VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Avast opakovaně detekuje Win32:Malware-gen v C:\Windows\

https://forum.viry.cz:443/viewtopic.php?t=152290

Stránka 1 z 1

Avast opakovaně detekuje Win32:Malware-gen v C:\Windows\

Napsal: 08 čer 2017 14:50
od Moron
Dobrý den, prosím o pomoc a přikládam RSIT log. Na počítači co 10 vteřin vyskakuje okno o zachycení infekce Win32:Malware-gen Avastem v souboru C:\Windows\Tempmf364043343.exe. Test Avastem po restartu nic neřeší, kontrolováno Eset online skenerem, Malwarebytes, Eset smart security bez nálezu. Avg free tento soubor také detekuje. Combofix po 5 minutách běhu končí BSOD IRQ is not equal or less i v nouzovém režimu.

Děkuji

Logfile of random's system information tool 1.10 (written by random/random)
Run by OÚ Choust at 2017-06-08 11:04:09
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 67 GB (88%) free of 76 GB
Total RAM: 958 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:04:15, on 8.6.2017
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Intel\OpenCL\bin\x86\clang_compiler32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\VISO\UltracPAS.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\OÚ Choust\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\OÚ Choust.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Rozhlas.lnk = C:\VISO\UltracPAS.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3433D0F9-74A5-4C22-AD0E-1F544E2830BE}: NameServer = 192.168.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{3433D0F9-74A5-4C22-AD0E-1F544E2830BE}: NameServer = 192.168.0.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{3433D0F9-74A5-4C22-AD0E-1F544E2830BE}: NameServer = 192.168.0.1
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Network Connection (Netmans) - Unknown owner - C:\Program Files\K-Lite Codec Pack\Filters\LAV\LAVAudio.exe
O23 - Service: PEVSystemStart - Unknown owner - C:\ComboFix\pev.3XE

--
End of file - 4178 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\Avast Emergency Update.job - C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job - C:\WINDOWS\system32\xp_eos.exe
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job - C:\WINDOWS\system32\xp_eos.exe -c

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\OÚ Choust\Data aplikací\Mozilla\Firefox\Profiles\1tzxh5ex.default

prefs.js - "browser.startup.homepage" - "http://www.volny.cz/"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.205 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_23_0_0_205.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


C:\Documents and Settings\OÚ Choust\Data aplikací\Mozilla\Firefox\Profiles\1tzxh5ex.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-19 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-19 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2017-06-07 213824]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2015-02-19 5503768]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-05-08 959904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"TeamViewer8"=2
"MozillaMaintenance"=3
"gusvc"=3
"gupdatem"=3
"gupdate"=2

C:\Documents and Settings\OÚ Choust\Nabídka Start\Programy\Po spuštění
Rozhlas.lnk - C:\VISO\UltracPAS.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\VISO\UltracPAS.exe"="C:\VISO\UltracPAS.exe:*:Enabled:UltracPAS - připojení rozhlasu"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"C:\Documents and Settings\OÚ Choust\Data aplikací\Dropbox\bin\Dropbox.exe"="C:\Documents and Settings\OÚ Choust\Data aplikací\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox"
"C:\Program Files\TeamViewer\Version8\TeamViewer.exe"="C:\Program Files\TeamViewer\Version8\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (C:\Program Files\Mozilla Firefox)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======List of files/folders created in the last 1 month======

