Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu logu

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
goffy1985
Návštěvník
Návštěvník
Příspěvky: 163
Registrován: 19 říj 2011 16:59

Prosím o kontrolu logu

#1 Příspěvek od goffy1985 »

Dobrý večer,

tuším, že jsem někde natáhl nějakého dacana, net mi nezobrazuje vše, co by měl a je dost zasekaný. :?:

Může to někdo omrknout?

Děkuji



Logfile of random's system information tool 1.10 (written by random/random)
Run by goofanek at 2016-01-17 19:56:57
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 81 GB (32%) free of 252 GB
Total RAM: 4095 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:56:58, on 17.1.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18163)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_267.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_267.exe
C:\Program Files\trend micro\goofanek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7690 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
WLIDSvcM.exe 2540
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-2d0b7f35-2079-47cb-aa46-30a1b47d6542 -SystemEventPortName:HostProcess-dcdde740-c0c0-4a18-a7a7-20cbd8090b95 -IoCancelEventPortName:HostProcess-e47ba01e-62c4-42e5-9d96-bfa3e8b9d914 -NonStateChangingEventPortName:HostProcess-37fbfdf9-511b-4cbc-8ecb-02bbcd31d4cd -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:5031e35c-0818-4844-aa52-f19d5af799cc -DeviceGroupId:WpdFsGroup
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" c213ace9-104c-4556-b03d-117b344d5aaf
\??\C:\Windows\system32\conhost.exe "-3597868341311352473-568934386-1083037349-483154555-1550653422409147771383635717
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-1964329050-4588029712074369019-2134706877-8101178551862765499718796319517594246
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\goofanek\Desktop\RSITx64.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel="3844.0.2054653220\194743614" "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 3844 "\\.\pipe\gecko-crash-server-pipe.3844" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_267.exe" --proxy-stub-channel=Flash4384.6F6AA0B8.31515 --host-broker-channel=Flash4384.6F6AA0B8.12252 --host-pid=4384 --host-npapi-version=28 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_267.exe" --channel=4420.0077F300.598675290 --proxy-stub-channel=Flash4384.6F6AA0B8.31515 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll" --host-npapi-version=28 --type=renderer
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\goofanek\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\AutoKMS.job - C:\Windows\AutoKMS\AutoKMS.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\goofanek\AppData\Roaming\Mozilla\Firefox\Profiles\1w7l81ub.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.startup.homepage" - "https://www.google.cz/?gws_rd=ssl"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.267 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.267 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2015-04-30 1337000]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 108144]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-06-18 4468056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13 1085656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2015-07-17 8418584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite Automount]
C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-06-18 4468056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvBackend]
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-08-27 2634872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShadowPlay]
C:\Windows\system32\nvspcap64.dll [2015-08-27 1710568]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13 1085656]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-01-17 19:52:21 ----D---- C:\rsit
2016-01-17 19:52:21 ----D---- C:\Program Files\trend micro
2016-01-16 11:11:44 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2016-01-16 11:11:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2016-01-16 11:11:44 ----A---- C:\Windows\system32\XAudio2_7.dll
2016-01-16 11:11:44 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2016-01-16 11:11:43 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2016-01-16 11:11:43 ----A---- C:\Windows\system32\xactengine3_7.dll
2016-01-16 11:11:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2016-01-16 11:11:41 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2016-01-16 11:11:41 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2016-01-16 11:11:41 ----A---- C:\Windows\system32\d3dx11_43.dll
2016-01-16 11:11:41 ----A---- C:\Windows\system32\d3dcsx_43.dll
2016-01-16 11:11:40 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2016-01-16 11:11:40 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2016-01-16 11:11:40 ----A---- C:\Windows\system32\D3DX9_43.dll
2016-01-16 11:11:40 ----A---- C:\Windows\system32\d3dx10_43.dll
2016-01-16 11:11:39 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2016-01-16 11:11:39 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2016-01-16 11:11:39 ----A---- C:\Windows\system32\XAudio2_6.dll
2016-01-16 11:11:39 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2016-01-16 11:11:38 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2016-01-16 11:11:38 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2016-01-16 11:11:38 ----A---- C:\Windows\system32\xactengine3_6.dll
2016-01-16 11:11:38 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2016-01-16 11:11:37 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2016-01-16 11:11:37 ----A---- C:\Windows\system32\XAudio2_5.dll
2016-01-16 11:11:36 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2016-01-16 11:11:36 ----A---- C:\Windows\system32\xactengine3_5.dll
2016-01-16 11:11:35 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2016-01-16 11:11:35 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2016-01-16 11:11:34 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2016-01-16 11:11:34 ----A---- C:\Windows\system32\d3dcsx_42.dll
2016-01-16 11:11:33 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2016-01-16 11:11:33 ----A---- C:\Windows\system32\d3dx11_42.dll
2016-01-16 11:11:32 ----A---- C:\Windows\system32\d3dx10_42.dll
2016-01-16 11:11:31 ----A---- C:\Windows\system32\D3DX9_42.dll
2016-01-16 11:11:29 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2016-01-16 11:11:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2016-01-16 11:11:29 ----A---- C:\Windows\system32\d3dx10_41.dll
2016-01-16 11:11:29 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2016-01-16 11:11:27 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2016-01-16 11:11:27 ----A---- C:\Windows\system32\D3DX9_41.dll
2016-01-16 11:11:26 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2016-01-16 11:11:26 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2016-01-16 11:11:26 ----A---- C:\Windows\system32\XAudio2_4.dll
2016-01-16 11:11:26 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2016-01-16 11:11:25 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2016-01-16 11:11:25 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2016-01-16 11:11:25 ----A---- C:\Windows\system32\xactengine3_4.dll
2016-01-16 11:11:25 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2016-01-16 11:11:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2016-01-16 11:11:23 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2016-01-16 11:11:22 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2016-01-16 11:11:22 ----A---- C:\Windows\system32\d3dx10_40.dll
2016-01-16 11:11:20 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2016-01-16 11:11:20 ----A---- C:\Windows\system32\D3DX9_40.dll
2016-01-16 11:11:19 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2016-01-16 11:11:19 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2016-01-16 11:11:19 ----A---- C:\Windows\system32\XAudio2_3.dll
2016-01-16 11:11:19 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2016-01-16 11:11:18 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2016-01-16 11:11:18 ----A---- C:\Windows\system32\xactengine3_3.dll
2016-01-16 11:11:17 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2016-01-16 11:11:17 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2016-01-16 11:11:16 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2016-01-16 11:11:16 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2016-01-16 11:11:16 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2016-01-16 11:11:16 ----A---- C:\Windows\system32\XAudio2_2.dll
2016-01-16 11:11:16 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2016-01-16 11:11:16 ----A---- C:\Windows\system32\xactengine3_2.dll
2016-01-16 11:11:14 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2016-01-16 11:11:14 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2016-01-16 11:11:14 ----A---- C:\Windows\system32\d3dx10_39.dll
2016-01-16 11:11:14 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2016-01-16 11:11:13 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2016-01-16 11:11:13 ----A---- C:\Windows\system32\D3DX9_39.dll
2016-01-16 11:11:12 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2016-01-16 11:11:12 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2016-01-16 11:11:12 ----A---- C:\Windows\system32\XAudio2_1.dll
2016-01-16 11:11:12 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2016-01-16 11:11:11 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2016-01-16 11:11:11 ----A---- C:\Windows\system32\xactengine3_1.dll
2016-01-16 11:11:10 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2016-01-16 11:11:10 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2016-01-16 11:11:09 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2016-01-16 11:11:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2016-01-16 11:11:09 ----A---- C:\Windows\system32\d3dx10_38.dll
2016-01-16 11:11:09 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2016-01-16 11:11:07 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2016-01-16 11:11:07 ----A---- C:\Windows\system32\D3DX9_38.dll
2016-01-16 11:11:06 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2016-01-16 11:11:06 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2016-01-16 11:11:06 ----A---- C:\Windows\system32\XAudio2_0.dll
2016-01-16 11:11:06 ----A---- C:\Windows\system32\xactengine3_0.dll
2016-01-16 11:11:05 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2016-01-16 11:11:05 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2016-01-16 11:11:04 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2016-01-16 11:11:04 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2016-01-16 11:11:04 ----A---- C:\Windows\system32\d3dx10_37.dll
2016-01-16 11:11:04 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2016-01-16 11:11:02 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2016-01-16 11:11:02 ----A---- C:\Windows\system32\D3DX9_37.dll
2016-01-16 11:11:01 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2016-01-16 11:11:01 ----A---- C:\Windows\system32\xactengine2_10.dll
2016-01-16 11:10:58 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2016-01-16 11:10:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2016-01-16 11:10:58 ----A---- C:\Windows\system32\d3dx10_36.dll
2016-01-16 11:10:58 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2016-01-16 11:10:55 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2016-01-16 11:10:55 ----A---- C:\Windows\system32\d3dx9_36.dll
2016-01-16 11:10:54 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2016-01-16 11:10:54 ----A---- C:\Windows\system32\xactengine2_9.dll
2016-01-16 11:10:52 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2016-01-16 11:10:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2016-01-16 11:10:52 ----A---- C:\Windows\system32\d3dx10_35.dll
2016-01-16 11:10:52 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2016-01-16 11:10:49 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2016-01-16 11:10:49 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2016-01-16 11:10:49 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2016-01-16 11:10:49 ----A---- C:\Windows\system32\xactengine2_8.dll
2016-01-16 11:10:49 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2016-01-16 11:10:49 ----A---- C:\Windows\system32\d3dx9_35.dll
2016-01-16 11:10:47 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2016-01-16 11:10:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2016-01-16 11:10:47 ----A---- C:\Windows\system32\d3dx10_34.dll
2016-01-16 11:10:47 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2016-01-16 11:10:45 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2016-01-16 11:10:45 ----A---- C:\Windows\system32\xinput1_3.dll
2016-01-16 11:10:45 ----A---- C:\Windows\system32\d3dx9_34.dll
2016-01-16 11:10:44 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2016-01-16 11:10:44 ----A---- C:\Windows\system32\xactengine2_7.dll
2016-01-16 11:10:42 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2016-01-16 11:10:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2016-01-16 11:10:42 ----A---- C:\Windows\system32\d3dx10_33.dll
2016-01-16 11:10:42 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2016-01-16 11:10:40 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2016-01-16 11:10:40 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2016-01-16 11:10:40 ----A---- C:\Windows\system32\xactengine2_6.dll
2016-01-16 11:10:40 ----A---- C:\Windows\system32\d3dx9_33.dll
2016-01-16 11:10:39 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2016-01-16 11:10:39 ----A---- C:\Windows\system32\xactengine2_5.dll
2016-01-16 11:10:38 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2016-01-16 11:10:38 ----A---- C:\Windows\system32\d3dx10.dll
2016-01-16 11:10:36 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2016-01-16 11:10:36 ----A---- C:\Windows\system32\d3dx9_32.dll
2016-01-16 11:10:35 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2016-01-16 11:10:35 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2016-01-16 11:10:35 ----A---- C:\Windows\system32\xactengine2_4.dll
2016-01-16 11:10:35 ----A---- C:\Windows\system32\x3daudio1_1.dll
2016-01-16 11:10:34 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2016-01-16 11:10:34 ----A---- C:\Windows\system32\d3dx9_31.dll
2016-01-16 11:10:33 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2016-01-16 11:10:33 ----A---- C:\Windows\system32\xactengine2_3.dll
2016-01-16 11:10:32 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2016-01-16 11:10:32 ----A---- C:\Windows\system32\xinput1_2.dll
2016-01-16 11:10:31 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2016-01-16 11:10:31 ----A---- C:\Windows\system32\xactengine2_2.dll
2016-01-16 11:10:30 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2016-01-16 11:10:30 ----A---- C:\Windows\system32\xinput1_1.dll
2016-01-16 11:10:29 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2016-01-16 11:10:29 ----A---- C:\Windows\system32\xactengine2_1.dll
2016-01-16 11:10:16 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2016-01-16 11:10:16 ----A---- C:\Windows\system32\d3dx9_30.dll
2016-01-16 11:10:14 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2016-01-16 11:10:14 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2016-01-16 11:10:14 ----A---- C:\Windows\system32\xactengine2_0.dll
2016-01-16 11:10:14 ----A---- C:\Windows\system32\x3daudio1_0.dll
2016-01-16 11:10:11 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2016-01-16 11:10:11 ----A---- C:\Windows\system32\d3dx9_29.dll
2016-01-16 11:10:09 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2016-01-16 11:10:09 ----A---- C:\Windows\system32\d3dx9_28.dll
2016-01-16 11:10:06 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2016-01-16 11:10:06 ----A---- C:\Windows\system32\d3dx9_27.dll
2016-01-16 11:10:01 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2016-01-16 11:10:01 ----A---- C:\Windows\system32\d3dx9_26.dll
2016-01-16 11:09:58 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2016-01-16 11:09:58 ----A---- C:\Windows\system32\d3dx9_25.dll
2016-01-16 11:09:52 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2016-01-16 11:09:52 ----A---- C:\Windows\system32\d3dx9_24.dll
2016-01-13 21:24:53 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2016-01-13 21:24:53 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2016-01-13 21:24:53 ----A---- C:\Windows\SYSWOW64\fixmapi.exe
2016-01-13 21:24:53 ----A---- C:\Windows\system32\mapistub.dll
2016-01-13 21:24:53 ----A---- C:\Windows\system32\mapi32.dll
2016-01-13 21:24:53 ----A---- C:\Windows\system32\fixmapi.exe
2016-01-13 21:24:52 ----A---- C:\Windows\system32\aeinv.dll
2016-01-13 21:24:51 ----A---- C:\Windows\SYSWOW64\qedit.dll
2016-01-13 21:24:51 ----A---- C:\Windows\system32\qedit.dll
2016-01-13 21:24:49 ----A---- C:\Windows\SYSWOW64\msmpeg2adec.dll
2016-01-13 21:24:49 ----A---- C:\Windows\system32\WMVDECOD.DLL
2016-01-13 21:24:49 ----A---- C:\Windows\system32\WMADMOD.DLL
2016-01-13 21:24:49 ----A---- C:\Windows\system32\msmpeg2adec.dll
2016-01-13 21:24:48 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2016-01-13 21:24:48 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2016-01-13 21:24:48 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2016-01-13 21:24:48 ----A---- C:\Windows\SYSWOW64\mf.dll
2016-01-13 21:24:48 ----A---- C:\Windows\system32\WMVSDECD.DLL
2016-01-13 21:24:48 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2016-01-13 21:24:48 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2016-01-13 21:24:48 ----A---- C:\Windows\system32\mf.dll
2016-01-13 21:24:47 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2016-01-13 21:24:47 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2016-01-13 21:24:47 ----A---- C:\Windows\SYSWOW64\WMADMOE.DLL
2016-01-13 21:24:47 ----A---- C:\Windows\system32\wmpmde.dll
2016-01-13 21:24:47 ----A---- C:\Windows\system32\WMADMOE.DLL
2016-01-13 21:24:47 ----A---- C:\Windows\system32\mcmde.dll
2016-01-13 21:24:46 ----A---- C:\Windows\SYSWOW64\WMVENCOD.DLL
2016-01-13 21:24:46 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2016-01-13 21:24:46 ----A---- C:\Windows\SYSWOW64\evr.dll
2016-01-13 21:24:46 ----A---- C:\Windows\SYSWOW64\COLORCNV.DLL
2016-01-13 21:24:46 ----A---- C:\Windows\system32\WMVXENCD.DLL
2016-01-13 21:24:46 ----A---- C:\Windows\system32\WMVENCOD.DLL
2016-01-13 21:24:46 ----A---- C:\Windows\system32\WMSPDMOE.DLL
2016-01-13 21:24:46 ----A---- C:\Windows\system32\quartz.dll
2016-01-13 21:24:46 ----A---- C:\Windows\system32\evr.dll
2016-01-13 21:24:46 ----A---- C:\Windows\system32\COLORCNV.DLL
2016-01-13 21:24:45 ----A---- C:\Windows\SYSWOW64\WMVXENCD.DLL
2016-01-13 21:24:45 ----A---- C:\Windows\SYSWOW64\quartz.dll
2016-01-13 21:24:45 ----A---- C:\Windows\SYSWOW64\devenum.dll
2016-01-13 21:24:45 ----A---- C:\Windows\system32\WMVSENCD.DLL
2016-01-13 21:24:45 ----A---- C:\Windows\system32\WMALFXGFXDSP.dll
2016-01-13 21:24:45 ----A---- C:\Windows\system32\VIDRESZR.DLL
2016-01-13 21:24:45 ----A---- C:\Windows\system32\MFWMAAEC.DLL
2016-01-13 21:24:45 ----A---- C:\Windows\system32\mfplat.dll
2016-01-13 21:24:44 ----A---- C:\Windows\SYSWOW64\WMVSENCD.DLL
2016-01-13 21:24:44 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2016-01-13 21:24:44 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2016-01-13 21:24:44 ----A---- C:\Windows\SYSWOW64\MPG4DECD.DLL
2016-01-13 21:24:44 ----A---- C:\Windows\SYSWOW64\MP43DECD.DLL
2016-01-13 21:24:44 ----A---- C:\Windows\SYSWOW64\MFWMAAEC.DLL
2016-01-13 21:24:44 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2016-01-13 21:24:44 ----A---- C:\Windows\system32\RESAMPLEDMO.DLL
2016-01-13 21:24:44 ----A---- C:\Windows\system32\MPG4DECD.DLL
2016-01-13 21:24:44 ----A---- C:\Windows\system32\MP4SDECD.DLL
2016-01-13 21:24:44 ----A---- C:\Windows\system32\MP43DECD.DLL
2016-01-13 21:24:44 ----A---- C:\Windows\system32\MP3DMOD.DLL
2016-01-13 21:24:44 ----A---- C:\Windows\system32\mfvdsp.dll
2016-01-13 21:24:44 ----A---- C:\Windows\system32\devenum.dll
2016-01-13 21:24:43 ----A---- C:\Windows\SYSWOW64\WMSPDMOE.DLL
2016-01-13 21:24:43 ----A---- C:\Windows\SYSWOW64\VIDRESZR.DLL
2016-01-13 21:24:43 ----A---- C:\Windows\SYSWOW64\RESAMPLEDMO.DLL
2016-01-13 21:24:43 ----A---- C:\Windows\SYSWOW64\qasf.dll
2016-01-13 21:24:43 ----A---- C:\Windows\SYSWOW64\MP4SDECD.DLL
2016-01-13 21:24:43 ----A---- C:\Windows\system32\SysFxUI.dll
2016-01-13 21:24:43 ----A---- C:\Windows\system32\qdvd.dll
2016-01-13 21:24:43 ----A---- C:\Windows\system32\qasf.dll
2016-01-13 21:24:42 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2016-01-13 21:24:42 ----A---- C:\Windows\SYSWOW64\MP3DMOD.DLL
2016-01-13 21:24:42 ----A---- C:\Windows\SYSWOW64\mfvdsp.dll
2016-01-13 21:24:42 ----A---- C:\Windows\SYSWOW64\mfps.dll
2016-01-13 21:24:42 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2016-01-13 21:24:42 ----A---- C:\Windows\system32\rrinstaller.exe
2016-01-13 21:24:42 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2016-01-13 21:24:42 ----A---- C:\Windows\system32\mfps.dll
2016-01-13 21:24:42 ----A---- C:\Windows\system32\mfpmp.exe
2016-01-13 21:24:41 ----A---- C:\Windows\SYSWOW64\mferror.dll
2016-01-13 21:24:41 ----A---- C:\Windows\SYSWOW64\ksuser.dll
2016-01-13 21:24:41 ----A---- C:\Windows\system32\mferror.dll
2016-01-13 21:24:41 ----A---- C:\Windows\system32\ksuser.dll
2016-01-13 21:24:41 ----A---- C:\Windows\system32\drivers\portcls.sys
2016-01-13 21:24:41 ----A---- C:\Windows\system32\drivers\drmkaud.sys
2016-01-13 21:24:41 ----A---- C:\Windows\system32\drivers\drmk.sys
2016-01-13 21:24:39 ----A---- C:\Windows\system32\win32k.sys
2016-01-13 21:24:33 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-01-13 21:24:33 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-01-13 21:24:33 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-01-13 21:24:33 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-01-13 21:24:33 ----A---- C:\Windows\system32\iertutil.dll
2016-01-13 21:24:33 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-01-13 21:24:33 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-01-13 21:24:32 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-01-13 21:24:32 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-01-13 21:24:32 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-01-13 21:24:32 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-01-13 21:24:32 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-01-13 21:24:32 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-01-13 21:24:32 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-01-13 21:24:32 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-01-13 21:24:32 ----A---- C:\Windows\system32\iernonce.dll
2016-01-13 21:24:32 ----A---- C:\Windows\system32\ie4uinit.exe
2016-01-13 21:24:31 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-01-13 21:24:31 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-01-13 21:24:30 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-01-13 21:24:30 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-01-13 21:24:30 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-01-13 21:24:30 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-01-13 21:24:30 ----A---- C:\Windows\system32\urlmon.dll
2016-01-13 21:24:30 ----A---- C:\Windows\system32\occache.dll
2016-01-13 21:24:30 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-01-13 21:24:30 ----A---- C:\Windows\system32\iedkcs32.dll
2016-01-13 21:24:29 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-01-13 21:24:29 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-01-13 21:24:29 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-01-13 21:24:29 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-01-13 21:24:29 ----A---- C:\Windows\system32\msfeeds.dll
2016-01-13 21:24:29 ----A---- C:\Windows\system32\dxtrans.dll
2016-01-13 21:24:28 ----A---- C:\Windows\system32\iesetup.dll
2016-01-13 21:24:27 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-01-13 21:24:27 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-01-13 21:24:27 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-01-13 21:24:27 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-01-13 21:24:27 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-01-13 21:24:27 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-01-13 21:24:27 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-01-13 21:24:27 ----A---- C:\Windows\system32\vbscript.dll
2016-01-13 21:24:27 ----A---- C:\Windows\system32\jsproxy.dll
2016-01-13 21:24:26 ----A---- C:\Windows\system32\ieui.dll
2016-01-13 21:24:26 ----A---- C:\Windows\system32\ieframe.dll
2016-01-13 21:24:26 ----A---- C:\Windows\system32\dxtmsft.dll
2016-01-13 21:24:25 ----A---- C:\Windows\system32\webcheck.dll
2016-01-13 21:24:25 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-01-13 21:24:25 ----A---- C:\Windows\system32\mshtmled.dll
2016-01-13 21:24:25 ----A---- C:\Windows\system32\jscript.dll
2016-01-13 21:24:25 ----A---- C:\Windows\system32\ieUnatt.exe
2016-01-13 21:24:24 ----A---- C:\Windows\system32\wininet.dll
2016-01-13 21:24:24 ----A---- C:\Windows\system32\jscript9diag.dll
2016-01-13 21:24:24 ----A---- C:\Windows\system32\jscript9.dll
2016-01-13 21:24:24 ----A---- C:\Windows\system32\ieapfltr.dll
2016-01-13 21:24:23 ----A---- C:\Windows\system32\msrating.dll
2016-01-13 21:24:23 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-01-13 21:24:23 ----A---- C:\Windows\system32\mshtml.dll
2016-01-13 21:23:40 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-01-13 21:23:40 ----A---- C:\Windows\system32\advapi32.dll
2016-01-13 21:23:39 ----A---- C:\Windows\system32\appraiser.dll
2016-01-13 21:23:38 ----A---- C:\Windows\system32\invagent.dll
2016-01-13 21:23:38 ----A---- C:\Windows\system32\generaltel.dll
2016-01-13 21:23:38 ----A---- C:\Windows\system32\devinv.dll
2016-01-13 21:23:38 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-01-13 21:23:38 ----A---- C:\Windows\system32\aepic.dll
2016-01-13 21:23:38 ----A---- C:\Windows\system32\acmigration.dll
2016-01-13 21:23:37 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2016-01-13 21:23:37 ----A---- C:\Windows\system32\gdi32.dll
2016-01-13 21:23:31 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-01-13 21:23:30 ----A---- C:\Windows\system32\rpcrt4.dll
2016-01-13 21:23:29 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-01-13 21:23:29 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-01-13 21:23:29 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-01-13 21:23:29 ----A---- C:\Windows\system32\schannel.dll
2016-01-13 21:23:29 ----A---- C:\Windows\system32\ncrypt.dll
2016-01-13 21:23:29 ----A---- C:\Windows\system32\kernel32.dll
2016-01-13 21:23:29 ----A---- C:\Windows\system32\kerberos.dll
2016-01-13 21:23:28 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-01-13 21:23:28 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-01-13 21:23:28 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-01-13 21:23:28 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-01-13 21:23:28 ----A---- C:\Windows\system32\ntdll.dll
2016-01-13 21:23:28 ----A---- C:\Windows\system32\lsasrv.dll
2016-01-13 21:23:28 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-01-13 21:23:27 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-01-13 21:23:27 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-01-13 21:23:27 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-01-13 21:23:27 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-01-13 21:23:27 ----A---- C:\Windows\system32\winsrv.dll
2016-01-13 21:23:27 ----A---- C:\Windows\system32\wdigest.dll
2016-01-13 21:23:27 ----A---- C:\Windows\system32\TSpkg.dll
2016-01-13 21:23:27 ----A---- C:\Windows\system32\sspicli.dll
2016-01-13 21:23:27 ----A---- C:\Windows\system32\secur32.dll
2016-01-13 21:23:27 ----A---- C:\Windows\system32\msv1_0.dll
2016-01-13 21:23:27 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-01-13 21:23:27 ----A---- C:\Windows\system32\cryptbase.dll
2016-01-13 21:23:27 ----A---- C:\Windows\system32\credssp.dll
2016-01-13 21:23:26 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-01-13 21:23:26 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-01-13 21:23:26 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-01-13 21:23:26 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-01-13 21:23:26 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-01-13 21:23:26 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-01-13 21:23:26 ----A---- C:\Windows\system32\wow64win.dll
2016-01-13 21:23:26 ----A---- C:\Windows\system32\wow64.dll
2016-01-13 21:23:26 ----A---- C:\Windows\system32\sspisrv.dll
2016-01-13 21:23:26 ----A---- C:\Windows\system32\srcore.dll
2016-01-13 21:23:26 ----A---- C:\Windows\system32\smss.exe
2016-01-13 21:23:26 ----A---- C:\Windows\system32\ntvdm64.dll
2016-01-13 21:23:26 ----A---- C:\Windows\system32\lsass.exe
2016-01-13 21:23:26 ----A---- C:\Windows\system32\KernelBase.dll
2016-01-13 21:23:26 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-01-13 21:23:26 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-01-13 21:23:26 ----A---- C:\Windows\system32\csrsrv.dll
2016-01-13 21:23:26 ----A---- C:\Windows\system32\conhost.exe
2016-01-13 21:23:25 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-01-13 21:23:25 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-01-13 21:23:25 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-01-13 21:23:25 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-01-13 21:23:25 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-01-13 21:23:25 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-01-13 21:23:25 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-01-13 21:23:25 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-01-13 21:23:25 ----A---- C:\Windows\system32\wow64cpu.dll
2016-01-13 21:23:25 ----A---- C:\Windows\system32\srclient.dll
2016-01-13 21:23:25 ----A---- C:\Windows\system32\rstrui.exe
2016-01-13 21:23:25 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-01-13 21:23:25 ----A---- C:\Windows\system32\auditpol.exe
2016-01-13 21:23:25 ----A---- C:\Windows\system32\apisetschema.dll
2016-01-13 21:23:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-01-13 21:23:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-01-13 21:23:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-01-13 21:23:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-01-13 21:23:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-01-13 21:23:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-01-13 21:23:24 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-01-13 21:23:24 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-01-13 21:23:24 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-01-13 21:23:24 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-01-13 21:23:24 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-01-13 21:23:24 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-01-13 21:23:23 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-01-13 21:23:23 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-01-13 21:23:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-01-13 21:23:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-01-13 21:23:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-01-13 21:23:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-01-13 21:23:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-01-13 21:23:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-01-13 21:23:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-01-13 21:23:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-01-13 21:23:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-01-13 21:23:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-01-13 21:23:22 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-01-13 21:23:22 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-01-13 21:23:22 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-01-13 21:23:22 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-01-13 21:23:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-01-13 21:23:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-01-13 21:23:21 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-01-13 21:23:21 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-01-13 21:23:21 ----A---- C:\Windows\SYSWOW64\user.exe
2016-01-13 21:23:21 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-01-13 21:23:21 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-01-13 21:23:21 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-01-13 21:23:21 ----A---- C:\Windows\system32\msobjs.dll
2016-01-13 21:23:21 ----A---- C:\Windows\system32\msaudite.dll
2016-01-13 21:23:21 ----A---- C:\Windows\system32\adtschema.dll
2016-01-10 18:27:31 ----D---- C:\Windows\SYSWOW64\xlive
2016-01-10 18:27:23 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2016-01-10 18:25:11 ----D---- C:\Program Files\Eidos
2016-01-06 21:14:36 ----D---- C:\Users\goofanek\AppData\Roaming\Activision
2016-01-06 21:14:36 ----D---- C:\ProgramData\Activision
2016-01-06 21:08:59 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2016-01-06 21:08:58 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2016-01-06 21:08:55 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2016-01-06 20:40:57 ----D---- C:\Games
2016-01-01 20:05:26 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-12-28 19:30:03 ----A---- C:\Windows\SYSWOW64\FlashPlayerInstaller.exe
2015-12-27 12:08:46 ----D---- C:\Users\goofanek\AppData\Roaming\.mono
2015-12-27 12:08:46 ----D---- C:\ProgramData\.mono
2015-12-27 12:08:45 ----D---- C:\Users\goofanek\AppData\Roaming\Colossal Order
2015-12-27 12:04:11 ----D---- C:\Program Files (x86)\Cities Skylines

======List of files/folders modified in the last 1 month======

2016-01-17 19:56:50 ----D---- C:\Windows\Temp
2016-01-17 19:56:32 ----D---- C:\Windows\Prefetch
2016-01-17 19:52:21 ----RD---- C:\Program Files
2016-01-17 16:38:43 ----SHD---- C:\System Volume Information
2016-01-17 16:31:15 ----D---- C:\Windows\system32\Tasks
2016-01-17 16:30:42 ----D---- C:\Windows\system32\config
2016-01-17 16:28:07 ----D---- C:\Windows\Tasks
2016-01-17 16:27:17 ----D---- C:\ProgramData\NVIDIA
2016-01-16 18:36:24 ----D---- C:\Windows\System32
2016-01-16 18:36:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-01-16 17:17:25 ----D---- C:\Windows\rescache
2016-01-16 11:12:29 ----SHD---- C:\Windows\Installer
2016-01-16 11:11:44 ----D---- C:\Windows\SysWOW64
2016-01-16 11:10:29 ----RSD---- C:\Windows\assembly
2016-01-16 11:09:56 ----D---- C:\Windows
2016-01-16 11:08:24 ----D---- C:\Program Files (x86)\Ubisoft
2016-01-15 22:37:07 ----D---- C:\Windows\system32\drivers
2016-01-15 22:37:05 ----D---- C:\Windows\system32\drivers\UMDF
2016-01-14 18:53:55 ----D---- C:\Windows\winsxs
2016-01-14 18:51:31 ----D---- C:\Program Files\Internet Explorer
2016-01-14 18:51:30 ----D---- C:\Windows\SYSWOW64\en-US
2016-01-14 18:51:30 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-01-14 18:51:30 ----D---- C:\Windows\system32\cs-CZ
2016-01-14 18:51:29 ----D---- C:\Windows\system32\en-US
2016-01-14 18:51:28 ----SD---- C:\Windows\system32\CompatTel
2016-01-14 18:51:28 ----D---- C:\Program Files (x86)\Internet Explorer
2016-01-14 18:51:27 ----D---- C:\Windows\system32\appraiser
2016-01-14 18:51:25 ----D---- C:\Windows\AppPatch
2016-01-14 18:51:19 ----D---- C:\Windows\system32\DriverStore
2016-01-14 18:50:04 ----D---- C:\Program Files\Microsoft Silverlight
2016-01-14 18:50:01 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2016-01-13 22:33:57 ----D---- C:\ProgramData\Microsoft Help
2016-01-13 22:31:56 ----D---- C:\Windows\system32\MRT
2016-01-13 22:29:11 ----A---- C:\Windows\system32\MRT.exe
2016-01-13 21:21:05 ----D---- C:\Windows\system32\catroot2
2016-01-10 18:35:07 ----RD---- C:\Program Files (x86)
2016-01-10 18:27:04 ----D---- C:\Program Files\Common Files\Microsoft Shared
2016-01-10 14:20:27 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-01-06 21:14:36 ----HD---- C:\ProgramData
2016-01-06 21:08:21 ----D---- C:\Windows\Logs
2016-01-06 21:07:40 ----SD---- C:\ProgramData\Microsoft
2016-01-02 20:49:09 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2016-01-01 20:05:50 ----D---- C:\ProgramData\NVIDIA Corporation
2016-01-01 20:05:33 ----D---- C:\Windows\inf
2016-01-01 15:12:45 ----SD---- C:\Users\goofanek\AppData\Roaming\Microsoft
2016-01-01 14:21:54 ----D---- C:\Windows\system32\LogFiles
2015-12-28 19:30:20 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-12-18 23:06:31 ----SD---- C:\Windows\SYSWOW64\GWX
2015-12-18 23:06:31 ----SD---- C:\Windows\system32\GWX

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-03-04 280376]
R0 mv61xx;mv61xx; C:\Windows\system32\DRIVERS\mv61xx.sys [2010-10-26 181040]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 124568]
R3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtlitescsibus.sys [2015-08-12 30264]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2000-01-01 4430808]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E62x64.sys [2009-08-23 56320]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2005-03-29 8192]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-11-10 214168]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-08-27 19576]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-10-03 50472]
S3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-03-17 25816]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-03-17 63704]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2015-10-26 16056]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-08-27 1155192]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-04-30 23816]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-08-27 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-08-27 5544568]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-11-05 938616]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2015-08-18 76152]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-11-05 417584]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-06-18 1268568]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2015-04-30 366544]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-03-17 1080120]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-28 269504]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-12-12 114688]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-08-16 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7317
Registrován: 15 lis 2012 22:26
Bydliště: Znojmo

Re: Prosím o kontrolu logu

#2 Příspěvek od altrok »

Krasny den Vam preju :bye:


:arrow: V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

:arrow: Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )
  • ukoncete vsechny programy
  • kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
  • kliknete na Scan, pote na Cleaning
  • po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner[Cx].txt), jehoz obsah mi zkopirujte do pristi odpovedi
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
goffy1985
Návštěvník
Návštěvník
Příspěvky: 163
Registrován: 19 říj 2011 16:59

Re: Prosím o kontrolu logu

#3 Příspěvek od goffy1985 »

Zde:

# AdwCleaner v5.030 - Logfile created 19/01/2016 at 22:09:17
# Updated 17/01/2016 by Xplode
# Database : 2016-01-19.2 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : goofanek - GOOFANEK-PC
# Running from : C:\Users\goofanek\Desktop\adwcleaner_5.030.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : swdumon

***** [ Folders ] *****

[-] Folder Deleted : C:\Users\goofanek\AppData\Local\slimware utilities inc
[-] Folder Deleted : C:\Users\goofanek\AppData\Roaming\RHEng

***** [ Files ] *****

[-] File Deleted : C:\Windows\SysNative\drivers\swdumon.sys

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\SlimWare Utilities Inc
[-] Key Deleted : HKLM\SOFTWARE\SLIMWARE UTILITIES, INC.
[-] Key Deleted : HKLM\SOFTWARE\SlimWare Utilities Inc

***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1090 bytes] ##########
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7317
Registrován: 15 lis 2012 22:26
Bydliště: Znojmo

Re: Prosím o kontrolu logu

#4 Příspěvek od altrok »

:arrow: Nainstalujte MBAM a udelejte vlastni sken vsech disku - http://forum.viry.cz/viewtopic.php?f=29&t=144868
  • Upozorneni: tento sken zabere od 30 minut po nekolik hodin
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
goffy1985
Návštěvník
Návštěvník
Příspěvky: 163
Registrován: 19 říj 2011 16:59

Re: Prosím o kontrolu logu

#5 Příspěvek od goffy1985 »

čisto :)
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7317
Registrován: 15 lis 2012 22:26
Bydliště: Znojmo

Re: Prosím o kontrolu logu

#6 Příspěvek od altrok »

:arrow: Dejte logy FRST.txt a Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101
Pozn. pri druhem a dalsim spusteni FRST je pro vytvoreni logu Addition.txt nutne tuto volbu explicitne zatrhnout pred zacatkem skenu.
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
goffy1985
Návštěvník
Návštěvník
Příspěvky: 163
Registrován: 19 říj 2011 16:59

Re: Prosím o kontrolu logu

#7 Příspěvek od goffy1985 »

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-01-2016
Ran by goofanek (administrator) on GOOFANEK-PC (21-01-2016 19:58:27)
Running from C:\Users\goofanek\Desktop
Loaded Profiles: goofanek (Available Profiles: goofanek)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-13] (Adobe Systems Incorporated)
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\...\MountPoints2: J - J:\Autorun.exe
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\...\MountPoints2: K - K:\setup.exe
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\...\MountPoints2: {5e2af835-4105-11e5-9ef7-002215b3d25d} - J:\KaneandLynch.part01.exe
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\...\MountPoints2: {5e2af839-4105-11e5-9ef7-002215b3d25d} - L:\setup.exe
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [899584 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2015-08-15] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 94.74.192.252 94.74.192.244
Tcpip\..\Interfaces\{A551C8B2-A1DB-42E0-859B-29BFF29CF3E1}: [DhcpNameServer] 94.74.192.252 94.74.192.244

Internet Explorer:
==================
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\goofanek\AppData\Roaming\Mozilla\Firefox\Profiles\1w7l81ub.default
FF Homepage: hxxps://www.google.cz/?gws_rd=ssl
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-19] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-19] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-05] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-05] (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-12-17] (Adobe Systems Inc.)
FF Extension: Adblock Plus - C:\Users\goofanek\AppData\Roaming\Mozilla\Firefox\Profiles\1w7l81ub.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-01-19]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-08-18] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-08-12] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2016-01-20] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-03-17] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R0 mv61xx; C:\Windows\System32\DRIVERS\mv61xx.sys [181040 2010-10-26] (Marvell Semiconductor, Inc.)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-10-03] (NVIDIA Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-21 19:58 - 2016-01-21 19:59 - 00009747 _____ C:\Users\goofanek\Desktop\FRST.txt
2016-01-21 19:58 - 2016-01-21 19:58 - 08454977 _____ C:\Users\goofanek\Desktop\Simpsonovi-26x14-Marge-taxikářkou-WEB-DL.AVC.CZ.mkv.part
2016-01-21 19:58 - 2016-01-21 19:58 - 02370560 _____ (Farbar) C:\Users\goofanek\Desktop\FRST64.exe
2016-01-21 19:58 - 2016-01-21 19:58 - 00000000 ____D C:\FRST
2016-01-21 19:58 - 2016-01-21 19:58 - 00000000 _____ C:\Users\goofanek\Desktop\Simpsonovi-26x14-Marge-taxikářkou-WEB-DL.AVC.CZ.mkv
2016-01-21 19:57 - 2016-01-21 19:57 - 00015327 _____ C:\Users\goofanek\Desktop\LM.bat
2016-01-21 19:57 - 2016-01-21 19:57 - 00002962 _____ C:\Windows\System32\Tasks\{8B1A4A61-2CFA-4616-BB99-3AC91006B9CF}
2016-01-21 19:55 - 2016-01-21 19:56 - 00112640 _____ (forum.viry.cz) C:\Users\goofanek\Desktop\FRSTLauncher.exe
2016-01-21 17:38 - 2016-01-21 17:38 - 00003000 _____ C:\Windows\System32\Tasks\{D4A2026E-2ACC-4531-80DB-08AFBE096262}
2016-01-20 18:40 - 2016-01-20 18:40 - 00003000 _____ C:\Windows\System32\Tasks\{B394AA0B-63F0-4050-B7B3-58C7999CFFDA}
2016-01-19 22:07 - 2016-01-19 22:09 - 00000000 ____D C:\AdwCleaner
2016-01-19 19:00 - 2016-01-19 19:00 - 00003000 _____ C:\Windows\System32\Tasks\{9BD2C6FE-1509-4A71-B0EA-4652FFD93397}
2016-01-19 18:53 - 2016-01-19 19:02 - 157529815 _____ C:\Users\goofanek\Desktop\Simpsonovi-26x13-Velcí-a-hrdí-WEB-DL.AVC.CZ.mkv
2016-01-18 18:04 - 2016-01-18 18:04 - 00003000 _____ C:\Windows\System32\Tasks\{875D9814-DCC4-4AED-9680-96F6FE9C59CB}
2016-01-17 20:44 - 2016-01-17 20:44 - 00048725 _____ C:\Users\goofanek\Desktop\info.txt
2016-01-17 19:52 - 2016-01-17 19:56 - 00000000 ____D C:\Program Files\trend micro
2016-01-17 19:52 - 2016-01-17 19:52 - 00000000 ____D C:\rsit
2016-01-17 19:50 - 2016-01-21 19:57 - 00029696 _____ C:\Users\goofanek\AppData\Local\MSGBOX.EXE
2016-01-17 16:31 - 2016-01-17 16:31 - 00003000 _____ C:\Windows\System32\Tasks\{AC414BC0-1477-4B03-A903-725BE56A6F4F}
2016-01-16 11:24 - 2016-01-16 11:24 - 00003000 _____ C:\Windows\System32\Tasks\{2C393A33-FB32-4517-96A8-397BDA3143F8}
2016-01-16 11:23 - 2016-01-16 11:23 - 00001196 _____ C:\Users\goofanek\Desktop\ACC – zástupce.lnk
2016-01-16 11:11 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2016-01-16 11:11 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2016-01-16 11:11 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2016-01-16 11:11 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2016-01-16 11:11 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2016-01-16 11:11 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2016-01-16 11:11 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2016-01-16 11:11 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2016-01-16 11:11 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2016-01-16 11:11 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2016-01-16 11:11 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2016-01-16 11:11 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2016-01-16 11:11 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2016-01-16 11:11 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2016-01-16 11:11 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2016-01-16 11:11 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2016-01-16 11:11 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2016-01-16 11:11 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2016-01-16 11:11 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2016-01-16 11:11 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2016-01-16 11:11 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2016-01-16 11:11 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2016-01-16 11:11 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2016-01-16 11:11 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2016-01-16 11:11 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2016-01-16 11:11 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2016-01-16 11:11 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2016-01-16 11:11 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2016-01-16 11:11 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2016-01-16 11:11 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2016-01-16 11:11 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2016-01-16 11:11 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2016-01-16 11:11 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2016-01-16 11:11 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2016-01-16 11:11 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2016-01-16 11:11 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2016-01-16 11:11 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2016-01-16 11:11 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2016-01-16 11:11 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2016-01-16 11:11 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2016-01-16 11:11 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2016-01-16 11:11 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2016-01-16 11:11 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2016-01-16 11:11 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2016-01-16 11:11 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2016-01-16 11:11 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2016-01-16 11:11 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2016-01-16 11:11 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2016-01-16 11:11 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2016-01-16 11:11 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2016-01-16 11:11 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2016-01-16 11:11 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2016-01-16 11:11 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2016-01-16 11:11 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2016-01-16 11:11 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2016-01-16 11:11 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2016-01-16 11:11 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2016-01-16 11:11 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2016-01-16 11:11 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2016-01-16 11:11 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2016-01-16 11:11 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2016-01-16 11:11 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2016-01-16 11:11 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2016-01-16 11:11 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2016-01-16 11:11 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2016-01-16 11:11 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2016-01-16 11:11 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2016-01-16 11:11 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2016-01-16 11:11 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2016-01-16 11:11 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2016-01-16 11:11 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2016-01-16 11:11 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2016-01-16 11:11 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2016-01-16 11:11 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2016-01-16 11:11 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2016-01-16 11:11 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2016-01-16 11:11 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2016-01-16 11:11 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2016-01-16 11:11 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2016-01-16 11:11 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2016-01-16 11:11 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2016-01-16 11:11 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2016-01-16 11:11 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2016-01-16 11:11 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2016-01-16 11:11 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2016-01-16 11:11 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2016-01-16 11:11 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2016-01-16 11:11 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2016-01-16 11:11 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2016-01-16 11:11 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2016-01-16 11:11 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2016-01-16 11:11 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2016-01-16 11:11 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2016-01-16 11:11 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2016-01-16 11:11 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2016-01-16 11:11 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2016-01-16 11:11 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2016-01-16 11:11 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2016-01-16 11:11 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2016-01-16 11:11 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2016-01-16 11:11 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2016-01-16 11:11 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2016-01-16 11:11 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2016-01-16 11:10 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2016-01-16 11:10 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2016-01-16 11:10 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2016-01-16 11:10 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2016-01-16 11:10 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2016-01-16 11:10 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2016-01-16 11:10 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2016-01-16 11:10 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2016-01-16 11:10 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2016-01-16 11:10 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2016-01-16 11:10 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2016-01-16 11:10 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2016-01-16 11:10 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2016-01-16 11:10 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2016-01-16 11:10 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2016-01-16 11:10 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2016-01-16 11:10 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2016-01-16 11:10 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2016-01-16 11:10 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2016-01-16 11:10 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2016-01-16 11:10 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2016-01-16 11:10 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2016-01-16 11:10 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2016-01-16 11:10 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2016-01-16 11:10 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2016-01-16 11:10 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2016-01-16 11:10 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2016-01-16 11:10 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2016-01-16 11:10 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2016-01-16 11:10 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2016-01-16 11:10 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2016-01-16 11:10 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2016-01-16 11:10 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2016-01-16 11:10 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2016-01-16 11:10 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2016-01-16 11:10 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2016-01-16 11:10 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2016-01-16 11:10 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2016-01-16 11:10 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2016-01-16 11:10 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2016-01-16 11:10 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2016-01-16 11:10 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2016-01-16 11:10 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2016-01-16 11:10 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2016-01-16 11:10 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2016-01-16 11:10 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2016-01-16 11:10 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2016-01-16 11:10 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2016-01-16 11:10 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2016-01-16 11:10 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2016-01-16 11:10 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2016-01-16 11:10 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2016-01-16 11:10 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2016-01-16 11:10 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2016-01-16 11:10 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2016-01-16 11:10 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2016-01-16 11:10 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2016-01-16 11:10 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2016-01-16 11:10 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2016-01-16 11:10 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2016-01-16 11:10 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2016-01-16 11:10 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2016-01-16 11:10 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2016-01-16 11:10 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2016-01-16 11:10 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2016-01-16 11:10 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2016-01-16 11:10 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2016-01-16 11:10 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2016-01-16 11:10 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2016-01-16 11:10 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2016-01-16 11:10 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2016-01-16 11:09 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2016-01-16 11:09 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2016-01-16 11:09 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2016-01-16 11:09 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2016-01-16 11:08 - 2016-01-16 11:08 - 00000000 ____D C:\Users\goofanek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2016-01-15 22:37 - 2016-01-15 22:37 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2016-01-13 21:24 - 2015-12-24 00:13 - 00387784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-01-13 21:24 - 2015-12-23 23:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-01-13 21:24 - 2015-12-12 19:54 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-01-13 21:24 - 2015-12-12 19:31 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-01-13 21:24 - 2015-12-12 19:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-01-13 21:24 - 2015-12-12 19:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-01-13 21:24 - 2015-12-12 19:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-01-13 21:24 - 2015-12-12 19:15 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-01-13 21:24 - 2015-12-12 19:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-01-13 21:24 - 2015-12-12 19:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-01-13 21:24 - 2015-12-12 19:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-01-13 21:24 - 2015-12-12 19:07 - 06051328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-01-13 21:24 - 2015-12-12 19:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-01-13 21:24 - 2015-12-12 19:07 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-01-13 21:24 - 2015-12-12 19:03 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-01-13 21:24 - 2015-12-12 19:02 - 20367360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-01-13 21:24 - 2015-12-12 19:02 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-01-13 21:24 - 2015-12-12 19:02 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-01-13 21:24 - 2015-12-12 19:02 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-01-13 21:24 - 2015-12-12 19:02 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-01-13 21:24 - 2015-12-12 18:55 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-01-13 21:24 - 2015-12-12 18:51 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-01-13 21:24 - 2015-12-12 18:49 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-01-13 21:24 - 2015-12-12 18:44 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-01-13 21:24 - 2015-12-12 18:40 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-01-13 21:24 - 2015-12-12 18:39 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-01-13 21:24 - 2015-12-12 18:37 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-01-13 21:24 - 2015-12-12 18:37 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-01-13 21:24 - 2015-12-12 18:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-01-13 21:24 - 2015-12-12 18:37 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-01-13 21:24 - 2015-12-12 18:36 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-01-13 21:24 - 2015-12-12 18:36 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-01-13 21:24 - 2015-12-12 18:35 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-01-13 21:24 - 2015-12-12 18:33 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-01-13 21:24 - 2015-12-12 18:31 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-01-13 21:24 - 2015-12-12 18:30 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-01-13 21:24 - 2015-12-12 18:28 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-01-13 21:24 - 2015-12-12 18:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-01-13 21:24 - 2015-12-12 18:27 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-01-13 21:24 - 2015-12-12 18:27 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-01-13 21:24 - 2015-12-12 18:25 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-01-13 21:24 - 2015-12-12 18:23 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-01-13 21:24 - 2015-12-12 18:22 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-01-13 21:24 - 2015-12-12 18:21 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-01-13 21:24 - 2015-12-12 18:20 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-01-13 21:24 - 2015-12-12 18:19 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-01-13 21:24 - 2015-12-12 18:18 - 14457856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-01-13 21:24 - 2015-12-12 18:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-01-13 21:24 - 2015-12-12 18:12 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-01-13 21:24 - 2015-12-12 18:10 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-01-13 21:24 - 2015-12-12 18:10 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-01-13 21:24 - 2015-12-12 18:09 - 04610560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-01-13 21:24 - 2015-12-12 18:08 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-01-13 21:24 - 2015-12-12 18:06 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-01-13 21:24 - 2015-12-12 18:02 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-01-13 21:24 - 2015-12-12 18:00 - 12856320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-01-13 21:24 - 2015-12-12 18:00 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-01-13 21:24 - 2015-12-12 18:00 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-01-13 21:24 - 2015-12-12 18:00 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-01-13 21:24 - 2015-12-12 17:54 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-01-13 21:24 - 2015-12-12 17:42 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-01-13 21:24 - 2015-12-12 17:41 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-01-13 21:24 - 2015-12-12 17:38 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-01-13 21:24 - 2015-12-12 17:36 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-01-13 21:24 - 2015-12-11 19:57 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-01-13 21:24 - 2015-12-08 22:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-01-13 21:24 - 2015-12-08 22:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-01-13 21:24 - 2015-12-08 22:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
2016-01-13 21:24 - 2015-12-08 22:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2016-01-13 21:24 - 2015-12-08 22:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2016-01-13 21:24 - 2015-12-08 22:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2016-01-13 21:24 - 2015-12-08 22:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2016-01-13 21:24 - 2015-12-08 22:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-01-13 21:24 - 2015-12-08 22:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
2016-01-13 21:24 - 2015-12-08 22:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
2016-01-13 21:24 - 2015-12-08 22:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2016-01-13 21:24 - 2015-12-08 22:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
2016-01-13 21:24 - 2015-12-08 22:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-01-13 21:24 - 2015-12-08 22:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-01-13 21:24 - 2015-12-08 22:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2016-01-13 21:24 - 2015-12-08 22:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2016-01-13 21:24 - 2015-12-08 22:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
2016-01-13 21:24 - 2015-12-08 22:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-01-13 21:24 - 2015-12-08 22:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-01-13 21:24 - 2015-12-08 22:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-01-13 21:24 - 2015-12-08 22:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2016-01-13 21:24 - 2015-12-08 22:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-01-13 21:24 - 2015-12-08 22:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
2016-01-13 21:24 - 2015-12-08 22:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
2016-01-13 21:24 - 2015-12-08 22:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2016-01-13 21:24 - 2015-12-08 22:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
2016-01-13 21:24 - 2015-12-08 22:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-01-13 21:24 - 2015-12-08 22:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
2016-01-13 21:24 - 2015-12-08 22:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-01-13 21:24 - 2015-12-08 22:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2016-01-13 21:24 - 2015-12-08 22:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2016-01-13 21:24 - 2015-12-08 22:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
2016-01-13 21:24 - 2015-12-08 22:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2016-01-13 21:24 - 2015-12-08 22:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-01-13 21:24 - 2015-12-08 22:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll
2016-01-13 21:24 - 2015-12-08 22:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 01393152 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-01-13 21:24 - 2015-12-08 20:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-01-13 21:24 - 2015-12-08 20:07 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-01-13 21:24 - 2015-12-08 20:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2016-01-13 21:24 - 2015-12-08 20:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-01-13 21:24 - 2015-12-08 20:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-01-13 21:24 - 2015-12-08 20:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-01-13 21:24 - 2015-12-08 19:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-01-13 21:24 - 2015-12-08 19:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-01-13 21:24 - 2015-12-08 19:11 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2016-01-13 21:24 - 2015-12-08 18:58 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-01-13 21:24 - 2015-11-14 00:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2016-01-13 21:24 - 2015-11-14 00:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2016-01-13 21:24 - 2015-11-14 00:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
2016-01-13 21:24 - 2015-11-13 23:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll
2016-01-13 21:24 - 2015-11-13 23:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll
2016-01-13 21:24 - 2015-11-13 23:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe
2016-01-13 21:23 - 2015-12-30 20:08 - 05572544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-01-13 21:23 - 2015-12-30 20:08 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-01-13 21:23 - 2015-12-30 20:08 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-01-13 21:23 - 2015-12-30 20:05 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-01-13 21:23 - 2015-12-30 20:02 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-01-13 21:23 - 2015-12-30 20:02 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-01-13 21:23 - 2015-12-30 20:02 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-01-13 21:23 - 2015-12-30 20:02 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-01-13 21:23 - 2015-12-30 20:02 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-01-13 21:23 - 2015-12-30 20:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-01-13 21:23 - 2015-12-30 20:01 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-01-13 21:23 - 2015-12-30 20:01 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-01-13 21:23 - 2015-12-30 20:01 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-01-13 21:23 - 2015-12-30 20:01 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-01-13 21:23 - 2015-12-30 20:01 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-01-13 21:23 - 2015-12-30 20:01 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-01-13 21:23 - 2015-12-30 20:01 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-01-13 21:23 - 2015-12-30 20:00 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-01-13 21:23 - 2015-12-30 19:59 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-01-13 21:23 - 2015-12-30 19:59 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-01-13 21:23 - 2015-12-30 19:59 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-01-13 21:23 - 2015-12-30 19:58 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-01-13 21:23 - 2015-12-30 19:58 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-01-13 21:23 - 2015-12-30 19:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-01-13 21:23 - 2015-12-30 19:57 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-01-13 21:23 - 2015-12-30 19:57 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-01-13 21:23 - 2015-12-30 19:55 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-01-13 21:23 - 2015-12-30 19:55 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-01-13 21:23 - 2015-12-30 19:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:47 - 03993536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-01-13 21:23 - 2015-12-30 19:47 - 03938240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-01-13 21:23 - 2015-12-30 19:44 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-01-13 21:23 - 2015-12-30 19:41 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-01-13 21:23 - 2015-12-30 19:41 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-01-13 21:23 - 2015-12-30 19:41 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-01-13 21:23 - 2015-12-30 19:41 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-01-13 21:23 - 2015-12-30 19:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-01-13 21:23 - 2015-12-30 19:41 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-01-13 21:23 - 2015-12-30 19:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-01-13 21:23 - 2015-12-30 19:41 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-01-13 21:23 - 2015-12-30 19:40 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-01-13 21:23 - 2015-12-30 19:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-01-13 21:23 - 2015-12-30 19:39 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-01-13 21:23 - 2015-12-30 19:39 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-01-13 21:23 - 2015-12-30 19:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-01-13 21:23 - 2015-12-30 19:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-01-13 21:23 - 2015-12-30 19:38 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-01-13 21:23 - 2015-12-30 19:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 18:57 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-01-13 21:23 - 2015-12-30 18:50 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-01-13 21:23 - 2015-12-30 18:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-01-13 21:23 - 2015-12-30 18:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-01-13 21:23 - 2015-12-30 18:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-01-13 21:23 - 2015-12-30 18:42 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-01-13 21:23 - 2015-12-30 18:42 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-01-13 21:23 - 2015-12-30 18:41 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-01-13 21:23 - 2015-12-30 18:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-01-13 21:23 - 2015-12-30 18:32 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-01-13 21:23 - 2015-12-30 18:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-01-13 21:23 - 2015-12-30 18:32 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-01-13 21:23 - 2015-12-30 18:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-01-13 21:23 - 2015-12-30 18:30 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-01-13 21:23 - 2015-12-30 18:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 18:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 18:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-01-13 21:23 - 2015-12-30 18:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-01-13 21:23 - 2015-12-08 22:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-01-13 21:23 - 2015-12-08 22:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-01-13 21:23 - 2015-12-08 20:07 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-01-13 21:23 - 2015-12-08 20:07 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-01-13 21:23 - 2015-11-17 02:11 - 00025024 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-01-13 21:23 - 2015-11-17 02:08 - 01381376 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-01-13 21:23 - 2015-11-17 02:08 - 00792064 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-01-13 21:23 - 2015-11-17 02:08 - 00705536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-01-13 21:23 - 2015-11-17 02:08 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-01-13 21:23 - 2015-11-17 02:08 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-01-13 21:23 - 2015-11-16 21:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-01-10 18:36 - 2016-01-10 18:42 - 00000000 ____D C:\Users\goofanek\AppData\Local\kaneandlynch
2016-01-10 18:27 - 2016-01-10 18:27 - 00001338 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
2016-01-10 18:27 - 2016-01-10 18:27 - 00000000 ____D C:\Windows\SysWOW64\xlive
2016-01-10 18:27 - 2016-01-10 18:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
2016-01-10 18:27 - 2016-01-10 18:27 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2016-01-10 18:25 - 2016-01-10 18:25 - 00000000 ____D C:\Program Files\Eidos
2016-01-06 21:14 - 2016-01-06 21:14 - 00000000 ____D C:\Users\goofanek\AppData\Roaming\Activision
2016-01-06 21:14 - 2016-01-06 21:14 - 00000000 ____D C:\ProgramData\Activision
2016-01-06 21:08 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2016-01-06 21:08 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2016-01-06 21:08 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2016-01-06 20:40 - 2016-01-10 14:30 - 00000000 ____D C:\Games
2016-01-01 20:05 - 2015-11-05 15:41 - 00102704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-01-01 15:12 - 2016-01-01 15:12 - 00000000 ____D C:\Users\goofanek\AppData\Local\OCCT_-_Ocbase_-_Adrien_Me
2016-01-01 15:07 - 2016-01-01 15:07 - 00000000 ____D C:\Users\goofanek\Documents\OCCT
2016-01-01 15:02 - 2016-01-01 15:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OCCT
2015-12-27 12:08 - 2015-12-27 12:08 - 00000000 ____D C:\Users\goofanek\Documents\Colossal Order
2015-12-27 12:08 - 2015-12-27 12:08 - 00000000 ____D C:\Users\goofanek\AppData\Roaming\Colossal Order
2015-12-27 12:08 - 2015-12-27 12:08 - 00000000 ____D C:\Users\goofanek\AppData\Roaming\.mono
2015-12-27 12:08 - 2015-12-27 12:08 - 00000000 ____D C:\Users\goofanek\AppData\Local\Colossal Order
2015-12-27 12:08 - 2015-12-27 12:08 - 00000000 ____D C:\ProgramData\.mono
2015-12-27 12:05 - 2015-12-27 12:05 - 00001044 _____ C:\Users\goofanek\Desktop\Cities Skylines.lnk
2015-12-27 12:05 - 2015-12-27 12:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cities Skylines
2015-12-27 12:04 - 2015-12-27 12:23 - 00000000 ____D C:\Program Files (x86)\Cities Skylines

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-21 19:58 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2016-01-21 19:30 - 2015-08-12 15:30 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-01-21 17:36 - 2009-07-14 05:45 - 00025088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-21 17:36 - 2009-07-14 05:45 - 00025088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-21 17:28 - 2015-08-16 20:17 - 00002896 _____ C:\Windows\System32\Tasks\AutoKMS
2016-01-21 17:28 - 2015-08-16 20:17 - 00000266 _____ C:\Windows\Tasks\AutoKMS.job
2016-01-21 17:27 - 2015-10-26 11:59 - 00000000 ____D C:\ProgramData\NVIDIA
2016-01-21 17:27 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-20 18:07 - 2015-10-28 22:11 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-01-19 19:30 - 2015-08-12 15:30 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-01-19 19:30 - 2015-08-12 15:30 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-01-19 19:30 - 2015-08-12 15:30 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-01-18 20:11 - 2015-11-16 22:43 - 00000000 ____D C:\Users\goofanek\Documents\bitComposer Games
2016-01-17 16:30 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-01-16 18:36 - 2009-07-14 16:18 - 01323924 _____ C:\Windows\system32\perfh005.dat
2016-01-16 18:36 - 2009-07-14 16:18 - 00362938 _____ C:\Windows\system32\perfc005.dat
2016-01-16 18:36 - 2009-07-14 06:13 - 00006252 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-16 17:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2016-01-16 11:17 - 2015-08-21 20:31 - 00000000 ____D C:\Users\goofanek\AppData\Local\Ubisoft Game Launcher
2016-01-16 11:08 - 2015-08-21 20:31 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2016-01-14 18:53 - 2009-07-14 05:45 - 00338600 _____ C:\Windows\system32\FNTCACHE.DAT
2016-01-14 18:51 - 2015-08-12 16:17 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-01-14 18:51 - 2015-08-12 16:17 - 00000000 ____D C:\Windows\system32\appraiser
2016-01-14 18:50 - 2015-10-27 10:25 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-01-14 18:50 - 2015-10-27 10:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-01-13 22:33 - 2015-10-27 10:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-01-13 22:33 - 2015-08-16 20:09 - 00000000 ____D C:\ProgramData\Microsoft Help
2016-01-13 22:31 - 2015-08-12 16:02 - 00000000 ____D C:\Windows\system32\MRT
2016-01-13 22:29 - 2015-08-12 16:01 - 143671360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-01-12 21:06 - 2015-08-16 18:12 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-01-12 21:06 - 2015-08-12 15:30 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2016-01-10 18:31 - 2015-08-13 10:54 - 00000000 ____D C:\Users\goofanek\Desktop\Vše
2016-01-10 18:27 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-01-10 14:20 - 2015-08-12 15:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-01-02 20:49 - 2015-08-12 16:09 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-01-02 19:54 - 2015-12-05 19:47 - 00002186 _____ C:\Users\goofanek\Desktop\Launcher – zástupce.lnk
2016-01-01 20:05 - 2015-08-21 10:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-01-01 20:05 - 2015-08-12 15:47 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-01-01 20:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf

==================== Files in the root of some directories =======

2016-01-17 19:50 - 2016-01-21 19:57 - 0029696 _____ () C:\Users\goofanek\AppData\Local\MSGBOX.EXE
2015-08-21 10:14 - 2015-08-21 10:14 - 0000017 _____ () C:\Users\goofanek\AppData\Local\resmon.resmoncfg
2015-08-12 16:10 - 2015-08-12 16:10 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\goofanek\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\goofanek\AppData\Local\Temp\nvStInst.exe
C:\Users\goofanek\AppData\Local\Temp\sqlite3.dll
C:\Users\goofanek\AppData\Local\Temp\ubi4367.tmp.exe
C:\Users\goofanek\AppData\Local\Temp\ubi5362.tmp.exe
C:\Users\goofanek\AppData\Local\Temp\ubiDFE3.tmp.exe
C:\Users\goofanek\AppData\Local\Temp\unins000.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-01-16 16:35

==================== End of FRST.txt ============================
Nahoru
goffy1985
Návštěvník
Návštěvník
Příspěvky: 163
Registrován: 19 říj 2011 16:59

Re: Prosím o kontrolu logu

#8 Příspěvek od goffy1985 »

Additional scan result of Farbar Recovery Scan Tool (x64) Version:18-01-2016
Ran by goofanek (2016-01-21 19:59:26)
Running from C:\Users\goofanek\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2015-08-12 14:16:33)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3228134853-3753405377-656824488-500 - Administrator - Disabled)
goofanek (S-1-5-21-3228134853-3753405377-656824488-1001 - Administrator - Enabled) => C:\Users\goofanek
Guest (S-1-5-21-3228134853-3753405377-656824488-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3228134853-3753405377-656824488-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Out of date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Out of date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.286 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.14) - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.14 - Adobe Systems Incorporated)
Aktualizace NVIDIA 2.5.14.5 (Version: 2.5.14.5 - NVIDIA Corporation) Hidden
Assassin's Creed Rogue (HKLM-x32\...\Uplay Install 895) (Version: - Ubisoft)
Call of Duty: Black Ops III (HKLM\...\Q2FsbG9mRHV0eUJsYWNrT3BzSUlJ_is1) (Version: 1 - )
Call of Juarez The Cartel (HKLM-x32\...\Call of Juarez The Cartel_is1) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 5.08 - Piriform)
Cities Skylines (HKLM-x32\...\Cities Skylines_is1) (Version: - )
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd)
EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.8.0.0 - Electronic Arts)
Malwarebytes Anti-Malware verze 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
marvell 61xx (HKLM-x32\...\mv61xxDriver) (Version: 1.2.0.7700 - Marvell)
Max Payne 3 (HKLM-x32\...\{1AA94747-3BF6-4237-9E1A-7B3067738FE1}) (Version: 1.0.0.0 - Rockstar Games)
Microsoft .NET Framework 4.5.2 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Moo0 Video Cutter 1.07 (HKLM-x32\...\Moo0 VideoCutter) (Version: - )
Moo0 Video Minimizer 1.20 (HKLM-x32\...\Moo0 VideoMinimizer) (Version: - )
Moo0 YouTube Downloader 1.07 (HKLM-x32\...\Moo0 Utube-DL) (Version: - )
Mozilla Firefox 43.0.4 (x86 cs) (HKLM-x32\...\Mozilla Firefox 43.0.4 (x86 cs)) (Version: 43.0.4 - Mozilla)
MPC-HC 1.7.9 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.9 - MPC-HC Team)
NVIDIA GeForce Experience 2.5.14.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.14.5 - NVIDIA Corporation)
NVIDIA Ovladač 3D Vision 358.91 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 358.91 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 358.91 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.91 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Ovládací panel NVIDIA 358.91 (Version: 358.91 - NVIDIA Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7464 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.1 - Rockstar Games)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden
SlimDrivers (HKLM-x32\...\{5AD12E7A-D739-4451-9BD1-3610EC56D8F5}) (Version: 2.2.45206 - SlimWare Utilities, Inc.)
Uplay (HKLM-x32\...\Uplay) (Version: 4.9 - Ubisoft)
Viber (HKU\S-1-5-21-3228134853-3753405377-656824488-1001\...\Viber) (Version: 5.2.0.2546 - Viber Media Inc)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {005DD8D0-D481-40D3-B2ED-05C261F1729B} - System32\Tasks\{55971542-58BD-44A8-8E9A-DBDC9A300895} => C:\Program Files (x86)\Ubisoft\Call of Juarez The Cartel\CoJ_TheCartel.exe [2011-09-02] (Techland)
Task: {076B1D54-6EAF-48A1-99F3-420065716937} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2015-08-16] ()
Task: {35F507C6-FEAF-49A3-B176-F866D6F86FB1} - System32\Tasks\{AC414BC0-1477-4B03-A903-725BE56A6F4F} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe [2015-02-07] ()
Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {8335AC79-140A-4FBB-B365-49F887372EF3} - System32\Tasks\{617728C0-0D32-40A9-A62E-C282ECCCF2EA} => D:\Games\Hitman Absolution\HMA.exe
Task: {8417690B-398F-4895-BB6D-B7CD88B36444} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-19] (Adobe Systems Incorporated)
Task: {865871B0-D1EF-4142-A968-6334B5ADE8F9} - System32\Tasks\{B394AA0B-63F0-4050-B7B3-58C7999CFFDA} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe [2015-02-07] ()
Task: {8C2375D2-312C-4A96-878A-C025150BD285} - System32\Tasks\{2C393A33-FB32-4517-96A8-397BDA3143F8} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe [2015-02-07] ()
Task: {9545942F-933C-48CC-A45D-3A9DE645D914} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-07-17] (Piriform Ltd)
Task: {95E5AC01-BBD7-46BC-B621-0E270CBBE929} - System32\Tasks\{BAFABE19-E7B3-4E09-B49E-F06C7ACA6433} => C:\Program Files (x86)\Ubisoft\Call of Juarez The Cartel\CoJ_TheCartel.exe [2011-09-02] (Techland)
Task: {98E687CB-DB6B-4B5C-8848-6175D2A865F5} - System32\Tasks\{D4A2026E-2ACC-4531-80DB-08AFBE096262} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe [2015-02-07] ()
Task: {A060AF71-D6C3-41C6-8E35-EBB1AA1FD938} - System32\Tasks\{9BD2C6FE-1509-4A71-B0EA-4652FFD93397} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe [2015-02-07] ()
Task: {BCF7A9BC-3E3D-4AC9-ABEB-A4EECE42D7C1} - System32\Tasks\{8B1A4A61-2CFA-4616-BB99-3AC91006B9CF} => C:\Users\goofanek\Desktop\FRSTLauncher.exe [2016-01-21] (forum.viry.cz)
Task: {BEF927F2-83D5-4493-9415-5EDDC1CC4CED} - System32\Tasks\{875D9814-DCC4-4AED-9680-96F6FE9C59CB} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe [2015-02-07] ()
Task: {D1EF5877-10D4-4DEC-A74E-829AADD3586D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {DC870707-BD9E-41CC-907A-73D93D0F36C6} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc
Task: {E868BB12-F3F8-40E6-B412-C4D9095A892F} - System32\Tasks\Origin => C:\Users\goofanek\AppData\Roaming\Origin\update.vbe <==== ATTENTION
Task: {F99D66FA-5877-43B2-AA4B-1956174DF7C0} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-10-26 11:58 - 2015-11-05 16:13 - 00116528 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-08-18 11:25 - 2015-08-18 11:25 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-08-12 15:55 - 2015-08-27 01:37 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3228134853-3753405377-656824488-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\goofanek\AppData\Roaming\Mozilla\Firefox\Pozadí plochy.bmp
DNS Servers: 94.74.192.252 - 94.74.192.244
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: DAEMON Tools Lite Automount => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{F8F41DA8-D9E2-4CE4-AD0B-271D5BE0B7B6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4CF054EC-B747-46A8-B0F3-17E3AE34ACCB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D1524B18-A514-4987-8F06-7ECE4FA0B6B8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{7FD55007-1BDC-4653-B88E-488D8B433343}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [TCP Query User{6BA9B702-26C0-429B-BC22-D6C861EFFD5B}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Block) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{49046E2F-31D2-462E-8C4C-0ACE93ACF251}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Block) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [{E2A5FC23-6FC0-4741-A429-A1AEC031822C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{90672EFA-F76D-4E3A-BE2D-98F9395F8683}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{B1540354-370E-4192-8576-0124D65D26FE}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D6083293-D73B-4C43-93C2-8C49FBDB8982}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{22BC1E98-F542-4685-8654-1D4B72B0556D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{BC39655A-876F-443C-8244-9D29AA3739CF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{A0C9075B-536F-45B8-9F64-9AF22C04088F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{CDD36097-27A9-477F-980C-7EAFE786E6DB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{B9D2AD96-51CF-4240-A518-B77FD26D293E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{3C478F4B-7DC2-4B6A-B97A-620B03B3A7BB}] => (Allow) D:\Games\Tom Clancy's Splinter Cell® Blacklist™\Blacklist_Launcher.exe
FirewallRules: [{57CE039B-7F91-4198-838B-A642F6963EDF}] => (Allow) D:\Games\Tom Clancy's Splinter Cell® Blacklist™\Blacklist_Launcher.exe
FirewallRules: [{3595B338-99FD-4D53-AACA-E08916CC9BDC}] => (Allow) D:\Games\Tom Clancy's Splinter Cell® Blacklist™\src\SYSTEM\Blacklist_game.exe
FirewallRules: [{4C37BE9E-4769-412E-9104-BEFE5EC9D6AA}] => (Allow) D:\Games\Tom Clancy's Splinter Cell® Blacklist™\src\SYSTEM\Blacklist_game.exe
FirewallRules: [{A9636ED0-B6A1-4EC2-BA7F-42B8BCAD80B7}] => (Allow) D:\Games\Tom Clancy's Splinter Cell® Blacklist™\src\SYSTEM\Blacklist_DX11_game.exe
FirewallRules: [{0302F63C-0593-4A4A-8C8C-8D879BCC7222}] => (Allow) D:\Games\Tom Clancy's Splinter Cell® Blacklist™\src\SYSTEM\Blacklist_DX11_game.exe
FirewallRules: [{6E67DF04-8746-43B1-B8C0-32A7F144C176}] => (Allow) D:\Games\Tom Clancy's Splinter Cell® Blacklist™\src\SYSTEM\gu.exe
FirewallRules: [{EAAF490C-9284-4A0E-A4F2-C31344AD1A85}] => (Allow) D:\Games\Tom Clancy's Splinter Cell® Blacklist™\src\SYSTEM\gu.exe
FirewallRules: [TCP Query User{28E484D0-AA22-4668-A29B-097D48A0D1F6}D:\games\max payne 3\maxpayne3.exe] => (Block) D:\games\max payne 3\maxpayne3.exe
FirewallRules: [UDP Query User{9A34D08B-A832-4000-9386-E4369F301FAE}D:\games\max payne 3\maxpayne3.exe] => (Block) D:\games\max payne 3\maxpayne3.exe
FirewallRules: [TCP Query User{1C1DB722-6DFD-4D12-9F27-400BBBF6B730}D:\games\max payne 3\maxpayne3.exe] => (Block) D:\games\max payne 3\maxpayne3.exe
FirewallRules: [UDP Query User{D8E75046-89AA-4CC7-92A9-C477F21F9880}D:\games\max payne 3\maxpayne3.exe] => (Block) D:\games\max payne 3\maxpayne3.exe
FirewallRules: [{AC7D5CD0-9FAA-4C2B-9451-93E7E58C9A9C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F81A0089-59DD-4627-BE82-D9AA4F7AC708}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{41442CB3-AF01-41EB-9825-E77C6E91EDBB}C:\program files\call of duty black ops iii\blackops3.exe] => (Block) C:\program files\call of duty black ops iii\blackops3.exe
FirewallRules: [UDP Query User{A4EC6003-D514-4C8F-A9D6-ED6340AC1A28}C:\program files\call of duty black ops iii\blackops3.exe] => (Block) C:\program files\call of duty black ops iii\blackops3.exe
FirewallRules: [TCP Query User{114313C8-FFA6-4047-BD93-C33B728C9A0D}C:\program files (x86)\ubisoft\call of juarez the cartel\coj_thecartel.exe] => (Block) C:\program files (x86)\ubisoft\call of juarez the cartel\coj_thecartel.exe
FirewallRules: [UDP Query User{B39B4BBF-B209-4B68-B7B1-0EEA15B0ACEB}C:\program files (x86)\ubisoft\call of juarez the cartel\coj_thecartel.exe] => (Block) C:\program files (x86)\ubisoft\call of juarez the cartel\coj_thecartel.exe
FirewallRules: [{B4B1E4D7-C0EB-4FDA-9FA2-F5AE3D4A036D}] => (Allow) C:\Program Files (x86)\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{1CB2D63E-3844-42ED-8E27-F70D782DC0E2}] => (Allow) C:\Program Files (x86)\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [TCP Query User{6F6C230C-24FF-4820-B2E9-541C887408F3}C:\games\quantum of solace - the game\jb_liveengine_s.exe] => (Block) C:\games\quantum of solace - the game\jb_liveengine_s.exe
FirewallRules: [UDP Query User{C136A8B2-7E6A-4E0C-9416-2853EE1E0464}C:\games\quantum of solace - the game\jb_liveengine_s.exe] => (Block) C:\games\quantum of solace - the game\jb_liveengine_s.exe
FirewallRules: [TCP Query User{017E8D6A-8B61-4E59-80D9-376D57B52B8D}C:\program files\eidos\kane and lynch dead men\kaneandlynch.exe] => (Block) C:\program files\eidos\kane and lynch dead men\kaneandlynch.exe
FirewallRules: [UDP Query User{48FA93B5-2D5D-4F10-AFCB-8525BD88FB3B}C:\program files\eidos\kane and lynch dead men\kaneandlynch.exe] => (Block) C:\program files\eidos\kane and lynch dead men\kaneandlynch.exe
FirewallRules: [{5A467683-6F07-4F9B-9159-3D1BED0F7692}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe
FirewallRules: [{CAC33D52-47DF-4BC2-B11A-C09C78BE1399}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe
FirewallRules: [{E7A85275-12F2-4790-8088-084AF4A2295D}] => (Block) %ProgramFiles% (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe

==================== Restore Points =========================

13-01-2016 22:25:15 Windows Update
16-01-2016 11:08:49 Nainstalováno rozhraní DirectX
16-01-2016 11:11:47 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
17-01-2016 16:38:31 Windows Update
21-01-2016 17:39:07 Windows Update

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/17/2016 04:30:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: ACC.exe, verze: 0.0.0.0, časové razítko: 0x54d3bf92
Název chybujícího modulu: ACC.exe, verze: 0.0.0.0, časové razítko: 0x54d3bf92
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000025534
ID chybujícího procesu: 0x5fc
Čas spuštění chybující aplikace: 0xACC.exe0
Cesta k chybující aplikaci: ACC.exe1
Cesta k chybujícímu modulu: ACC.exe2
ID zprávy: ACC.exe3

Error: (01/17/2016 04:29:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: ACC.exe, verze: 0.0.0.0, časové razítko: 0x54d3bf92
Název chybujícího modulu: ACC.exe, verze: 0.0.0.0, časové razítko: 0x54d3bf92
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000025534
ID chybujícího procesu: 0xdb8
Čas spuštění chybující aplikace: 0xACC.exe0
Cesta k chybující aplikaci: ACC.exe1
Cesta k chybujícímu modulu: ACC.exe2
ID zprávy: ACC.exe3

Error: (01/17/2016 04:29:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: ACC.exe, verze: 0.0.0.0, časové razítko: 0x54d3bf92
Název chybujícího modulu: ACC.exe, verze: 0.0.0.0, časové razítko: 0x54d3bf92
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000025534
ID chybujícího procesu: 0x474
Čas spuštění chybující aplikace: 0xACC.exe0
Cesta k chybující aplikaci: ACC.exe1
Cesta k chybujícímu modulu: ACC.exe2
ID zprávy: ACC.exe3

Error: (01/17/2016 04:29:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: ACC.exe, verze: 0.0.0.0, časové razítko: 0x54d3bf92
Název chybujícího modulu: ACC.exe, verze: 0.0.0.0, časové razítko: 0x54d3bf92
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000025534
ID chybujícího procesu: 0xbb8
Čas spuštění chybující aplikace: 0xACC.exe0
Cesta k chybující aplikaci: ACC.exe1
Cesta k chybujícímu modulu: ACC.exe2
ID zprávy: ACC.exe3

Error: (01/17/2016 04:29:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: ACC.exe, verze: 0.0.0.0, časové razítko: 0x54d3bf92
Název chybujícího modulu: ACC.exe, verze: 0.0.0.0, časové razítko: 0x54d3bf92
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000025534
ID chybujícího procesu: 0xe30
Čas spuštění chybující aplikace: 0xACC.exe0
Cesta k chybující aplikaci: ACC.exe1
Cesta k chybujícímu modulu: ACC.exe2
ID zprávy: ACC.exe3

Error: (01/17/2016 04:29:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: ACC.exe, verze: 0.0.0.0, časové razítko: 0x54d3bf92
Název chybujícího modulu: ACC.exe, verze: 0.0.0.0, časové razítko: 0x54d3bf92
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000025534
ID chybujícího procesu: 0xb4c
Čas spuštění chybující aplikace: 0xACC.exe0
Cesta k chybující aplikaci: ACC.exe1
Cesta k chybujícímu modulu: ACC.exe2
ID zprávy: ACC.exe3

Error: (01/17/2016 04:28:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: ACC.exe, verze: 0.0.0.0, časové razítko: 0x54d3bf92
Název chybujícího modulu: ACC.exe, verze: 0.0.0.0, časové razítko: 0x54d3bf92
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000025534
ID chybujícího procesu: 0x500
Čas spuštění chybující aplikace: 0xACC.exe0
Cesta k chybující aplikaci: ACC.exe1
Cesta k chybujícímu modulu: ACC.exe2
ID zprávy: ACC.exe3

Error: (01/16/2016 06:36:21 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Uvolnění řetězců čítačů výkonu pro službu WmiApRpl (WmiApRpl) se nezdařilo. První hodnota DWORD v datové oblasti obsahuje kód chyby.

Error: (01/16/2016 06:36:21 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error: (01/16/2016 06:36:21 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.


System errors:
=============
Error: (01/19/2016 10:09:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Instalační služba modulů systému Windows byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.

Error: (01/19/2016 10:09:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Windows Media Player Network Sharing byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (01/19/2016 10:09:16 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Disc Soft Lite Bus Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (01/19/2016 10:09:16 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Office Software Protection Platform byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (01/19/2016 10:09:16 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (01/19/2016 10:09:16 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Live ID Sign-in Assistant byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 10000 milisekund: Restartovat službu.

Error: (01/19/2016 10:09:16 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba PnkBstrA byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (01/19/2016 10:09:16 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba NVIDIA Streamer Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (01/19/2016 10:09:16 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba NVIDIA Network Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (01/19/2016 10:09:16 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba NVIDIA GeForce Experience Service byla neočekávaně ukončena. Tento stav nastal již 1krát.


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Quad CPU Q9550 @ 2.83GHz
Percentage of memory in use: 39%
Total physical RAM: 4095.05 MB
Available physical RAM: 2488.18 MB
Total Virtual: 8188.32 MB
Available Virtual: 6287.46 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:246.17 GB) (Free:78.88 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (z) (Fixed) (Total:350 GB) (Free:57.26 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 168B168A)
Partition 1: (Active) - (Size=246.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=350 GB) - (Type=05)

==================== End of Addition.txt ============================
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7317
Registrován: 15 lis 2012 22:26
Bydliště: Znojmo

Re: Prosím o kontrolu logu

#9 Příspěvek od altrok »

:arrow: Po restartu dejte vedet, jak se PC chova.



  • Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
  • ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
  • znovu spustte FRST a kliknete na Fix
  • po restartu bude na plose ulozen fixlog, jehoz obsah vlozte do pristi odpovedi

    Kód: Vybrat vše

    Start
CreateRestorePoint:
CloseProcesses:
File: C:\Users\goofanek\AppData\Roaming\Origin\update.vbe
Folder: C:\Users\goofanek\AppData\Roaming\Origin
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\...\MountPoints2: J - J:\Autorun.exe
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\...\MountPoints2: K - K:\setup.exe
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\...\MountPoints2: {5e2af835-4105-11e5-9ef7-002215b3d25d} - J:\KaneandLynch.part01.exe
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\...\MountPoints2: {5e2af839-4105-11e5-9ef7-002215b3d25d} - L:\setup.exe
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
2016-01-21 19:58 - 2016-01-21 19:59 - 00009747 _____ C:\Users\goofanek\Desktop\FRST.txt
2016-01-21 19:57 - 2016-01-21 19:57 - 00015327 _____ C:\Users\goofanek\Desktop\LM.bat
2016-01-19 22:07 - 2016-01-19 22:09 - 00000000 ____D C:\AdwCleaner
2016-01-17 19:52 - 2016-01-17 19:56 - 00000000 ____D C:\Program Files\trend micro
2016-01-17 19:52 - 2016-01-17 19:52 - 00000000 ____D C:\rsit
2016-01-17 19:50 - 2016-01-21 19:57 - 00029696 _____ C:\Users\goofanek\AppData\Local\MSGBOX.EXE
2016-01-21 17:28 - 2015-08-16 20:17 - 00002896 _____ C:\Windows\System32\Tasks\AutoKMS
2016-01-21 17:28 - 2015-08-16 20:17 - 00000266 _____ C:\Windows\Tasks\AutoKMS.job
Task: {076B1D54-6EAF-48A1-99F3-420065716937} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2015-08-16] ()
C:\Windows\AutoKMS
Task: {8335AC79-140A-4FBB-B365-49F887372EF3} - System32\Tasks\{617728C0-0D32-40A9-A62E-C282ECCCF2EA} => D:\Games\Hitman Absolution\HMA.exe
Task: {005DD8D0-D481-40D3-B2ED-05C261F1729B} - System32\Tasks\{55971542-58BD-44A8-8E9A-DBDC9A300895} => C:\Program Files (x86)\Ubisoft\Call of Juarez The Cartel\CoJ_TheCartel.exe [2011-09-02] (Techland)
Task: {95E5AC01-BBD7-46BC-B621-0E270CBBE929} - System32\Tasks\{BAFABE19-E7B3-4E09-B49E-F06C7ACA6433} => C:\Program Files (x86)\Ubisoft\Call of Juarez The Cartel\CoJ_TheCartel.exe [2011-09-02] (Techland)
Task: {865871B0-D1EF-4142-A968-6334B5ADE8F9} - System32\Tasks\{B394AA0B-63F0-4050-B7B3-58C7999CFFDA} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe [2015-02-07] ()
Task: {8C2375D2-312C-4A96-878A-C025150BD285} - System32\Tasks\{2C393A33-FB32-4517-96A8-397BDA3143F8} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe [2015-02-07] ()
Task: {98E687CB-DB6B-4B5C-8848-6175D2A865F5} - System32\Tasks\{D4A2026E-2ACC-4531-80DB-08AFBE096262} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe [2015-02-07] ()
Task: {A060AF71-D6C3-41C6-8E35-EBB1AA1FD938} - System32\Tasks\{9BD2C6FE-1509-4A71-B0EA-4652FFD93397} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe [2015-02-07] ()
Task: {BCF7A9BC-3E3D-4AC9-ABEB-A4EECE42D7C1} - System32\Tasks\{8B1A4A61-2CFA-4616-BB99-3AC91006B9CF} => C:\Users\goofanek\Desktop\FRSTLauncher.exe [2016-01-21] (forum.viry.cz)
Task: {BEF927F2-83D5-4493-9415-5EDDC1CC4CED} - System32\Tasks\{875D9814-DCC4-4AED-9680-96F6FE9C59CB} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe [2015-02-07] ()
Task: {E868BB12-F3F8-40E6-B412-C4D9095A892F} - System32\Tasks\Origin => C:\Users\goofanek\AppData\Roaming\Origin\update.vbe <==== ATTENTION
C:\Users\goofanek\AppData\Roaming\Origin\update.vbe
EmptyTemp:
End
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
goffy1985
Návštěvník
Návštěvník
Příspěvky: 163
Registrován: 19 říj 2011 16:59

Re: Prosím o kontrolu logu

#10 Příspěvek od goffy1985 »

Tak nejhorší byl internet, který běhal hodně divně, teď se načítá rychle a spolupracuje :)






Fix result of Farbar Recovery Scan Tool (x64) Version:18-01-2016
Ran by goofanek (2016-01-22 18:47:19) Run:1
Running from C:\Users\goofanek\Desktop
Loaded Profiles: goofanek (Available Profiles: goofanek)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
File: C:\Users\goofanek\AppData\Roaming\Origin\update.vbe
Folder: C:\Users\goofanek\AppData\Roaming\Origin
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\...\MountPoints2: J - J:\Autorun.exe
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\...\MountPoints2: K - K:\setup.exe
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\...\MountPoints2: {5e2af835-4105-11e5-9ef7-002215b3d25d} - J:\KaneandLynch.part01.exe
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\...\MountPoints2: {5e2af839-4105-11e5-9ef7-002215b3d25d} - L:\setup.exe
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
2016-01-21 19:58 - 2016-01-21 19:59 - 00009747 _____ C:\Users\goofanek\Desktop\FRST.txt
2016-01-21 19:57 - 2016-01-21 19:57 - 00015327 _____ C:\Users\goofanek\Desktop\LM.bat
2016-01-19 22:07 - 2016-01-19 22:09 - 00000000 ____D C:\AdwCleaner
2016-01-17 19:52 - 2016-01-17 19:56 - 00000000 ____D C:\Program Files\trend micro
2016-01-17 19:52 - 2016-01-17 19:52 - 00000000 ____D C:\rsit
2016-01-17 19:50 - 2016-01-21 19:57 - 00029696 _____ C:\Users\goofanek\AppData\Local\MSGBOX.EXE
2016-01-21 17:28 - 2015-08-16 20:17 - 00002896 _____ C:\Windows\System32\Tasks\AutoKMS
2016-01-21 17:28 - 2015-08-16 20:17 - 00000266 _____ C:\Windows\Tasks\AutoKMS.job
Task: {076B1D54-6EAF-48A1-99F3-420065716937} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2015-08-16] ()
C:\Windows\AutoKMS
Task: {8335AC79-140A-4FBB-B365-49F887372EF3} - System32\Tasks\{617728C0-0D32-40A9-A62E-C282ECCCF2EA} => D:\Games\Hitman Absolution\HMA.exe
Task: {005DD8D0-D481-40D3-B2ED-05C261F1729B} - System32\Tasks\{55971542-58BD-44A8-8E9A-DBDC9A300895} => C:\Program Files (x86)\Ubisoft\Call of Juarez The Cartel\CoJ_TheCartel.exe [2011-09-02] (Techland)
Task: {95E5AC01-BBD7-46BC-B621-0E270CBBE929} - System32\Tasks\{BAFABE19-E7B3-4E09-B49E-F06C7ACA6433} => C:\Program Files (x86)\Ubisoft\Call of Juarez The Cartel\CoJ_TheCartel.exe [2011-09-02] (Techland)
Task: {865871B0-D1EF-4142-A968-6334B5ADE8F9} - System32\Tasks\{B394AA0B-63F0-4050-B7B3-58C7999CFFDA} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe [2015-02-07] ()
Task: {8C2375D2-312C-4A96-878A-C025150BD285} - System32\Tasks\{2C393A33-FB32-4517-96A8-397BDA3143F8} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe [2015-02-07] ()
Task: {98E687CB-DB6B-4B5C-8848-6175D2A865F5} - System32\Tasks\{D4A2026E-2ACC-4531-80DB-08AFBE096262} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe [2015-02-07] ()
Task: {A060AF71-D6C3-41C6-8E35-EBB1AA1FD938} - System32\Tasks\{9BD2C6FE-1509-4A71-B0EA-4652FFD93397} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe [2015-02-07] ()
Task: {BCF7A9BC-3E3D-4AC9-ABEB-A4EECE42D7C1} - System32\Tasks\{8B1A4A61-2CFA-4616-BB99-3AC91006B9CF} => C:\Users\goofanek\Desktop\FRSTLauncher.exe [2016-01-21] (forum.viry.cz)
Task: {BEF927F2-83D5-4493-9415-5EDDC1CC4CED} - System32\Tasks\{875D9814-DCC4-4AED-9680-96F6FE9C59CB} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe [2015-02-07] ()
Task: {E868BB12-F3F8-40E6-B412-C4D9095A892F} - System32\Tasks\Origin => C:\Users\goofanek\AppData\Roaming\Origin\update.vbe <==== ATTENTION
C:\Users\goofanek\AppData\Roaming\Origin\update.vbe
EmptyTemp:
End
*****************

Restore point was successfully created.
Processes closed successfully.

========================= File: C:\Users\goofanek\AppData\Roaming\Origin\update.vbe ========================

"C:\Users\goofanek\AppData\Roaming\Origin\update.vbe" => not found.
====== End of File: ======


========================= Folder: C:\Users\goofanek\AppData\Roaming\Origin ========================

not found.

====== End of Folder: ======

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\BCSSync => value removed successfully
HKU\S-1-5-21-3228134853-3753405377-656824488-1001\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite Automount => value removed successfully
"HKU\S-1-5-21-3228134853-3753405377-656824488-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\J" => key removed successfully
"HKU\S-1-5-21-3228134853-3753405377-656824488-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\K" => key removed successfully
"HKU\S-1-5-21-3228134853-3753405377-656824488-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5e2af835-4105-11e5-9ef7-002215b3d25d}" => key removed successfully
HKCR\CLSID\{5e2af835-4105-11e5-9ef7-002215b3d25d} => key not found.
"HKU\S-1-5-21-3228134853-3753405377-656824488-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5e2af839-4105-11e5-9ef7-002215b3d25d}" => key removed successfully
HKCR\CLSID\{5e2af839-4105-11e5-9ef7-002215b3d25d} => key not found.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => key removed successfully
C:\Users\goofanek\Desktop\FRST.txt => moved successfully
"C:\Users\goofanek\Desktop\LM.bat" => not found.
C:\AdwCleaner => moved successfully
C:\Program Files\trend micro => moved successfully
C:\rsit => moved successfully
C:\Users\goofanek\AppData\Local\MSGBOX.EXE => moved successfully
C:\Windows\System32\Tasks\AutoKMS => moved successfully
C:\Windows\Tasks\AutoKMS.job => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{076B1D54-6EAF-48A1-99F3-420065716937}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{076B1D54-6EAF-48A1-99F3-420065716937}" => key removed successfully
C:\Windows\System32\Tasks\AutoKMS => not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoKMS" => key removed successfully
C:\Windows\AutoKMS => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8335AC79-140A-4FBB-B365-49F887372EF3}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8335AC79-140A-4FBB-B365-49F887372EF3}" => key removed successfully
C:\Windows\System32\Tasks\{617728C0-0D32-40A9-A62E-C282ECCCF2EA} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{617728C0-0D32-40A9-A62E-C282ECCCF2EA}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{005DD8D0-D481-40D3-B2ED-05C261F1729B}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{005DD8D0-D481-40D3-B2ED-05C261F1729B}" => key removed successfully
C:\Windows\System32\Tasks\{55971542-58BD-44A8-8E9A-DBDC9A300895} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{55971542-58BD-44A8-8E9A-DBDC9A300895}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{95E5AC01-BBD7-46BC-B621-0E270CBBE929}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{95E5AC01-BBD7-46BC-B621-0E270CBBE929}" => key removed successfully
C:\Windows\System32\Tasks\{BAFABE19-E7B3-4E09-B49E-F06C7ACA6433} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{BAFABE19-E7B3-4E09-B49E-F06C7ACA6433}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{865871B0-D1EF-4142-A968-6334B5ADE8F9}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{865871B0-D1EF-4142-A968-6334B5ADE8F9}" => key removed successfully
C:\Windows\System32\Tasks\{B394AA0B-63F0-4050-B7B3-58C7999CFFDA} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B394AA0B-63F0-4050-B7B3-58C7999CFFDA}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8C2375D2-312C-4A96-878A-C025150BD285}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8C2375D2-312C-4A96-878A-C025150BD285}" => key removed successfully
C:\Windows\System32\Tasks\{2C393A33-FB32-4517-96A8-397BDA3143F8} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2C393A33-FB32-4517-96A8-397BDA3143F8}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{98E687CB-DB6B-4B5C-8848-6175D2A865F5}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{98E687CB-DB6B-4B5C-8848-6175D2A865F5}" => key removed successfully
C:\Windows\System32\Tasks\{D4A2026E-2ACC-4531-80DB-08AFBE096262} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D4A2026E-2ACC-4531-80DB-08AFBE096262}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A060AF71-D6C3-41C6-8E35-EBB1AA1FD938}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A060AF71-D6C3-41C6-8E35-EBB1AA1FD938}" => key removed successfully
C:\Windows\System32\Tasks\{9BD2C6FE-1509-4A71-B0EA-4652FFD93397} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{9BD2C6FE-1509-4A71-B0EA-4652FFD93397}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BCF7A9BC-3E3D-4AC9-ABEB-A4EECE42D7C1}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BCF7A9BC-3E3D-4AC9-ABEB-A4EECE42D7C1}" => key removed successfully
C:\Windows\System32\Tasks\{8B1A4A61-2CFA-4616-BB99-3AC91006B9CF} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{8B1A4A61-2CFA-4616-BB99-3AC91006B9CF}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BEF927F2-83D5-4493-9415-5EDDC1CC4CED}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BEF927F2-83D5-4493-9415-5EDDC1CC4CED}" => key removed successfully
C:\Windows\System32\Tasks\{875D9814-DCC4-4AED-9680-96F6FE9C59CB} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{875D9814-DCC4-4AED-9680-96F6FE9C59CB}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E868BB12-F3F8-40E6-B412-C4D9095A892F}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E868BB12-F3F8-40E6-B412-C4D9095A892F}" => key removed successfully
C:\Windows\System32\Tasks\Origin => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Origin" => key removed successfully
"C:\Users\goofanek\AppData\Roaming\Origin\update.vbe" => not found.
EmptyTemp: => 14.2 GB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 18:48:22 ====
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7317
Registrován: 15 lis 2012 22:26
Bydliště: Znojmo

Re: Prosím o kontrolu logu

#11 Příspěvek od altrok »

V logu dalsi malware nevidim, takze navrhuji uklid.
A pokud nejsou dotazy ci jine problemy, je to ode mne vse.
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
goffy1985
Návštěvník
Návštěvník
Příspěvky: 163
Registrován: 19 říj 2011 16:59

Re: Prosím o kontrolu logu

#12 Příspěvek od goffy1985 »

Děkuji mnohokrát :) snad budu mít chvíli pokoj :)


:offtopic:
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7317
Registrován: 15 lis 2012 22:26
Bydliště: Znojmo

Re: Prosím o kontrolu logu

#13 Příspěvek od altrok »

Nemate zac, rad jsem pomohl :worship:


Mejte se krasne a treba zase nekdy :bye:
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
Zamčeno

Zpět na „Preventivní kontroly logů“