VIRY.CZ

Dobrý den,

v Google Chrome vyskakující okna reklam. Poprosím o kontrolu logu z RSIT.


Logfile of random's system information tool 1.10 (written by random/random)
Run by Vena at 2015-09-01 15:13:39
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 121 GB (52%) free of 231 GB
Total RAM: 3835 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:15:40, on 1.9.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17937)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\QNAP\Qfinder\iSCSIAgent.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2RPK.EXE
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\system32\spool\DRIVERS\x64\3\CNAC9SWK.EXE
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\Cobian Backup 11\Cobian.exe
E:\Program Files II\Ektiv\Ektiv2.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera_crashreporter.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files\trend micro\Vena.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 216.239.32.20 google.com www.google.com
O1 - Hosts: 216.239.32.20 google.com www.google.ad
O1 - Hosts: 216.239.32.20 google.com www.google.ae
O1 - Hosts: 216.239.32.20 google.com www.google.com.af
O1 - Hosts: 216.239.32.20 google.com www.google.com.ag
O1 - Hosts: 216.239.32.20 google.com www.google.com.ai
O1 - Hosts: 216.239.32.20 google.com www.google.al
O1 - Hosts: 216.239.32.20 google.com www.google.am
O1 - Hosts: 216.239.32.20 google.com www.google.co.ao
O1 - Hosts: 216.239.32.20 google.com www.google.com.ar
O1 - Hosts: 216.239.32.20 google.com www.google.as
O1 - Hosts: 216.239.32.20 google.com www.google.at
O1 - Hosts: 216.239.32.20 google.com www.google.com.au
O1 - Hosts: 216.239.32.20 google.com www.google.az
O1 - Hosts: 216.239.32.20 google.com www.google.ba
O1 - Hosts: 216.239.32.20 google.com www.google.com.bd
O1 - Hosts: 216.239.32.20 google.com www.google.be
O1 - Hosts: 216.239.32.20 google.com www.google.bf
O1 - Hosts: 216.239.32.20 google.com www.google.bg
O1 - Hosts: 216.239.32.20 google.com www.google.com.bh
O1 - Hosts: 216.239.32.20 google.com www.google.bi
O1 - Hosts: 216.239.32.20 google.com www.google.bj
O1 - Hosts: 216.239.32.20 google.com www.google.com.bn
O1 - Hosts: 216.239.32.20 google.com www.google.com.bo
O1 - Hosts: 216.239.32.20 google.com www.google.com.br
O1 - Hosts: 216.239.32.20 google.com www.google.bs
O1 - Hosts: 216.239.32.20 google.com www.google.bt
O1 - Hosts: 216.239.32.20 google.com www.google.co.bw
O1 - Hosts: 216.239.32.20 google.com www.google.by
O1 - Hosts: 216.239.32.20 google.com www.google.com.bz
O1 - Hosts: 216.239.32.20 google.com www.google.ca
O1 - Hosts: 216.239.32.20 google.com www.google.cd
O1 - Hosts: 216.239.32.20 google.com www.google.cf
O1 - Hosts: 216.239.32.20 google.com www.google.cg
O1 - Hosts: 216.239.32.20 google.com www.google.ch
O1 - Hosts: 216.239.32.20 google.com www.google.ci
O1 - Hosts: 216.239.32.20 google.com www.google.co.ck
O1 - Hosts: 216.239.32.20 google.com www.google.cl
O1 - Hosts: 216.239.32.20 google.com www.google.cm
O1 - Hosts: 216.239.32.20 google.com www.google.cn
O1 - Hosts: 216.239.32.20 google.com www.google.com.co
O1 - Hosts: 216.239.32.20 google.com www.google.co.cr
O1 - Hosts: 216.239.32.20 google.com www.google.com.cu
O1 - Hosts: 216.239.32.20 google.com www.google.cv
O1 - Hosts: 216.239.32.20 google.com www.google.com.cy
O1 - Hosts: 216.239.32.20 google.com www.google.cz
O1 - Hosts: 216.239.32.20 google.com www.google.de
O1 - Hosts: 216.239.32.20 google.com www.google.dj
O1 - Hosts: 216.239.32.20 google.com www.google.dk
O1 - Hosts: 216.239.32.20 google.com www.google.dm
O1 - Hosts: 216.239.32.20 google.com www.google.com.do
O1 - Hosts: 216.239.32.20 google.com www.google.dz
O1 - Hosts: 216.239.32.20 google.com www.google.com.ec
O1 - Hosts: 216.239.32.20 google.com www.google.ee
O1 - Hosts: 216.239.32.20 google.com www.google.com.eg
O1 - Hosts: 216.239.32.20 google.com www.google.es
O1 - Hosts: 216.239.32.20 google.com www.google.com.et
O1 - Hosts: 216.239.32.20 google.com www.google.fi
O1 - Hosts: 216.239.32.20 google.com www.google.com.fj
O1 - Hosts: 216.239.32.20 google.com www.google.fm
O1 - Hosts: 216.239.32.20 google.com www.google.fr
O1 - Hosts: 216.239.32.20 google.com www.google.ga
O1 - Hosts: 216.239.32.20 google.com www.google.ge
O1 - Hosts: 216.239.32.20 google.com www.google.gg
O1 - Hosts: 216.239.32.20 google.com www.google.com.gh
O1 - Hosts: 216.239.32.20 google.com www.google.com.gi
O1 - Hosts: 216.239.32.20 google.com www.google.gl
O1 - Hosts: 216.239.32.20 google.com www.google.gm
O1 - Hosts: 216.239.32.20 google.com www.google.gp
O1 - Hosts: 216.239.32.20 google.com www.google.gr
O1 - Hosts: 216.239.32.20 google.com www.google.com.gt
O1 - Hosts: 216.239.32.20 google.com www.google.gy
O1 - Hosts: 216.239.32.20 google.com www.google.com.hk
O1 - Hosts: 216.239.32.20 google.com www.google.hn
O1 - Hosts: 216.239.32.20 google.com www.google.hr
O1 - Hosts: 216.239.32.20 google.com www.google.ht
O1 - Hosts: 216.239.32.20 google.com www.google.hu
O1 - Hosts: 216.239.32.20 google.com www.google.co.id
O1 - Hosts: 216.239.32.20 google.com www.google.ie
O1 - Hosts: 216.239.32.20 google.com www.google.co.il
O1 - Hosts: 216.239.32.20 google.com www.google.im
O1 - Hosts: 216.239.32.20 google.com www.google.co.in
O1 - Hosts: 216.239.32.20 google.com www.google.iq
O1 - Hosts: 216.239.32.20 google.com www.google.is
O1 - Hosts: 216.239.32.20 google.com www.google.it
O1 - Hosts: 216.239.32.20 google.com www.google.je
O1 - Hosts: 216.239.32.20 google.com www.google.com.jm
O1 - Hosts: 216.239.32.20 google.com www.google.jo
O1 - Hosts: 216.239.32.20 google.com www.google.co.jp
O1 - Hosts: 216.239.32.20 google.com www.google.co.ke
O1 - Hosts: 216.239.32.20 google.com www.google.com.kh
O1 - Hosts: 216.239.32.20 google.com www.google.ki
O1 - Hosts: 216.239.32.20 google.com www.google.kg
O1 - Hosts: 216.239.32.20 google.com www.google.co.kr
O1 - Hosts: 216.239.32.20 google.com www.google.com.kw
O1 - Hosts: 216.239.32.20 google.com www.google.kz
O1 - Hosts: 216.239.32.20 google.com www.google.la
O1 - Hosts: 216.239.32.20 google.com www.google.com.lb
O1 - Hosts: 216.239.32.20 google.com www.google.li
O1 - Hosts: 216.239.32.20 google.com www.google.lk
O1 - Hosts: 216.239.32.20 google.com www.google.co.ls
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [Cobian Backup 11] "C:\Program Files (x86)\Cobian Backup 11\Cobian.exe"
O4 - HKLM\..\Run: [Ektiv] E:\Program Files II\Ektiv\Ektiv2.exe /mini
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs:
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: Atheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate1d0d9f2b3d810a4) (gupdate1d0d9f2b3d810a4) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem1d0d9f2b3f963e8) (gupdatem1d0d9f2b3f963e8) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Sentinel LDK License Manager (hasplms) - Unknown owner - C:\Windows\system32\hasplms.exe (file missing)
O23 - Service: HP Health Check Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PDF Architect 2 - pdfforge GmbH - C:\Program Files (x86)\PDF Architect 2\ws.exe
O23 - Service: pdfforge CrashHandler - pdfforge GmbH - C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: XobniService - Xobni Corporation - C:\Program Files (x86)\Xobni\XobniService.exe

--
End of file - 17042 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe"
taskeng.exe {04C1FBA0-83C7-486D-8B2D-E38DC4071E1A}
C:\Windows\system32\rundll32.exe "C:\Users\Vena\AppData\Local\Builder Bubble\Bin\BuilderBubble.dll",#3
"C:\Program Files (x86)\QNAP\Qfinder\iSCSIAgent.exe"
C:\Windows\system32\rundll32.exe "C:\Users\Vena\AppData\Local\Builder Bubble\Bin\BuilderBubble.dll",#3
C:\Windows\Explorer.EXE
"C:\Program Files\COMODO\COMODO Internet Security\cistray.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe"
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --keep-alive-for-test --silent-launch --disable-breakpad --force-fieldtrials --load-component-extension="C:\Users\Vena\AppData\Local\Builder Bubble\Component"
C:\Windows\system32\hasplms.exe -run
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
C:\Windows\system32\HPSIsvc.exe
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\system32\wbem\wmiprvse.exe
WLIDSvcM.exe 2772
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE"
C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2RPK.EXE
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2456.0.2094144662\1323957298" --disable-breakpad --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,22,45 --disable-accelerated-video-decode --gpu-vendor-id=0x1002 --gpu-device-id=0x68e4 --gpu-driver-vendor="ATI Technologies Inc." --gpu-driver-version=8.812.1.3000 --ignored=" --type=renderer " /prefetch:822062411
C:\Windows\system32\spool\DRIVERS\x64\3\CNAC9SWK.EXE !hide Canon LBP7200C
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe"
"C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
"C:\Program Files (x86)\Cobian Backup 11\Cobian.exe"
"E:\Program Files II\Ektiv\Ektiv2.exe" /mini
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
"C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --disable-breakpad --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/OmniboxBundledExperimentV1/StandardR5/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_03/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_06/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --disable-accelerated-video-decode --channel="2456.1.1750298026\650866808" --font-cache-shared-handle=2496 /prefetch:673131151
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\31.0.1889.174\opera_crashreporter.exe" --ran-launcher --crash-reporter-parent-id=2000
"C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe" --type=gpu-process --channel="2000.0.1016831648\637636844" --crash-reporter-pid=932 --enable-mse-h264-support --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,23,46 --disable-accelerated-video-decode --gpu-vendor-id=0x1002 --gpu-device-id=0x68e4 --gpu-driver-vendor="ATI Technologies Inc." --gpu-driver-version=8.812.1.3000 --crash-reporter-pid=932 --enable-mse-h264-support --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --enable-deferred-image-decoding --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_18_0_0_232.dll" --ppapi-flash-version=18.0.0.232 --crash-reporter-pid=932 --enable-mse-h264-support --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --disable-accelerated-video-decode --channel="2000.2.1987640663\1936865067" /prefetch:673131151
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --enable-deferred-image-decoding --lang=cs --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_18_0_0_232.dll" --ppapi-flash-version=18.0.0.232 --crash-reporter-pid=932 --enable-mse-h264-support --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --disable-accelerated-video-decode --channel="2000.3.997521709\797833132" /prefetch:673131151
"C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --enable-deferred-image-decoding --lang=cs --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_18_0_0_232.dll" --ppapi-flash-version=18.0.0.232 --crash-reporter-pid=932 --enable-mse-h264-support --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --disable-accelerated-video-decode --channel="2000.4.1760593200\1419926373" /prefetch:673131151
"C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --enable-deferred-image-decoding --lang=cs --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_18_0_0_232.dll" --ppapi-flash-version=18.0.0.232 --crash-reporter-pid=932 --enable-mse-h264-support --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --disable-accelerated-video-decode --channel="2000.5.1326873288\1657313256" /prefetch:673131151
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe" /hidden
"C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe"
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe" "<hpNotification><Toast><Title>HP Wireless Assistant</Title><Text>Combo: On</Text><IconPath>C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WA_tray_32_on.ico</IconPath><ID>519540991</ID><Path>C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe</Path><Parameters></Parameters></Toast></hpNotification>"
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
"C:\Program Files\totalcmd\TOTALCMD.EXE"
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
C:\Windows\splwow64.exe 12288
"C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --enable-deferred-image-decoding --lang=cs --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_18_0_0_232.dll" --ppapi-flash-version=18.0.0.232 --crash-reporter-pid=932 --enable-mse-h264-support --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --disable-accelerated-video-decode --channel="2000.32.718148041\1007792179" /prefetch:673131151
taskeng.exe {BE39D4EC-C24F-4924-8AE9-AF62D77C2AD0}
"E:\RSITx64.exe"


======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\HPCeeScheduleForVENA-HP$.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForVENA-HP$ (null)
C:\Windows\tasks\HPCeeScheduleForVena.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForVena (null)

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-22 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-04-13 60576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-22 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2011-01-12 6602856]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-14 2837288]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2011-04-13 627360]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2011-04-13 379552]
"HPWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe [2010-07-21 8192]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-08-06 1427648]
"CNAP2 Launcher"=C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [2010-10-15 226784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-15 998104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CNAP2 Launcher]
C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [2010-10-15 226784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\Vena\AppData\Roaming\Seznam.cz\szninstall.exe -c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Users\Vena\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe -q []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EvtMgr6]
C:\Program Files\Logitech\SetPointP\SetPoint.exe [2011-10-07 1744152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage]
C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NtVdmSrv]
C:\Windows\inf\ntvdm.vbe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-03-04 336384]
"HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2010-11-09 586296]
"HPOSD"=C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [2010-12-13 318520]
"VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]
"Cobian Backup 11"=C:\Program Files (x86)\Cobian Backup 11\Cobian.exe [2012-12-06 720896]
"gmsd_re_002020053"= []
"Ektiv"=E:\Program Files II\Ektiv\Ektiv2.exe [2008-04-06 354304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2011-09-27 68376]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2015-09-01 15:13:40 ----D---- C:\Program Files\trend micro
2015-09-01 15:13:39 ----D---- C:\rsit
2015-08-31 01:58:53 ----D---- C:\Users\Vena\AppData\Roaming\Ektiv2
2015-08-22 16:43:52 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-22 16:43:52 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-22 16:14:33 ----D---- C:\$WINDOWS.~BT
2015-08-22 16:13:12 ----HD---- C:\$Windows.~WS
2015-08-18 22:15:57 ----D---- C:\Program Files (x86)\Google
2015-08-18 14:28:45 ----D---- C:\Program Files (x86)\VS Revo Group
2015-08-15 16:27:05 ----D---- C:\Users\Vena\AppData\Roaming\Skype
2015-08-12 23:20:32 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-08-12 23:20:32 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-08-12 23:20:32 ----A---- C:\Windows\system32\iertutil.dll
2015-08-12 23:20:32 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-08-12 23:20:31 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-08-12 23:20:31 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-08-12 23:20:31 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-08-12 23:20:30 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-08-12 23:20:30 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-08-12 23:20:30 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-08-12 23:20:30 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-08-12 23:20:30 ----A---- C:\Windows\system32\iernonce.dll
2015-08-12 23:20:30 ----A---- C:\Windows\system32\ie4uinit.exe
2015-08-12 23:20:29 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-08-12 23:20:29 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-08-12 23:20:29 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-08-12 23:20:29 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-12 23:20:27 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-08-12 23:20:27 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-08-12 23:20:27 ----A---- C:\Windows\system32\urlmon.dll
2015-08-12 23:20:27 ----A---- C:\Windows\system32\iedkcs32.dll
2015-08-12 23:20:26 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-08-12 23:20:26 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-08-12 23:20:26 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-08-12 23:20:26 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-08-12 23:20:26 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-08-12 23:20:26 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-12 23:20:26 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-08-12 23:20:25 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-08-12 23:20:25 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-08-12 23:20:25 ----A---- C:\Windows\system32\msfeeds.dll
2015-08-12 23:20:25 ----A---- C:\Windows\system32\dxtrans.dll
2015-08-12 23:20:24 ----A---- C:\Windows\system32\iesetup.dll
2015-08-12 23:20:23 ----A---- C:\Windows\system32\ieapfltr.dll
2015-08-12 23:20:22 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-08-12 23:20:21 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-08-12 23:20:21 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-08-12 23:20:21 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-08-12 23:20:21 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-08-12 23:20:21 ----A---- C:\Windows\system32\vbscript.dll
2015-08-12 23:20:21 ----A---- C:\Windows\system32\jsproxy.dll
2015-08-12 23:20:21 ----A---- C:\Windows\system32\ieUnatt.exe
2015-08-12 23:20:20 ----A---- C:\Windows\system32\ieui.dll
2015-08-12 23:20:20 ----A---- C:\Windows\system32\ieframe.dll
2015-08-12 23:20:20 ----A---- C:\Windows\system32\dxtmsft.dll
2015-08-12 23:20:19 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-08-12 23:20:19 ----A---- C:\Windows\system32\mshtmled.dll
2015-08-12 23:20:19 ----A---- C:\Windows\system32\jscript9diag.dll
2015-08-12 23:20:19 ----A---- C:\Windows\system32\jscript9.dll
2015-08-12 23:20:19 ----A---- C:\Windows\system32\jscript.dll
2015-08-12 23:20:18 ----A---- C:\Windows\system32\wininet.dll
2015-08-12 23:20:18 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-08-12 23:20:17 ----A---- C:\Windows\system32\msrating.dll
2015-08-12 23:20:17 ----A---- C:\Windows\system32\mshtml.dll
2015-08-12 23:13:15 ----A---- C:\Windows\system32\generaltel.dll
2015-08-12 23:13:15 ----A---- C:\Windows\system32\devinv.dll
2015-08-12 23:13:15 ----A---- C:\Windows\system32\appraiser.dll
2015-08-12 23:13:14 ----A---- C:\Windows\system32\invagent.dll
2015-08-12 23:13:14 ----A---- C:\Windows\system32\aeinv.dll
2015-08-12 23:13:14 ----A---- C:\Windows\system32\acmigration.dll
2015-08-12 23:13:13 ----A---- C:\Windows\system32\CompatTelRunner.exe
2015-08-12 23:13:13 ----A---- C:\Windows\system32\aepdu.dll
2015-08-12 23:13:12 ----A---- C:\Windows\system32\mstscax.dll
2015-08-12 23:13:11 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-08-12 23:13:10 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2015-08-12 23:13:10 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2015-08-12 23:13:10 ----A---- C:\Windows\system32\wksprt.exe
2015-08-12 23:13:10 ----A---- C:\Windows\system32\tsgqec.dll
2015-08-12 23:13:10 ----A---- C:\Windows\system32\rdvidcrl.dll
2015-08-12 23:12:44 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2015-08-12 23:12:44 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2015-08-12 23:12:44 ----A---- C:\Windows\system32\WebClnt.dll
2015-08-12 23:12:44 ----A---- C:\Windows\system32\davclnt.dll
2015-08-12 23:12:35 ----A---- C:\Windows\system32\wuaueng.dll
2015-08-12 23:12:34 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-08-12 23:12:34 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-08-12 23:12:34 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-08-12 23:12:34 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-08-12 23:12:34 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-08-12 23:12:34 ----A---- C:\Windows\system32\wuwebv.dll
2015-08-12 23:12:34 ----A---- C:\Windows\system32\wups2.dll
2015-08-12 23:12:34 ----A---- C:\Windows\system32\wups.dll
2015-08-12 23:12:34 ----A---- C:\Windows\system32\wudriver.dll
2015-08-12 23:12:34 ----A---- C:\Windows\system32\wucltux.dll
2015-08-12 23:12:34 ----A---- C:\Windows\system32\wuauclt.exe
2015-08-12 23:12:34 ----A---- C:\Windows\system32\wuapp.exe
2015-08-12 23:12:34 ----A---- C:\Windows\system32\wuapi.dll
2015-08-12 23:12:34 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-08-12 23:12:34 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-08-12 23:09:54 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-08-12 23:09:52 ----A---- C:\Windows\system32\ntdll.dll
2015-08-12 23:09:51 ----A---- C:\Windows\system32\kernel32.dll
2015-08-12 23:09:49 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-08-12 23:09:48 ----A---- C:\Windows\system32\sysmain.dll
2015-08-12 23:09:47 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-08-12 23:09:39 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-08-12 23:09:38 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-08-12 23:09:36 ----A---- C:\Windows\system32\lsasrv.dll
2015-08-12 23:09:34 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-08-12 23:09:22 ----A---- C:\Windows\system32\wow64.dll
2015-08-12 23:09:22 ----A---- C:\Windows\system32\rstrui.exe
2015-08-12 23:09:22 ----A---- C:\Windows\system32\KernelBase.dll
2015-08-12 23:09:21 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-08-12 23:09:21 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-08-12 23:09:21 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-08-12 23:09:21 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-08-12 23:09:21 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-08-12 23:09:21 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-08-12 23:09:21 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-08-12 23:09:21 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-08-12 23:09:21 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-08-12 23:09:21 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-08-12 23:09:21 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-08-12 23:09:21 ----A---- C:\Windows\system32\winsrv.dll
2015-08-12 23:09:21 ----A---- C:\Windows\system32\wdigest.dll
2015-08-12 23:09:21 ----A---- C:\Windows\system32\TSpkg.dll
2015-08-12 23:09:21 ----A---- C:\Windows\system32\sspicli.dll
2015-08-12 23:09:21 ----A---- C:\Windows\system32\srcore.dll
2015-08-12 23:09:21 ----A---- C:\Windows\system32\srclient.dll
2015-08-12 23:09:21 ----A---- C:\Windows\system32\smss.exe
2015-08-12 23:09:21 ----A---- C:\Windows\system32\schannel.dll
2015-08-12 23:09:21 ----A---- C:\Windows\system32\rpcrt4.dll
2015-08-12 23:09:21 ----A---- C:\Windows\system32\ntvdm64.dll
2015-08-12 23:09:21 ----A---- C:\Windows\system32\ncrypt.dll
2015-08-12 23:09:21 ----A---- C:\Windows\system32\msv1_0.dll
2015-08-12 23:09:21 ----A---- C:\Windows\system32\msmmsp.dll
2015-08-12 23:09:21 ----A---- C:\Windows\system32\lsass.exe
2015-08-12 23:09:21 ----A---- C:\Windows\system32\kerberos.dll
2015-08-12 23:09:21 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-08-12 23:09:21 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-08-12 23:09:21 ----A---- C:\Windows\system32\csrsrv.dll
2015-08-12 23:09:21 ----A---- C:\Windows\system32\cryptbase.dll
2015-08-12 23:09:21 ----A---- C:\Windows\system32\conhost.exe
2015-08-12 23:09:21 ----A---- C:\Windows\system32\auditpol.exe
2015-08-12 23:09:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-12 23:09:20 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-12 23:09:20 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-08-12 23:09:20 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-08-12 23:09:20 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-08-12 23:09:20 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-08-12 23:09:20 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-08-12 23:09:20 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-08-12 23:09:20 ----A---- C:\Windows\system32\wow64win.dll
2015-08-12 23:09:20 ----A---- C:\Windows\system32\wow64cpu.dll
2015-08-12 23:09:20 ----A---- C:\Windows\system32\sspisrv.dll
2015-08-12 23:09:20 ----A---- C:\Windows\system32\secur32.dll
2015-08-12 23:09:20 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-08-12 23:09:20 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-08-12 23:09:20 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-08-12 23:09:20 ----A---- C:\Windows\system32\credssp.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-12 23:09:19 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-12 23:09:19 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-08-12 23:09:19 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-08-12 23:09:19 ----A---- C:\Windows\system32\apisetschema.dll
2015-08-12 23:09:18 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-12 23:09:18 ----A---- C:\Windows\SYSWOW64\user.exe
2015-08-12 23:09:18 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-08-12 23:09:18 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-08-12 23:09:18 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-08-12 23:09:18 ----A---- C:\Windows\system32\msobjs.dll
2015-08-12 23:09:18 ----A---- C:\Windows\system32\msaudite.dll
2015-08-12 23:09:18 ----A---- C:\Windows\system32\adtschema.dll
2015-08-12 23:09:01 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2015-08-12 23:09:01 ----A---- C:\Windows\system32\FntCache.dll
2015-08-12 23:09:01 ----A---- C:\Windows\system32\DWrite.dll
2015-08-12 23:09:00 ----A---- C:\Windows\system32\win32k.sys
2015-08-12 23:09:00 ----A---- C:\Windows\system32\atmfd.dll
2015-08-12 23:08:59 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-08-12 23:08:58 ----A---- C:\Windows\system32\lpk.dll
2015-08-12 23:08:57 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-08-12 23:08:57 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-08-12 23:08:57 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-08-12 23:08:57 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2015-08-12 23:08:57 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-08-12 23:08:57 ----A---- C:\Windows\system32\fontsub.dll
2015-08-12 23:08:57 ----A---- C:\Windows\system32\dciman32.dll
2015-08-12 23:08:57 ----A---- C:\Windows\system32\d3d10warp.dll
2015-08-12 23:08:57 ----A---- C:\Windows\system32\atmlib.dll
2015-08-12 23:08:55 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-08-12 23:08:55 ----A---- C:\Windows\system32\msxml6.dll
2015-08-12 23:08:55 ----A---- C:\Windows\system32\msxml3.dll
2015-08-12 23:08:54 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-08-12 23:08:54 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-08-12 23:08:54 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-08-12 23:08:54 ----A---- C:\Windows\system32\msxml6r.dll
2015-08-12 23:08:54 ----A---- C:\Windows\system32\msxml3r.dll
2015-08-12 23:08:25 ----A---- C:\Windows\system32\basesrv.dll
2015-08-12 22:59:23 ----A---- C:\Windows\SYSWOW64\notepad.exe
2015-08-12 22:59:23 ----A---- C:\Windows\system32\notepad.exe
2015-08-12 22:59:23 ----A---- C:\Windows\notepad.exe
2015-08-12 22:56:52 ----A---- C:\Windows\system32\shell32.dll
2015-08-12 22:56:50 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-08-09 20:17:55 ----D---- C:\Users\Vena\AppData\Roaming\VitySoft
2015-08-09 20:09:25 ----A---- C:\Windows\SYSWOW64\vidsite.dll
2015-08-09 20:09:25 ----A---- C:\Windows\SYSWOW64\smplfsys.dll
2015-08-09 20:09:25 ----A---- C:\Windows\SYSWOW64\sipr.dll
2015-08-09 20:09:25 ----A---- C:\Windows\SYSWOW64\rvrender.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\rv40.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\rv30.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\rv20.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\rv10.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\rmfformat.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\rarender.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\ramrender.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\ramfformat.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\raac.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\pnen3260.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\pncrt.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\drvc.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\drv2.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\drv1.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\cook.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\colorcvt.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\clntxres.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\authmgr.dll
2015-08-09 20:09:24 ----A---- C:\Windows\SYSWOW64\atrc.dll
2015-08-08 02:40:38 ----D---- C:\Program Files (x86)\CinemaP-1.9cV16.03