2017-06-08 11:04:09 ----D---- C:\rsit
2017-06-08 11:04:09 ----D---- C:\Program Files\trend micro
2017-06-08 10:57:42 ----A---- C:\WINDOWS\zip.exe
2017-06-08 10:57:42 ----A---- C:\WINDOWS\SWXCACLS.exe
2017-06-08 10:57:42 ----A---- C:\WINDOWS\SWSC.exe
2017-06-08 10:57:42 ----A---- C:\WINDOWS\SWREG.exe
2017-06-08 10:57:42 ----A---- C:\WINDOWS\sed.exe
2017-06-08 10:57:42 ----A---- C:\WINDOWS\PEV.exe
2017-06-08 10:57:42 ----A---- C:\WINDOWS\NIRCMD.exe
2017-06-08 10:57:42 ----A---- C:\WINDOWS\MBR.exe
2017-06-08 10:57:42 ----A---- C:\WINDOWS\grep.exe
2017-06-08 10:57:38 ----SD---- C:\ComboFix
2017-06-08 10:48:12 ----A---- C:\WINDOWS\ntbtlog.txt
2017-06-07 23:30:31 ----SHD---- C:\WINDOWS\CSC
2017-06-07 16:04:08 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\AVAST Software
2017-06-07 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2017-06-07 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswstmxp.sys
2017-06-07 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2017-06-07 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2017-06-07 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2017-06-07 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2017-06-07 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2017-06-07 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2017-06-07 16:01:37 ----A---- C:\WINDOWS\system32\aswBoot.exe
2017-06-07 15:41:59 ----SHD---- C:\Config.Msi
2017-06-07 15:28:43 ----N---- C:\WINDOWS\trz232.tmp
2017-06-07 14:34:37 ----N---- C:\WINDOWS\trz22E.tmp
2017-06-07 14:16:04 ----D---- C:\Program Files\AVG
2017-06-07 14:14:41 ----HD---- C:\Documents and Settings\All Users\Data aplikací\Common Files
2017-06-07 14:14:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avg
2017-06-07 12:04:58 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\Google
2017-05-30 10:38:50 ----D---- C:\Qoobox
2017-05-30 10:38:12 ----D---- C:\WINDOWS\erdnt
2017-05-29 13:39:37 ----D---- C:\WINDOWS\system32\xircom
2017-05-29 13:04:38 ----D---- C:\WINDOWS\WinSxS
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Web
2017-05-29 13:04:38 ----D---- C:\WINDOWS\twain_32
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Temp
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\wins
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\wbem
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\usmt
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\spool
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\ShellExt
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\Setup
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\ras
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\oobe
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\npp
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\mui
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\inetsrv
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\IME
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\icsxml
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\ias
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\export
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\drivers\etc
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\drivers\disdn
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\drivers
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\dllcache
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\dhcp
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\config
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\3com_dmi
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\3076
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\2052
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1054
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1042
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1041
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1037
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1033
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1031
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1029
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1028
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1025
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system
2017-05-29 13:04:38 ----D---- C:\WINDOWS\security
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Resources
2017-05-29 13:04:38 ----D---- C:\WINDOWS\repair
2017-05-29 13:04:38 ----D---- C:\WINDOWS\mui
2017-05-29 13:04:38 ----D---- C:\WINDOWS\msapps
2017-05-29 13:04:38 ----D---- C:\WINDOWS\msagent
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Media
2017-05-29 13:04:38 ----D---- C:\WINDOWS\java
2017-05-29 13:04:38 ----D---- C:\WINDOWS\inf
2017-05-29 13:04:38 ----D---- C:\WINDOWS\ime
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Help
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Fonts
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Driver Cache
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Debug
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Cursors
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Connection Wizard
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Config
2017-05-29 13:04:38 ----D---- C:\WINDOWS\AppPatch
2017-05-29 13:04:38 ----D---- C:\WINDOWS\addins
2017-05-29 13:04:38 ----D---- C:\WINDOWS
2017-05-29 13:04:38 ----ASH---- C:\pagefile.sys
2017-05-29 12:28:15 ----A---- C:\NTDETECT.COM
2017-05-29 12:28:15 ----A---- C:\MSDOS.SYS
2017-05-29 12:28:15 ----A---- C:\IO.SYS
2017-05-29 12:28:15 ----A---- C:\CONFIG.SYS
2017-05-29 12:28:14 ----A---- C:\boot.ini
2017-05-29 12:28:14 ----A---- C:\AUTOEXEC.BAT
2017-05-29 11:55:50 ----D---- C:\Zaloha
2017-05-29 11:55:50 ----A---- C:\WINDOWS\winhlp32.exe
2017-05-29 11:55:50 ----A---- C:\WINDOWS\WINCMD.INI
2017-05-29 11:55:50 ----A---- C:\WINDOWS\vbaddin.ini
2017-05-29 11:55:49 ----A---- C:\WINDOWS\vb.ini
2017-05-29 11:55:49 ----A---- C:\WINDOWS\ucrtbase.dll
2017-05-29 11:55:48 ----A---- C:\WINDOWS\tcburner.ini
2017-05-29 11:55:48 ----A---- C:\WINDOWS\TASKMAN.EXE
2017-05-29 11:55:48 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2017-05-29 11:55:48 ----A---- C:\WINDOWS\smscfg.ini
2017-05-29 11:55:48 ----A---- C:\WINDOWS\slrundll.exe
2017-05-29 11:55:48 ----A---- C:\WINDOWS\SchedLgU.Txt
2017-05-29 11:55:48 ----A---- C:\WINDOWS\ODBCINST.INI
2017-05-29 11:55:48 ----A---- C:\WINDOWS\notepad.exe
2017-05-29 11:55:48 ----A---- C:\WINDOWS\IsUninst.exe
2017-05-29 11:55:47 ----A---- C:\WINDOWS\desktop.ini
2017-05-29 11:55:47 ----A---- C:\WINDOWS\control.ini
2017-05-29 11:55:47 ----A---- C:\WINDOWS\bootstat.dat
2017-05-29 11:55:47 ----A---- C:\WINDOWS\avastSS.scr
2017-05-29 11:55:34 ----D---- C:\WINDOWS\WBEM
2017-05-29 11:55:33 ----D---- C:\WINDOWS\Tasks
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\zipfldr.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xpssvcs.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xpsshhdr.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xpsp4res.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xpsp3res.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xpsp2res.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xpsp1res.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xpob2res.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xp_eos.exe
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xolehlp.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xmlprovi.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xmlprov.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xmllite.dll
2017-05-29 11:55:32 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2017-05-29 11:55:32 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2017-05-29 11:55:32 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2017-05-29 11:55:32 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2017-05-29 11:55:32 ----A---- C:\WINDOWS\system32\xenroll.dll
2017-05-29 11:55:32 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2017-05-29 11:55:32 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2017-05-29 11:55:32 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2017-05-29 11:55:31 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2017-05-29 11:55:31 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2017-05-29 11:55:31 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2017-05-29 11:55:31 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2017-05-29 11:55:31 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2017-05-29 11:55:30 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2017-05-29 11:55:30 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2017-05-29 11:55:30 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2017-05-29 11:55:29 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2017-05-29 11:55:29 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2017-05-29 11:55:29 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2017-05-29 11:55:29 ----A---- C:\WINDOWS\system32\xactsrv.dll
2017-05-29 11:55:29 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2017-05-29 11:55:29 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2017-05-29 11:55:29 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2017-05-29 11:55:28 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2017-05-29 11:55:28 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2017-05-29 11:55:28 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2017-05-29 11:55:28 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2017-05-29 11:55:28 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2017-05-29 11:55:28 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2017-05-29 11:55:27 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2017-05-29 11:55:27 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2017-05-29 11:55:27 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2017-05-29 11:55:27 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2017-05-29 11:55:27 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2017-05-29 11:55:26 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2017-05-29 11:55:26 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2017-05-29 11:55:26 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2017-05-29 11:55:26 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2017-05-29 11:55:25 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2017-05-29 11:55:25 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2017-05-29 11:55:25 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2017-05-29 11:55:25 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2017-05-29 11:55:25 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2017-05-29 11:55:25 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wzcsvc.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wzcsapi.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wzcdlg.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wuweb.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wups2.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wups.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wucltui.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wuauserv.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2017-05-29 11:55:23 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-05-29 11:55:23 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2017-05-29 11:55:23 ----A---- C:\WINDOWS\system32\wuauclt.exe
2017-05-29 11:55:23 ----A---- C:\WINDOWS\system32\wuapi.dll
2017-05-29 11:55:23 ----A---- C:\WINDOWS\system32\wsnmp32.dll
2017-05-29 11:55:22 ----A---- C:\WINDOWS\system32\wship6.dll
2017-05-29 11:55:22 ----A---- C:\WINDOWS\system32\wshbth.dll
2017-05-29 11:55:22 ----A---- C:\WINDOWS\system32\wsecedit.dll
2017-05-29 11:55:22 ----A---- C:\WINDOWS\system32\wscsvc.dll
2017-05-29 11:55:22 ----A---- C:\WINDOWS\system32\wscntfy.exe
2017-05-29 11:55:22 ----A---- C:\WINDOWS\system32\write.exe
2017-05-29 11:55:22 ----A---- C:\WINDOWS\system32\wpa.bak
2017-05-29 11:55:21 ----A---- C:\WINDOWS\system32\wmvdmoe2.dll
2017-05-29 11:55:21 ----A---- C:\WINDOWS\system32\wmvdmod.dll
2017-05-29 11:55:21 ----A---- C:\WINDOWS\system32\wmstream.dll
2017-05-29 11:55:21 ----A---- C:\WINDOWS\system32\wmspdmoe.dll
2017-05-29 11:55:21 ----A---- C:\WINDOWS\system32\wmspdmod.dll
2017-05-29 11:55:21 ----A---- C:\WINDOWS\system32\wmsdmoe2.dll
2017-05-29 11:55:21 ----A---- C:\WINDOWS\system32\wmsdmoe.dll
2017-05-29 11:55:21 ----A---- C:\WINDOWS\system32\wmsdmod.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmpui.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmphoto.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmpcd.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmpasf.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmp.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\WMNetmgr.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmidx.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmerror.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmadmoe.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmadmod.dll
2017-05-29 11:55:19 ----A---- C:\WINDOWS\system32\wlanapi.dll
2017-05-29 11:55:19 ----A---- C:\WINDOWS\system32\winshfhc.dll
2017-05-29 11:55:19 ----A---- C:\WINDOWS\system32\winmine.exe
2017-05-29 11:55:18 ----A---- C:\WINDOWS\system32\winchat.exe
2017-05-29 11:55:18 ----A---- C:\WINDOWS\system32\winhttp.dll
2017-05-29 11:55:18 ----A---- C:\WINDOWS\system32\WinFXDocObj.exe
2017-05-29 11:55:18 ----A---- C:\WINDOWS\system32\windowscodecsext.dll
2017-05-29 11:55:18 ----A---- C:\WINDOWS\system32\windowscodecs.dll
2017-05-29 11:55:18 ----A---- C:\WINDOWS\system32\winbrand.dll
2017-05-29 11:55:17 ----A---- C:\WINDOWS\system32\wiaservc.dll
2017-05-29 11:55:17 ----A---- C:\WINDOWS\system32\wiadss.dll
2017-05-29 11:55:17 ----A---- C:\WINDOWS\system32\WgaTray.exe
2017-05-29 11:55:17 ----A---- C:\WINDOWS\system32\WgaLogon.dll
2017-05-29 11:55:17 ----A---- C:\WINDOWS\system32\wextract.exe
2017-05-29 11:55:17 ----A---- C:\WINDOWS\system32\webvw.dll
2017-05-29 11:55:16 ----A---- C:\WINDOWS\system32\w3ssl.dll
2017-05-29 11:55:15 ----A---- C:\WINDOWS\system32\VTuninst.exe
2017-05-29 11:55:15 ----A---- C:\WINDOWS\system32\VTTrayp.exe
2017-05-29 11:55:15 ----A---- C:\WINDOWS\system32\VTTimer.exe
2017-05-29 11:55:15 ----A---- C:\WINDOWS\system32\VTovrlay.dll
2017-05-29 11:55:15 ----A---- C:\WINDOWS\system32\VTInfo2.dll
2017-05-29 11:55:14 ----A---- C:\WINDOWS\system32\vticd.dll
2017-05-29 11:55:14 ----A---- C:\WINDOWS\system32\VTGamma2.dll
2017-05-29 11:55:14 ----A---- C:\WINDOWS\system32\VTDisply.dll
2017-05-29 11:55:13 ----A---- C:\WINDOWS\system32\vtdisp.dll
2017-05-29 11:55:13 ----A---- C:\WINDOWS\system32\VModes.exe
2017-05-29 11:55:12 ----A---- C:\WINDOWS\system32\verclsid.exe
2017-05-29 11:55:12 ----A---- C:\WINDOWS\system32\vdmredir.dll
2017-05-29 11:55:12 ----A---- C:\WINDOWS\system32\vbscript.dll
2017-05-29 11:55:12 ----A---- C:\WINDOWS\system32\utilman.exe
2017-05-29 11:55:10 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2017-05-29 11:55:09 ----A---- C:\WINDOWS\system32\usp10.dll
2017-05-29 11:55:09 ----A---- C:\WINDOWS\system32\usbui.dll
2017-05-29 11:55:09 ----A---- C:\WINDOWS\system32\ups.exe
2017-05-29 11:55:08 ----A---- C:\WINDOWS\system32\upnpui.dll
2017-05-29 11:55:08 ----A---- C:\WINDOWS\system32\upnphost.dll
2017-05-29 11:55:08 ----A---- C:\WINDOWS\system32\upnp.dll
2017-05-29 11:55:08 ----A---- C:\WINDOWS\system32\untfs.dll
2017-05-29 11:55:08 ----A---- C:\WINDOWS\system32\umandlg.dll
2017-05-29 11:55:08 ----A---- C:\WINDOWS\system32\uiautomationcore.dll
2017-05-29 11:55:08 ----A---- C:\WINDOWS\system32\udhisapi.dll
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tzchange.exe
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\twext.dll
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tspkg.dll
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tslabels.ini
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tskill.exe
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tsgqec.dll
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tscon.exe
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tracert.exe
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tracerpt.exe
2017-05-29 11:55:06 ----A---- C:\WINDOWS\system32\tlntsvrp.dll
2017-05-29 11:55:06 ----A---- C:\WINDOWS\system32\tlntsvr.exe
2017-05-29 11:55:06 ----A---- C:\WINDOWS\system32\tlntsess.exe
2017-05-29 11:55:06 ----A---- C:\WINDOWS\system32\tlntadmn.exe
2017-05-29 11:55:06 ----A---- C:\WINDOWS\system32\termsrv.dll
2017-05-29 11:55:06 ----A---- C:\WINDOWS\system32\telnet.exe
2017-05-29 11:55:05 ----A---- C:\WINDOWS\system32\taskmgr.exe
2017-05-29 11:55:05 ----A---- C:\WINDOWS\system32\tapisrv.dll
2017-05-29 11:55:04 ----A---- C:\WINDOWS\system32\strmfilt.dll
2017-05-29 11:55:04 ----A---- C:\WINDOWS\system32\storprop.dll
2017-05-29 11:55:04 ----A---- C:\WINDOWS\system32\stclient.dll
2017-05-29 11:55:03 ----A---- C:\WINDOWS\system32\srsvc.dll
2017-05-29 11:55:03 ----A---- C:\WINDOWS\system32\srrstr.dll
2017-05-29 11:55:03 ----A---- C:\WINDOWS\system32\srclient.dll
2017-05-29 11:55:02 ----A---- C:\WINDOWS\system32\spxcoins.dll
2017-05-29 11:55:02 ----A---- C:\WINDOWS\system32\spupdwxp.exe
2017-05-29 11:55:02 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2017-05-29 11:55:01 ----N---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2017-05-29 11:55:01 ----A---- C:\WINDOWS\system32\spnpinst.exe
2017-05-29 11:55:01 ----A---- C:\WINDOWS\system32\spmsg.dll
2017-05-29 11:55:01 ----A---- C:\WINDOWS\system32\spider.exe
2017-05-29 11:55:01 ----A---- C:\WINDOWS\system32\spdwnwxp.exe
2017-05-29 11:55:01 ----A---- C:\WINDOWS\system32\sol.exe
2017-05-29 11:55:01 ----A---- C:\WINDOWS\system32\sndvol32.exe
2017-05-29 11:55:01 ----A---- C:\WINDOWS\system32\sndrec32.exe
2017-05-29 11:55:01 ----A---- C:\WINDOWS\system32\smtpapi.dll
2017-05-29 11:55:00 ----A---- C:\WINDOWS\system32\smbinst.exe
2017-05-29 11:55:00 ----A---- C:\WINDOWS\system32\slserv.exe
2017-05-29 11:55:00 ----A---- C:\WINDOWS\system32\slrundll.exe
2017-05-29 11:55:00 ----A---- C:\WINDOWS\system32\slgen.dll
2017-05-29 11:55:00 ----A---- C:\WINDOWS\system32\slextspk.dll
2017-05-29 11:55:00 ----A---- C:\WINDOWS\system32\slcoinst.dll
2017-05-29 11:54:59 ----A---- C:\WINDOWS\system32\shadow.exe
2017-05-29 11:54:58 ----A---- C:\WINDOWS\system32\setupn.exe
2017-05-29 11:54:57 ----A---- C:\WINDOWS\system32\sessmgr.exe
2017-05-29 11:54:57 ----A---- C:\WINDOWS\system32\servdeps.dll
2017-05-29 11:54:57 ----A---- C:\WINDOWS\system32\sdhcinst.dll
2017-05-29 11:54:56 ----A---- C:\WINDOWS\system32\schedsvc.dll
2017-05-29 11:54:55 ----A---- C:\WINDOWS\system32\safrslv.dll
2017-05-29 11:54:55 ----A---- C:\WINDOWS\system32\safrdm.dll
2017-05-29 11:54:55 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2017-05-29 11:54:55 ----A---- C:\WINDOWS\system32\s3gnb.dll
2017-05-29 11:54:55 ----A---- C:\WINDOWS\system32\rwnh.dll
2017-05-29 11:54:55 ----A---- C:\WINDOWS\system32\rwinsta.exe
2017-05-29 11:54:54 ----A---- C:\WINDOWS\system32\RTLCPL.EXE
2017-05-29 11:54:54 ----A---- C:\WINDOWS\system32\RTLCPAPI.dll
2017-05-29 11:54:53 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2017-05-29 11:54:53 ----A---- C:\WINDOWS\system32\rgb9rast_2.dll
2017-05-29 11:54:53 ----A---- C:\WINDOWS\system32\reset.exe
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\remotepg.dll
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\regini.exe
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\rdshost.exe
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\rdpclip.exe
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\rdchost.dll
2017-05-29 11:54:51 ----A---- C:\WINDOWS\system32\rasqec.dll
2017-05-29 11:54:51 ----A---- C:\WINDOWS\system32\racpldlg.dll
2017-05-29 11:54:51 ----A---- C:\WINDOWS\system32\qwinsta.exe
2017-05-29 11:54:51 ----A---- C:\WINDOWS\system32\qutil.dll
2017-05-29 11:54:50 ----A---- C:\WINDOWS\system32\qprocess.exe
2017-05-29 11:54:50 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2017-05-29 11:54:50 ----A---- C:\WINDOWS\system32\qmgr.dll
2017-05-29 11:54:50 ----A---- C:\WINDOWS\system32\qcliprov.dll
2017-05-29 11:54:50 ----A---- C:\WINDOWS\system32\qappsrv.exe
2017-05-29 11:54:50 ----A---- C:\WINDOWS\system32\qagentrt.dll
2017-05-29 11:54:50 ----A---- C:\WINDOWS\system32\qagent.dll
2017-05-29 11:54:49 ----A---- C:\WINDOWS\system32\prntvpt.dll
2017-05-29 11:54:49 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-05-29 11:54:49 ----A---- C:\WINDOWS\system32\PresentationHostProxy.dll
2017-05-29 11:54:49 ----A---- C:\WINDOWS\system32\PresentationHost.exe
2017-05-29 11:54:49 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-05-29 11:54:48 ----A---- C:\WINDOWS\system32\powercfg.exe
2017-05-29 11:54:48 ----A---- C:\WINDOWS\system32\pnrpnsp.dll
2017-05-29 11:54:48 ----A---- C:\WINDOWS\system32\photometadatahandler.dll
2017-05-29 11:54:48 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-05-29 11:54:47 ----A---- C:\WINDOWS\system32\p2psvc.dll
2017-05-29 11:54:47 ----A---- C:\WINDOWS\system32\p2pnetsh.dll
2017-05-29 11:54:46 ----A---- C:\WINDOWS\system32\p2pgraph.dll
2017-05-29 11:54:46 ----A---- C:\WINDOWS\system32\p2pgasvc.dll
2017-05-29 11:54:46 ----A---- C:\WINDOWS\system32\p2p.dll
2017-05-29 11:54:46 ----A---- C:\WINDOWS\system32\onex.dll
2017-05-29 11:54:45 ----A---- C:\WINDOWS\system32\OEMINFO.INI
2017-05-29 11:54:43 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2017-05-29 11:54:43 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-05-29 11:54:42 ----A---- C:\WINDOWS\system32\ntkrnlpa.exe
2017-05-29 11:54:41 ----A---- C:\WINDOWS\system32\normaliz.dll
2017-05-29 11:54:41 ----A---- C:\WINDOWS\system32\NmUninst.exe
2017-05-29 11:54:41 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2017-05-29 11:54:41 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2017-05-29 11:54:41 ----A---- C:\WINDOWS\system32\nlsdl.dll
2017-05-29 11:54:40 ----A---- C:\WINDOWS\system32\netfxperf.dll
2017-05-29 11:54:39 ----A---- C:\WINDOWS\system32\napstat.exe
2017-05-29 11:54:39 ----A---- C:\WINDOWS\system32\napmontr.dll
2017-05-29 11:54:39 ----A---- C:\WINDOWS\system32\napipsec.dll
2017-05-29 11:54:39 ----A---- C:\WINDOWS\system32\mtxparhd.dll
2017-05-29 11:54:39 ----A---- C:\WINDOWS\system32\mtxoci.dll
2017-05-29 11:54:39 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2017-05-29 11:54:39 ----A---- C:\WINDOWS\system32\mtxex.dll
2017-05-29 11:54:39 ----A---- C:\WINDOWS\system32\mtxdm.dll
2017-05-29 11:54:38 ----A---- C:\WINDOWS\system32\msxml6r.dll
2017-05-29 11:54:38 ----A---- C:\WINDOWS\system32\msxml6.dll
2017-05-29 11:54:38 ----A---- C:\WINDOWS\system32\msxbde40.dll
2017-05-29 11:54:37 ----A---- C:\WINDOWS\system32\MSVCR71.dll
2017-05-29 11:54:37 ----A---- C:\WINDOWS\system32\msvcr100.dll
2017-05-29 11:54:37 ----A---- C:\WINDOWS\system32\MSVCP71.dll
2017-05-29 11:54:37 ----A---- C:\WINDOWS\system32\msvcp100.dll
2017-05-29 11:54:36 ----A---- C:\WINDOWS\system32\msutb.dll
2017-05-29 11:54:36 ----A---- C:\WINDOWS\system32\mstscax.dll
2017-05-29 11:54:36 ----A---- C:\WINDOWS\system32\mstsc.exe
2017-05-29 11:54:36 ----A---- C:\WINDOWS\system32\mstinit.exe
2017-05-29 11:54:36 ----A---- C:\WINDOWS\system32\mstext40.dll
2017-05-29 11:54:36 ----A---- C:\WINDOWS\system32\mstask.dll
2017-05-29 11:54:36 ----A---- C:\WINDOWS\system32\msshavmsg.dll
2017-05-29 11:54:36 ----A---- C:\WINDOWS\system32\mssha.dll
2017-05-29 11:54:35 ----A---- C:\WINDOWS\system32\msrepl40.dll
2017-05-29 11:54:35 ----A---- C:\WINDOWS\system32\msrd2x40.dll
2017-05-29 11:54:34 ----A---- C:\WINDOWS\system32\mspmsnsv.dll
2017-05-29 11:54:34 ----A---- C:\WINDOWS\system32\mspbde40.dll
2017-05-29 11:54:34 ----A---- C:\WINDOWS\system32\mspaint.exe
2017-05-29 11:54:34 ----A---- C:\WINDOWS\system32\msoert2.dll
2017-05-29 11:54:34 ----A---- C:\WINDOWS\system32\msoeacct.dll
2017-05-29 11:54:34 ----A---- C:\WINDOWS\system32\msltus40.dll
2017-05-29 11:54:34 ----A---- C:\WINDOWS\system32\mslbui.dll
2017-05-29 11:54:34 ----A---- C:\WINDOWS\system32\msimtf.dll
2017-05-29 11:54:32 ----A---- C:\WINDOWS\system32\mshearts.exe
2017-05-29 11:54:32 ----A---- C:\WINDOWS\system32\msg.exe
2017-05-29 11:54:32 ----A---- C:\WINDOWS\system32\msfeedssync.exe
2017-05-29 11:54:32 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2017-05-29 11:54:32 ----A---- C:\WINDOWS\system32\msfeeds.dll
2017-05-29 11:54:32 ----A---- C:\WINDOWS\system32\msexch40.dll
2017-05-29 11:54:32 ----A---- C:\WINDOWS\system32\msexcl40.dll
2017-05-29 11:54:31 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2017-05-29 11:54:31 ----A---- C:\WINDOWS\system32\msdtctm.dll
2017-05-29 11:54:31 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2017-05-29 11:54:31 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2017-05-29 11:54:31 ----A---- C:\WINDOWS\system32\msdtclog.dll
2017-05-29 11:54:31 ----A---- C:\WINDOWS\system32\msdtc.exe
2017-05-29 11:54:31 ----A---- C:\WINDOWS\system32\msdbg2.dll
2017-05-29 11:54:30 ----A---- C:\WINDOWS\system32\msdadiag.dll
2017-05-29 11:54:30 ----A---- C:\WINDOWS\system32\msctfp.dll
2017-05-29 11:54:30 ----A---- C:\WINDOWS\system32\msctf.dll
2017-05-29 11:54:30 ----A---- C:\WINDOWS\system32\mscories.dll
2017-05-29 11:54:30 ----A---- C:\WINDOWS\system32\mscorier.dll
2017-05-29 11:54:30 ----A---- C:\WINDOWS\system32\mscoree.dll
2017-05-29 11:54:30 ----A---- C:\WINDOWS\system32\msconf.dll
2017-05-29 11:54:25 ----A---- C:\WINDOWS\system32\MRT.exe
2017-05-29 11:54:23 ----A---- C:\WINDOWS\system32\mplay32.exe
2017-05-29 11:54:23 ----A---- C:\WINDOWS\system32\mp4sdmod.dll
2017-05-29 11:54:23 ----A---- C:\WINDOWS\system32\mp43dmod.dll
2017-05-29 11:54:22 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2017-05-29 11:54:22 ----A---- C:\WINDOWS\system32\mnmdd.dll
2017-05-29 11:54:22 ----A---- C:\WINDOWS\system32\mmfutil.dll
2017-05-29 11:54:21 ----A---- C:\WINDOWS\system32\mmcperf.exe
2017-05-29 11:54:21 ----A---- C:\WINDOWS\system32\mmcfxcommon.dll
2017-05-29 11:54:21 ----A---- C:\WINDOWS\system32\mmcex.dll
2017-05-29 11:54:20 ----A---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2017-05-29 11:54:20 ----A---- C:\WINDOWS\system32\MFC71.dll
2017-05-29 11:54:20 ----A---- C:\WINDOWS\system32\mdmxsdk.dll
2017-05-29 11:54:19 ----A---- C:\WINDOWS\system32\mapi32.dll
2017-05-29 11:54:18 ----A---- C:\WINDOWS\system32\logoff.exe
2017-05-29 11:54:17 ----A---- C:\WINDOWS\system32\licwmi.dll
2017-05-29 11:54:17 ----A---- C:\WINDOWS\system32\LegitCheckControl.dll
2017-05-29 11:54:17 ----A---- C:\WINDOWS\system32\l2gpstore.dll
2017-05-29 11:54:16 ----A---- C:\WINDOWS\system32\ksuser.dll
2017-05-29 11:54:16 ----A---- C:\WINDOWS\system32\kmsvc.dll
2017-05-29 11:54:16 ----A---- C:\WINDOWS\system32\kbdycl.dll
2017-05-29 11:54:16 ----A---- C:\WINDOWS\system32\kbdycc.dll
2017-05-29 11:54:16 ----A---- C:\WINDOWS\system32\kbduzb.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdur.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdukx.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdtuq.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdtuf.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdtat.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdsmsno.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdsmsfi.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdsl.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdru1.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdru.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdro.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdpl.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdpash.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdno1.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdnepr.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdmon.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdmlt48.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdmlt47.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdmaori.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdlv1.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdlv.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdlt1.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdlt.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdkyr.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdkaz.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdiultn.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdinmal.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdinben.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdinbe1.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdhu.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdhept.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdhela3.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdhela2.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdhe319.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdhe220.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdhe.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdgkl.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdfi1.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdest.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdcr.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdbu.dll
2017-05-29 11:54:13 ----A---- C:\WINDOWS\system32\kbdblr.dll
2017-05-29 11:54:13 ----A---- C:\WINDOWS\system32\kbdbhc.dll
2017-05-29 11:54:13 ----A---- C:\WINDOWS\system32\kbdazel.dll
2017-05-29 11:54:13 ----A---- C:\WINDOWS\system32\kbdaze.dll
2017-05-29 11:54:13 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2017-05-29 11:54:12 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2017-05-29 11:54:12 ----A---- C:\WINDOWS\system32\isign32.dll
2017-05-29 11:54:12 ----A---- C:\WINDOWS\system32\irclass.dll
2017-05-29 11:54:12 ----A---- C:\WINDOWS\system32\ir50_qcx.dll
2017-05-29 11:54:12 ----A---- C:\WINDOWS\system32\ir50_qc.dll
2017-05-29 11:54:12 ----A---- C:\WINDOWS\system32\ir50_32.dll
2017-05-29 11:54:11 ----A---- C:\WINDOWS\system32\ir41_qcx.dll
2017-05-29 11:54:11 ----A---- C:\WINDOWS\system32\ir41_qc.dll
2017-05-29 11:54:10 ----A---- C:\WINDOWS\system32\infocardapi.dll
2017-05-29 11:54:10 ----A---- C:\WINDOWS\system32\inetres.dll
2017-05-29 11:54:09 ----A---- C:\WINDOWS\system32\inetcomm.dll
2017-05-29 11:54:09 ----A---- C:\WINDOWS\system32\inetcfg.dll
2017-05-29 11:54:09 ----A---- C:\WINDOWS\system32\ils.dll
2017-05-29 11:54:09 ----A---- C:\WINDOWS\system32\ieui.dll
2017-05-29 11:54:09 ----A---- C:\WINDOWS\system32\ieudinit.exe
2017-05-29 11:54:09 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-05-29 11:54:08 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-05-29 11:54:08 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2017-05-29 11:54:08 ----A---- C:\WINDOWS\system32\ieapfltr.dat
2017-05-29 11:54:07 ----A---- C:\WINDOWS\system32\idndl.dll
2017-05-29 11:54:07 ----A---- C:\WINDOWS\system32\icwphbk.dll
2017-05-29 11:54:07 ----A---- C:\WINDOWS\system32\icwdial.dll
2017-05-29 11:54:07 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2017-05-29 11:54:07 ----A---- C:\WINDOWS\system32\icardres.dll
2017-05-29 11:54:07 ----A---- C:\WINDOWS\system32\icardie.dll
2017-05-29 11:54:07 ----A---- C:\WINDOWS\system32\icardagt.exe
2017-05-29 11:54:07 ----A---- C:\WINDOWS\system32\icaapi.dll
2017-05-29 11:54:06 ----A---- C:\WINDOWS\system32\iacenc.dll
2017-05-29 11:54:06 ----A---- C:\WINDOWS\system32\hypertrm.dll
2017-05-29 11:54:06 ----A---- C:\WINDOWS\system32\httpapi.dll
2017-05-29 11:54:06 ----A---- C:\WINDOWS\system32\hticons.dll
2017-05-29 11:54:06 ----A---- C:\WINDOWS\system32\hsfcisp2.dll
2017-05-29 11:54:05 ----A---- C:\WINDOWS\system32\hccoin.dll
2017-05-29 11:54:05 ----A---- C:\WINDOWS\system32\HAL.DLL
2017-05-29 11:54:05 ----A---- C:\WINDOWS\system32\h323log.txt
2017-05-29 11:54:05 ----A---- C:\WINDOWS\system32\getuname.dll
2017-05-29 11:54:04 ----A---- C:\WINDOWS\system32\fwcfg.dll
2017-05-29 11:54:04 ----A---- C:\WINDOWS\system32\fsquirt.exe
2017-05-29 11:54:04 ----A---- C:\WINDOWS\system32\freecell.exe
2017-05-29 11:54:04 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2017-05-29 11:54:04 ----A---- C:\WINDOWS\system32\fltmc.exe
2017-05-29 11:54:04 ----A---- C:\WINDOWS\system32\fltlib.dll
2017-05-29 11:54:03 ----A---- C:\WINDOWS\system32\FlashPlayerInstaller.exe
2017-05-29 11:54:03 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2017-05-29 11:54:02 ----A---- C:\WINDOWS\system32\faxpatch.exe
2017-05-29 11:54:02 ----A---- C:\WINDOWS\system32\extmgr.dll
2017-05-29 11:54:02 ----A---- C:\WINDOWS\system32\evr.dll
2017-05-29 11:54:01 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2017-05-29 11:54:01 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\eapsvc.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\eapqec.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\eappprxy.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\eapphost.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\eappgnui.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\eappcfg.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\eapolqec.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\dxva2.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\dxdiagn.dll
2017-05-29 11:53:58 ----A---- C:\WINDOWS\system32\dot3ui.dll
2017-05-29 11:53:57 ----A---- C:\WINDOWS\system32\dot3svc.dll
2017-05-29 11:53:57 ----A---- C:\WINDOWS\system32\dot3msm.dll
2017-05-29 11:53:57 ----A---- C:\WINDOWS\system32\dot3gpclnt.dll
2017-05-29 11:53:57 ----A---- C:\WINDOWS\system32\dot3dlg.dll
2017-05-29 11:53:57 ----A---- C:\WINDOWS\system32\dot3cfg.dll
2017-05-29 11:53:57 ----A---- C:\WINDOWS\system32\dot3api.dll
2017-05-29 11:53:56 ----A---- C:\WINDOWS\system32\dimsroam.dll
2017-05-29 11:53:56 ----A---- C:\WINDOWS\system32\dimsntfy.dll
2017-05-29 11:53:55 ----A---- C:\WINDOWS\system32\dhcpqec.dll
2017-05-29 11:53:55 ----A---- C:\WINDOWS\system32\dgsetup.dll
2017-05-29 11:53:55 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2017-05-29 11:53:55 ----A---- C:\WINDOWS\system32\dfshim.dll
2017-05-29 11:53:55 ----A---- C:\WINDOWS\system32\desktop.ini
2017-05-29 11:53:54 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2017-05-29 11:53:53 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2017-05-29 11:53:53 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2017-05-29 11:53:53 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2017-05-29 11:53:53 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2017-05-29 11:53:53 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2017-05-29 11:53:52 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2017-05-29 11:53:52 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2017-05-29 11:53:51 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2017-05-29 11:53:51 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2017-05-29 11:53:51 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2017-05-29 11:53:50 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2017-05-29 11:53:50 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2017-05-29 11:53:49 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2017-05-29 11:53:49 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2017-05-29 11:53:49 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2017-05-29 11:53:48 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2017-05-29 11:53:48 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2017-05-29 11:53:47 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2017-05-29 11:53:47 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2017-05-29 11:53:46 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2017-05-29 11:53:46 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2017-05-29 11:53:46 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2017-05-29 11:53:46 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2017-05-29 11:53:45 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2017-05-29 11:53:45 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2017-05-29 11:53:45 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2017-05-29 11:53:45 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2017-05-29 11:53:44 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2017-05-29 11:53:44 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2017-05-29 11:53:44 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2017-05-29 11:53:44 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2017-05-29 11:53:44 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2017-05-29 11:53:43 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2017-05-29 11:53:43 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2017-05-29 11:53:42 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2017-05-29 11:53:42 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2017-05-29 11:53:42 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2017-05-29 11:53:41 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2017-05-29 11:53:41 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2017-05-29 11:53:41 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2017-05-29 11:53:40 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2017-05-29 11:53:40 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2017-05-29 11:53:39 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2017-05-29 11:53:39 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2017-05-29 11:53:39 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2017-05-29 11:53:38 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2017-05-29 11:53:38 ----A---- C:\WINDOWS\system32\d3d9.dll
2017-05-29 11:53:37 ----A---- C:\WINDOWS\system32\ctfmon.exe
2017-05-29 11:53:36 ----A---- C:\WINDOWS\system32\credssp.dll
2017-05-29 11:53:36 ----A---- C:\WINDOWS\system32\CONFIG.TMP
2017-05-29 11:53:36 ----A---- C:\WINDOWS\system32\comuid.dll
2017-05-29 11:53:36 ----A---- C:\WINDOWS\system32\comsvcs.dll
2017-05-29 11:53:35 ----A---- C:\WINDOWS\system32\comsnap.dll
2017-05-29 11:53:35 ----A---- C:\WINDOWS\system32\comsdupd.exe
2017-05-29 11:53:35 ----A---- C:\WINDOWS\system32\comrepl.dll
2017-05-29 11:53:35 ----A---- C:\WINDOWS\system32\comaddin.dll
2017-05-29 11:53:35 ----A---- C:\WINDOWS\system32\colbact.dll
2017-05-29 11:53:35 ----A---- C:\WINDOWS\system32\cmsetacl.dll
2017-05-29 11:53:35 ----A---- C:\WINDOWS\system32\cmprops.dll
2017-05-29 11:53:34 ----A---- C:\WINDOWS\system32\clipbrd.exe
2017-05-29 11:53:34 ----A---- C:\WINDOWS\system32\clbcatq.dll
2017-05-29 11:53:34 ----A---- C:\WINDOWS\system32\clbcatex.dll
2017-05-29 11:53:33 ----A---- C:\WINDOWS\system32\charmap.exe
2017-05-29 11:53:33 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2017-05-29 11:53:33 ----A---- C:\WINDOWS\system32\cdmodem.dll
2017-05-29 11:53:33 ----A---- C:\WINDOWS\system32\catsrvut.dll
2017-05-29 11:53:33 ----A---- C:\WINDOWS\system32\catsrvps.dll
2017-05-29 11:53:33 ----A---- C:\WINDOWS\system32\catsrv.dll
2017-05-29 11:53:33 ----A---- C:\WINDOWS\system32\calc.exe
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\btpanui.dll
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\bthserv.dll
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\bthci.dll
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\browserchoice.exe
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\blastcln.exe
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\batt.dll
2017-05-29 11:53:31 ----A---- C:\WINDOWS\system32\azroles.dll
2017-05-29 11:53:31 ----A---- C:\WINDOWS\system32\avwav.dll
2017-05-29 11:53:31 ----A---- C:\WINDOWS\system32\avtapi.dll
2017-05-29 11:53:31 ----A---- C:\WINDOWS\system32\avmeter.dll
2017-05-29 11:53:31 ----A---- C:\WINDOWS\system32\auditusr.exe
2017-05-29 11:53:31 ----A---- C:\WINDOWS\system32\atrace.dll
2017-05-29 11:53:30 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2017-05-29 11:53:30 ----A---- C:\WINDOWS\system32\ativtmxx.dll
2017-05-29 11:53:30 ----A---- C:\WINDOWS\system32\ati3duag.dll
2017-05-29 11:53:30 ----A---- C:\WINDOWS\system32\ati3d1ag.dll
2017-05-29 11:53:30 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2017-05-29 11:53:30 ----A---- C:\WINDOWS\system32\ati2dvaa.dll
2017-05-29 11:53:30 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2017-05-29 11:53:27 ----A---- C:\WINDOWS\system32\accwiz.exe
2017-05-29 11:53:27 ----A---- C:\WINDOWS\system32\acctres.dll
2017-05-29 11:53:27 ----A---- C:\WINDOWS\system32\aaclient.dll
2017-05-29 11:53:26 ----D---- C:\WINDOWS\system32\XPSViewer
2017-05-29 11:53:16 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2017-05-29 11:53:14 ----D---- C:\WINDOWS\system32\Restore
2017-05-29 11:53:13 ----D---- C:\WINDOWS\system32\ReinstallBackups
2017-05-29 11:53:12 ----D---- C:\WINDOWS\system32\PreInstall
2017-05-29 11:53:07 ----D---- C:\WINDOWS\system32\MsDtc
2017-05-29 11:53:06 ----D---- C:\WINDOWS\system32\Microsoft
2017-05-29 11:53:01 ----D---- C:\WINDOWS\system32\Macromed
2017-05-29 11:53:01 ----D---- C:\WINDOWS\system32\LogFiles
2017-05-29 11:53:00 ----D---- C:\WINDOWS\system32\en-US
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\wdfldr.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\wdf01000.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\watv10nt.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\watv06nt.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\wacompen.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\vtmini.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\viamraid.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\viaide.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\viaagp.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\vchnt5.dll
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usbvideo.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usbuhci.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usbstor.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usbport.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usbintel.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usb8023x.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\udfs.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\uagp35.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\tunmp.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\tcpip6.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\tape.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\staport.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\smbali.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\slnthal.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\slntamr.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\slnt7554.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\sisagp.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\siint5.dll
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\sffp_sd.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\sffdisk.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2017-05-29 11:52:56 ----A---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2017-05-29 11:52:56 ----A---- C:\WINDOWS\system32\drivers\RTL8139.sys
2017-05-29 11:52:56 ----A---- C:\WINDOWS\system32\drivers\rndismpx.sys
2017-05-29 11:52:56 ----A---- C:\WINDOWS\system32\drivers\rfcomm.sys
2017-05-29 11:52:56 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2017-05-29 11:52:56 ----A---- C:\WINDOWS\system32\drivers\recagent.sys
2017-05-29 11:52:56 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2017-05-29 11:52:56 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2017-05-29 11:52:55 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2017-05-29 11:52:55 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2017-05-29 11:52:54 ----A---- C:\WINDOWS\system32\drivers\nv4_mini.sys
2017-05-29 11:52:54 ----A---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2017-05-29 11:52:53 ----A---- C:\WINDOWS\system32\drivers\mutohpen.sys
2017-05-29 11:52:53 ----A---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2017-05-29 11:52:53 ----A---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2017-05-29 11:52:53 ----A---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2017-05-29 11:52:53 ----A---- C:\WINDOWS\system32\drivers\mssmbios.sys
2017-05-29 11:52:53 ----A---- C:\WINDOWS\system32\drivers\mspqm.sys
2017-05-29 11:52:53 ----A---- C:\WINDOWS\system32\drivers\mspclock.sys
2017-05-29 11:52:53 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\kbdclass.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\irbus.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\ip6fw.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\intelppm.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\i8042prt.sys
2017-05-29 11:52:51 ----A---- C:\WINDOWS\system32\drivers\http.sys
2017-05-29 11:52:51 ----A---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2017-05-29 11:52:51 ----A---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2017-05-29 11:52:51 ----A---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2017-05-29 11:52:51 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2017-05-29 11:52:51 ----A---- C:\WINDOWS\system32\drivers\hidir.sys
2017-05-29 11:52:51 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2017-05-29 11:52:50 ----A---- C:\WINDOWS\system32\drivers\hidbth.sys
2017-05-29 11:52:50 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2017-05-29 11:52:50 ----A---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2017-05-29 11:52:50 ----A---- C:\WINDOWS\system32\drivers\fltmgr.sys
2017-05-29 11:52:50 ----A---- C:\WINDOWS\system32\drivers\fetnd5b.sys
2017-05-29 11:52:50 ----A---- C:\WINDOWS\system32\drivers\fetnd5.sys
2017-05-29 11:52:49 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2017-05-29 11:52:49 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2017-05-29 11:52:49 ----A---- C:\WINDOWS\system32\drivers\Dot4Prt.sys
2017-05-29 11:52:49 ----A---- C:\WINDOWS\system32\drivers\dot4.sys
2017-05-29 11:52:49 ----A---- C:\WINDOWS\system32\drivers\dmusic.sys
2017-05-29 11:52:48 ----A---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2017-05-29 11:52:48 ----A---- C:\WINDOWS\system32\drivers\bthusb.sys
2017-05-29 11:52:48 ----A---- C:\WINDOWS\system32\drivers\bthprint.sys
2017-05-29 11:52:48 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2017-05-29 11:52:48 ----A---- C:\WINDOWS\system32\drivers\bthpan.sys
2017-05-29 11:52:48 ----A---- C:\WINDOWS\system32\drivers\bthmodem.sys
2017-05-29 11:52:48 ----A---- C:\WINDOWS\system32\drivers\bthenum.sys
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atintuxx.sys
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atinttxx.sys
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\atinraxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2017-05-29 11:52:45 ----A---- C:\WINDOWS\system32\drivers\amdagp.sys
2017-05-29 11:52:45 ----A---- C:\WINDOWS\system32\drivers\alim1541.sys
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\agpcpq.sys
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\agp440.sys
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2017-05-29 11:52:43 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2017-05-29 11:50:28 ----D---- C:\WINDOWS\system32\DirectX
2017-05-29 11:50:27 ----D---- C:\WINDOWS\system32\cs-cz
2017-05-29 11:50:27 ----D---- C:\WINDOWS\system32\cs
2017-05-29 11:50:13 ----D---- C:\WINDOWS\system32\Com
2017-05-29 11:50:13 ----D---- C:\WINDOWS\system32\CatRoot2
2017-05-29 11:50:08 ----D---- C:\WINDOWS\system32\CatRoot
2017-05-29 11:50:08 ----D---- C:\WINDOWS\system32\bits
2017-05-29 11:50:08 ----D---- C:\WINDOWS\system32\appmgmt
2017-05-29 11:50:05 ----D---- C:\WINDOWS\srchasst
2017-05-29 11:50:05 ----D---- C:\WINDOWS\SoftwareDistribution
2017-05-29 11:45:14 ----D---- C:\WINDOWS\ServicePackFiles
2017-05-29 11:45:12 ----D---- C:\WINDOWS\Registration
2017-05-29 11:45:11 ----D---- C:\WINDOWS\pss
2017-05-29 11:45:11 ----D---- C:\WINDOWS\Provisioning
2017-05-29 11:45:09 ----D---- C:\WINDOWS\Prefetch
2017-05-29 11:45:09 ----D---- C:\WINDOWS\PeerNet
2017-05-29 11:44:55 ----D---- C:\WINDOWS\pchealth
2017-05-29 11:44:55 ----D---- C:\WINDOWS\Offline Web Pages
2017-05-29 11:44:55 ----D---- C:\WINDOWS\OemDir
2017-05-29 11:44:55 ----D---- C:\WINDOWS\network diagnostic
2017-05-29 11:44:53 ----D---- C:\WINDOWS\Minidump
2017-05-29 11:44:35 ----D---- C:\WINDOWS\Microsoft.NET
2017-05-29 11:44:33 ----D---- C:\WINDOWS\l2schemas
2017-05-29 11:44:15 ----SHD---- C:\WINDOWS\Installer
2017-05-29 11:43:02 ----D---- C:\WINDOWS\ie8updates
2017-05-29 11:42:46 ----D---- C:\WINDOWS\ie8
2017-05-29 11:42:32 ----D---- C:\WINDOWS\ie7
2017-05-29 11:42:10 ----D---- C:\WINDOWS\ehome
2017-05-29 11:42:01 ----D---- C:\WINDOWS\Downloaded Program Files
2017-05-29 11:41:29 ----D---- C:\WINDOWS\assembly
2017-05-29 11:40:38 ----D---- C:\WINDOWS\$hf_mig$
2017-05-29 11:38:37 ----D---- C:\VISO
2017-05-29 11:38:37 ----D---- C:\UFAND40
2017-05-29 11:38:37 ----D---- C:\UFAND33
2017-05-29 11:38:34 ----D---- C:\TRIADA
2017-05-29 11:37:25 ----SHD---- C:\System Volume Information
2017-05-29 11:37:25 ----D---- C:\Program Files\xerox
2017-05-29 11:37:22 ----D---- C:\Program Files\Windows NT
2017-05-29 11:37:19 ----D---- C:\Program Files\Windows Media Player
2017-05-29 11:37:07 ----D---- C:\Program Files\TotalCmd
2017-05-29 11:36:59 ----D---- C:\Program Files\TeamViewer
2017-05-29 11:36:56 ----D---- C:\Program Files\Speccy
2017-05-29 11:36:56 ----D---- C:\Program Files\S3
2017-05-29 11:36:49 ----D---- C:\Program Files\Reference Assemblies
2017-05-29 11:36:47 ----D---- C:\Program Files\Outlook Express
2017-05-29 11:36:46 ----D---- C:\Program Files\OpenOffice.org 2.0
2017-05-29 11:36:46 ----D---- C:\Program Files\Online Services
2017-05-29 11:36:43 ----D---- C:\Program Files\NetMeeting
2017-05-29 11:36:39 ----D---- C:\Program Files\MSN Gaming Zone
2017-05-29 11:36:39 ----D---- C:\Program Files\MSBuild
2017-05-29 11:36:39 ----D---- C:\Program Files\Mozilla Maintenance Service
2017-05-29 11:36:05 ----D---- C:\Program Files\Mozilla Firefox
2017-05-29 11:36:03 ----D---- C:\Program Files\Movie Maker
2017-05-29 11:35:55 ----D---- C:\Program Files\Microsoft Updates
2017-05-29 11:35:55 ----D---- C:\Program Files\microsoft frontpage
2017-05-29 11:35:54 ----D---- C:\Program Files\Messenger
2017-05-29 11:32:44 ----D---- C:\Program Files\LibreOffice 4
2017-05-29 11:32:43 ----D---- C:\Program Files\K-Lite Codec Pack
2017-05-29 11:32:39 ----D---- C:\Program Files\Internet Explorer
2017-05-29 11:32:39 ----D---- C:\Program Files\Intel
2017-05-29 11:32:39 ----D---- C:\Program Files\GUM241E.tmp
2017-05-29 11:31:40 ----D---- C:\Program Files\Google
2017-05-29 11:31:36 ----D---- C:\Program Files\Dropbox
2017-05-29 11:31:33 ----D---- C:\Program Files\Defraggler
2017-05-29 11:31:27 ----D---- C:\Program Files\Common Files\System
2017-05-29 11:31:26 ----D---- C:\Program Files\Common Files\SpeechEngines
2017-05-29 11:31:25 ----D---- C:\Program Files\Common Files\Services
2017-05-29 11:31:25 ----D---- C:\Program Files\Common Files\ODBC
2017-05-29 11:31:25 ----D---- C:\Program Files\Common Files\MSSoap
2017-05-29 11:31:20 ----D---- C:\Program Files\Common Files\Microsoft Shared
2017-05-29 11:31:18 ----D---- C:\Program Files\Common Files\Adobe
2017-05-29 11:31:18 ----D---- C:\Program Files\Common Files
2017-05-29 11:30:59 ----D---- C:\Program Files\CDex_150
2017-05-29 11:30:57 ----D---- C:\Program Files\CCleaner
2017-05-29 11:28:55 ----D---- C:\Program Files\AVAST Software
2017-05-29 11:28:49 ----D---- C:\Program Files\Auslogics
2017-05-29 11:28:49 ----D---- C:\Program Files\Alwil Software
2017-05-29 11:28:26 ----D---- C:\Program Files\Adobe
2017-05-29 11:28:26 ----D---- C:\Program Files
2017-05-29 11:27:21 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\TeamViewer
2017-05-29 11:27:21 ----A---- C:\Documents and Settings\OÚ Choust\Data aplikací\desktop.ini
2017-05-29 11:27:19 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\OpenOffice.org2
2017-05-29 11:27:11 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\Mozilla
2017-05-29 11:27:08 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\Microsoft
2017-05-29 11:27:08 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\Macromedia
2017-05-29 11:27:06 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\LibreOffice
2017-05-29 11:27:06 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\Identities
2017-05-29 11:27:06 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\DropboxMaster
2017-05-29 11:26:56 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\Dropbox
2017-05-29 11:26:55 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\Auslogics
2017-05-29 11:26:54 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\Adobe
2017-05-29 11:26:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2017-05-29 11:26:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Mozilla
2017-05-29 11:26:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2017-05-29 11:26:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2017-05-29 11:26:51 ----A---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2017-05-29 11:23:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2017-05-29 11:23:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2017-05-29 11:23:45 ----D---- C:\Documents and Settings
2017-05-29 11:23:44 ----D---- C:\BAT

======List of files/folders modified in the last 1 month======

2017-06-07 23:34:21 ----A---- C:\WINDOWS\win.ini
2017-06-07 23:34:21 ----A---- C:\WINDOWS\system.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2017-06-07 62152]
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2017-06-07 279800]
R0 uagp35;Filtr Microsoft AGPv3.5; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2008-04-13 44672]
R0 viamraid;viamraid; C:\WINDOWS\system32\drivers\viamraid.sys [2004-07-07 60672]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2017-06-07 60760]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2017-06-07 764576]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2017-06-07 482608]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2003-04-16 12032]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2017-06-07 107928]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-04-19 2317504]
R3 aswStmXP;aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [2017-06-07 181080]
R3 Dot4;Ovladač MS IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2008-04-13 206976]
R3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys [2001-08-17 12928]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2004-04-15 42496]
R3 mf;mf; C:\WINDOWS\system32\DRIVERS\mf.sys [2008-04-13 63744]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2005-08-24 237312]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 aswHwid;aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [2017-06-07 34136]
S3 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys []
S3 catchme;catchme; \??\C:\DOCUME~1\OCHOUS~1\LOCALS~1\Temp\catchme.sys []
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS.sys []
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 SetupNTGLM7X;SetupNTGLM7X; \??\D:\NTGLM7X.sys []
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2017-06-07 263304]
S2 Netmans;Network Connection; C:\Program Files\K-Lite Codec Pack\Filters\LAV\LAVAudio.exe [2017-05-14 66048]
S2 PEVSystemStart;PEVSystemStart; C:\ComboFix\pev.3XE [2011-06-26 256000]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-19 270936]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S4 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-06-09 194032]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2017-05-30 172488]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 TeamViewer8;TeamViewer 8; C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe [2014-08-04 5099360]

-----------------EOF-----------------

Re: Avast opakovaně detekuje Win32:Malware-gen v C:\Windows\

Napsal: 08 čer 2017 17:57
od Rudy
Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Avast opakovaně detekuje Win32:Malware-gen v C:\Windows\

Napsal: 14 čer 2017 11:15
od Moron
Dobrý den,
zde je log:
# AdwCleaner v6.047 - Log vytvořen 14/06/2017 v 11:13:47
# Aktualizováno dne 19/05/2017 z Malwarebytes
# Databáze : 2017-05-19.1 [Místní]
# Operační systém : Microsoft Windows XP Service Pack 3 (X86)
# Uživatelské jméno : OÚ Choustník - MONT062426-3
# Spuštěno z : C:\Documents and Settings\OÚ Choustník\Plocha\adwcleaner_6.047.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****



***** [ Složky ] *****

[-] Složka smazána: C:\Documents and Settings\All Users\Nabídka Start\Programy\Auslogics
[-] Složka smazána: C:\Program Files\Auslogics


***** [ Soubory ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupci ] *****



***** [ Naplánované úlohy ] *****



***** [ Registry ] *****

[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.Protector
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.Protector.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
[-] Klíč smazán: HKU\S-1-5-21-3335105372-952179842-3576758798-1005\Software\Auslogics
[#] Klíč smazán po restartu: HKCU\Software\Auslogics
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1


***** [ Prohlížeče ] *****



*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [1817 Bajty] - [14/06/2017 11:13:47]
C:\AdwCleaner\AdwCleaner[S0].txt - [2226 Bajty] - [14/06/2017 11:10:45]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1963 Bajty] ##########

Re: Avast opakovaně detekuje Win32:Malware-gen v C:\Windows\

Napsal: 14 čer 2017 12:37
od Rudy
Dejte nový log RSIT.
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz