon Monitor.lnk - c:\program files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe [2007-10-18 479232]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\DeviceNP]
2011-02-03 22:09 75360 ----a-w- c:\windows\System32\DeviceNP.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ DPPassFilter scecli
.
R2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
R2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 HP Power Assistant Service;HP Power Assistant Service;c:\program files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe;c:\program files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [x]
R2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 XobniService;XobniService;c:\program files (x86)\Xobni\XobniService.exe;c:\program files (x86)\Xobni\XobniService.exe [x]
R3 acsock;acsock;c:\windows\system32\DRIVERS\acsock64.sys;c:\windows\SYSNATIVE\DRIVERS\acsock64.sys [x]
R3 BthMtpEnum;Modul pro výčet zařízení Bluetooth MTP;c:\windows\system32\DRIVERS\BthMtpEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthMtpEnum.sys [x]
R3 DAMDrv;DAMDrv;c:\windows\system32\DRIVERS\DAMDrv64.sys;c:\windows\SYSNATIVE\DRIVERS\DAMDrv64.sys [x]
R3 FLCDLOCK;HP ProtectTools Device Locking / Auditing;c:\windows\SysWOW64\flcdlock.exe;c:\windows\SysWOW64\flcdlock.exe [x]
R3 GamesAppIntegrationService;GamesAppIntegrationService;c:\program files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 HP ProtectTools Service;HP ProtectTools Service;c:\program files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe;c:\program files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [x]
R3 hpCMSrv;HP Connection Manager 4 Service;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [x]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys;c:\windows\SYSNATIVE\DRIVERS\ewdcsc.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 MfeEpePc;MfeEpePc; [x]
S1 aswKbd;aswKbd; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe;c:\program files\IDT\WDM\AESTSr64.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 HPDayStarterService;HP DayStarter Service;c:\program files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe;c:\program files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe [x]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [x]
S2 HPFSService;File Sanitizer for HP ProtectTools;c:\program files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe;c:\program files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe [x]
S2 hpHotkeyMonitor;hpHotkeyMonitor;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 jhi_service;Intel(R) Identity Protection Technology Host Interface Service;c:\program files (x86)\Intel\Services\IPT\jhi_service.exe;c:\program files (x86)\Intel\Services\IPT\jhi_service.exe [x]
S2 McAfee Endpoint Encryption Agent;McAfee Endpoint Encryption Agent;c:\program files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe;c:\program files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [x]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe;c:\program files (x86)\PDF Complete\pdfsvc.exe [x]
S2 PdiService;Portrait Displays SDK Service;c:\program files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe;c:\program files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [x]
S2 uArcCapture;ArcCapture;c:\windows\SysWow64\ArcVCapRender\uArcCapture.exe;c:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe;c:\windows\SYSNATIVE\vcsFPService.exe [x]
S2 vpnagent;Cisco AnyConnect Secure Mobility Agent;c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe;c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [x]
S3 ARCVCAM;ARCVCAM, ArcSoft Webcam Sharing Manager Driver;c:\windows\system32\DRIVERS\ArcSoftVCapture.sys;c:\windows\SYSNATIVE\DRIVERS\ArcSoftVCapture.sys [x]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 AvastVBoxSvc;AvastVBox COM Service;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys;c:\windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x]
S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys;c:\windows\SYSNATIVE\DRIVERS\jmcr.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-03-14 06:35 1061704 ----a-w- c:\program files (x86)\Google\Chrome\Application\41.0.2272.89\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2015-03-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-04 06:41]
.
2015-03-11 c:\windows\Tasks\HPCeeScheduleForklimaj.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15 03:43]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-01-03 10:38 860984 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HPPowerAssistant"="c:\program files\Hewlett-Packard\HP Power Assistant\DelayedAppStarter.exe" [2011-01-27 13880]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-01-07 615584]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-01-07 379040]
"MfeEpePcMonitor"="c:\program files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe" [2011-02-09 200704]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2013-07-17 1664000]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-08-31 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-08-31 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-08-31 416024]
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 88.208.99.2 194.213.193.5 172.16.10.1
TCP: Interfaces\{CBECFAA0-A66E-433C-9053-DE8EC964F5B0}: NameServer = 10.4.10.10,10.12.20.20
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_134_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_134_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_134_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_134_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_134.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.17"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_134.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_134.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_134.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Cisco Systems\VPN Client\cvpnd.exe
c:\program files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files (x86)\TeamViewer\TeamViewer_Service.exe
c:\program files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
c:\program files (x86)\TeamViewer\TeamViewer.exe
c:\program files (x86)\TeamViewer\tv_w32.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2015-03-14 20:00:00 - počítač byl restartován
ComboFix-quarantined-files.txt 2015-03-14 18:59
.
Před spuštěním: Volných bajtů: 443 502 698 496
Po spuštění: Volných bajtů: 443 338 248 192
.
- - End Of File - - ED1AE67A05F51746B7FFDF249E497141

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

Driver::
c2cautoupdatesvc
c2cpnrsvc

RegLock::
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jj myší přetáhněte nad ikonu ComboFix a pusťte. CF s spsutí a vykoná příkazy z skriptu.

Bohužel chyba update přetrvává.

ComboFix 15-03-14.03 - klimaj 14.03.2015 21:28:37.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4030.1947 [GMT 1:00]
Spuštěný z: c:\users\klimaj\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\klimaj\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_c2cautoupdatesvc
-------\Service_c2cpnrsvc
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-02-14 do 2015-03-14 )))))))))))))))))))))))))))))))
.
.
2015-03-14 18:25 . 2015-03-14 21:00 -------- d-----w- c:\users\klimaj\AppData\Local\Temp
2015-03-14 12:57 . 2015-03-14 12:57 -------- d-sh--w- c:\users\klimaj\AppData\Local\EmieBrowserModeList
2015-03-14 12:25 . 2015-03-14 12:25 -------- d-----w- c:\program files\WindowsPowerShell
2015-03-14 12:25 . 2015-03-14 12:25 -------- d-----w- c:\program files (x86)\WindowsPowerShell
2015-03-14 12:24 . 2015-03-14 12:24 -------- d-----w- c:\windows\system32\dsc
2015-03-14 12:24 . 2015-03-14 12:24 -------- d-----w- c:\windows\system32\Configuration
2015-03-14 12:17 . 2015-03-14 12:17 3179520 ----a-w- c:\windows\system32\rdpcorets.dll
2015-03-14 12:17 . 2015-03-14 12:17 243200 ----a-w- c:\windows\system32\rdpudd.dll
2015-03-14 12:17 . 2015-03-14 12:17 16384 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2015-03-14 12:16 . 2015-03-14 12:16 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2015-03-14 12:16 . 2015-03-14 12:16 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2015-03-14 12:15 . 2015-03-14 12:15 215552 ----a-w- c:\windows\system32\ubpm.dll
2015-03-14 12:15 . 2015-03-14 12:15 171520 ----a-w- c:\windows\SysWow64\ubpm.dll
2015-03-14 12:10 . 2015-03-14 12:10 1424896 ----a-w- c:\windows\system32\WindowsCodecs.dll
2015-03-14 12:10 . 2015-03-14 12:10 1230848 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2015-03-14 12:09 . 2015-03-14 12:09 3204096 ----a-w- c:\windows\system32\win32k.sys
2015-03-14 12:08 . 2015-03-14 12:08 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2015-03-14 12:08 . 2015-03-14 12:08 46080 ----a-w- c:\windows\system32\atmlib.dll
2015-03-14 12:08 . 2015-03-14 12:08 41984 ----a-w- c:\windows\system32\lpk.dll
2015-03-14 12:08 . 2015-03-14 12:08 372224 ----a-w- c:\windows\system32\atmfd.dll
2015-03-14 12:08 . 2015-03-14 12:08 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2015-03-14 12:08 . 2015-03-14 12:08 299008 ----a-w- c:\windows\SysWow64\atmfd.dll
2015-03-14 12:08 . 2015-03-14 12:08 25600 ----a-w- c:\windows\SysWow64\lpk.dll
2015-03-14 12:08 . 2015-03-14 12:08 14336 ----a-w- c:\windows\system32\dciman32.dll
2015-03-14 12:08 . 2015-03-14 12:08 10240 ----a-w- c:\windows\SysWow64\dciman32.dll
2015-03-14 12:08 . 2015-03-14 12:08 100864 ----a-w- c:\windows\system32\fontsub.dll
2015-03-14 12:06 . 2015-03-14 12:06 14177280 ----a-w- c:\windows\system32\shell32.dll
2015-03-14 12:05 . 2015-03-14 12:05 828928 ----a-w- c:\windows\SysWow64\msctf.dll
2015-03-14 12:05 . 2015-03-14 12:05 1067520 ----a-w- c:\windows\system32\msctf.dll
2015-03-14 12:03 . 2015-03-14 12:03 950784 ----a-w- c:\program files\Internet Explorer\iedvtool.dll
2015-03-14 12:00 . 2015-03-14 12:00 693176 ----a-w- c:\windows\system32\winload.efi
2015-03-14 11:57 . 2015-03-14 11:57 406528 ----a-w- c:\windows\system32\scesrv.dll
2015-03-14 11:57 . 2015-03-14 11:57 308224 ----a-w- c:\windows\SysWow64\scesrv.dll
2015-03-14 11:51 . 2015-03-14 11:51 210432 ----a-w- c:\windows\system32\profsvc.dll
2015-03-14 11:50 . 2015-03-14 11:50 141312 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2015-03-14 11:50 . 2015-03-14 11:50 52224 ----a-w- c:\windows\SysWow64\nlaapi.dll
2015-03-14 11:50 . 2015-03-14 11:50 303616 ----a-w- c:\windows\system32\nlasvc.dll
2015-03-14 11:50 . 2015-03-14 11:50 156672 ----a-w- c:\windows\SysWow64\ncsi.dll
2015-03-14 11:49 . 2015-03-14 11:49 87040 ----a-w- c:\windows\system32\TSWbPrxy.exe
2015-03-14 11:48 . 2015-03-14 11:48 241152 ----a-w- c:\windows\system32\pku2u.dll
2015-03-14 11:48 . 2015-03-14 11:48 186880 ----a-w- c:\windows\SysWow64\pku2u.dll
2015-03-14 11:47 . 2015-03-14 11:47 2048 ----a-w- c:\windows\SysWow64\msxml3r.dll
2015-03-14 11:47 . 2015-03-14 11:47 2048 ----a-w- c:\windows\system32\msxml3r.dll
2015-03-14 11:47 . 2015-03-14 11:47 1882624 ----a-w- c:\windows\system32\msxml3.dll
2015-03-14 11:47 . 2015-03-14 11:47 1237504 ----a-w- c:\windows\SysWow64\msxml3.dll
2015-03-14 11:47 . 2015-03-14 11:47 683520 ----a-w- c:\windows\system32\termsrv.dll
2015-03-14 11:45 . 2015-03-14 11:45 77824 ----a-w- c:\windows\system32\packager.dll
2015-03-14 11:45 . 2015-03-14 11:45 67584 ----a-w- c:\windows\SysWow64\packager.dll
2015-03-14 11:45 . 2015-03-14 11:45 861696 ----a-w- c:\windows\system32\oleaut32.dll
2015-03-14 11:45 . 2015-03-14 11:45 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2015-03-14 11:44 . 2015-03-14 11:44 878080 ----a-w- c:\windows\system32\IMJP10K.DLL
2015-03-14 11:44 . 2015-03-14 11:44 701440 ----a-w- c:\windows\SysWow64\IMJP10K.DLL
2015-03-14 11:42 . 2015-03-14 11:42 6583296 ----a-w- c:\windows\system32\mstscax.dll
2015-03-14 11:42 . 2015-03-14 11:42 5702656 ----a-w- c:\windows\SysWow64\mstscax.dll
2015-03-14 11:40 . 2015-03-14 11:40 455168 ----a-w- c:\windows\system32\winlogon.exe
2015-03-14 11:40 . 2015-03-14 11:40 235520 ----a-w- c:\windows\system32\winsta.dll
2015-03-14 11:40 . 2015-03-14 11:40 212480 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2015-03-14 11:40 . 2015-03-14 11:40 150528 ----a-w- c:\windows\system32\rdpcorekmts.dll
2015-03-14 11:40 . 2015-03-14 11:40 39936 ----a-w- c:\windows\system32\drivers\tssecsrv.sys
2015-03-14 11:40 . 2015-03-14 11:40 157696 ----a-w- c:\windows\SysWow64\winsta.dll
2015-03-14 11:38 . 2015-03-14 11:38 424448 ----a-w- c:\windows\system32\rastls.dll
2015-03-14 11:38 . 2015-03-14 11:38 372736 ----a-w- c:\windows\SysWow64\rastls.dll
2015-03-14 11:37 . 2015-03-14 11:37 81560 ----a-w- c:\windows\SysWow64\mscories.dll
2015-03-14 11:37 . 2015-03-14 11:37 1943696 ----a-w- c:\windows\system32\dfshim.dll
2015-03-14 11:37 . 2015-03-14 11:37 156824 ----a-w- c:\windows\SysWow64\mscorier.dll
2015-03-14 11:37 . 2015-03-14 11:37 1131664 ----a-w- c:\windows\SysWow64\dfshim.dll
2015-03-14 11:37 . 2015-03-14 11:37 73880 ----a-w- c:\windows\system32\mscories.dll
2015-03-14 11:37 . 2015-03-14 11:37 156312 ----a-w- c:\windows\system32\mscorier.dll
2015-03-14 11:33 . 2015-03-14 11:33 404480 ----a-w- c:\windows\system32\gdi32.dll
2015-03-14 11:33 . 2015-03-14 11:33 311808 ----a-w- c:\windows\SysWow64\gdi32.dll
2015-03-14 11:19 . 2013-09-25 02:23 1030144 ----a-w- c:\windows\system32\TSWorkspace.dll
2015-03-14 11:19 . 2013-09-25 01:57 792576 ----a-w- c:\windows\SysWow64\TSWorkspace.dll
2015-03-14 11:17 . 2012-08-23 14:10 19456 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys
2015-03-14 11:16 . 2012-08-23 11:12 192000 ----a-w- c:\windows\SysWow64\rdpendp_winip.dll
2015-03-14 11:16 . 2012-08-23 10:51 228864 ----a-w- c:\windows\system32\rdpendp_winip.dll
2015-03-14 11:11 . 2013-09-27 03:19 57344 ----a-w- c:\windows\system32\ncobjapi.dll
2015-03-14 11:11 . 2013-09-27 02:51 75776 ----a-w- c:\windows\system32\wbem\NCProv.dll
2015-03-14 11:11 . 2013-09-27 01:36 46592 ----a-w- c:\windows\SysWow64\ncobjapi.dll
2015-03-14 11:09 . 2013-09-27 03:37 162304 ----a-w- c:\windows\system32\wbem\WMIADAP.exe
2015-03-11 21:31 . 2010-06-02 03:55 77656 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2015-03-11 21:31 . 2010-06-02 03:55 74072 ----a-w- c:\windows\SysWow64\XAPOFX1_5.dll
2015-03-11 21:31 . 2010-06-02 03:55 527192 ----a-w- c:\windows\SysWow64\XAudio2_7.dll
2015-03-11 21:31 . 2010-06-02 03:55 518488 ----a-w- c:\windows\system32\XAudio2_7.dll
2015-03-11 21:29 . 2006-12-08 11:02 251672 ----a-w- c:\windows\SysWow64\xactengine2_5.dll
2015-03-11 21:06 . 2015-02-16 03:21 11910896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5F83D506-F95D-45A1-BD77-F743CE5250AE}\mpengine.dll
2015-03-11 20:35 . 2015-03-11 20:35 -------- d-----w- c:\users\klimaj\AppData\Local\ElevatedDiagnostics
2015-02-22 21:13 . 2015-02-22 21:13 -------- d-----w- c:\programdata\ATI
2015-02-22 20:43 . 2015-02-22 20:43 -------- d-----w- C:\Intel
2015-02-22 20:43 . 2015-02-22 20:43 -------- d-----w- c:\program files (x86)\AMD APP
2015-02-22 20:42 . 2015-02-22 20:42 -------- d-----w- c:\program files\Common Files\ATI Technologies
2015-02-22 20:42 . 2015-02-22 20:42 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2015-02-22 20:38 . 2015-02-22 20:42 -------- d-----w- c:\program files\ATI Technologies
2015-02-22 17:35 . 2015-03-14 17:22 -------- d-----w- C:\AdwCleaner
2015-02-18 06:05 . 2015-03-14 18:23 -------- d-----w- C:\FRST
2015-02-16 17:24 . 2015-02-16 17:24 -------- d-----w- c:\users\klimaj\AppData\Local\TeamViewer
2015-02-16 15:40 . 2015-02-16 15:40 -------- d-----w- c:\windows\CheckSur
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-14 06:41 . 2013-12-04 19:25 778928 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-03-14 06:41 . 2012-02-25 15:51 142512 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-03-14 06:36 . 2014-06-27 08:02 163504 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10145.bin
2015-02-24 03:17 . 2012-02-23 18:26 295552 ------w- c:\windows\system32\MpSigStub.exe
2015-01-29 16:49 . 2012-05-29 13:22 116773704 ----a-w- c:\windows\system32\MRT.exe
2015-01-03 10:38 . 2012-02-27 13:41 1050432 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2015-01-03 10:38 . 2014-01-06 19:19 116728 ----a-w- c:\windows\system32\drivers\aswstm.sys
2015-01-03 10:38 . 2015-01-03 10:38 364512 ----a-w- c:\windows\system32\aswBoot.exe
2015-01-03 10:38 . 2014-08-07 12:39 29208 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-01-03 10:38 . 2013-03-11 12:46 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-01-03 10:38 . 2013-03-11 12:46 267632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-01-03 10:38 . 2012-02-27 13:41 436624 ----a-w- c:\windows\system32\drivers\aswsp.sys
2015-01-03 10:38 . 2012-02-27 13:41 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-01-03 10:38 . 2012-02-27 13:40 83280 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2015-01-03 10:38 . 2015-01-03 10:38 43152 ----a-w- c:\windows\avastSS.scr
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NokiaSuite.exe"="c:\program files (x86)\Nokia\Nokia Suite\NokiaSuite.exe" [2013-10-02 1090912]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-12-11 30877280]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2015-02-19 7416088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"PDF Complete"="c:\program files (x86)\PDF Complete\pdfsty.exe" [2011-02-01 656920]
"QLBController"="c:\program files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe" [2011-01-28 299576]
"File Sanitizer"="c:\program files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe" [2011-02-07 12274688]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-01-26 283160]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"DTRun"="c:\program files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe" [2010-11-24 517456]
"HPConnectionManager"="c:\program files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe" [2011-04-05 94264]
"HPQuickWebProxy"="c:\program files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe" [2011-02-11 76344]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-02-16 5227112]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-10-02 421888]
"Cisco AnyConnect Secure Mobility Agent for Windows"="c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" [2014-11-19 707984]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-10-13 343168]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Nikon Monitor.lnk - c:\program files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe [2007-10-18 479232]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\DeviceNP]
2011-02-03 22:09 75360 ----a-w- c:\windows\System32\DeviceNP.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ DPPassFilter scecli
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 HP Power Assistant Service;HP Power Assistant Service;c:\program files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe;c:\program files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [x]
R2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 XobniService;XobniService;c:\program files (x86)\Xobni\XobniService.exe;c:\program files (x86)\Xobni\XobniService.exe [x]
R3 acsock;acsock;c:\windows\system32\DRIVERS\acsock64.sys;c:\windows\SYSNATIVE\DRIVERS\acsock64.sys [x]
R3 BthMtpEnum;Modul pro výčet zařízení Bluetooth MTP;c:\windows\system32\DRIVERS\BthMtpEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthMtpEnum.sys [x]
R3 DAMDrv;DAMDrv;c:\windows\system32\DRIVERS\DAMDrv64.sys;c:\windows\SYSNATIVE\DRIVERS\DAMDrv64.sys [x]
R3 FLCDLOCK;HP ProtectTools Device Locking / Auditing;c:\windows\SysWOW64\flcdlock.exe;c:\windows\SysWOW64\flcdlock.exe [x]
R3 GamesAppIntegrationService;GamesAppIntegrationService;c:\program files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 HP ProtectTools Service;HP ProtectTools Service;c:\program files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe;c:\program files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [x]
R3 hpCMSrv;HP Connection Manager 4 Service;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [x]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys;c:\windows\SYSNATIVE\DRIVERS\ewdcsc.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 MfeEpePc;MfeEpePc; [x]
S1 aswKbd;aswKbd; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe;c:\program files\IDT\WDM\AESTSr64.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 HPDayStarterService;HP DayStarter Service;c:\program files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe;c:\program files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe [x]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [x]
S2 HPFSService;File Sanitizer for HP ProtectTools;c:\program files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe;c:\program files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe [x]
S2 hpHotkeyMonitor;hpHotkeyMonitor;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 jhi_service;Intel(R) Identity Protection Technology Host Interface Service;c:\program files (x86)\Intel\Services\IPT\jhi_service.exe;c:\program files (x86)\Intel\Services\IPT\jhi_service.exe [x]
S2 McAfee Endpoint Encryption Agent;McAfee Endpoint Encryption Agent;c:\program files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe;c:\program files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [x]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe;c:\program files (x86)\PDF Complete\pdfsvc.exe [x]
S2 PdiService;Portrait Displays SDK Service;c:\program files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe;c:\program files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [x]
S2 uArcCapture;ArcCapture;c:\windows\SysWow64\ArcVCapRender\uArcCapture.exe;c:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe;c:\windows\SYSNATIVE\vcsFPService.exe [x]
S2 vpnagent;Cisco AnyConnect Secure Mobility Agent;c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe;c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [x]
S3 ARCVCAM;ARCVCAM, ArcSoft Webcam Sharing Manager Driver;c:\windows\system32\DRIVERS\ArcSoftVCapture.sys;c:\windows\SYSNATIVE\DRIVERS\ArcSoftVCapture.sys [x]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 AvastVBoxSvc;AvastVBox COM Service;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys;c:\windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x]
S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys;c:\windows\SYSNATIVE\DRIVERS\jmcr.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-03-14 06:35 1061704 ----a-w- c:\program files (x86)\Google\Chrome\Application\41.0.2272.89\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2015-03-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-04 06:41]
.
2015-03-11 c:\windows\Tasks\HPCeeScheduleForklimaj.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15 03:43]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-01-03 10:38 860984 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HPPowerAssistant"="c:\program files\Hewlett-Packard\HP Power Assistant\DelayedAppStarter.exe" [2011-01-27 13880]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-01-07 615584]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-01-07 379040]
"MfeEpePcMonitor"="c:\program files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe" [2011-02-09 200704]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2013-07-17 1664000]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-08-31 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-08-31 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-08-31 416024]
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 88.208.99.2 194.213.193.5 172.16.10.1
TCP: Interfaces\{CBECFAA0-A66E-433C-9053-DE8EC964F5B0}: NameServer = 10.4.10.10,10.12.20.20
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_134_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_134_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Cisco Systems\VPN Client\cvpnd.exe
c:\program files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files (x86)\TeamViewer\TeamViewer_Service.exe
c:\program files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
c:\program files (x86)\TeamViewer\TeamViewer.exe
c:\program files (x86)\TeamViewer\tv_w32.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2015-03-14 22:06:54 - počítač byl restartován
ComboFix-quarantined-files.txt 2015-03-14 21:06
ComboFix2.txt 2015-03-14 19:00
.
Před spuštěním: Volných bajtů: 442 848 817 152
Po spuštění: Volných bajtů: 442 768 994 304
.
- - End Of File - - F359FF00E8AEF9C3575F412A04B0331F

OK. CF odinstalujte pomocí T-Cleaneru: http://vyosek.tym.cz/pro_usery/T-Cleaner.exe. Pak zkuste použít FixIt: http://windows.microsoft.com/cs-cz/wind ... =windows-7 .

Bohužel odkaz na Vyosek stránku již není funkční....

OK, zkuste to zde: http://www.softpedia.com/get/Security/S ... aner.shtml .

Děkuji - T-Cleaner proběhl a odinstalace proběhla. Kit od Microsoftu jsem zkusil již dříve i nyní, bohužel to nepomohlo. Aspoň ale ten Internet Explorer již nepadá. Děkuji.