======List of files/folders modified in the last 1 month======

2015-09-01 15:13:53 ----D---- C:\Windows\Prefetch
2015-09-01 15:13:40 ----RD---- C:\Program Files
2015-09-01 15:08:20 ----D---- C:\Windows\System32
2015-09-01 15:08:20 ----D---- C:\Windows\inf
2015-09-01 15:08:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-09-01 14:59:01 ----D---- C:\Windows\Temp
2015-09-01 06:38:21 ----D---- C:\Windows\system32\config
2015-09-01 06:27:37 ----D---- C:\Users\Vena\AppData\Roaming\Copy
2015-08-30 22:40:33 ----D---- C:\Users\Vena\AppData\Roaming\AIMP3
2015-08-30 19:27:07 ----SHD---- C:\Windows\Installer
2015-08-30 19:23:13 ----RD---- C:\Program Files (x86)
2015-08-30 19:22:49 ----D---- C:\Windows\Tasks
2015-08-30 15:05:43 ----D---- C:\Users\Vena\AppData\Roaming\vlc
2015-08-30 08:48:46 ----D---- C:\nikon
2015-08-30 02:53:29 ----SHD---- C:\System Volume Information
2015-08-25 21:24:13 ----D---- C:\Users\Vena\AppData\Roaming\Ancestry
2015-08-25 06:32:22 ----D---- C:\Users\Vena\AppData\Roaming\Dogecoin
2015-08-23 22:13:22 ----D---- C:\Windows\rescache
2015-08-23 17:51:47 ----D---- C:\Windows\winsxs
2015-08-22 18:48:43 ----D---- C:\Windows\Microsoft.NET
2015-08-22 18:25:36 ----RSD---- C:\Windows\assembly
2015-08-22 17:00:52 ----SD---- C:\Windows\system32\CompatTel
2015-08-22 17:00:51 ----D---- C:\Windows\system32\appraiser
2015-08-22 17:00:49 ----D---- C:\Windows\SysWOW64
2015-08-22 17:00:49 ----D---- C:\Windows\AppPatch
2015-08-22 17:00:39 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-08-22 17:00:36 ----D---- C:\Windows\system32\drivers\cs-CZ
2015-08-22 17:00:36 ----D---- C:\Windows\system32\cs-CZ
2015-08-22 17:00:30 ----D---- C:\Windows\system32\drivers
2015-08-22 17:00:12 ----D---- C:\Program Files\Internet Explorer
2015-08-22 17:00:10 ----D---- C:\Windows\SYSWOW64\en-US
2015-08-22 17:00:07 ----D---- C:\Windows\system32\en-US
2015-08-22 17:00:03 ----D---- C:\Program Files (x86)\Internet Explorer
2015-08-22 16:59:54 ----AD---- C:\Windows
2015-08-22 16:14:32 ----D---- C:\Windows\Panther
2015-08-22 16:13:12 ----D---- C:\Windows\Logs
2015-08-22 15:19:46 ----D---- C:\Windows\system32\Tasks
2015-08-19 08:32:05 ----D---- C:\Program Files (x86)\Opera
2015-08-17 20:13:20 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-08-15 16:28:19 ----D---- C:\Program Files (x86)\Common Files
2015-08-12 23:56:35 ----D---- C:\Windows\system32\DriverStore
2015-08-12 23:56:35 ----D---- C:\Windows\system32\catroot
2015-08-12 23:55:09 ----D---- C:\Users\Vena\AppData\Roaming\Samsung
2015-08-12 23:55:06 ----D---- C:\ProgramData\Samsung
2015-08-12 23:46:56 ----D---- C:\Windows\debug
2015-08-12 23:22:52 ----D---- C:\Windows\system32\MRT
2015-08-12 23:22:42 ----A---- C:\Windows\system32\MRT.exe
2015-08-12 23:12:53 ----D---- C:\Windows\system32\catroot2
2015-08-08 02:50:28 ----D---- C:\Program Files\CCleaner
2015-08-06 21:36:13 ----HD---- C:\ProgramData
2015-08-06 21:15:35 ----A---- C:\Windows\SYSWOW64\cmdvrt32.dll
2015-08-05 02:29:56 ----A---- C:\Windows\system32\cmdcsr.dll
2015-08-05 02:29:50 ----A---- C:\Windows\SYSWOW64\guard32.dll
2015-08-05 02:29:47 ----A---- C:\Windows\system32\guard64.dll
2015-08-05 02:28:50 ----A---- C:\Windows\system32\cmdvrt64.dll
2015-08-05 02:28:20 ----A---- C:\Windows\system32\cmdkbd64.dll
2015-08-05 02:26:53 ----A---- C:\Windows\SYSWOW64\cmdkbd32.dll
2015-08-03 01:13:53 ----D---- C:\Users\Vena\AppData\Roaming\Bitcoin

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [2010-11-12 77952]
R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [2010-11-12 37504]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie64.sys [2010-06-17 16440]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2015-08-05 21184]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2015-08-05 806032]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2010-12-17 40816]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aksdf;aksdf; \??\C:\Windows\system32\drivers\aksdf.sys [2014-04-28 91784]
R2 aksfridge;Sentinel Fridge; C:\Windows\system32\DRIVERS\aksfridge.sys [2014-05-30 162264]
R2 hardlock;hardlock; \??\C:\Windows\system32\drivers\hardlock.sys [2014-04-28 331608]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-03-05 8283136]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-03-04 295424]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2011-04-13 29344]
R3 busenum;Synology Virtual USB Hub; C:\Windows\system32\DRIVERS\busenum.sys [2011-02-18 56160]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2011-02-09 31088]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-01-12 2709224]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2011-09-02 66840]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2011-09-02 60696]
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2011-09-02 42776]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver; C:\Windows\system32\DRIVERS\RtsPStor.sys [2011-02-15 335464]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2015-07-22 2621128]
R3 SNTUSB64;SafeNet USB SuperPro/UltraPro/HardwareKey; C:\Windows\system32\DRIVERS\SNTUSB64.SYS [2015-07-31 63568]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-10-14 396848]
R3 TS_AR5416;[CommView] Atheros AR5008 Wireless Network Adapter Service 7.7; C:\Windows\system32\DRIVERS\ts_athwx.sys [2015-02-16 2157768]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2010-11-29 44672]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2011-01-15 36352]
S3 akshasp;SafeNet Inc. HASP Key; C:\Windows\system32\DRIVERS\akshasp.sys [2013-03-15 60488]
S3 akshhl;SafeNet Inc. Sentinel HL Key; C:\Windows\system32\DRIVERS\akshhl.sys [2013-03-15 63944]
S3 aksusb;SafeNet Inc. USB Key; C:\Windows\system32\DRIVERS\aksusb.sys [2014-04-28 303624]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2011-04-13 36000]
S3 athr;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2012-06-20 3678720]
S3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2009-06-10 1311232]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2011-04-13 298656]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2011-04-13 201376]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2011-04-13 55456]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2011-04-13 154272]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2011-04-13 281760]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 IT9135BDA;IT9135 BDA Devices; C:\Windows\System32\Drivers\IT9135BDA.sys [2014-03-20 164736]
S3 mvusbews;USB EWS Device; C:\Windows\System32\Drivers\mvusbews.sys [2012-12-24 20480]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960]
S3 pwdrvio;pwdrvio; \??\C:\Windows\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\syswow64\pwdspio.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 Ser2pl;Prolific Serial port WDF driver; C:\Windows\system32\DRIVERS\ser2pl64.sys [2013-10-25 167936]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 WinUSB;SAMSUNG Android USB Driver; C:\Windows\system32\drivers\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-15 82128]
R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-03-04 203776]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-03-04 354304]
R2 AMD Reservation Manager;AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
R2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [2011-04-13 146592]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2011-04-13 77984]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2015-08-06 5542472]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 hasplms;Sentinel LDK License Manager; C:\Windows\system32\hasplms.exe [2014-04-28 4683144]
R2 HP Health Check Service;HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [2010-12-01 126520]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-07-21 103992]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-02-04 92216]
R2 HPSIService;HP SI Service; C:\Windows\system32\HPSIsvc.exe [2010-04-07 127800]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-11-09 26680]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2010-12-28 1817088]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2011-02-04 797240]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-01-27 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-01-27 124088]
S2 gupdate1d0d9f2b3d810a4;Služba Google Update (gupdate1d0d9f2b3d810a4); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-18 144200]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-17 269000]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2015-08-06 2265792]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem1d0d9f2b3f963e8;Služba Google Update (gupdatem1d0d9f2b3f963e8); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-18 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-08-12 114688]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2011-09-27 359192]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PDF Architect 2;PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [2014-04-30 1716264]
S3 pdfforge CrashHandler;pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [2014-04-30 861736]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-09-26 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-01-27 50864]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-01-27 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-01-27 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-01-27 139944]

-----------------EOF-----------------

Dobrý den,

Stáhněte na nainstalujte MBAM:
http://forum.viry.cz/viewtopic.php?f=29&t=144868

a postupujte dle návodu. Zatím nic nemažte.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 1.9.2015
Čas skenování: 18:00
Protokol: log.txt
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.09.01.04
Databáze rootkitů: v2015.08.16.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Vena

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 593693
Uplynulý čas: 4 hod, 15 min, 20 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 2
PUP.Optional.CrossAd.Gen, C:\Users\Vena\AppData\Local\Builder Bubble\Bin\BuilderBubble.dll, , [f4c46ebc3a51a393fdd4b1e6b352ee12],
PUP.Optional.CrossAd.Gen, C:\Users\Vena\AppData\Local\Builder Bubble\Bin\ekoib.dll, , [f4c46ebc3a51a393fdd4b1e6b352ee12],

Klíče registru: 7
PUP.Optional.Cinema, HKLM\SOFTWARE\WOW6432NODE\CinemaP-1.9cV16.03, , [dddb6dbde5a69c9a0937166a986c7a86],
PUP.Optional.Cinema, HKLM\SOFTWARE\WOW6432NODE\CinemaP-1.9cV16.03-nv, , [9e1ae4462e5d063089b7b7c9f50faf51],
PUP.Optional.Cinema, HKLM\SOFTWARE\WOW6432NODE\CinemaP-1.9cV16.03-nv-ie, , [64549793c1cab482af91c6ba61a3b44c],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, , [c5f3f436cdbe8fa73a624f383bc9fb05],
PUP.Optional.Cinema, HKU\S-1-5-21-3241900731-2793531884-3344798391-1001\SOFTWARE\CinemaP-1.9cV16.03-nv, , [dcdc9b8f5734db5b80b7f78937cdb947],
PUP.Optional.Cinema, HKU\S-1-5-21-3241900731-2793531884-3344798391-1001\SOFTWARE\CinemaP-1.9cV16.03-nv-ie, , [53657fab90fb57df91a639477b895ea2],
PUP.Optional.CrossAd.Gen, HKU\S-1-5-21-3241900731-2793531884-3344798391-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{9563BC59-9556-4805-8CD4-886781779D8D}, , [f4c46ebc3a51a393fdd4b1e6b352ee12],

Hodnoty registru: 1
PUP.Optional.GamesDesktop, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_re_002020053, , [d7e1d357f3983501c825dab556aedf21],

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 4
PUP.Optional.CrossRider, C:\Program Files (x86)\CinemaP-1.9cV16.03, , [9523ab7f008bee4881b5c0c6ab593fc1],
PUP.Optional.CrossAd.Gen, C:\Users\Vena\AppData\Local\Builder Bubble\Component, , [f4c46ebc3a51a393fdd4b1e6b352ee12],
PUP.Optional.CrossAd.Gen, C:\Users\Vena\AppData\Local\Builder Bubble, , [f4c46ebc3a51a393fdd4b1e6b352ee12],
PUP.Optional.CrossAd.Gen, C:\Users\Vena\AppData\Local\Builder Bubble\Bin, , [f4c46ebc3a51a393fdd4b1e6b352ee12],

Soubory: 39
PUP.Optional.Somoto, C:\Users\Vena\AppData\Local\Application Data\Bundled software uninstaller\bi_client.exe, , [dade86a4880390a6bd330dc6e918e020],
PUP.Optional.eShield, C:\VTRoot\HarddiskVolume2\Program Files (x86)\TNT2\2.0.0.1983\IEToolbar.dll, , [f7c1db4f3f4c64d21e5218b706fb718f],
PUP.Optional.eShield, C:\VTRoot\HarddiskVolume2\Program Files (x86)\TNT2\2.0.0.1983\IEToolbar64.dll, , [13a51b0f90fb3cfae789864944bdb24e],
PUP.Optional.eShield, C:\VTRoot\HarddiskVolume2\Program Files (x86)\TNT2\Profiles\11433\passport.dll, , [625630fa94f750e60e62a62913ee35cb],
PUP.Optional.eShield, C:\VTRoot\HarddiskVolume2\Program Files (x86)\TNT2\Profiles\11433\passport64.dll, , [ac0c41e96c1f310588e8349b926f9868],
PUP.Optional.eShield, C:\VTRoot\HarddiskVolume2\Users\Vena\AppData\Local\TNT2\2.0.0.1983\IEToolbar.dll, , [3c7c9c8e93f84de9dd939f30e51c33cd],
PUP.Optional.eShield, C:\VTRoot\HarddiskVolume2\Users\Vena\AppData\Local\TNT2\2.0.0.1983\IEToolbar64.dll, , [95236bbfd3b88bab8ce486490bf656aa],
PUP.Optional.eShield, C:\VTRoot\HarddiskVolume2\Users\Vena\AppData\Local\TNT2\2.0.0.1983\passport.dll, , [b1076cbedcaf50e67df3933c2dd435cb],
PUP.Optional.eShield, C:\VTRoot\HarddiskVolume2\Users\Vena\AppData\Local\TNT2\2.0.0.1983\passport64.dll, , [6d4b3feb2665c86ec0b02ea127dae020],
PUP.Optional.CrossRider, C:\Program Files (x86)\CinemaP-1.9cV16.03\utils.exe, , [0aae65c53d4e280e7477646af70ad729],
PUP.Optional.Techgile, C:\ProgramData\Comodo\Cis\Quarantine\data\{01D0D7EF-53D7-4864-8D81-A4B1FD39941A}, , [1b9d5ad0dab1d36319874f45c93cc23e],
PUP.Optional.InstallIQ, C:\ProgramData\Comodo\Cis\Quarantine\data\{417A5CFE-7768-4547-A0D2-E5003E2B9647}, , [7e3ab7738506b3831d1c14bd659cc040],
PUP.Optional.CrossRider, C:\ProgramData\Comodo\Cis\Quarantine\data\{48221D08-D687-4CDC-A952-E2A297CACDFB}, , [1c9cf634682343f3c9e1ff92e421a15f],
PUP.Optional.Techgile, C:\ProgramData\Comodo\Cis\Quarantine\data\{496284C1-1791-4173-B8F2-A8DC550190A5}, , [902838f2ff8c82b4514f7222a56008f8],
PUP.Optional.RelevantKnowledge, C:\ProgramData\Comodo\Cis\Quarantine\data\{8CDB600F-8A38-4A31-9F52-6F9BE48732A2}, , [6652a5856a2184b2bd45e484a85daa56],
PUP.Optional.Sanbreel, C:\ProgramData\Comodo\Cis\Quarantine\data\{9A3FB86C-B834-4C61-9692-C80C9EC38D63}, , [fabe61c94b40f343380ba330a55c619f],
PUP.Optional.EoRezo, C:\ProgramData\Comodo\Cis\Quarantine\data\{CE4CE82B-89B2-48F6-89D3-857BECC8E378}, , [95230129d1baa294c556811240c521df],
PUP.Optional.InstallIQ, C:\ProgramData\Comodo\Cis\Quarantine\data\{EF92ABD2-D066-49E5-9DAE-B6358FF28F8E}, , [55636bbf83081f1739005c754fb2a759],
Malware.Trace, C:\Windows\inf\ntvdm.inf, , [b800ec3e95f602341c13c9851ce8b64a],
PUP.Optional.CrossRider, C:\Program Files (x86)\CinemaP-1.9cV16.03\bgNova.html, , [9523ab7f008bee4881b5c0c6ab593fc1],
PUP.Optional.CrossRider, C:\Program Files (x86)\CinemaP-1.9cV16.03\156eacdc-6be3-484e-958c-b1950c01381c.crx, , [9523ab7f008bee4881b5c0c6ab593fc1],
PUP.Optional.CrossRider, C:\Program Files (x86)\CinemaP-1.9cV16.03\e2fdd633-023e-4ff4-bd77-024f4b061375.exe, , [9523ab7f008bee4881b5c0c6ab593fc1],
PUP.Optional.CrossRider, C:\Program Files (x86)\CinemaP-1.9cV16.03\e653cf25-f107-4cbe-b8d1-5dadaea354f2.crx, , [9523ab7f008bee4881b5c0c6ab593fc1],
PUP.Optional.CrossRider, C:\Program Files (x86)\CinemaP-1.9cV16.03\e653cf25-f107-4cbe-b8d1-5dadaea354f2.xpi, , [9523ab7f008bee4881b5c0c6ab593fc1],
PUP.Optional.CrossRider, C:\Program Files (x86)\CinemaP-1.9cV16.03\Interop.IWshRuntimeLibrary.dll, , [9523ab7f008bee4881b5c0c6ab593fc1],
PUP.Optional.CrossRider, C:\Program Files (x86)\CinemaP-1.9cV16.03\Newtonsoft.Json.dll, , [9523ab7f008bee4881b5c0c6ab593fc1],
PUP.Optional.CrossRider, C:\Program Files (x86)\CinemaP-1.9cV16.03\SuperSocket.ClientEngine.Common.dll, , [9523ab7f008bee4881b5c0c6ab593fc1],
PUP.Optional.CrossRider, C:\Program Files (x86)\CinemaP-1.9cV16.03\SuperSocket.ClientEngine.Core.dll, , [9523ab7f008bee4881b5c0c6ab593fc1],
PUP.Optional.CrossRider, C:\Program Files (x86)\CinemaP-1.9cV16.03\SuperSocket.ClientEngine.Protocol.dll, , [9523ab7f008bee4881b5c0c6ab593fc1],
PUP.Optional.CrossRider, C:\Program Files (x86)\CinemaP-1.9cV16.03\WebSocket4Net.dll, , [9523ab7f008bee4881b5c0c6ab593fc1],
PUP.Optional.CrossAd.Gen, C:\Users\Vena\AppData\Local\Builder Bubble\Component\config.json, , [f4c46ebc3a51a393fdd4b1e6b352ee12],
PUP.Optional.CrossAd.Gen, C:\Users\Vena\AppData\Local\Builder Bubble\Component\hello.js, , [f4c46ebc3a51a393fdd4b1e6b352ee12],
PUP.Optional.CrossAd.Gen, C:\Users\Vena\AppData\Local\Builder Bubble\Component\log.html, , [f4c46ebc3a51a393fdd4b1e6b352ee12],
PUP.Optional.CrossAd.Gen, C:\Users\Vena\AppData\Local\Builder Bubble\Component\manifest.json, , [f4c46ebc3a51a393fdd4b1e6b352ee12],
PUP.Optional.CrossAd.Gen, C:\Users\Vena\AppData\Local\Builder Bubble\Component\scriptTagContext.js, , [f4c46ebc3a51a393fdd4b1e6b352ee12],
PUP.Optional.CrossAd.Gen, C:\Users\Vena\AppData\Local\Builder Bubble\Component\tmp_bg.js, , [f4c46ebc3a51a393fdd4b1e6b352ee12],
PUP.Optional.CrossAd.Gen, C:\Users\Vena\AppData\Local\Builder Bubble\Component\uconfig.json, , [f4c46ebc3a51a393fdd4b1e6b352ee12],
PUP.Optional.CrossAd.Gen, C:\Users\Vena\AppData\Local\Builder Bubble\Bin\BuilderBubble.dll, , [f4c46ebc3a51a393fdd4b1e6b352ee12],
PUP.Optional.CrossAd.Gen, C:\Users\Vena\AppData\Local\Builder Bubble\Bin\ekoib.dll, , [f4c46ebc3a51a393fdd4b1e6b352ee12],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Dobrý večer,

vše co MBAM našel, můžete smazat. Po restartu dejte vědět, zda je to již OK a pak provedeme dočištění.

Dobrý den,

zdá se chrome v pořádku. Jen po restartu naskočila chybová hláška viz. příloha.

Jinak pociťuji zrychlení při startu.

Chybová hláška hlásí, že nemůže načíst soubor, který jsme odstranili, jelikož je to havěť. Té se zbavíme při dočištění.

Ještě stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
-Uložte program na plochu a ukončete všechny spuštěné programy .
-spusťte AdwCleaner, klikněte na Scan a po dokončení skenu na Clean
- provede se oprava, restartuje se pc - (případně restartujte) a objeví se log C:\AdwCleaner\AdwCleaner.txt , obsah logu zkopírujte zde.

Dobrý den,

snad jsem provedl správně. Každopádně hláška po restartu vyskočila zas.


# AdwCleaner v5.005 - Logfile created 03/09/2015 at 14:00:17
# Updated 31/08/2015 by Xplode
# Database : 2015-08-31.2 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Vena - VENA-HP
# Running from : C:\Users\Vena\Desktop\adwcleaner_5.005.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec

***** [ Web browsers ] *****


*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C4].txt - [712 bytes] ##########

Tak AdwCleaner (skoro) nic nenašel. Můžeme se tedy vrhnout na dočištění a smazání otravné hlášky.

Stáhněte "System Look" - http://jpshortstuff.247fixes.com/SystemLook_x64.exe
Spusť jej a do okna zkopírujte
Klikněte na Look a po scanu sem zkopírujte výsledek hledání.

Provedeno:

SystemLook 30.07.11 by jpshortstuff
Log created at 15:11 on 03/09/2015 by Vena
Administrator - Elevation successful

========== regfind ==========

Searching for "BuilderBubble.dll"
No data found.

Searching for "ekoib.dll"
No data found.

========== filefind ==========

Searching for "BuilderBubble.dll"
No files found.

Searching for "ekoib.dll"
No files found.

-= EOF =-

Nyní otevřete CCleaner, klikněte na tlačítko Registry, dejte vyhledat a následně odstranit problémy. Nezapomeňte udělat zálohu, ideálně ulože jako soubor (měl by končit příponou reg). Toto je potřeba udělat několikrát za sebou (většinou 3x), dokud bude Ccleaner něco nacházet. Poté všechny ty zálohy zabalte jako zip a přiložte mi ten archiv zde do příspěvku.

Mohl by jste mi ještě udělat screenshot z CCleaneru v menu Nástroje Startup?

Předem děkuji

Provedeno.

CCleaner jen jednou nalezl a odstranil, při opakovaném prohledání už nic.

soubor reg a scan obrazovky je v příloze.

Po restartu se hláška objeví znovu?

Ano, v tomto směru beze změny.

Tak ještě poprosím o scan z FRST dle návodu:

http://forum.viry.cz/viewtopic.php?f=13&t=133100

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-08-2015
Ran by Vena (administrator) on VENA-HP (03-09-2015 20:57:02)
Running from C:\Users\Vena\Desktop
Loaded Profiles: Vena (Available Profiles: Vena)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: "C:\Program Files (x86)\Opera\Opera.exe" "%1")
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
() C:\Program Files (x86)\QNAP\Qfinder\iSCSIAgent.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Luis Cobian, CobianSoft) C:\Program Files (x86)\Cobian Backup 11\Cobian.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAC9SWK.EXE
() E:\Program Files II\Ektiv\Ektiv2.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Luis Cobian, CobianSoft) C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Ghisler Software GmbH) C:\Program Files\totalcmd\TOTALCMD.EXE
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(forum.viry.cz) C:\Users\Vena\Desktop\FRSTLauncher.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6602856 2011-01-12] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [627360 2011-04-13] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-04-13] (Atheros Commnucations)
HKLM\...\Run: [HPWirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2010-07-21] (Hewlett-Packard Company)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1427648 2015-08-06] (COMODO)
HKLM\...\Run: [CNAP2 Launcher] => C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-15] (CANON INC.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-03-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [586296 2010-11-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [318520 2010-12-13] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [Cobian Backup 11] => C:\Program Files (x86)\Cobian Backup 11\Cobian.exe [720896 2012-12-06] (Luis Cobian, CobianSoft)
HKLM-x32\...\Run: [Ektiv] => E:\Program Files II\Ektiv\Ektiv2.exe [354304 2008-04-06] ()
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
ShellIconOverlayIdentifiers: [1aCopyShExtError] -> {83BEA36E-7680-4598-A4DF-994426F6E78D} => C:\Users\Vena\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-01-20] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [2aCopyShExtSynced] -> {845B7388-6F85-4F32-9FD5-F02DC7882B89} => C:\Users\Vena\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-01-20] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [3aCopyShExtSyncing] -> {F6378A7A-F753-449B-AE1B-997A96132E61} => C:\Users\Vena\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-01-20] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [4aCopyShExtSyncingProg1] -> {3A511828-777D-46F8-82F4-5B530C1B3D9E} => C:\Users\Vena\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-01-20] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [5aCopyShExtSyncingProg2] -> {C8C88204-5B14-40EC-BA72-8AEBC762047E} => C:\Users\Vena\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-01-20] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [6aCopyShExtSyncingProg3] -> {ACFF45C3-3EEB-4351-86C2-6696BA264239} => C:\Users\Vena\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-01-20] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [7aCopyShExtSyncingProg4] -> {29AF997F-488B-46F0-AE78-7146F1B89CC3} => C:\Users\Vena\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-01-20] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [8aCopyShExtSyncingProg5] -> {03F9AD29-1C78-4B66-8890-B177B5430C53} => C:\Users\Vena\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-01-20] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2013-02-08] (Autodesk, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{902C9779-EF41-4166-B3C5-5C559AFD2D5A}: [DhcpNameServer] 213.46.172.37 213.46.172.36

Internet Explorer:
==================
HKU\S-1-5-21-3241900731-2793531884-3344798391-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
HKU\S-1-5-21-3241900731-2793531884-3344798391-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=CMNTDF
SearchScopes: HKLM-x32 -> {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3241900731-2793531884-3344798391-1001 -> {05C0A8D5-56E1-426A-A228-46DD68E4CA14} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_13415
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-22] (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-04-13] (Atheros Commnucations)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-22] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-3241900731-2793531884-3344798391-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-14] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2013-01-18] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-22] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre1.8.0_31\bin\new_plugin\npjp2.dll [No File]
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-22] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2013-01-18] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-14] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2013-01-18] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [No File]
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll [2011-03-09] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-30] (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2013-01-18] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2010-12-08] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-04-30] (pdfforge GmbH)
FF Plugin HKU\S-1-5-21-3241900731-2793531884-3344798391-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2013-01-18] (Tracker Software Products (Canada) Ltd.)

Chrome:
=======
CHR Profile: C:\Users\Vena\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Vena\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-04-10]
CHR Extension: (Google Drive) - C:\Users\Vena\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-04-10]
CHR Extension: (YouTube) - C:\Users\Vena\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-04-10]
CHR Extension: (Google Search) - C:\Users\Vena\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-04-10]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Vena\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-24]
CHR Extension: (Gmail) - C:\Users\Vena\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-10]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [354304 2011-03-04] (Advanced Micro Devices, Inc.) [File not signed]
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [194496 2010-06-17] (Advanced Micro Devices)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-04-13] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [77984 2011-04-13] (Atheros Commnucations) [File not signed]
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5542472 2015-08-06] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2265792 2015-08-06] (COMODO)
S2 gupdate1d0d9f2b3d810a4; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-18] (Google Inc.)
S3 gupdatem1d0d9f2b3f963e8; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-18] (Google Inc.)
R2 hasplms; C:\Windows\system32\hasplms.exe [4683144 2014-04-28] (SafeNet Inc.)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [1817088 2010-12-28] (Realsil Microelectronics Inc.) [File not signed]
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-09-01] (Malwarebytes Corporation)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1716264 2014-04-30] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-04-30] (pdfforge GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 XobniService; C:\Program Files (x86)\Xobni\XobniService.exe [62184 2011-02-25] (Xobni Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [60488 2013-03-15] (SafeNet Inc.)
S3 akshhl; C:\Windows\System32\DRIVERS\akshhl.sys [63944 2013-03-15] (SafeNet Inc.)
S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [303624 2014-04-28] (SafeNet Inc.)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [21184 2015-08-05] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [806032 2015-08-05] (COMODO)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [331608 2014-04-28] (SafeNet Inc.)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [164736 2014-03-20] (ITE )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-09-01] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-09-01] (Malwarebytes Corporation)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-12-24] (Marvell Semiconductor, Inc.)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2012-06-18] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12384 2012-06-18] ()
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [2621128 2015-07-22] (Sonix Tech. Co., Ltd.)
S3 SNTUSB64; C:\Windows\System32\DRIVERS\SNTUSB64.SYS [63568 2015-07-31] (SafeNet, Inc.)
R3 TS_AR5416; C:\Windows\System32\DRIVERS\ts_athwx.sys [2157768 2015-02-16] (TamoSoft)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-03 20:57 - 2015-09-03 20:59 - 00019791 _____ C:\Users\Vena\Desktop\FRST.txt
2015-09-03 20:56 - 2015-09-03 20:57 - 00000000 ____D C:\FRST
2015-09-03 20:56 - 2015-09-03 20:56 - 00112640 _____ (forum.viry.cz) C:\Users\Vena\Desktop\FRSTLauncher.exe
2015-09-03 20:40 - 2015-09-03 20:40 - 02188800 _____ (Farbar) C:\Users\Vena\Desktop\FRST64.exe
2015-09-03 18:04 - 2015-09-03 20:53 - 00000168 _____ C:\Windows\setupact.log
2015-09-03 18:04 - 2015-09-03 18:04 - 00000814 _____ C:\Windows\PFRO.log
2015-09-03 18:04 - 2015-09-03 18:04 - 00000000 _____ C:\Windows\setuperr.log
2015-09-03 15:11 - 2015-09-03 15:17 - 00000790 _____ C:\Users\Vena\Desktop\SystemLook.txt
2015-09-03 15:10 - 2015-09-03 15:10 - 00165376 _____ C:\Users\Vena\Desktop\SystemLook_x64.exe
2015-09-03 12:03 - 2015-09-03 14:00 - 00000000 ____D C:\AdwCleaner
2015-09-03 12:02 - 2015-09-03 12:02 - 01654272 _____ C:\Users\Vena\Desktop\adwcleaner_5.005.exe
2015-09-01 17:55 - 2015-09-01 23:24 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-09-01 17:55 - 2015-09-01 17:55 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-09-01 17:55 - 2015-09-01 17:55 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-09-01 17:55 - 2015-09-01 17:55 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-09-01 17:55 - 2015-09-01 17:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-09-01 17:55 - 2015-09-01 17:55 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-09-01 17:55 - 2015-09-01 17:55 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-09-01 15:13 - 2015-09-01 15:15 - 00000000 ____D C:\rsit
2015-09-01 15:13 - 2015-09-01 15:15 - 00000000 ____D C:\Program Files\trend micro
2015-08-31 01:58 - 2015-09-02 16:59 - 00000000 ____D C:\Users\Vena\AppData\Roaming\Ektiv2
2015-08-29 00:11 - 2015-08-29 00:11 - 00000037 _____ C:\Users\Vena\Gp.ini
2015-08-29 00:11 - 2015-08-29 00:11 - 00000000 ____D C:\Users\Vena\AppData\Local\Groma
2015-08-22 16:43 - 2015-08-22 16:43 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-22 16:43 - 2015-08-22 16:43 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-22 16:14 - 2015-08-22 16:14 - 00000000 ____D C:\$WINDOWS.~BT
2015-08-22 16:13 - 2015-08-22 16:13 - 00000000 ___HD C:\$Windows.~WS
2015-08-18 22:16 - 2015-08-18 22:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-08-18 22:15 - 2015-08-18 22:16 - 00000000 ____D C:\Program Files (x86)\Google
2015-08-18 14:28 - 2015-08-18 14:28 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-08-15 16:27 - 2015-08-15 16:27 - 00000000 ____D C:\Users\Vena\AppData\Roaming\Skype
2015-08-12 23:20 - 2015-08-12 23:20 - 25192448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 19870208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 14451200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 02427904 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-12 23:20 - 2015-08-12 23:20 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-08-12 23:20 - 2015-08-12 23:20 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-12 23:20 - 2015-08-12 23:20 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-08-12 23:20 - 2015-08-12 23:20 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-08-12 23:20 - 2015-08-12 23:20 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-08-12 23:20 - 2015-08-12 23:20 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-08-12 23:20 - 2015-08-12 23:20 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-08-12 23:20 - 2015-08-12 23:20 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-08-12 23:20 - 2015-07-16 22:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-08-12 23:20 - 2015-07-16 22:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-12 23:20 - 2015-07-16 22:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-08-12 23:20 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-08-12 23:13 - 2015-08-12 23:13 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-12 23:13 - 2015-08-12 23:13 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-08-12 23:13 - 2015-08-12 23:13 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-08-12 23:13 - 2015-08-12 23:13 - 01116672 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-08-12 23:13 - 2015-08-12 23:13 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-08-12 23:13 - 2015-08-12 23:13 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-08-12 23:13 - 2015-08-12 23:13 - 00774656 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-08-12 23:13 - 2015-08-12 23:13 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-08-12 23:13 - 2015-08-12 23:13 - 00437760 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-08-12 23:13 - 2015-08-12 23:13 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2015-08-12 23:13 - 2015-08-12 23:13 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-08-12 23:13 - 2015-08-12 23:13 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-08-12 23:13 - 2015-08-12 23:13 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-08-12 23:13 - 2015-08-12 23:13 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-08-12 23:13 - 2015-08-12 23:13 - 00017344 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-08-12 23:12 - 2015-08-12 23:12 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-12 23:12 - 2015-08-12 23:12 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-12 23:12 - 2015-08-12 23:12 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-12 23:12 - 2015-08-12 23:12 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-08-12 23:12 - 2015-08-12 23:12 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-12 23:12 - 2015-08-12 23:12 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-08-12 23:12 - 2015-08-12 23:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-12 23:12 - 2015-08-12 23:12 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-08-12 23:12 - 2015-08-12 23:12 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-12 23:12 - 2015-08-12 23:12 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-12 23:12 - 2015-08-12 23:12 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-12 23:12 - 2015-08-12 23:12 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-08-12 23:12 - 2015-08-12 23:12 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-12 23:12 - 2015-08-12 23:12 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-08-12 23:12 - 2015-08-12 23:12 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-12 23:12 - 2015-08-12 23:12 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-12 23:12 - 2015-08-12 23:12 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-12 23:12 - 2015-08-12 23:12 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-08-12 23:12 - 2015-08-12 23:12 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-08-12 23:12 - 2015-08-12 23:12 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 05568960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-12 23:09 - 2015-08-12 23:09 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-08-12 23:09 - 2015-08-12 23:09 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-08-12 23:09 - 2015-08-12 23:09 - 03208192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-12 23:09 - 2015-08-12 23:09 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-08-12 23:09 - 2015-08-12 23:09 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-12 23:09 - 2015-08-12 23:09 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-08-12 23:09 - 2015-08-12 23:09 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-08-12 23:09 - 2015-08-12 23:09 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-08-12 23:09 - 2015-08-12 23:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-08-12 23:09 - 2015-08-12 23:09 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-12 23:09 - 2015-08-12 23:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-08-12 23:09 - 2015-08-12 23:09 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-12 23:09 - 2015-08-12 23:09 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-08-12 23:09 - 2015-08-12 23:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-08-12 23:09 - 2015-08-12 23:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-08-12 23:09 - 2015-08-12 23:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-08-12 23:09 - 2015-08-12 23:09 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-08-12 23:09 - 2015-08-12 23:09 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-12 23:09 - 2015-08-12 23:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-08-12 23:08 - 2015-08-12 23:08 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 01390592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-08-12 23:08 - 2015-08-12 23:08 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-08-12 22:59 - 2015-08-12 22:59 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-12 22:59 - 2015-08-12 22:59 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-12 22:59 - 2015-08-12 22:59 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2015-08-12 22:56 - 2015-08-12 22:56 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-08-12 22:56 - 2015-08-12 22:56 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-08-09 21:21 - 2015-08-09 21:21 - 00000000 ____D C:\Users\Vena\AppData\Local\Windows Live
2015-08-09 21:21 - 2015-08-09 21:21 - 00000000 ____D C:\Users\Vena\AppData\Local\{52DBBF73-A597-4292-90B2-07646725A6CA}
2015-08-09 20:18 - 2015-08-09 20:18 - 00000000 ____D C:\Users\Vena\.objectdb
2015-08-09 20:17 - 2015-08-09 20:17 - 00000000 ____D C:\Users\Vena\AppData\Roaming\VitySoft
2015-08-09 20:09 - 2015-08-09 20:08 - 01482752 _____ ( ) C:\Windows\SysWOW64\pnen3260.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00548940 _____ ( ) C:\Windows\SysWOW64\raac.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00548919 _____ ( ) C:\Windows\SysWOW64\colorcvt.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00376832 _____ ( ) C:\Windows\SysWOW64\vidsite.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00286720 _____ ( ) C:\Windows\SysWOW64\drvc.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00278528 _____ (Real Networks, Inc) C:\Windows\SysWOW64\pncrt.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00184320 _____ ( ) C:\Windows\SysWOW64\rmfformat.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00176128 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\drv2.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00159744 _____ ( ) C:\Windows\SysWOW64\rvrender.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00159744 _____ ( ) C:\Windows\SysWOW64\rarender.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00106496 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\sipr.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00102400 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\drv1.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00086016 _____ ( ) C:\Windows\SysWOW64\smplfsys.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00077824 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\atrc.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00077824 _____ ( ) C:\Windows\SysWOW64\ramrender.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00065536 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\cook.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00057344 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rv20.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00049152 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rv30.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00049152 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rv10.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00049152 _____ ( ) C:\Windows\SysWOW64\rv40.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00045056 _____ ( ) C:\Windows\SysWOW64\authmgr.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00044032 _____ ( ) C:\Windows\SysWOW64\clntxres.dll
2015-08-09 20:09 - 2015-08-09 20:08 - 00031744 _____ ( ) C:\Windows\SysWOW64\ramfformat.dll
2015-08-08 08:41 - 2015-08-08 08:41 - 00003074 _____ C:\Windows\System32\Tasks\Builder Bubble
2015-08-06 23:47 - 2015-08-06 23:47 - 00000046 _____ C:\Users\Vena\Nivelace.ini

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-03 20:53 - 2014-08-31 20:15 - 00000000 ____D C:\Users\Vena\AppData\Roaming\Copy
2015-09-03 20:53 - 2014-04-03 21:26 - 00176504 _____ C:\Windows\system32\Drivers\fvstore.dat
2015-09-03 20:53 - 2013-04-10 22:24 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-03 20:53 - 2012-09-28 18:54 - 01474832 _____ C:\Windows\system32\Drivers\sfi.dat
2015-09-03 20:53 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-03 20:52 - 2013-10-05 20:38 - 01471627 _____ C:\Windows\WindowsUpdate.log
2015-09-03 20:47 - 2015-02-02 23:32 - 00000000 ___HD C:\VTRoot
2015-09-03 20:27 - 2013-04-10 22:24 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-03 20:13 - 2013-01-13 08:41 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-09-03 19:42 - 2009-07-14 06:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-03 19:42 - 2009-07-14 06:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-03 17:14 - 2012-09-25 21:12 - 00000000 ____D C:\Users\Vena\AppData\Roaming\AIMP3
2015-09-03 16:58 - 2012-09-28 19:16 - 00000000 ____D C:\Program Files\CCleaner
2015-09-03 10:45 - 2012-12-23 02:24 - 00006349 _____ C:\Users\Vena\groma.ini
2015-09-03 08:35 - 2013-05-30 19:40 - 00000000 ____D C:\nikon
2015-09-03 05:55 - 2012-09-25 17:16 - 00003962 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{0FF5D52B-7486-4B68-94FA-DC39DCE8B735}
2015-09-02 05:54 - 2011-08-03 11:46 - 00000000 ____D C:\Windows\en
2015-09-01 20:31 - 2012-09-25 17:16 - 00003180 _____ C:\Windows\System32\Tasks\HPCeeScheduleForVena
2015-09-01 20:31 - 2012-09-25 17:16 - 00000328 _____ C:\Windows\Tasks\HPCeeScheduleForVena.job
2015-09-01 15:08 - 2011-08-03 20:29 - 00736100 _____ C:\Windows\system32\perfh005.dat
2015-09-01 15:08 - 2011-08-03 20:29 - 00194496 _____ C:\Windows\system32\perfc005.dat
2015-09-01 15:08 - 2009-07-14 07:13 - 01705700 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-30 19:22 - 2013-04-10 22:24 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-08-30 19:22 - 2013-04-10 22:24 - 00003696 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-08-30 15:05 - 2014-01-14 21:39 - 00000000 ____D C:\Users\Vena\AppData\Roaming\vlc
2015-08-29 00:11 - 2012-09-25 17:08 - 00000000 ____D C:\Users\Vena
2015-08-25 21:24 - 2015-07-09 01:59 - 00000000 ____D C:\Users\Vena\AppData\Roaming\Ancestry
2015-08-25 20:42 - 2012-10-02 22:19 - 00003216 _____ C:\Windows\System32\Tasks\HPCeeScheduleForVENA-HP$
2015-08-25 20:42 - 2012-10-02 22:19 - 00000340 _____ C:\Windows\Tasks\HPCeeScheduleForVENA-HP$.job
2015-08-25 06:32 - 2014-09-07 23:55 - 00000000 ____D C:\Users\Vena\AppData\Roaming\Dogecoin
2015-08-23 22:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-08-22 17:04 - 2009-07-14 06:45 - 00436704 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-22 17:00 - 2015-04-15 11:31 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-22 17:00 - 2014-05-06 11:05 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-22 16:14 - 2007-01-02 03:25 - 00000000 ____D C:\Windows\Panther
2015-08-22 15:10 - 2012-12-30 19:20 - 00000000 ____D C:\Users\Vena\AppData\Local\Google
2015-08-19 08:32 - 2015-01-16 01:37 - 00003824 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1421365039
2015-08-19 08:32 - 2012-09-25 19:37 - 00000000 ____D C:\Program Files (x86)\Opera
2015-08-17 20:13 - 2013-01-13 08:41 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-08-17 20:13 - 2012-09-25 21:38 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-08-17 20:13 - 2012-09-25 21:38 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-15 16:33 - 2014-08-31 20:16 - 00000000 ___RD C:\Users\Vena\Copy
2015-08-12 23:55 - 2013-11-05 15:18 - 00000000 ____D C:\Users\Vena\AppData\Roaming\Samsung
2015-08-12 23:55 - 2013-11-05 15:18 - 00000000 ____D C:\Users\Vena\AppData\Local\Samsung
2015-08-12 23:55 - 2013-11-05 15:08 - 00000000 ____D C:\ProgramData\Samsung
2015-08-12 23:22 - 2013-07-12 09:36 - 00000000 ____D C:\Windows\system32\MRT
2015-08-12 23:22 - 2012-09-28 18:12 - 132483416 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-10 19:08 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-08-09 00:27 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-08-08 23:26 - 2012-09-25 17:16 - 00001397 _____ C:\Users\Vena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-08-08 02:53 - 2013-03-08 02:55 - 00000000 ____D C:\Users\Vena\AppData\Local\CrashDumps
2015-08-06 21:15 - 2014-04-03 19:45 - 00288448 _____ (COMODO) C:\Windows\SysWOW64\cmdvrt32.dll
2015-08-05 02:31 - 2012-03-11 21:13 - 00806032 _____ (COMODO) C:\Windows\system32\Drivers\cmdGuard.sys
2015-08-05 02:31 - 2012-03-11 21:13 - 00045856 _____ (COMODO) C:\Windows\system32\Drivers\cmdhlp.sys
2015-08-05 02:31 - 2012-03-11 21:13 - 00021184 _____ (COMODO) C:\Windows\system32\Drivers\cmderd.sys
2015-08-05 02:31 - 2012-02-03 19:27 - 00105096 _____ (COMODO) C:\Windows\system32\Drivers\inspect.sys
2015-08-05 02:29 - 2012-03-11 21:13 - 00579408 _____ (COMODO) C:\Windows\system32\guard64.dll
2015-08-05 02:29 - 2012-03-11 21:13 - 00445472 _____ (COMODO) C:\Windows\SysWOW64\guard32.dll
2015-08-05 02:29 - 2012-03-11 21:13 - 00041224 _____ (COMODO) C:\Windows\system32\cmdcsr.dll
2015-08-05 02:28 - 2014-04-03 19:45 - 00358080 _____ (COMODO) C:\Windows\system32\cmdvrt64.dll
2015-08-05 02:28 - 2014-04-03 19:45 - 00045760 _____ (COMODO) C:\Windows\system32\cmdkbd64.dll
2015-08-05 02:26 - 2014-04-03 19:45 - 00040640 _____ (COMODO) C:\Windows\SysWOW64\cmdkbd32.dll

==================== Files in the root of some directories =======

2014-05-03 07:17 - 2014-05-03 07:17 - 6103040 _____ () C:\Program Files (x86)\GUTA90C.tmp
2015-03-31 20:30 - 2015-03-31 21:02 - 0000580 _____ () C:\Users\Vena\AppData\Roaming\AutoGK.ini
2015-02-16 00:06 - 2015-02-16 00:06 - 0000038 ___SH () C:\Users\Vena\AppData\Local\69ff07055291669bb2b218.72821112
2014-12-19 23:44 - 2014-12-19 23:44 - 0000001 _____ () C:\Users\Vena\AppData\Local\RawCopy.1.01.agreement
2014-12-19 23:44 - 2014-12-19 23:44 - 0000001 _____ () C:\Users\Vena\AppData\Local\RawCopy.sourcedisk.index
2013-11-30 21:02 - 2013-11-30 21:02 - 0007605 _____ () C:\Users\Vena\AppData\Local\Resmon.ResmonCfg
2014-03-20 23:51 - 2014-04-03 22:26 - 0004380 _____ () C:\ProgramData\LmeUSB.log
2014-03-20 23:51 - 2014-04-03 22:26 - 0004292 _____ () C:\ProgramData\LmeZJSW.log
2014-03-20 23:51 - 2014-04-03 22:26 - 0004378 _____ () C:\ProgramData\LSDmbTH.log

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForVENA-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForVena.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: COMODO Antivirus (Enabled - Up to date) {F25D0092-CDBE-B303-ADB7-88DE8CDECCF5}
AS: Comodo Defense+ (Enabled - Up to date) {493CE176-EB84-BC8D-9707-B3ACF7598648}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Vena\Desktop" je 4 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CNAP2 Launcher
C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate
"C:\Users\Vena\AppData\Roaming\Seznam.cz\szninstall.exe" -c [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop
"C:\Users\Vena\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EvtMgr6
C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage
C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload
C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NtVdmSrv
C:\Windows\inf\ntvdm.vbe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce
"C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate [x]


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000001


==================== End Of Log ==============================