Stránka 1 z 1

Prosím o preventivku

Napsal: 09 zář 2016 14:44
od kcobain
Krásný den přeju, poprosil bych o prolétnutí logu z PC jestli tam není něco špatně.. přece jen je to dlouho už...

Zde vkládám log z RSIT:

Logfile of random's system information tool 1.10 (written by random/random)
Run by User007 at 2016-09-09 14:45:55
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 171 GB (70%) free of 244 GB
Total RAM: 8142 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:46:02, on 9.9.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18427)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\SpeedFan\speedfan.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Games\World_of_Tanks\WargamingGameUpdater.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\Winamp\winamp.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\User007.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
O4 - HKLM\..\Run: [Nikon Message Center 2] C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [World of Tanks] "C:\Games\World_of_Tanks\WargamingGameUpdater.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{5A2067F9-A2C4-4543-B59C-6C47AABFF1BE}: NameServer = 77.234.40.79
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

--
End of file - 3841 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe -first
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Common Files\TechSmith Shared\Uploader\UploaderService.exe" /service
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ed7de1a6-9674-429c-9c99-de4f33978dc5 -SystemEventPortName:HostProcess-a3d8889c-23fe-4ab4-bd52-3e3d85c2b7b5 -IoCancelEventPortName:HostProcess-b97098bb-895c-4961-b579-7da683e9a846 -NonStateChangingEventPortName:HostProcess-7c8c4f19-1245-4f01-84c3-44ada3c42605 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:df7d03f5-2dd3-424c-aa07-98f902cd70ae -DeviceGroupId:WpdFsGroup
"taskhost.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
taskeng.exe {783BC19E-7A3F-4598-8B7B-8943B2C683B0}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\SpeedFan\speedfan.exe"
"C:\Program Files\Core Temp\Core Temp.exe"
\??\C:\Windows\system32\conhost.exe "985133453807628946-204713322-1713520232-991164145-82701226815658051341037466492
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
"C:\Games\World_of_Tanks\WargamingGameUpdater.exe"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
/tasktrayonly
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Intel\STCServ\STCServ.exe"
"C:\Program Files (x86)\Winamp\winamp.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
"C:\Users\User007\Desktop\RSITx64.exe"

=========Mozilla firefox=========

ProfilePath - C:\Users\User007\AppData\Roaming\Mozilla\Firefox\Profiles\1rgx9lnd.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "www.centrum.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 22.0.0.209 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Web Components]
"Description"=
"Path"=C:\Program Files (x86)\Web Components\npWebVideoPlugin.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 22.0.0.209 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll


C:\Users\User007\AppData\Roaming\Mozilla\Firefox\Profiles\1rgx9lnd.default\searchplugins\
imdb.xml
novinkycz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2014-05-28 36352]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2014-07-15 7637208]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-08-05 508240]
"IntelConnectCenter"=C:\Program Files\Intel\ConnectCenter\bin\ICCLauncher.exe [2015-03-16 90112]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-06-14 2397120]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-06-14 1767944]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-08-05 8894680]
"World of Tanks"=C:\Games\World_of_Tanks\WargamingGameUpdater.exe [2016-08-05 3134728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite Automount]
C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-06-18 4468056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TMMonitor.lnk]
C:\PROGRA~2\ArcSoft\TOTALM~1.5\TMMONI~1.EXE []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2014-06-27 292848]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-09-01 9107104]
"HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
""= []
"EEventManager"=C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [2014-06-10 1065024]
"Nikon Message Center 2"=C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [2011-10-30 571392]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PAexec]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.RTV1"=rtvcvfw64.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"VIDC.FFDS"=ff_vfw.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux2"=wdmaud.drv
"vidc.mjpg"=bdmjpeg64.dll
"vidc.mpeg"=bdmpegv64.dll
"msacm.bdmpeg"=bdmpega64.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - %SystemRoot%\SysWow64\CScript.exe "%1" %*
.vbs - open - %SystemRoot%\SysWow64\CScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-09-09 14:45:55 ----D---- C:\rsit
2016-09-01 22:17:49 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-09-01 22:07:15 ----SD---- C:\Windows\SYSWOW64\Microsoft
2016-08-21 16:48:19 ----D---- C:\ProgramData\Socialclub
2016-08-21 16:15:51 ----D---- C:\Users\User007\AppData\Roaming\A
2016-08-21 16:06:07 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-08-21 16:06:07 ----A---- C:\Windows\system32\tzres.dll
2016-08-21 16:06:04 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-08-21 16:06:04 ----A---- C:\Windows\system32\ole32.dll
2016-08-21 16:04:59 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2016-08-21 16:04:59 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2016-08-21 16:04:59 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2016-08-21 16:04:59 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2016-08-21 16:04:59 ----A---- C:\Windows\system32\ws2_32.dll
2016-08-21 16:04:59 ----A---- C:\Windows\system32\winhttp.dll
2016-08-21 16:04:59 ----A---- C:\Windows\system32\netbtugc.exe
2016-08-21 16:04:59 ----A---- C:\Windows\system32\mswsock.dll
2016-08-21 16:04:59 ----A---- C:\Windows\system32\drivers\netbt.sys
2016-08-19 23:01:04 ----A---- C:\Windows\system32\aswBoot.exe
2016-08-19 23:01:02 ----A---- C:\Windows\avastSS.scr
2016-08-15 01:52:33 ----A---- C:\Windows\system32\wmp.dll
2016-08-15 01:52:33 ----A---- C:\Windows\system32\win32k.sys
2016-08-15 01:52:32 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2016-08-15 01:52:32 ----A---- C:\Windows\SYSWOW64\wmp.dll
2016-08-15 01:52:32 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2016-08-15 01:52:32 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2016-08-15 01:52:32 ----A---- C:\Windows\system32\wmploc.DLL
2016-08-15 01:52:32 ----A---- C:\Windows\system32\spwmp.dll
2016-08-15 01:52:32 ----A---- C:\Windows\system32\dxmasf.dll
2016-08-13 22:52:06 ----D---- C:\Program Files (x86)\Microsoft ASP.NET
2016-08-13 22:51:53 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2016-08-13 22:51:53 ----A---- C:\Windows\system32\InkEd.dll
2016-08-11 22:01:50 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-08-11 22:01:50 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-08-11 22:01:50 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-08-11 22:01:50 ----A---- C:\Windows\system32\iernonce.dll
2016-08-11 22:01:49 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-08-11 22:01:49 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-08-11 22:01:49 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-08-11 22:01:49 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-08-11 22:01:49 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-08-11 22:01:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-08-11 22:01:49 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-08-11 22:01:49 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-08-11 22:01:49 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-08-11 22:01:49 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-08-11 22:01:49 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-08-11 22:01:49 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-08-11 22:01:49 ----A---- C:\Windows\system32\occache.dll
2016-08-11 22:01:49 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-08-11 22:01:49 ----A---- C:\Windows\system32\inseng.dll
2016-08-11 22:01:49 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-08-11 22:01:49 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-08-11 22:01:49 ----A---- C:\Windows\system32\iedkcs32.dll
2016-08-11 22:01:49 ----A---- C:\Windows\system32\ie4uinit.exe
2016-08-11 22:01:48 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-08-11 22:01:48 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-08-11 22:01:48 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-08-11 22:01:48 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-08-11 22:01:48 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-08-11 22:01:48 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-08-11 22:01:48 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-08-11 22:01:48 ----A---- C:\Windows\system32\urlmon.dll
2016-08-11 22:01:48 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-08-11 22:01:48 ----A---- C:\Windows\system32\msfeeds.dll
2016-08-11 22:01:48 ----A---- C:\Windows\system32\iesetup.dll
2016-08-11 22:01:48 ----A---- C:\Windows\system32\iertutil.dll
2016-08-11 22:01:48 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-08-11 22:01:48 ----A---- C:\Windows\system32\ieapfltr.dll
2016-08-11 22:01:48 ----A---- C:\Windows\system32\dxtrans.dll
2016-08-11 22:01:47 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-08-11 22:01:47 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-08-11 22:01:47 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-08-11 22:01:47 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-08-11 22:01:47 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-08-11 22:01:47 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-08-11 22:01:47 ----A---- C:\Windows\system32\vbscript.dll
2016-08-11 22:01:47 ----A---- C:\Windows\system32\jsproxy.dll
2016-08-11 22:01:47 ----A---- C:\Windows\system32\ieui.dll
2016-08-11 22:01:47 ----A---- C:\Windows\system32\ieframe.dll
2016-08-11 22:01:47 ----A---- C:\Windows\system32\dxtmsft.dll
2016-08-11 22:01:46 ----A---- C:\Windows\system32\wininet.dll
2016-08-11 22:01:46 ----A---- C:\Windows\system32\webcheck.dll
2016-08-11 22:01:46 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-08-11 22:01:46 ----A---- C:\Windows\system32\mshtmled.dll
2016-08-11 22:01:46 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-08-11 22:01:46 ----A---- C:\Windows\system32\jscript9diag.dll
2016-08-11 22:01:46 ----A---- C:\Windows\system32\jscript9.dll
2016-08-11 22:01:46 ----A---- C:\Windows\system32\jscript.dll
2016-08-11 22:01:46 ----A---- C:\Windows\system32\ieUnatt.exe
2016-08-11 22:01:45 ----A---- C:\Windows\system32\msrating.dll
2016-08-11 22:01:45 ----A---- C:\Windows\system32\mshtml.dll
2016-08-11 22:01:09 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2016-08-11 22:01:09 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2016-08-11 22:01:09 ----A---- C:\Windows\system32\EncDec.dll
2016-08-11 22:01:09 ----A---- C:\Windows\system32\CPFilters.dll
2016-08-11 22:01:03 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2016-08-11 22:01:03 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2016-08-11 22:01:03 ----A---- C:\Windows\system32\mtxoci.dll
2016-08-11 22:01:01 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2016-08-11 22:01:01 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2016-08-11 22:01:01 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2016-08-11 22:01:01 ----A---- C:\Windows\SYSWOW64\msmpeg2adec.dll
2016-08-11 22:01:01 ----A---- C:\Windows\SYSWOW64\mf.dll
2016-08-11 22:01:01 ----A---- C:\Windows\system32\WMVSDECD.DLL
2016-08-11 22:01:01 ----A---- C:\Windows\system32\WMVDECOD.DLL
2016-08-11 22:01:01 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2016-08-11 22:01:01 ----A---- C:\Windows\system32\WMADMOD.DLL
2016-08-11 22:01:01 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2016-08-11 22:01:01 ----A---- C:\Windows\system32\msmpeg2adec.dll
2016-08-11 22:01:01 ----A---- C:\Windows\system32\mf.dll
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\WMVXENCD.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\WMVSENCD.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\WMVENCOD.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\WMSPDMOE.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\WMADMOE.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\VIDRESZR.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\RESAMPLEDMO.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\quartz.dll
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\qasf.dll
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\MPG4DECD.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\MP4SDECD.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\MP43DECD.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\MP3DMOD.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\MFWMAAEC.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\mfvdsp.dll
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\mfps.dll
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\evr.dll
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\devenum.dll
2016-08-11 22:01:00 ----A---- C:\Windows\SYSWOW64\COLORCNV.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\system32\WMVXENCD.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\system32\WMVSENCD.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\system32\WMVENCOD.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\system32\WMSPDMOE.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\system32\wmpmde.dll
2016-08-11 22:01:00 ----A---- C:\Windows\system32\WMADMOE.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\system32\VIDRESZR.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\system32\SysFxUI.dll
2016-08-11 22:01:00 ----A---- C:\Windows\system32\rrinstaller.exe
2016-08-11 22:01:00 ----A---- C:\Windows\system32\RESAMPLEDMO.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\system32\quartz.dll
2016-08-11 22:01:00 ----A---- C:\Windows\system32\qdvd.dll
2016-08-11 22:01:00 ----A---- C:\Windows\system32\qasf.dll
2016-08-11 22:01:00 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2016-08-11 22:01:00 ----A---- C:\Windows\system32\MPG4DECD.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\system32\MP4SDECD.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\system32\MP43DECD.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\system32\MP3DMOD.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\system32\MFWMAAEC.DLL
2016-08-11 22:01:00 ----A---- C:\Windows\system32\mfvdsp.dll
2016-08-11 22:01:00 ----A---- C:\Windows\system32\mfps.dll
2016-08-11 22:01:00 ----A---- C:\Windows\system32\mfpmp.exe
2016-08-11 22:01:00 ----A---- C:\Windows\system32\mfplat.dll
2016-08-11 22:01:00 ----A---- C:\Windows\system32\mcmde.dll
2016-08-11 22:01:00 ----A---- C:\Windows\system32\evr.dll
2016-08-11 22:01:00 ----A---- C:\Windows\system32\drivers\portcls.sys
2016-08-11 22:01:00 ----A---- C:\Windows\system32\devenum.dll
2016-08-11 22:01:00 ----A---- C:\Windows\system32\COLORCNV.DLL
2016-08-11 22:00:59 ----A---- C:\Windows\SYSWOW64\mferror.dll
2016-08-11 22:00:59 ----A---- C:\Windows\SYSWOW64\ksuser.dll
2016-08-11 22:00:59 ----A---- C:\Windows\system32\mferror.dll
2016-08-11 22:00:59 ----A---- C:\Windows\system32\ksuser.dll
2016-08-11 22:00:59 ----A---- C:\Windows\system32\drivers\drmkaud.sys
2016-08-11 22:00:59 ----A---- C:\Windows\system32\drivers\drmk.sys
2016-08-11 22:00:57 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-08-11 22:00:57 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-08-11 22:00:57 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-08-11 22:00:57 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-08-11 22:00:57 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-08-11 22:00:57 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-08-11 22:00:57 ----A---- C:\Windows\system32\wow64win.dll
2016-08-11 22:00:57 ----A---- C:\Windows\system32\wow64.dll
2016-08-11 22:00:57 ----A---- C:\Windows\system32\winsrv.dll
2016-08-11 22:00:57 ----A---- C:\Windows\system32\srcore.dll
2016-08-11 22:00:57 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-08-11 22:00:57 ----A---- C:\Windows\system32\ntdll.dll
2016-08-11 22:00:57 ----A---- C:\Windows\system32\KernelBase.dll
2016-08-11 22:00:57 ----A---- C:\Windows\system32\kernel32.dll
2016-08-11 22:00:57 ----A---- C:\Windows\system32\conhost.exe
2016-08-11 22:00:57 ----A---- C:\Windows\system32\appidsvc.dll
2016-08-11 22:00:57 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-08-11 22:00:57 ----A---- C:\Windows\system32\advapi32.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-08-11 22:00:56 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-08-11 22:00:56 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-08-11 22:00:56 ----A---- C:\Windows\SYSWOW64\user.exe
2016-08-11 22:00:56 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-08-11 22:00:56 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-08-11 22:00:56 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-08-11 22:00:56 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-08-11 22:00:56 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-08-11 22:00:56 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-08-11 22:00:56 ----A---- C:\Windows\system32\wow64cpu.dll
2016-08-11 22:00:56 ----A---- C:\Windows\system32\srclient.dll
2016-08-11 22:00:56 ----A---- C:\Windows\system32\smss.exe
2016-08-11 22:00:56 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-08-11 22:00:56 ----A---- C:\Windows\system32\rstrui.exe
2016-08-11 22:00:56 ----A---- C:\Windows\system32\ntvdm64.dll
2016-08-11 22:00:56 ----A---- C:\Windows\system32\drivers\appid.sys
2016-08-11 22:00:56 ----A---- C:\Windows\system32\csrsrv.dll
2016-08-11 22:00:56 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-08-11 22:00:56 ----A---- C:\Windows\system32\appidapi.dll
2016-08-11 22:00:56 ----A---- C:\Windows\system32\apisetschema.dll
2016-08-11 22:00:55 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-08-11 22:00:55 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-08-11 22:00:55 ----A---- C:\Windows\system32\schannel.dll
2016-08-11 22:00:55 ----A---- C:\Windows\system32\rpcrt4.dll
2016-08-11 22:00:55 ----A---- C:\Windows\system32\lsasrv.dll
2016-08-11 22:00:55 ----A---- C:\Windows\system32\kerberos.dll
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-08-11 22:00:54 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-08-11 22:00:54 ----A---- C:\Windows\system32\wdigest.dll
2016-08-11 22:00:54 ----A---- C:\Windows\system32\TSpkg.dll
2016-08-11 22:00:54 ----A---- C:\Windows\system32\sspisrv.dll
2016-08-11 22:00:54 ----A---- C:\Windows\system32\sspicli.dll
2016-08-11 22:00:54 ----A---- C:\Windows\system32\secur32.dll
2016-08-11 22:00:54 ----A---- C:\Windows\system32\rpchttp.dll
2016-08-11 22:00:54 ----A---- C:\Windows\system32\ncrypt.dll
2016-08-11 22:00:54 ----A---- C:\Windows\system32\msv1_0.dll
2016-08-11 22:00:54 ----A---- C:\Windows\system32\msobjs.dll
2016-08-11 22:00:54 ----A---- C:\Windows\system32\msaudite.dll
2016-08-11 22:00:54 ----A---- C:\Windows\system32\lsass.exe
2016-08-11 22:00:54 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-08-11 22:00:54 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-08-11 22:00:54 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-08-11 22:00:54 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-08-11 22:00:54 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-08-11 22:00:54 ----A---- C:\Windows\system32\drivers\cng.sys
2016-08-11 22:00:54 ----A---- C:\Windows\system32\d3d10level9.dll
2016-08-11 22:00:54 ----A---- C:\Windows\system32\cryptbase.dll
2016-08-11 22:00:54 ----A---- C:\Windows\system32\credssp.dll
2016-08-11 22:00:54 ----A---- C:\Windows\system32\certcli.dll
2016-08-11 22:00:54 ----A---- C:\Windows\system32\bcryptprimitives.dll
2016-08-11 22:00:54 ----A---- C:\Windows\system32\auditpol.exe
2016-08-11 22:00:54 ----A---- C:\Windows\system32\adtschema.dll
2016-08-11 22:00:52 ----A---- C:\Windows\SYSWOW64\samlib.dll
2016-08-11 22:00:52 ----A---- C:\Windows\system32\samsrv.dll
2016-08-11 22:00:52 ----A---- C:\Windows\system32\samlib.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\ucrtbase.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-08-11 22:00:51 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-08-11 22:00:50 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2016-08-11 22:00:50 ----A---- C:\Windows\SYSWOW64\wups.dll
2016-08-11 22:00:50 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2016-08-11 22:00:50 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2016-08-11 22:00:50 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2016-08-11 22:00:50 ----A---- C:\Windows\system32\wuwebv.dll
2016-08-11 22:00:50 ----A---- C:\Windows\system32\wups2.dll
2016-08-11 22:00:50 ----A---- C:\Windows\system32\wups.dll
2016-08-11 22:00:50 ----A---- C:\Windows\system32\wudriver.dll
2016-08-11 22:00:50 ----A---- C:\Windows\system32\wucltux.dll
2016-08-11 22:00:50 ----A---- C:\Windows\system32\wuaueng.dll
2016-08-11 22:00:50 ----A---- C:\Windows\system32\wuauclt.exe
2016-08-11 22:00:50 ----A---- C:\Windows\system32\wuapp.exe
2016-08-11 22:00:50 ----A---- C:\Windows\system32\wuapi.dll
2016-08-11 22:00:50 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2016-08-11 22:00:50 ----A---- C:\Windows\system32\WinSetupUI.dll
2016-08-11 22:00:47 ----A---- C:\Windows\SYSWOW64\winipsec.dll
2016-08-11 22:00:47 ----A---- C:\Windows\SYSWOW64\polstore.dll
2016-08-11 22:00:47 ----A---- C:\Windows\SYSWOW64\gpapi.dll
2016-08-11 22:00:47 ----A---- C:\Windows\SYSWOW64\FwRemoteSvr.dll
2016-08-11 22:00:47 ----A---- C:\Windows\system32\winipsec.dll
2016-08-11 22:00:47 ----A---- C:\Windows\system32\polstore.dll
2016-08-11 22:00:47 ----A---- C:\Windows\system32\IPSECSVC.DLL
2016-08-11 22:00:47 ----A---- C:\Windows\system32\gpsvc.dll
2016-08-11 22:00:47 ----A---- C:\Windows\system32\gpapi.dll
2016-08-11 22:00:47 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2016-08-11 22:00:44 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2016-08-11 22:00:42 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2016-08-11 22:00:42 ----A---- C:\Windows\SYSWOW64\ntprint.exe
2016-08-11 22:00:42 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2016-08-11 22:00:42 ----A---- C:\Windows\SYSWOW64\mfds.dll
2016-08-11 22:00:42 ----A---- C:\Windows\system32\wpnpinst.exe
2016-08-11 22:00:42 ----A---- C:\Windows\system32\win32spl.dll
2016-08-11 22:00:42 ----A---- C:\Windows\system32\seclogon.dll
2016-08-11 22:00:42 ----A---- C:\Windows\system32\ntprint.exe
2016-08-11 22:00:42 ----A---- C:\Windows\system32\ntprint.dll
2016-08-11 22:00:42 ----A---- C:\Windows\system32\mfds.dll
2016-08-11 22:00:42 ----A---- C:\Windows\system32\localspl.dll
2016-08-11 22:00:42 ----A---- C:\Windows\system32\inetppui.dll
2016-08-11 22:00:42 ----A---- C:\Windows\system32\inetpp.dll
2016-08-11 22:00:41 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2016-08-11 22:00:41 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2016-08-11 22:00:41 ----A---- C:\Windows\system32\msxml3r.dll
2016-08-11 22:00:41 ----A---- C:\Windows\system32\msxml3.dll
2016-08-11 22:00:13 ----A---- C:\Windows\SYSWOW64\usp10.dll
2016-08-11 22:00:13 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2016-08-11 22:00:13 ----A---- C:\Windows\system32\usp10.dll
2016-08-11 22:00:13 ----A---- C:\Windows\system32\gdi32.dll
2016-08-11 22:00:13 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2016-08-11 22:00:13 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2016-08-11 22:00:13 ----A---- C:\Windows\system32\cdd.dll
2016-08-11 21:59:41 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2016-08-11 21:59:41 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2016-08-11 21:59:41 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2016-08-11 21:59:41 ----A---- C:\Windows\system32\StructuredQuery.dll
2016-08-11 21:59:41 ----A---- C:\Windows\system32\oleaut32.dll
2016-08-11 21:59:41 ----A---- C:\Windows\system32\asycfilt.dll
2016-08-11 21:59:40 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2016-08-11 21:59:40 ----A---- C:\Windows\system32\rdpcorets.dll
2016-08-11 21:59:40 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-08-11 21:59:39 ----A---- C:\Windows\system32\rdpudd.dll
2016-08-11 21:57:43 ----A---- C:\Windows\SYSWOW64\lpk.dll
2016-08-11 21:57:43 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2016-08-11 21:57:43 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2016-08-11 21:57:43 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2016-08-11 21:57:43 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2016-08-11 21:57:43 ----A---- C:\Windows\system32\lpk.dll
2016-08-11 21:57:43 ----A---- C:\Windows\system32\fontsub.dll
2016-08-11 21:57:43 ----A---- C:\Windows\system32\dciman32.dll
2016-08-11 21:57:43 ----A---- C:\Windows\system32\atmlib.dll
2016-08-11 21:57:43 ----A---- C:\Windows\system32\atmfd.dll
2016-08-11 21:56:43 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2016-08-11 21:56:43 ----A---- C:\Windows\system32\WindowsCodecs.dll

======List of files/folders modified in the last 1 month======

2016-09-09 14:45:56 ----D---- C:\Program Files\trend micro
2016-09-09 14:13:40 ----D---- C:\Windows\System32
2016-09-09 14:13:40 ----D---- C:\Windows\inf
2016-09-09 14:13:40 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-09-09 14:08:35 ----D---- C:\Windows\Temp
2016-09-09 14:08:11 ----D---- C:\Windows\system32\Tasks
2016-09-09 14:08:07 ----D---- C:\Program Files (x86)\SpeedFan
2016-09-09 14:07:45 ----D---- C:\ProgramData\NVIDIA
2016-09-09 06:55:02 ----D---- C:\Windows\system32\config
2016-09-07 18:30:56 ----HD---- C:\ProgramData
2016-09-04 17:01:27 ----SHD---- C:\System Volume Information
2016-09-04 15:16:19 ----D---- C:\Windows\system32\drivers
2016-09-03 08:08:03 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-09-01 22:23:34 ----D---- C:\Wswin
2016-09-01 22:17:55 ----RD---- C:\Program Files (x86)
2016-09-01 22:07:15 ----D---- C:\Windows\SysWOW64
2016-08-28 23:03:08 ----D---- C:\Program Files (x86)\rajce
2016-08-28 15:08:26 ----D---- C:\Windows\rescache
2016-08-21 16:09:33 ----D---- C:\Windows\winsxs
2016-08-21 16:08:47 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-08-21 16:08:47 ----D---- C:\Windows\system32\cs-CZ
2016-08-21 16:08:46 ----D---- C:\Windows\system32\DriverStore
2016-08-21 16:05:59 ----D---- C:\Windows\system32\catroot2
2016-08-20 16:35:30 ----D---- C:\Program Files\Microsoft Silverlight
2016-08-20 16:35:30 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2016-08-20 16:34:56 ----D---- C:\Windows\AppPatch
2016-08-20 14:23:43 ----SHD---- C:\Windows\Installer
2016-08-20 11:52:44 ----D---- C:\Windows\Microsoft.NET
2016-08-19 23:01:04 ----D---- C:\Windows
2016-08-15 13:09:49 ----RSD---- C:\Windows\assembly
2016-08-15 06:21:05 ----D---- C:\Windows\SYSWOW64\en-US
2016-08-15 06:21:05 ----D---- C:\Windows\system32\en-US
2016-08-15 06:21:05 ----D---- C:\Windows\ehome
2016-08-15 06:21:05 ----D---- C:\Program Files\Internet Explorer
2016-08-15 06:21:04 ----D---- C:\Windows\system32\Boot
2016-08-15 06:21:04 ----D---- C:\Program Files\Windows Media Player
2016-08-15 06:21:04 ----D---- C:\Program Files (x86)\Windows Media Player
2016-08-15 06:21:04 ----D---- C:\Program Files (x86)\Internet Explorer
2016-08-15 01:57:09 ----D---- C:\Windows\system32\MRT
2016-08-15 01:57:09 ----D---- C:\Windows\debug
2016-08-15 01:57:06 ----AC---- C:\Windows\system32\MRT.exe
2016-08-15 01:54:52 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-08-14 10:48:40 ----D---- C:\ProgramData\Microsoft Help
2016-08-14 07:15:37 ----D---- C:\Program Files\Core Temp
2016-08-12 21:18:17 ----RD---- C:\Program Files
2016-08-11 22:57:02 ----D---- C:\Program Files (x86)\Microsoft Office
2016-08-11 22:57:01 ----D---- C:\Windows\ShellNew
2016-08-11 22:56:56 ----RSD---- C:\Windows\Fonts
2016-08-11 22:56:34 ----A---- C:\Windows\win.ini
2016-08-11 20:27:18 ----SD---- C:\Users\User007\AppData\Roaming\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-08-19 74544]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-08-19 292704]
R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2014-05-28 672104]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2014-05-28 28008]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2014-06-27 20464]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2016-08-19 37144]
R1 aswNetSec;aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [2016-08-19 453192]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-08-19 103064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-08-19 969560]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-08-19 513496]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-08-19 108816]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-08-19 163416]
R2 speedfan;speedfan; \??\C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R3 ALSysIO;ALSysIO; \??\C:\Users\User007\AppData\Local\Temp\ALSysIO64.sys []
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2013-08-16 140032]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2013-08-16 424192]
R3 aswNetNd6;Avast Firewall NDIS6 Helper; C:\Windows\system32\DRIVERS\aswNetNd6.sys [2016-04-07 28312]
R3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtlitescsibus.sys [2015-09-28 30264]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-07-15 4012632]
R3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2013-07-18 129224]
R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys [2009-11-18 32344]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2014-09-30 129312]
R3 netr28ux;RT2870 USB Extensible Wireless LAN Card Driver; C:\Windows\system32\DRIVERS\netr28ux.sys [2015-09-28 2253112]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2016-07-15 214592]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-06-14 26560]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2016-06-03 56384]
S3 Afc;PPdus ASPI Shell; c:\windows\SysWOW64\drivers\Afc.sys [2006-11-14 22784]
S3 anvsnddrv;AnvSoft Virtual Sound Device; C:\Windows\system32\drivers\anvsnddrv.sys [2012-05-17 33872]
S3 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-08-19 37656]
S3 aswTap;avast! SecureLine TAP Adapter v3; C:\Windows\system32\DRIVERS\aswTap.sys [2015-09-24 44640]
S3 cpuz137;cpuz137; \??\C:\Users\User007\AppData\Local\Temp\cpuz137\cpuz137_x64.sys []
S3 IT9135BDA;IT9135 BDA Devices; C:\Windows\System32\Drivers\IT9135BDA.sys [2016-08-01 165504]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2014-06-27 383472]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2014-06-27 795120]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-11-26 888536]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-06-25 82128]
R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2015-09-29 2015936]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-08-19 197128]
R2 avast! Firewall;Avast Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2016-08-19 223600]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-06-14 1163712]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2014-05-28 16232]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2014-04-03 154584]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2014-04-03 398296]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-06-14 1879488]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-06-14 2521024]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2016-07-11 1364536]
R2 STCServ;Intel(R) Common Connectivity Framework; C:\Program Files\Intel\STCServ\STCServ.exe [2015-03-16 8095456]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe [2016-07-11 424384]
R2 TechSmith Uploader Service;TechSmith Uploader Service; C:\Program Files (x86)\Common Files\TechSmith Shared\Uploader\UploaderService.exe [2015-01-26 3408384]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-06-14 3632576]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe []
S3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-06-18 1268568]
S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [2015-08-17 342240]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-08-02 114688]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2014-01-31 887232]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-09-01 146888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-09-22 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------

Re: Prosím o preventivku

Napsal: 09 zář 2016 19:31
od Márty84
Zdravim :)

:arrow: Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.

:arrow: Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=144868 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Re: Prosím o preventivku

Napsal: 09 zář 2016 20:47
od kcobain
Zdravím,

zde je log z AdwCleaner :

# AdwCleaner v6.010 - Logfile created 09/09/2016 at 21:42:08
# Updated on 12/08/2016 by ToolsLib
# Database : 2016-09-09.2 [Server]
# Operating System : Windows 7 Home Premium Service Pack 1 (X64)
# Username : User007 - USER007-PC
# Running from : C:\Users\User007\Desktop\adwcleaner_6.010.exe
# Mode: Clean
# Support : https://toolslib.net/forum



***** [ Services ] *****



***** [ Folders ] *****

[-] Folder deleted: C:\Users\User007\AppData\Local\FileViewPro


***** [ Files ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Shortcuts ] *****



***** [ Scheduled Tasks ] *****



***** [ Registry ] *****



***** [ Web browsers ] *****



*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [981 Bytes] - [25/04/2016 17:26:43]
C:\AdwCleaner\AdwCleaner[C2].txt - [899 Bytes] - [09/09/2016 21:42:08]
C:\AdwCleaner\AdwCleaner[S1].txt - [802 Bytes] - [25/04/2016 17:26:17]
C:\AdwCleaner\AdwCleaner[S2].txt - [1329 Bytes] - [09/09/2016 21:42:00]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1116 Bytes] ##########


na logu z MBAM se pracuje :)

Re: Prosím o preventivku

Napsal: 10 zář 2016 09:11
od Márty84
kcobain píše:na logu z MBAM se pracuje :)
Tak az bude, sem s nim ;-)

Re: Prosím o preventivku

Napsal: 10 zář 2016 10:20
od kcobain
Zdravím. konečně mě to vyplivlo log :) zde tedy je:

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 10.9.2016
Čas skenování: 7:36
Protokol: 111.txt
Správce: Ano

Verze: 2.2.1.1043
Databáze malwaru: v2016.09.10.01
Databáze rootkitů: v2016.08.15.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: User007

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 557142
Uplynulý čas: 2 hod, 55 min, 3 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 1
RiskWare.GameHack, F:\Down\03_\steam_api64.dll, , [c9b0b4bc1d7db77f0cc3bbec30d404fc],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Re: Prosím o preventivku

Napsal: 10 zář 2016 11:42
od Márty84
:arrow: Nalez nechte odstranit, pak MBAM odinstalujte.

:arrow: Dejte logy podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100 - vypnete na chvili antivir, je mozne, ze to bude blokovat jako skodnou, ale pouzivame to porad, jedna se o falesny poplach :)
(Kdyby nesel Launcher stahnout, dejte logy jen ze samotneho FRST, tedy bez pouziti Launcheru)

Re: Prosím o preventivku

Napsal: 10 zář 2016 12:08
od kcobain
Zde vkládám oba logy:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2016
Ran by User007 (administrator) on USER007-PC (10-09-2016 13:06:54)
Running from C:\Users\User007\Desktop
Loaded Profiles: User007 (Available Profiles: User007)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(TechSmith Corporation) C:\Program Files (x86)\Common Files\TechSmith Shared\Uploader\UploaderService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Wargaming.net) C:\Games\World_of_Tanks\WargamingGameUpdater.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Nikon Corporation) C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
() C:\Program Files\Core Temp\Core Temp.exe
(Almico Software (almico.com)) C:\Program Files (x86)\SpeedFan\speedfan.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel® Corporation) C:\Program Files\Intel\ConnectCenter\bin\CCFManager.exe
(Intel Corporation) C:\Program Files\Intel\STCServ\STCServ.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7637208 2014-07-15] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated)
HKLM\...\Run: [IntelConnectCenter] => C:\Program Files\Intel\ConnectCenter\bin\ICCLauncher.exe [90112 2015-03-16] (Intel® Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1767944 2016-06-14] (NVIDIA Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-06-27] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9107104 2016-09-01] (AVAST Software)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1065024 2014-06-10] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation)
HKU\S-1-5-21-1792867000-701808982-2087714082-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8894680 2016-08-05] (Piriform Ltd)
HKU\S-1-5-21-1792867000-701808982-2087714082-1000\...\Run: [World of Tanks] => C:\Games\World_of_Tanks\WargamingGameUpdater.exe [3134728 2016-08-05] (Wargaming.net)
HKU\S-1-5-21-1792867000-701808982-2087714082-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-1792867000-701808982-2087714082-1000\...\MountPoints2: {0e95de25-1aa2-11e6-adab-d8cb8a536b99} - J:\Setup.exe
HKU\S-1-5-21-1792867000-701808982-2087714082-1000\...\MountPoints2: {1713147a-904a-11e5-86b2-d8cb8a536b99} - I:\Setup.exe
HKU\S-1-5-21-1792867000-701808982-2087714082-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-08-19] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{3FD3E101-1881-471F-9AB6-FD34632289C0}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5A2067F9-A2C4-4543-B59C-6C47AABFF1BE}: [NameServer] 77.234.40.79
Tcpip\..\Interfaces\{B781FC34-9CA2-44B4-A903-1C9016845EA0}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{ED6C4B30-192F-4F33-A4EA-7E3EA8EC2E6D}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================

FireFox:
========
FF ProfilePath: C:\Users\User007\AppData\Roaming\Mozilla\Firefox\Profiles\1rgx9lnd.default
FF Homepage: www.centrum.cz
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-18] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-04-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-04-03] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-07-11] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-07-11] (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: Web Components -> C:\Program Files (x86)\Web Components\npWebVideoPlugin.dll [2014-07-11] ()
FF SearchPlugin: C:\Users\User007\AppData\Roaming\Mozilla\Firefox\Profiles\1rgx9lnd.default\searchplugins\imdb.xml [2015-11-28]
FF SearchPlugin: C:\Users\User007\AppData\Roaming\Mozilla\Firefox\Profiles\1rgx9lnd.default\searchplugins\novinkycz.xml [2015-10-04]
FF Extension: (Firefox Hotfix) - C:\Users\User007\AppData\Roaming\Mozilla\Firefox\Profiles\1rgx9lnd.default\Extensions\firefox-hotfix@mozilla.org.xpi [2016-09-08]
FF Extension: (Adblock Plus) - C:\Users\User007\AppData\Roaming\Mozilla\Firefox\Profiles\1rgx9lnd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-07-02]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2015936 2015-09-29] (Adobe Systems, Incorporated)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-08-19] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [223600 2016-08-19] (AVAST Software)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342240 2015-08-17] (Futuremark)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-04-03] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
R2 STCServ; C:\Program Files\Intel\STCServ\STCServ.exe [8095456 2015-03-16] (Intel Corporation)
R2 TechSmith Uploader Service; C:\Program Files (x86)\Common Files\TechSmith Shared\Uploader\UploaderService.exe [3408384 2015-01-26] (TechSmith Corporation) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2012-05-17] (AnvSoft Inc.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-08-19] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-08-19] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-08-19] (AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [28312 2016-04-07] (AVAST Software)
R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [453192 2016-08-19] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-08-19] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-08-19] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969560 2016-08-19] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513496 2016-08-19] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-08-19] (AVAST Software)
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [44640 2015-09-24] (The OpenVPN Project)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [292704 2016-08-19] (AVAST Software)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-09-28] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-05-28] (Intel Corporation)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [165504 2016-08-01] (ITE )
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-07-18] (Qualcomm Atheros Co., Ltd.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
R3 netr28ux; C:\Windows\System32\DRIVERS\netr28ux.sys [2253112 2015-09-28] (MediaTek Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-06-03] (NVIDIA Corporation)
R3 ALSysIO; \??\C:\Users\User007\AppData\Local\Temp\ALSysIO64.sys [X]
S3 cpuz137; \??\C:\Users\User007\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [X]
R3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-09-10 13:06 - 2016-09-10 13:06 - 02397696 _____ (Farbar) C:\Users\User007\Desktop\FRST64.exe
2016-09-10 13:06 - 2016-09-10 13:06 - 00014654 _____ C:\Users\User007\Desktop\FRST.txt
2016-09-10 13:06 - 2016-09-10 13:06 - 00000000 ____D C:\FRST
2016-09-10 13:05 - 2016-09-10 13:05 - 00112640 _____ (forum.viry.cz) C:\Users\User007\Desktop\FRSTLauncher.exe
2016-09-10 13:05 - 2016-09-10 13:05 - 00015327 _____ C:\Users\User007\Desktop\LM.bat
2016-09-10 13:02 - 2016-09-10 13:05 - 00029696 _____ C:\Users\User007\AppData\Local\MSGBOX.EXE
2016-09-10 11:17 - 2016-09-10 11:18 - 00001206 _____ C:\Users\User007\Desktop\111.txt
2016-09-09 21:44 - 2016-09-09 21:44 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-09-09 21:40 - 2016-09-09 21:36 - 03826240 _____ C:\Users\User007\Desktop\adwcleaner_6.010.exe
2016-09-09 18:44 - 2016-09-09 18:44 - 00000000 ____D C:\Users\User007\AppData\Roaming\Steam
2016-09-09 18:44 - 2016-09-09 18:44 - 00000000 ____D C:\Users\User007\AppData\Roaming\FarmExpert2017
2016-09-09 14:45 - 2016-09-09 14:46 - 00000000 ____D C:\rsit
2016-09-09 14:45 - 2016-09-09 14:45 - 01222144 _____ C:\Users\User007\Desktop\RSITx64.exe
2016-09-07 17:51 - 2016-09-09 16:56 - 00001135 _____ C:\Users\User007\Desktop\Nový textový dokument.txt
2016-09-01 22:17 - 2016-09-01 22:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-08-21 16:48 - 2016-08-21 16:48 - 00000000 ____D C:\Users\User007\Documents\Rockstar Games
2016-08-21 16:48 - 2016-08-21 16:48 - 00000000 ____D C:\Users\User007\AppData\Local\Rockstar Games
2016-08-21 16:48 - 2016-08-21 16:48 - 00000000 ____D C:\ProgramData\Socialclub
2016-08-21 16:16 - 2016-08-21 16:16 - 00000000 ____D C:\Users\User007\AppData\Local\A
2016-08-21 16:15 - 2016-08-21 16:15 - 00000000 ____D C:\Users\User007\AppData\Roaming\A
2016-08-21 16:06 - 2016-01-16 21:01 - 02085888 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-08-21 16:06 - 2016-01-16 20:36 - 01413632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-08-21 16:06 - 2015-11-05 21:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-08-21 16:06 - 2015-11-05 21:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-08-21 16:04 - 2016-05-11 19:02 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-08-21 16:04 - 2016-05-11 19:02 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-08-21 16:04 - 2016-05-11 19:02 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-08-21 16:04 - 2016-05-11 17:19 - 00351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-08-21 16:04 - 2016-05-11 17:19 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-08-21 16:04 - 2016-05-11 17:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2016-08-21 16:04 - 2016-05-11 17:11 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2016-08-21 16:04 - 2016-05-11 17:01 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2016-08-21 16:04 - 2016-05-11 16:58 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-08-21 15:36 - 2016-08-21 16:12 - 00000517 _____ C:\Users\Public\Desktop\Grand Theft Auto V.lnk
2016-08-19 23:01 - 2016-08-19 23:01 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-08-19 23:01 - 2016-08-19 23:01 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-08-19 22:55 - 2016-08-19 22:55 - 00001922 _____ C:\Users\Public\Desktop\Avast Internet Security.lnk
2016-08-19 19:46 - 2016-08-20 11:16 - 00000000 _____ C:\Windows\SysWOW64\last.dump
2016-08-15 01:52 - 2016-07-08 17:01 - 03218944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-08-15 01:52 - 2016-02-09 11:57 - 14634496 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-08-15 01:52 - 2016-02-09 11:57 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-08-15 01:52 - 2016-02-09 11:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-08-15 01:52 - 2016-02-09 11:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-08-15 01:52 - 2016-02-09 11:54 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-08-15 01:52 - 2016-02-09 11:51 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-08-15 01:52 - 2016-02-09 11:51 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-08-15 01:52 - 2016-02-09 11:13 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-08-15 01:52 - 2016-02-09 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-08-15 01:52 - 2016-02-09 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-08-13 22:52 - 2016-08-13 22:52 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET
2016-08-13 22:51 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-08-13 22:51 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-08-11 22:57 - 2016-08-11 22:57 - 00002723 _____ C:\Users\Public\Desktop\Microsoft Office Word 2007.lnk
2016-08-11 22:57 - 2016-08-11 22:57 - 00002677 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Otevřít dokument sady Microsoft Office.lnk
2016-08-11 22:57 - 2016-08-11 22:57 - 00002653 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Nový dokument sady Microsoft Office.lnk
2016-08-11 22:57 - 2016-08-11 22:57 - 00002641 _____ C:\Users\Public\Desktop\Microsoft Office Excel 2007.lnk
2016-08-11 22:01 - 2016-08-02 16:54 - 00394440 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-08-11 22:01 - 2016-08-02 16:08 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-08-11 22:01 - 2016-08-02 08:54 - 25808384 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-08-11 22:01 - 2016-08-02 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-08-11 22:01 - 2016-08-02 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-08-11 22:01 - 2016-08-02 08:32 - 02894336 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-08-11 22:01 - 2016-08-02 08:32 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-08-11 22:01 - 2016-08-02 08:31 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-08-11 22:01 - 2016-08-02 08:31 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-08-11 22:01 - 2016-08-02 08:31 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-08-11 22:01 - 2016-08-02 08:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-08-11 22:01 - 2016-08-02 08:24 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-08-11 22:01 - 2016-08-02 08:23 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-08-11 22:01 - 2016-08-02 08:20 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-08-11 22:01 - 2016-08-02 08:19 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-08-11 22:01 - 2016-08-02 08:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-08-11 22:01 - 2016-08-02 08:18 - 06047744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-08-11 22:01 - 2016-08-02 08:18 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-08-11 22:01 - 2016-08-02 08:18 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-08-11 22:01 - 2016-08-02 08:11 - 00969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-08-11 22:01 - 2016-08-02 08:08 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-08-11 22:01 - 2016-08-02 08:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-08-11 22:01 - 2016-08-02 08:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-08-11 22:01 - 2016-08-02 07:59 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-08-11 22:01 - 2016-08-02 07:56 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-08-11 22:01 - 2016-08-02 07:55 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-08-11 22:01 - 2016-08-02 07:54 - 20343808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-08-11 22:01 - 2016-08-02 07:53 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-08-11 22:01 - 2016-08-02 07:51 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-08-11 22:01 - 2016-08-02 07:51 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-08-11 22:01 - 2016-08-02 07:51 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-08-11 22:01 - 2016-08-02 07:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-08-11 22:01 - 2016-08-02 07:51 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-08-11 22:01 - 2016-08-02 07:50 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-08-11 22:01 - 2016-08-02 07:47 - 02286592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-08-11 22:01 - 2016-08-02 07:45 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-08-11 22:01 - 2016-08-02 07:44 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-08-11 22:01 - 2016-08-02 07:42 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-08-11 22:01 - 2016-08-02 07:41 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-08-11 22:01 - 2016-08-02 07:41 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-08-11 22:01 - 2016-08-02 07:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-08-11 22:01 - 2016-08-02 07:40 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-08-11 22:01 - 2016-08-02 07:38 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-08-11 22:01 - 2016-08-02 07:38 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-08-11 22:01 - 2016-08-02 07:37 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-08-11 22:01 - 2016-08-02 07:36 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-08-11 22:01 - 2016-08-02 07:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-08-11 22:01 - 2016-08-02 07:29 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-08-11 22:01 - 2016-08-02 07:28 - 15412224 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-08-11 22:01 - 2016-08-02 07:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-08-11 22:01 - 2016-08-02 07:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-08-11 22:01 - 2016-08-02 07:25 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-08-11 22:01 - 2016-08-02 07:24 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-08-11 22:01 - 2016-08-02 07:23 - 02868224 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-08-11 22:01 - 2016-08-02 07:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-08-11 22:01 - 2016-08-02 07:21 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-08-11 22:01 - 2016-08-02 07:16 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-08-11 22:01 - 2016-08-02 07:15 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-08-11 22:01 - 2016-08-02 07:14 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-08-11 22:01 - 2016-08-02 07:14 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-08-11 22:01 - 2016-08-02 07:11 - 13808128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-08-11 22:01 - 2016-08-02 07:10 - 01550848 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-08-11 22:01 - 2016-08-02 06:59 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-08-11 22:01 - 2016-08-02 06:56 - 02393088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-08-11 22:01 - 2016-08-02 06:53 - 01316352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-08-11 22:01 - 2016-08-02 06:51 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-08-11 22:01 - 2016-03-16 20:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-08-11 22:01 - 2016-03-16 20:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-08-11 22:01 - 2016-03-16 20:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-08-11 22:01 - 2016-01-22 08:18 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-08-11 22:01 - 2016-01-22 08:18 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-08-11 22:01 - 2016-01-22 08:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2016-08-11 22:01 - 2016-01-22 08:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2016-08-11 22:01 - 2015-12-08 23:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-08-11 22:01 - 2015-12-08 23:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-08-11 22:01 - 2015-12-08 23:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
2016-08-11 22:01 - 2015-12-08 23:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2016-08-11 22:01 - 2015-12-08 23:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2016-08-11 22:01 - 2015-12-08 23:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2016-08-11 22:01 - 2015-12-08 23:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2016-08-11 22:01 - 2015-12-08 23:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-08-11 22:01 - 2015-12-08 23:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
2016-08-11 22:01 - 2015-12-08 23:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
2016-08-11 22:01 - 2015-12-08 23:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2016-08-11 22:01 - 2015-12-08 23:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
2016-08-11 22:01 - 2015-12-08 23:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-08-11 22:01 - 2015-12-08 23:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-08-11 22:01 - 2015-12-08 23:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2016-08-11 22:01 - 2015-12-08 23:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2016-08-11 22:01 - 2015-12-08 23:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
2016-08-11 22:01 - 2015-12-08 23:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-08-11 22:01 - 2015-12-08 23:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-08-11 22:01 - 2015-12-08 23:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2016-08-11 22:01 - 2015-12-08 23:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-08-11 22:01 - 2015-12-08 23:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
2016-08-11 22:01 - 2015-12-08 23:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
2016-08-11 22:01 - 2015-12-08 23:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2016-08-11 22:01 - 2015-12-08 23:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
2016-08-11 22:01 - 2015-12-08 23:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-08-11 22:01 - 2015-12-08 23:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
2016-08-11 22:01 - 2015-12-08 23:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-08-11 22:01 - 2015-12-08 23:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2016-08-11 22:01 - 2015-12-08 23:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2016-08-11 22:01 - 2015-12-08 23:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
2016-08-11 22:01 - 2015-12-08 23:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2016-08-11 22:01 - 2015-12-08 23:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-08-11 22:01 - 2015-12-08 21:07 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-08-11 22:01 - 2015-12-08 21:07 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-08-11 22:01 - 2015-12-08 21:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-08-11 22:01 - 2015-12-08 21:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-08-11 22:01 - 2015-12-08 21:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-08-11 22:01 - 2015-12-08 21:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2016-08-11 22:01 - 2015-12-08 21:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-08-11 22:01 - 2015-12-08 21:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-08-11 22:01 - 2015-12-08 21:07 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-08-11 22:01 - 2015-12-08 21:07 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-08-11 22:01 - 2015-12-08 21:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-08-11 22:01 - 2015-12-08 21:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-08-11 22:01 - 2015-12-08 21:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-08-11 22:01 - 2015-12-08 21:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-08-11 22:01 - 2015-12-08 21:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-08-11 22:01 - 2015-12-08 21:07 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-08-11 22:01 - 2015-12-08 21:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-08-11 22:01 - 2015-12-08 21:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-08-11 22:01 - 2015-12-08 20:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-08-11 22:00 - 2016-07-08 17:37 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-08-11 22:00 - 2016-07-08 17:37 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-08-11 22:00 - 2016-07-08 17:32 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-08-11 22:00 - 2016-07-08 17:32 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-08-11 22:00 - 2016-07-08 17:17 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-08-11 22:00 - 2016-07-08 17:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-08-11 22:00 - 2016-07-08 17:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-08-11 22:00 - 2016-07-08 17:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-08-11 22:00 - 2016-07-08 17:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-08-11 22:00 - 2016-07-08 17:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-08-11 22:00 - 2016-07-08 17:16 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-08-11 22:00 - 2016-07-08 17:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-08-11 22:00 - 2016-07-08 17:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-08-11 22:00 - 2016-07-08 17:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-08-11 22:00 - 2016-07-08 17:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-08-11 22:00 - 2016-07-08 17:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-08-11 22:00 - 2016-07-08 17:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-08-11 22:00 - 2016-07-08 17:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-08-11 22:00 - 2016-07-08 17:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-08-11 22:00 - 2016-07-08 17:03 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-08-11 22:00 - 2016-07-08 16:57 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-08-11 22:00 - 2016-07-08 16:56 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-08-11 22:00 - 2016-07-08 16:56 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-08-11 22:00 - 2016-07-08 16:55 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-08-11 22:00 - 2016-07-08 16:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-08-11 22:00 - 2016-07-08 16:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-08-11 22:00 - 2016-06-26 02:27 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-08-11 22:00 - 2016-06-26 02:27 - 00756736 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-08-11 22:00 - 2016-06-26 02:27 - 00344576 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2016-08-11 22:00 - 2016-06-26 02:27 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2016-08-11 22:00 - 2016-06-26 02:27 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2016-08-11 22:00 - 2016-06-25 21:54 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2016-08-11 22:00 - 2016-06-25 21:53 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
2016-08-11 22:00 - 2016-06-25 21:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2016-08-11 22:00 - 2016-06-25 21:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2016-08-11 22:00 - 2016-06-25 21:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
2016-08-11 22:00 - 2016-05-18 18:10 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-08-11 22:00 - 2016-05-18 18:09 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-08-11 22:00 - 2016-05-12 19:15 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll
2016-08-11 22:00 - 2016-05-12 19:14 - 00794624 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-08-11 22:00 - 2016-05-12 19:14 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-08-11 22:00 - 2016-05-12 19:14 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2016-08-11 22:00 - 2016-05-12 19:14 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2016-08-11 22:00 - 2016-05-12 19:14 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2016-08-11 22:00 - 2016-05-12 17:18 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll
2016-08-11 22:00 - 2016-05-12 17:18 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2016-08-11 22:00 - 2016-05-12 17:18 - 00070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winipsec.dll
2016-08-11 22:00 - 2016-05-12 17:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll
2016-08-11 22:00 - 2016-05-12 15:05 - 00459640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-08-11 22:00 - 2016-05-12 15:05 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-08-11 22:00 - 2016-05-12 15:04 - 00249352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-08-11 22:00 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-08-11 22:00 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-08-11 22:00 - 2016-04-09 09:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-08-11 22:00 - 2016-04-09 09:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-08-11 22:00 - 2016-04-09 09:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-08-11 22:00 - 2016-04-09 09:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-08-11 22:00 - 2016-04-09 09:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-08-11 22:00 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-08-11 22:00 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-08-11 22:00 - 2016-04-09 08:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-08-11 22:00 - 2016-04-09 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-08-11 22:00 - 2016-04-09 08:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-08-11 22:00 - 2016-04-09 08:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-08-11 22:00 - 2016-04-09 08:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-08-11 22:00 - 2016-04-09 08:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-08-11 22:00 - 2016-04-09 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-08-11 22:00 - 2016-04-09 08:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 07:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-08-11 22:00 - 2016-04-09 07:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-08-11 22:00 - 2016-04-09 07:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-08-11 22:00 - 2016-04-09 07:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-08-11 22:00 - 2016-04-09 07:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-08-11 22:00 - 2016-04-09 07:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-08-11 22:00 - 2016-04-09 07:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-08-11 22:00 - 2016-04-09 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-08-11 22:00 - 2016-04-09 07:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-08-11 22:00 - 2016-04-09 07:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-08-11 22:00 - 2016-04-09 07:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 07:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 07:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-08-11 22:00 - 2016-04-09 07:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-08-11 22:00 - 2016-03-16 02:16 - 00760320 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-08-11 22:00 - 2016-03-16 02:16 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-08-11 22:00 - 2016-03-16 01:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-08-11 22:00 - 2016-03-06 20:53 - 01885696 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-08-11 22:00 - 2016-03-06 20:53 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-08-11 22:00 - 2016-03-06 20:38 - 01240576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-08-11 22:00 - 2016-03-06 20:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2016-08-11 22:00 - 2016-02-12 20:52 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-08-11 22:00 - 2016-02-12 20:52 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-08-11 22:00 - 2016-02-12 20:52 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-08-11 22:00 - 2016-02-12 20:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-08-11 22:00 - 2016-02-12 20:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-08-11 22:00 - 2016-02-12 20:22 - 02610688 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-08-11 22:00 - 2016-02-12 20:19 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-08-11 22:00 - 2016-02-12 20:18 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-08-11 22:00 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-08-11 22:00 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-08-11 22:00 - 2016-02-12 20:18 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-08-11 22:00 - 2016-02-12 20:18 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-08-11 22:00 - 2016-02-12 20:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-08-11 22:00 - 2016-02-12 20:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-08-11 22:00 - 2016-02-12 20:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-08-11 22:00 - 2016-02-12 20:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-08-11 22:00 - 2016-02-09 11:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-08-11 22:00 - 2016-02-05 03:19 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-08-11 22:00 - 2016-02-04 20:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-08-11 22:00 - 2016-02-03 20:07 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-08-11 22:00 - 2015-12-08 23:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll
2016-08-11 22:00 - 2015-12-08 23:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2016-08-11 22:00 - 2015-12-08 21:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2016-08-11 22:00 - 2015-12-08 21:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-08-11 22:00 - 2015-12-08 20:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-08-11 22:00 - 2015-12-08 20:11 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2016-08-11 22:00 - 2015-11-19 16:07 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-08-11 22:00 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-08-11 22:00 - 2015-11-03 21:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-08-11 22:00 - 2015-11-03 20:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2016-08-11 21:59 - 2016-05-11 19:02 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-08-11 21:59 - 2016-05-11 17:19 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2016-08-11 21:59 - 2016-02-03 20:58 - 00862208 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-08-11 21:59 - 2016-02-03 20:52 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-08-11 21:59 - 2016-02-03 20:49 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-08-11 21:59 - 2016-02-03 20:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-08-11 21:59 - 2016-01-07 19:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-08-11 21:59 - 2015-12-20 20:50 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-08-11 21:59 - 2015-12-20 20:50 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2016-08-11 21:59 - 2015-12-20 16:08 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-08-11 21:57 - 2016-05-14 00:15 - 00382184 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-08-11 21:57 - 2016-05-14 00:09 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-08-11 21:57 - 2016-05-14 00:09 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-08-11 21:57 - 2016-05-14 00:09 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-08-11 21:57 - 2016-05-14 00:09 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-08-11 21:57 - 2016-05-13 23:54 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-08-11 21:57 - 2016-05-13 23:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-08-11 21:57 - 2016-05-13 23:49 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-08-11 21:57 - 2016-05-13 23:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-08-11 21:57 - 2016-05-13 23:27 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-08-11 21:56 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-08-11 21:56 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-08-11 20:27 - 2016-08-11 20:27 - 00000000 ____D C:\Users\User007\Documents\Poznámkové bloky aplikace OneNote

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-09-10 13:06 - 2009-07-14 06:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-09-10 13:06 - 2009-07-14 06:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-09-10 13:04 - 2010-11-21 11:27 - 00672826 _____ C:\Windows\system32\perfh005.dat
2016-09-10 13:04 - 2010-11-21 11:27 - 00142920 _____ C:\Windows\system32\perfc005.dat
2016-09-10 13:04 - 2009-07-14 07:13 - 01595136 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-10 13:04 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-09-10 12:59 - 2016-05-21 13:05 - 00000000 ____D C:\Wswin
2016-09-10 12:58 - 2016-07-02 09:21 - 00000000 ____D C:\ProgramData\NVIDIA
2016-09-10 12:58 - 2015-09-22 16:12 - 00003030 _____ C:\Windows\System32\Tasks\MSIAfterburner
2016-09-10 12:58 - 2015-09-22 08:59 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2016-09-10 12:58 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-10 07:39 - 2015-09-22 09:02 - 00003986 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{E004C03C-9FAC-4DC1-A338-24309FF7CBEA}
2016-09-10 02:00 - 2015-09-27 18:57 - 00000000 ____D C:\Users\User007\AppData\Local\Adobe
2016-09-09 21:42 - 2016-04-25 17:26 - 00000000 ____D C:\AdwCleaner
2016-09-09 18:29 - 2015-09-28 10:31 - 00000000 ____D C:\Users\User007\AppData\Roaming\DAEMON Tools Lite
2016-09-09 14:45 - 2016-04-24 19:16 - 00000000 ____D C:\Program Files\trend micro
2016-09-08 23:46 - 2015-11-20 22:01 - 00000000 ____D C:\Users\User007\AppData\Local\CrashDumps
2016-09-08 06:21 - 2009-07-14 07:08 - 00032620 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-09-04 16:00 - 2015-11-29 16:41 - 00002381 _____ C:\Users\User007\Desktop\spark.txt
2016-09-03 08:08 - 2015-09-24 19:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-08-28 23:03 - 2015-10-08 20:44 - 00000000 ____D C:\Program Files (x86)\rajce
2016-08-28 15:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-08-26 20:56 - 2016-08-05 11:54 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-08-21 16:09 - 2009-07-14 06:45 - 00416832 _____ C:\Windows\system32\FNTCACHE.DAT
2016-08-21 14:53 - 2016-07-11 16:28 - 00000000 ____D C:\Users\User007\Counter-Strike 1.6
2016-08-20 16:35 - 2015-09-22 10:04 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-08-20 16:35 - 2015-09-22 10:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-08-20 14:23 - 2015-09-22 10:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-08-19 23:02 - 2015-12-22 13:38 - 00003894 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1450784304
2016-08-19 23:01 - 2016-02-09 17:09 - 00453192 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetSec.sys
2016-08-19 23:01 - 2015-09-24 19:57 - 00969560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-08-19 23:01 - 2015-09-24 19:57 - 00513496 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2016-08-19 23:01 - 2015-09-24 19:57 - 00292704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2016-08-19 23:01 - 2015-09-24 19:57 - 00163416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-08-19 23:01 - 2015-09-24 19:57 - 00108816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-08-19 23:01 - 2015-09-24 19:57 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-08-19 23:01 - 2015-09-24 19:57 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-08-19 23:01 - 2015-09-24 19:57 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-08-19 23:01 - 2015-09-24 19:57 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-08-19 23:01 - 2015-09-24 19:57 - 00003922 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-08-15 06:25 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-08-15 01:58 - 2015-09-22 10:42 - 00000000 ____D C:\Windows\system32\MRT
2016-08-15 01:57 - 2015-09-22 10:42 - 147640136 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-08-15 01:54 - 2015-09-22 09:07 - 01569170 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-08-14 07:15 - 2016-02-22 17:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Core Temp
2016-08-14 07:15 - 2015-09-22 08:58 - 00000000 ____D C:\Program Files\Core Temp
2016-08-12 21:18 - 2010-11-21 11:38 - 00000000 ____D C:\Windows\ShellNew
2016-08-12 06:13 - 2015-09-22 08:58 - 00108904 _____ C:\Users\User007\AppData\Local\GDIPFONTCACHEV1.DAT
2016-08-11 22:57 - 2015-09-26 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-08-11 22:57 - 2015-09-26 13:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-08-11 22:56 - 2009-07-14 04:34 - 00000466 _____ C:\Windows\win.ini

==================== Files in the root of some directories =======

2016-06-20 18:48 - 2016-06-21 07:10 - 0000119 _____ () C:\Users\User007\AppData\Roaming\Camdata.ini
2016-06-20 18:48 - 2016-06-21 07:10 - 0000408 _____ () C:\Users\User007\AppData\Roaming\CamLayout.ini
2016-06-20 18:48 - 2016-06-21 07:10 - 0000408 _____ () C:\Users\User007\AppData\Roaming\CamShapes.ini
2016-06-20 18:47 - 2016-06-21 07:10 - 0004550 _____ () C:\Users\User007\AppData\Roaming\CamStudio.cfg
2016-05-27 19:35 - 2016-05-27 19:35 - 0000268 ___RH () C:\Users\User007\AppData\Roaming\Limiter
2016-05-27 19:35 - 2016-05-27 19:35 - 0000268 ___RH () C:\Users\User007\AppData\Roaming\Logs
2016-05-27 19:35 - 2016-05-27 19:35 - 0000268 ___RH () C:\Users\User007\AppData\Roaming\MAS
2016-05-27 19:36 - 2016-05-27 19:36 - 0003584 _____ () C:\Users\User007\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-09-22 16:12 - 2015-09-25 06:36 - 1065984 _____ () C:\Users\User007\AppData\Local\file__0.localstorage
2015-12-13 19:32 - 2015-12-13 19:32 - 0000000 ___SH () C:\Users\User007\AppData\Local\LumaEmu
2016-09-10 13:02 - 2016-09-10 13:05 - 0029696 _____ () C:\Users\User007\AppData\Local\MSGBOX.EXE
2015-10-03 08:23 - 2015-10-03 08:23 - 0000057 _____ () C:\ProgramData\Ament.ini
2016-05-27 19:35 - 2016-05-27 19:35 - 0000268 ___RH () C:\ProgramData\MIDI Devices
2016-05-27 19:35 - 2016-05-27 19:35 - 0000268 ___RH () C:\ProgramData\MIDI Drivers
2016-05-27 19:35 - 2016-05-27 19:35 - 0000268 ___RH () C:\ProgramData\MIDI Patch Names
2016-05-27 19:35 - 2016-05-28 08:47 - 0000020 ____H () C:\ProgramData\PKP_DLes.DAT
2016-05-27 19:35 - 2016-05-27 19:35 - 0000020 ____H () C:\ProgramData\PKP_DLet.DAT
2016-05-27 19:35 - 2016-05-27 19:35 - 0000020 ____H () C:\ProgramData\PKP_DLev.DAT

Some files in TEMP:
====================
C:\Users\User007\AppData\Local\Temp\DevSetup32.dll
C:\Users\User007\AppData\Local\Temp\DevSetup64.dll
C:\Users\User007\AppData\Local\Temp\DriverInstall32.exe
C:\Users\User007\AppData\Local\Temp\DriverInstall64.exe
C:\Users\User007\AppData\Local\Temp\KillProcess.exe
C:\Users\User007\AppData\Local\Temp\libeay32.dll
C:\Users\User007\AppData\Local\Temp\msvcr120.dll
C:\Users\User007\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\User007\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\User007\AppData\Local\Temp\nvStInst.exe
C:\Users\User007\AppData\Local\Temp\sfamcc00001.dll
C:\Users\User007\AppData\Local\Temp\sfareca00001.dll
C:\Users\User007\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-09-07 18:39

==================== End of FRST.txt ============================

Re: Prosím o preventivku

Napsal: 10 zář 2016 12:09
od kcobain
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-08-2016
Ran by User007 (10-09-2016 13:07:05)
Running from C:\Users\User007\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2015-09-22 06:56:28)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1792867000-701808982-2087714082-500 - Administrator - Disabled)
Guest (S-1-5-21-1792867000-701808982-2087714082-501 - Limited - Disabled)
User007 (S-1-5-21-1792867000-701808982-2087714082-1000 - Administrator - Enabled) => C:\Users\User007

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: Avast Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

3DMark (HKLM-x32\...\{12d6e0d7-21d5-4755-9da2-70352c6f7558}) (Version: 1.5.915.0 - Futuremark)
3DMark (Version: 1.5.915.0 - Futuremark) Hidden
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 15.017.20053 - Adobe Systems Incorporated)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
Aktualizace NVIDIA 2.11.4.0 (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Ansel (Version: 368.81 - NVIDIA Corporation) Hidden
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.12.0 - Asmedia Technology)
Avast Internet Security (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
CCleaner (HKLM\...\CCleaner) (Version: 5.21 - Piriform)
Core Temp 1.2 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.2 - Alcpu)
Counter-Strike 1.6 (HKU\S-1-5-21-1792867000-701808982-2087714082-1000\...\Counter-Strike 1.6) (Version: - )
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd)
Document Capture Pro (HKLM-x32\...\{C75B4983-D3A7-4D0A-8B1A-7BC4F2044F37}) (Version: 1.06.0012 - Seiko Epson Corporation)
Document Capture Pro OneNote Connector (HKLM-x32\...\{65FC2F65-FCD4-495C-B250-1F7C049E4A39}) (Version: 1.00.0000 - Seiko Epson Corporation)
Epson Copy Utility 4 (HKLM-x32\...\{06A7E8AB-2856-4490-BAA9-F338ABE7695A}) (Version: 4.01.0001 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{4B22C430-7EA8-4534-8358-376FD900B953}) (Version: 3.10.0042 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
FastStone Image Viewer 5.8 (HKLM-x32\...\FastStone Image Viewer) (Version: 5.8 - FastStone Soft)
Futuremark SystemInfo (HKLM-x32\...\{185D7B00-8600-4716-A619-D8CBE689974B}) (Version: 4.40.560.0 - Futuremark)
Grand Theft Auto V Update (HKLM-x32\...\R3JhbmRUaGVmdEF1dG9W_is1) (Version: 1 - )
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.1.1000 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.34 - Intel Corporation)
Intel® CCF Manager (HKLM-x32\...\{0f3d8dd5-54af-4404-a01c-4967e485a065}) (Version: 3.0.13.2211 - Intel Corporation)
Intel® Chipset Device Software (x32 Version: 10.0.20 - Intel(R) Corporation) Hidden
IT9130 Driver v12.2.3.1 (HKLM-x32\...\IT9130 DriverInstaller_12.2.3.1) (Version: - )
K-Lite Mega Codec Pack 11.8.0 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 11.8.0 - )
Microsoft .NET Framework 4.5.2 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 48.0.2 (x86 cs) (HKLM-x32\...\Mozilla Firefox 48.0.2 (x86 cs)) (Version: 48.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 48.0.2.6079 - Mozilla)
MSI Afterburner 4.1.1 (HKLM-x32\...\Afterburner) (Version: 4.1.1 - MSI Co., LTD)
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.1.0 - Nikon)
Nikon Movie Editor (HKLM-x32\...\{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}) (Version: 2.9.0 - Nikon)
NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)
NVIDIA Ovladač 3D Vision 368.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 368.81 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 368.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 368.81 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
Ovládací panel NVIDIA 368.81 (Version: 368.81 - NVIDIA Corporation) Hidden
Picture Control Utility x64 (HKLM\...\{11953C65-BB4E-4CA4-B0F0-2600A4B20040}) (Version: 1.5.0 - Nikon)
Rajče průvodce verze 1.59.54.269 (HKLM-x32\...\rajce.net_is1) (Version: - rajce.net)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7293 - Realtek Semiconductor Corp.)
Return To Castle Wolfenstein - Extended Edition verze 1.42 (HKLM-x32\...\{407493AC-A8C0-4599-B223-C831F655CC9A}_is1) (Version: 1.42 - )
RivaTuner Statistics Server 6.3.0 (HKLM-x32\...\RTSS) (Version: 6.3.0 - Unwinder)
SafeZone Stable 1.51.2220.53 (x32 Version: 1.51.2220.53 - Avast Software) Hidden
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Snagit 12 (HKLM-x32\...\{ec29af82-9c9e-420e-ab18-53821c36ac3c}) (Version: 12.4.1.3036 - TechSmith Corporation)
Snagit 12 (x32 Version: 12.4.1 - TechSmith Corporation) Hidden
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
STCServ (Version: 3.0.0.1783 - Intel Corporation) Hidden
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.0 beta 22 - Ghisler Software GmbH)
Unigine Valley Benchmark version 1.0 (HKLM-x32\...\Unigine Valley Benchmark_is1) (Version: 1.0 - Unigine Corp.)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
ViewNX 2 (HKLM\...\{635BE602-BB9C-4C59-8CC5-93F9366E8A21}) (Version: 2.9.0 - Nikon)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
Weather Capture Advance (HKLM-x32\...\{E10017D0-CDC3-4205-87F8-B1AC58124DE9}_is1) (Version: - )
Web Components (HKLM-x32\...\{03B13AF8-9625-478A-AF0E-205337B9415A}_is1) (Version: - )
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
WinRAR 5.30 beta 4 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.30.4 - win.rar GmbH)
World of Tanks (HKU\S-1-5-21-1792867000-701808982-2087714082-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812eu}_is1) (Version: - Wargaming.net)
WsWin V2.98.4 - 2016-03-24 (HKLM-x32\...\PC-Wetterstation_is1) (Version: 2.98.4 - Werner Krenn)
Základní software zařízení HP Officejet Pro 8100 (HKLM\...\{6F19CF85-371F-439C-A97B-35269F9A882B}) (Version: 28.0.1321.0 - Hewlett-Packard Co.)
Zoner Photo Studio 18 (HKLM\...\ZonerPhotoStudio18_CZ_is1) (Version: 18.0.1.4 - ZONER software)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1375FFD9-4CCC-4E0C-A935-177E8AD40264} - System32\Tasks\Core Temp Autostart User007 => C:\Program Files\Core Temp\Core Temp.exe [2016-08-13] ()
Task: {44FB0ACC-3D0A-4D19-83EF-87D9BFDA6D25} - System32\Tasks\KiN_SF => C:\Program Files (x86)\SpeedFan\speedfan.exe [2015-02-20] (Almico Software (almico.com))
Task: {47160CF0-5683-4379-A777-CB3E2179431A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-06-25] (Adobe Systems Incorporated)
Task: {4C7797AF-EE00-43DD-AA71-E71EB9B65E17} - System32\Tasks\HP Officejet Pro 8100.exe_{5FCF9ACD-299A-44AE-A2C5-80D7339CEA1F} => C:\Program Files\HP\HP Officejet Pro 8100\Bin\HP Officejet Pro 8100.exe [2012-11-01] (Hewlett-Packard Co.)
Task: {4E694AE1-785B-4845-850B-2A2B45E829BE} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-06-02] (AVAST Software)
Task: {7C3E3579-904F-4382-9D92-FAE495A3241E} - System32\Tasks\AdobeAAMUpdater-1.0-User007-PC-User007 => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-08-05] (Adobe Systems Incorporated)
Task: {8F2B9F96-FC0C-40B7-9FD0-30268B5A145A} - System32\Tasks\IntelBootstrapCCDashExe => C:\Program Files\Intel\ConnectCenter\bin\ICCLauncher.exe [2015-03-16] (Intel® Corporation)
Task: {9EBA1AC0-8A8B-4D1F-AFFE-6F2CD74AE604} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-08-19] (AVAST Software)
Task: {B2F96508-31C5-40C4-B871-FCBE698D8552} - System32\Tasks\TechSmith Updater => C:\Program Files (x86)\Common Files\TechSmith Shared\Updater\TSCUpdClt.exe [2015-08-11] (TechSmith Corporation)
Task: {B4F7AA4C-6A6A-458A-9D23-56CA9AF620AC} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2015-05-27] ()
Task: {D6E987A0-17AF-43EE-9C40-FD66C679B841} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-08-05] (Piriform Ltd)
Task: {DA9BF403-4F5A-45F7-944D-2A64BA7AA1B9} - System32\Tasks\SafeZone scheduled Autoupdate 1450784304 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-08-09] (Avast Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\User007\AppData\Local\Microsoft\Windows\GameExplorer\{F095DBF4-FC21-4DFF-AD8C-06975683B2A8}\SupportTasks\1\Podpora.lnk -> hxxp://www.activision.com/
Shortcut: C:\Users\User007\AppData\Local\Microsoft\Windows\GameExplorer\{F095DBF4-FC21-4DFF-AD8C-06975683B2A8}\SupportTasks\0\Další hry od společnosti Microsoft.lnk -> hxxp://www.activision.com/games/wolfenstein/

==================== Loaded Modules (Whitelisted) ==============

2016-07-02 09:21 - 2016-07-11 01:17 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-07-02 09:21 - 2016-06-14 22:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-07-02 09:21 - 2016-06-14 22:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-07-02 09:21 - 2016-06-14 22:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-07-02 09:21 - 2016-06-14 22:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-07-02 09:21 - 2016-06-14 22:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-07-02 09:21 - 2016-06-14 22:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-07-02 09:21 - 2016-06-14 22:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-07-02 09:21 - 2016-06-14 22:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-08-05 18:52 - 2016-08-05 18:52 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1029.dll
2016-07-02 09:21 - 2016-06-14 22:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-07-02 09:21 - 2016-06-14 22:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2015-09-22 08:58 - 2016-08-13 20:59 - 00924136 _____ () C:\Program Files\Core Temp\Core Temp.exe
2016-08-19 23:01 - 2016-08-19 23:01 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-09-09 18:09 - 2016-09-09 18:09 - 03084464 _____ () C:\Program Files\AVAST Software\Avast\defs\16090901\algo.dll
2016-08-19 23:01 - 2016-08-19 23:01 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-09-10 12:59 - 2016-09-10 12:59 - 03085488 _____ () C:\Program Files\AVAST Software\Avast\defs\16091000\algo.dll
2016-07-02 09:21 - 2016-06-14 22:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-06-23 19:57 - 2016-06-23 19:57 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-08-21 21:28 - 2016-09-10 12:58 - 00158720 _____ () C:\Users\User007\AppData\Local\Temp\sfareca00001.dll
2015-09-22 09:03 - 2016-09-10 12:58 - 00192512 _____ () C:\Users\User007\AppData\Local\Temp\sfamcc00001.dll
2014-04-03 16:48 - 2014-04-03 16:48 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2015-11-17 19:36 - 00001134 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 lmlicenses.wip4.adobe.com
127.0.0.1 lm.licenses.adobe.com
127.0.0.1 na1r.services.adobe.com
127.0.0.1 hlrcv.stage.adobe.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1792867000-701808982-2087714082-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TMMonitor.lnk => C:\Windows\pss\TMMonitor.lnk.CommonStartup
MSCONFIG\startupreg: DAEMON Tools Lite Automount => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{87E2F74F-0F18-4B5D-8A38-323D31772E89}] => (Allow) C:\Games\World_of_Tanks\WoTLauncher.exe
FirewallRules: [{F000F82C-F949-4CD8-8373-7641AF1DAAA1}] => (Allow) C:\Games\World_of_Tanks\WorldofTanks.exe
FirewallRules: [{23628B39-DC41-4BA7-886D-99FDFFCF738B}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{871F5D72-FC70-4A9E-8B93-7633B92829BD}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{D3691A34-BB19-43AD-BE83-49F52530EC83}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{167C5C36-E54B-41BC-BE4B-98132010F244}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{41FCCE12-4823-4DB7-B680-A02D472D0396}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8100\Bin\DeviceSetup.exe
FirewallRules: [{B6CA01F2-0DE5-4D21-8C44-C84BCED6E5E0}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8100\Bin\HPNetworkCommunicator.exe
FirewallRules: [{C1D87D35-04B4-46B6-B6AF-BEFC3E95CF4D}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8100\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{98A0C909-01AA-432F-BB02-401224425D29}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [{76B25A44-F90C-45E5-B5F2-5E5D9466F910}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [{8DB41A56-8D1D-410D-9934-2AFD1062A818}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{81CFEC21-8B87-402B-A8D6-5D2D31D18F07}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{AC9DCB91-A046-4402-97B3-FD7868188810}] => (Allow) C:\Program Files\Zoner\Photo Studio 18\Program32\MediaServer.exe
FirewallRules: [{62C31B6A-31BD-479A-BF25-AA2DD51FE453}] => (Allow) C:\Program Files\Intel\STCServ\STCServ.exe
FirewallRules: [{512AD00A-E821-426A-B093-DC979B701372}] => (Allow) C:\Program Files\Intel\STCServ\STCServ.exe
FirewallRules: [{77185F73-2BA3-4E82-AA67-1A3B8D4E00B4}] => (Allow) C:\Program Files\Intel\STCServ\STCServ.exe
FirewallRules: [{0FAFABE2-A595-4BFD-99C4-4F55AAA3DB93}] => (Allow) LPort=8298
FirewallRules: [{40811776-D822-4F18-A645-FAAF37696C4D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{C07E92E0-F495-4C1A-90B7-FBFAB67F4FA1}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4284F04E-7569-41EF-A9E1-BCD71B5598ED}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{876BEB6F-3D15-4CD0-B5B2-6FAC53090F69}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{200D95B5-4647-417D-B112-16BE9093C9FC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{51073CA6-333C-4FA2-8827-20A9DB08C2C7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{FAE67CC3-5BAE-4B5D-8DAE-EAD4A6FBB14A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{6A12AAAF-C90C-48F6-9349-4987271A9D6E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{986BF09C-4DEB-4073-A4C1-6F44117FD421}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F695587B-C98F-4101-8EA7-429112F4036A}] => (Allow) D:\HRY\Grand Theft Auto V\GTA5.exe
FirewallRules: [{6F8D355D-BED6-448C-BEE2-D0C20FFEE74C}] => (Allow) D:\HRY\Grand Theft Auto V\GTA5.exe

==================== Restore Points =========================

20-08-2016 14:23:03 Windows Update
21-08-2016 16:06:16 Windows Update
04-09-2016 17:01:22 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices =============

Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/10/2016 12:58:30 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (09/10/2016 08:35:25 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Problém zabránil odeslání dat programu Zlepšování softwaru a služeb na základě zkušeností uživatelů společnosti Microsoft, (chyba 80004005).

Error: (09/10/2016 07:34:19 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (09/10/2016 12:47:46 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro c:\Users\User007\AppData\Local\Temp\drivers\IT9130\IA64\DPInst.exe se nezdařilo.
Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (09/09/2016 09:42:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (09/09/2016 09:23:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (09/09/2016 03:20:51 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro c:\Users\User007\AppData\Local\Temp\drivers\IT9130\IA64\DPInst.exe se nezdařilo.
Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (09/09/2016 02:39:15 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Problém zabránil odeslání dat programu Zlepšování softwaru a služeb na základě zkušeností uživatelů společnosti Microsoft, (chyba 80004005).

Error: (09/09/2016 02:07:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (09/09/2016 06:22:02 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.


System errors:
=============
Error: (09/10/2016 12:58:29 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
cdrom

Error: (09/10/2016 07:34:19 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
cdrom

Error: (09/09/2016 09:42:52 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
cdrom

Error: (09/09/2016 09:42:08 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Dynamic Application Loader Host Interface Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (09/09/2016 09:42:08 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Rapid Storage Technology byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (09/09/2016 09:42:08 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Common Connectivity Framework byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (09/09/2016 09:42:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Windows Media Player Network Sharing byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (09/09/2016 09:42:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (09/09/2016 09:42:08 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Disc Soft Lite Bus Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (09/09/2016 09:42:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba NVIDIA Streamer Network Service byla neočekávaně ukončena. Tento stav nastal již 1krát.


CodeIntegrity:
===================================
Date: 2016-07-29 18:19:53.070
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-29 18:19:43.084
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-29 18:19:42.866
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-26 14:14:37.294
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-26 14:13:53.147
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-26 14:13:52.960
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-25 22:49:41.137
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-25 22:49:22.209
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-25 22:49:21.975
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-24 22:09:26.401
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-4690K CPU @ 3.50GHz
Percentage of memory in use: 24%
Total physical RAM: 8142.47 MB
Available physical RAM: 6126.3 MB
Total Virtual: 16332.65 MB
Available Virtual: 14186.45 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:238.47 GB) (Free:166.66 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:931.51 GB) (Free:353.74 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 46DA0BFB)
Partition 1: (Active) - (Size=238.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 4D1629CF)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Re: Prosím o preventivku

Napsal: 10 zář 2016 15:08
od Márty84
:arrow: Napiste mi velikost adresare plochy (C:\Users\User007\Plocha)



:arrow: Otevrete si poznamkovy blok a zkopirujte do nej tento skript

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation)
HKU\S-1-5-21-1792867000-701808982-2087714082-1000\...\Run: [World of Tanks] => C:\Games\World_of_Tanks\WargamingGameUpdater.exe [3134728 2016-08-05] (Wargaming.net)
HKU\S-1-5-21-1792867000-701808982-2087714082-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)

R3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-06-25 82128]

2016-09-09 21:44 - 2016-09-09 21:44 - 00000000 ____D C:\ProgramData\Malwarebytes

DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite Automount
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TMMonitor.lnk

Hosts:
EmptyTemp:
Reboot:
End
Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev fixlist a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte FRST jako spravce, kliknete na napis Fix a program vykona prikazy.
Po restartu pc by se mel objevit novy log - s nazvem fixlog, ten mi sem zase zkopirujte.

Re: Prosím o preventivku

Napsal: 10 zář 2016 16:13
od kcobain
Ad 1 : plocha má velikost 18 MB

Ad 2 : log přikládám:

Fix result of Farbar Recovery Scan Tool (x64) Version: 31-08-2016
Ran by User007 (10-09-2016 17:10:28) Run:1
Running from C:\Users\User007\Desktop
Loaded Profiles: User007 (Available Profiles: User007)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation)
HKU\S-1-5-21-1792867000-701808982-2087714082-1000\...\Run: [World of Tanks] => C:\Games\World_of_Tanks\WargamingGameUpdater.exe [3134728 2016-08-05] (Wargaming.net)
HKU\S-1-5-21-1792867000-701808982-2087714082-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)

R3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-06-25 82128]

2016-09-09 21:44 - 2016-09-09 21:44 - 00000000 ____D C:\ProgramData\Malwarebytes

DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite Automount
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TMMonitor.lnk

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\HP Software Update => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Nikon Message Center 2 => value removed successfully
HKU\S-1-5-21-1792867000-701808982-2087714082-1000\Software\Microsoft\Windows\CurrentVersion\Run\\World of Tanks => value removed successfully
HKU\S-1-5-21-1792867000-701808982-2087714082-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite Automount => value removed successfully
MBAMSwissArmy => Service stopped successfully.
MBAMSwissArmy => service removed successfully
AdobeARMservice => service removed successfully
C:\ProgramData\Malwarebytes => moved successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite Automount => key removed successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TMMonitor.lnk => key removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 6748390 B
Java, Flash, Steam htmlcache => 29947771 B
Windows/system/drivers => 53513068 B
Edge => 0 B
Chrome => 0 B
Firefox => 372942201 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 66356 B
systemprofile32 => 66228 B
LocalService => 0 B
NetworkService => 0 B
User007 => 387183287 B

RecycleBin => 15871 B
EmptyTemp: => 819.1 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 17:10:39 ====

Re: Prosím o preventivku

Napsal: 11 zář 2016 00:58
od Márty84
:!: Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

:arrow:
vyosek píše: :arrow: DelFix https://toolslib.net/downloads/finish/2/
  • Stahnete a spustte
  • Ponechte zatrzitkou pouze u volby Remove disinfection tools
  • Kliknete na Run
:arrow: Stahnete Ccleaner http://www.filehippo.com/download_ccleaner a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!
(Pokud je v pc vice uzivatelskych uctu, pouzijte program i v nich)

:arrow: Defragmentujte disk(y) (SSD Disky ne!)
Stahnete program Defraggler https://www.piriform.com/defraggler/download/standard
Pri instalaci opet pozor na toolbar a dalsi nesmysly.
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.




:arrow: Pak napiste, jak to s pc vypada.

Re: Prosím o preventivku

Napsal: 11 zář 2016 15:06
od kcobain
Tak vše provedeno, jen defragmentace trvala moc dlouho, bylo tam toho moc. Zatím to vypadá velcie dobře, prohlížeč je svižný systém naběhl raz dva. Tak hlavně že tam není nějaká škodná :).

Pokud je to z vaší strany vše, děkuji za váš čas a rady a přeju hezký zbytek neděle :)

:fez:

Re: Prosím o preventivku

Napsal: 11 zář 2016 17:46
od Márty84
Skodna tam neni a logy jsou ciste, takze pokud neni zadny problem, je to vse ;-)

Nemate zac! :)

Mejte se a treba zase nekdy :bye:

:closed: