1.log:
info.txt logfile of random's system information tool 1.10 2014-10-05 20:26:45
======MBR======
0x0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000A0A5FA32000000000200EEFFFFFF01000000FFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055AA
======Uninstall list======
-->"C:\Program Files (x86)\WildGames\Game Explorer Categories - genres\Uninstall.exe"
Adobe Reader X (10.1.12) MUI-->MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-AA0000000001}
Apple Application Support-->MsiExec.exe /I{21FC2093-6E43-460B-B9B0-5F5AA35BBB0F}
Apple Mobile Device Support-->MsiExec.exe /I{FE86CB0C-FCB3-4358-B4B0-B0A41E33B3DD}
Apple Software Update-->MsiExec.exe /I{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
ASUS InstantOn-->MsiExec.exe /I{749F674B-2674-47E8-879C-5626A06B2A91}
ASUS LifeFrame3-->MsiExec.exe /X{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}
ASUS Live Update-->MsiExec.exe /X{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}
ASUS Power4Gear Hybrid-->MsiExec.exe /I{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}
ASUS Screen Saver-->MsiExec.exe /I{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}
ASUS Smart Gesture-->MsiExec.exe /I{4D3286A6-F6AB-498A-82A4-E4F040529F3D}
ASUS Splendid Video Enhancement Technology-->MsiExec.exe /X{0969AF05-4FF6-4C00-9406-43599238DE0D}
ASUS USB Charger Plus-->MsiExec.exe /X{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}
ASUS Virtual Camera-->MsiExec.exe /I{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}
ASUS WebStorage Sync Agent-->C:\Program Files (x86)\ASUS\WebStorage Sync Agent\uninst.exe
ASUSDVD-->"C:\Program Files (x86)\InstallShield Installation Information\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}\Setup.exe" /z-uninstall
ASUSDVD-->"C:\Program Files (x86)\InstallShield Installation Information\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}\Setup.exe" /z-uninstall
AsusVibe2.0-->C:\Program Files (x86)\Asus\AsusVibe\unins000.exe
ATK Package-->MsiExec.exe /I{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}
avast! Free Antivirus-->C:\Program Files\AVAST Software\Avast\Setup\Instup.exe /control_panel /instop:uninstall
Azteca-->"C:\Program Files (x86)\WildGames\Azteca\uninstall\uninstaller.exe"
Bejeweled 3-->"C:\Program Files (x86)\WildGames\Bejeweled 3\uninstall\uninstaller.exe"
Bonjour-->MsiExec.exe /X{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Cut the Rope-->"C:\Program Files (x86)\WildGames\Cut the Rope\uninstall\uninstaller.exe"
CyberLink LabelPrint 2.5-->"C:\Program Files (x86)\InstallShield Installation Information\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\Setup.exe" /z-uninstall
CyberLink LabelPrint 2.5-->"C:\Program Files (x86)\InstallShield Installation Information\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\Setup.exe" /z-uninstall
CyberLink Power2Go-->"C:\Program Files (x86)\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe" /z-uninstall
CyberLink Power2Go-->"C:\Program Files (x86)\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe" /z-uninstall
D3DX10-->MsiExec.exe /X{E09C4DB7-630C-4F06-A631-8EA7239923AF}
ESET Online Scanner v3-->C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
Facebook Video Calling 3.1.0.521-->MsiExec.exe /X{2091F234-EB58-4B80-8C96-8EB78C808CF7}
Fotogaléria-->MsiExec.exe /X{9093B0D5-EA59-4C9E-A2E3-CC130138DFCD}
Fotogalerie-->MsiExec.exe /X{A1FBD2B3-6768-472D-BA46-C00EACBCE16C}
Fotótár-->MsiExec.exe /X{E50E3DBC-46AA-4827-B2A6-F995D81DF526}
Galeria fotografii-->MsiExec.exe /X{7595CAD2-87D0-4D01-AC02-3FDD3A891BB8}
Google Chrome-->"C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\Installer\setup.exe" --uninstall --multi-install --chrome --system-level --verbose-logging
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Intel(R) Management Engine Components-->C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\Uninstall\setup.exe -uninstall
Intel(R) Processor Graphics-->C:\Program Files (x86)\Intel\Intel(R) Processor Graphics\Uninstall\setup.exe -uninstall
Intel(R) SDK for OpenCL - CPU Only Runtime Package-->C:\Program Files (x86)\Intel\OpenCL SDK\2.0\Uninstall\setup.exe -uninstall
Intel® Trusted Connect Service Client-->MsiExec.exe /I{F4404AFD-2EF3-40C1-8C09-29E5F3B6972B}
iTunes-->MsiExec.exe /I{96B53CA8-5ABB-49D8-96F1-F6C0D73A76C6}
Java 7 Update 65-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F03217065FF}
Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64)-->MsiExec.exe /I{E9F0BCD8-6BD5-1ED7-EDA3-9FCF2A478AA1}
Microsoft Office 365 - cs-cz-->"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" scenario=install baseurl="C:\Program Files\Microsoft Office 15" platform=x86 version=15.0.4649.1003 culture=cs-cz productstoremove=O365HomePremRetail_cs-cz_x-none
Microsoft Office Excel Viewer-->MsiExec.exe /I{95120000-003F-0409-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219-->MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
Movie Maker-->MsiExec.exe /X{2A078A2B-E2C8-43A3-862C-DC57090AB7C2}
Movie Maker-->MsiExec.exe /X{8E6E8CBB-8E58-493C-943F-4664F5F2FEDB}
Movie Maker-->MsiExec.exe /X{9EDF46F0-2D4E-4C00-B2B6-0660666E9F60}
Movie Maker-->MsiExec.exe /X{A035950F-15BA-41C0-9D8F-165FC0536012}
Movie Maker-->MsiExec.exe /X{A47EA9D4-BB87-415E-9239-28860434E5A0}
Movie Maker-->MsiExec.exe /X{ED6C77F9-4D7E-447C-9EC0-9A212D075535}
MSVCRT-->MsiExec.exe /I{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
MSVCRT110_amd64-->MsiExec.exe /I{E9FA781F-3E80-4399-825A-AD3E11C28C77}
MSVCRT110-->MsiExec.exe /I{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}
MyBitCast 2.0-->C:\Program Files (x86)\ASUS\MyBitCast\uninst.exe
Office 15 Click-to-Run Extensibility Component-->MsiExec.exe /X{90150000-008C-0000-0000-0000000FF1CE}
Office 15 Click-to-Run Licensing Component-->MsiExec.exe /I{90150000-008F-0000-1000-0000000FF1CE}
Office 15 Click-to-Run Localization Component-->MsiExec.exe /X{90150000-008C-0405-0000-0000000FF1CE}
Peggle-->"C:\Program Files (x86)\WildGames\Peggle\uninstall\uninstaller.exe"
Penguins!-->"C:\Program Files (x86)\WildGames\Penguins!\uninstall\uninstaller.exe"
Photo Common-->MsiExec.exe /X{0DF95460-2887-4011-9344-1959CDF18ADC}
Photo Common-->MsiExec.exe /X{49110532-D289-4BFF-807C-45B782E66A7C}
Photo Common-->MsiExec.exe /X{AA82E5EF-70C2-41CB-8432-309078304CBB}
Photo Common-->MsiExec.exe /X{C67BC332-A59A-4D40-977F-664F60AB21D8}
Photo Common-->MsiExec.exe /X{EB91007A-0110-42A6-B869-2709955A9B2A}
Photo Gallery-->MsiExec.exe /X{30F99474-EBE3-4134-A02B-F6CD38CFE243}
Photo Gallery-->MsiExec.exe /X{63824BC0-B747-43F3-9863-1066D64AD919}
Podstawowe programy Windows Live-->MsiExec.exe /I{A7E73DE5-E5FD-4923-9D88-E09ECD1F3545}
Qualcomm Atheros Bluetooth Suite (64)-->MsiExec.exe /X{A84A4FB1-D703-48DB-89E0-68B6499D2801}
Qualcomm Atheros Client Installation Program-->"C:\Program Files (x86)\InstallShield Installation Information\{28006915-2739-4EBE-B5E8-49B25D32EB33}\setup.exe" -runfromtemp -l0x0409 -removeonly
Realtek Ethernet Controller Driver-->C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\setup.exe -runfromtemp -l0x0409 -removeonly
Realtek High Definition Audio Driver-->C:\Program Files\Realtek\Audio\HDA\RtlUpd64.exe -r -m -nrg2709
Realtek PCIE Card Reader-->"C:\Program Files (x86)\InstallShield Installation Information\{C1594429-8296-4652-BF54-9DBE4932A44C}\setup.exe" -runfromtemp -removeonly
SceneSwitch-->MsiExec.exe /I{5172E572-C175-4F80-A6D5-5CB45826AD61}
Shared C Run-time for x64-->MsiExec.exe /I{EF79C448-6946-4D71-8134-03407888C054}
Sony Mobile Update Engine-->C:\Program Files (x86)\Sony Mobile\Update Engine\uninst.exe
Sony PC Companion 2.10.226-->"C:\Program Files (x86)\InstallShield Installation Information\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}\setup.exe" -runfromtemp -l0x0409 -removeonly
System Requirements Lab for Intel-->MsiExec.exe /I{04C4B49D-45D9-4A28-9ED1-B45CBD99B8C7}
Tales of Lagoona-->"C:\Program Files (x86)\WildGames\Tales of Lagoona\uninstall\uninstaller.exe"
Update Installer for WildTangent Games App-->"C:\Program Files (x86)\WildTangent Games\App\Uninstall.exe"
Visual Studio 2012 x64 Redistributables-->MsiExec.exe /I{8C775E70-A791-4DA8-BCC3-6AB7136F4484}
Visual Studio 2012 x86 Redistributables-->MsiExec.exe /I{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}
VLC media player 2.1.2-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
WildTangent Games App-->"C:\Program Files (x86)\WildTangent Games\Touchpoints\asus\Uninstall.exe"
WildTangent Games-->"C:\Program Files (x86)\WildGames\Uninstall.exe"
Windows Driver Package - ASUS (ATP) Mouse (01/10/2013 1.0.0.170)-->C:\PROGRA~1\DIFX\0AA3FA~1\dpinst.exe /u C:\Windows\System32\DriverStore\FileRepository\asustp.inf_amd64_536dba63d5fddbba\asustp.inf
Windows Live Communications Platform-->MsiExec.exe /I{0454BB9A-2A7A-4214-BDFF-937F7A711A44}
Windows Live Essentials-->C:\Program Files (x86)\Windows Live\Installer\wlarp.exe
Windows Live Essentials-->MsiExec.exe /I{6CEA775F-E70A-4D72-A3B4-1EB3A5AD4B5C}
Windows Live Essentials-->MsiExec.exe /I{797DC296-ADC5-4A08-8CBC-AEB0D6F4B249}
Windows Live Essentials-->MsiExec.exe /I{857BC375-BCFB-474E-9BD9-7EBB18EC55E0}
Windows Live Essentials-->MsiExec.exe /I{C4D82144-B2D5-4A0E-A470-16F13EBC5BCB}
Windows Live Installer-->MsiExec.exe /I{C424CD5E-EA05-4D3E-B5DA-F9F149E1D3AC}
Windows Live Photo Common-->MsiExec.exe /X{C9B6EFD0-4F01-4BBA-8374-39AD99A3ED72}
Windows Live PIMT Platform-->MsiExec.exe /I{6A8DB215-7BCD-4377-B015-2E4541A3E7C6}
Windows Live SOXE Definitions-->MsiExec.exe /I{8A642ACD-CE3A-4A23-A8B1-A0F7EB12B214}
Windows Live SOXE-->MsiExec.exe /I{FE7C0B3D-50B9-4951-BE78-A321CBF86552}
Windows Live UX Platform Language Pack-->MsiExec.exe /I{56232E3D-7EA9-45E0-A371-26CD80510AF7}
Windows Live UX Platform Language Pack-->MsiExec.exe /I{7E9A63B3-8572-4A4B-9F87-3C2A873BBC55}
Windows Live UX Platform Language Pack-->MsiExec.exe /I{E18F981B-401C-4D90-BC57-D8903564D558}
Windows Live UX Platform Language Pack-->MsiExec.exe /I{F09DD76B-D3D3-4558-B5BC-F1EEA6E00162}
Windows Live UX Platform Language Pack-->MsiExec.exe /I{F21F0424-B2FF-40BF-A984-9E0D7FB4C97E}
Windows Live UX Platform-->MsiExec.exe /I{4CCBD1F4-CEEC-452A-9CB8-46564B501315}
Windows Movie Maker 2.6-->MsiExec.exe /X{B3DAF54F-DB25-4586-9EF1-96D24BB14088}
WinFlash-->MsiExec.exe /X{8F21291E-0444-4B1D-B9F9-4370A73E346D}
WinRAR 5.00 (32-bit)-->C:\Program Files (x86)\WinRAR\uninstall.exe
======System event log======
Computer Name: NTB
Event Code: 12
Message: Schéma zásad resetování procesu C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (ID procesu: 4852) od {512A6AC6-EFC1-4441-85C9-CCCF29B69CD2} do {512A6AC6-EFC1-4441-85C9-CCCF29B69CD2}
Record Number: 19607
Source Name: Microsoft-Windows-UserModePowerService
Time Written: 20141003152642.880993-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
Computer Name: NTB
Event Code: 104
Message: Byl vymazán soubor protokolu Windows PowerShell.
Record Number: 19606
Source Name: Microsoft-Windows-Eventlog
Time Written: 20141003152637.736494-000
Event Type: Informace
User: NTB\Karolínka
Computer Name: NTB
Event Code: 104
Message: Byl vymazán soubor protokolu Key Management Service.
Record Number: 19605
Source Name: Microsoft-Windows-Eventlog
Time Written: 20141003152637.658366-000
Event Type: Informace
User: NTB\Karolínka
Computer Name: NTB
Event Code: 104
Message: Byl vymazán soubor protokolu Internet Explorer.
Record Number: 19604
Source Name: Microsoft-Windows-Eventlog
Time Written: 20141003152637.595868-000
Event Type: Informace
User: NTB\Karolínka
Computer Name: NTB
Event Code: 104
Message: Byl vymazán soubor protokolu System.
Record Number: 19603
Source Name: Microsoft-Windows-Eventlog
Time Written: 20141003152637.517749-000
Event Type: Informace
User: NTB\Karolínka
=====Application event log=====
Computer Name: NTB
Event Code: 326
Message: svchost (4364) Instance: Databázový stroj připojil databázi (1, C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb). (Čas=0 s)
Sekvence interního načasování: [1] 0.000, [2] 0.000, [3] 0.031, [4] 0.000, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.000, [12] 0.000.
Uložená mezipaměť: 1 0
Record Number: 21562
Source Name: ESENT
Time Written: 20141003153211.000000-000
Event Type: Informace
User:
Computer Name: NTB
Event Code: 327
Message: svchost (4364) Instance: Databázový stroj odpojil databázi (1, C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb). (Čas=0 s)
Sekvence interního načasování: [1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.031, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.032, [11] 0.015, [12] 0.000.
Obnovená mezipaměť: 0 0
Record Number: 21561
Source Name: ESENT
Time Written: 20141003153211.000000-000
Event Type: Informace
User:
Computer Name: NTB
Event Code: 326
Message: svchost (4364) Instance: Databázový stroj připojil databázi (1, C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb). (Čas=0 s)
Sekvence interního načasování: [1] 0.000, [2] 0.000, [3] 0.031, [4] 0.000, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.000, [12] 0.000.
Uložená mezipaměť: 1 0
Record Number: 21560
Source Name: ESENT
Time Written: 20141003153211.000000-000
Event Type: Informace
User:
Computer Name: NTB
Event Code: 105
Message: svchost (4364) Instance: Databázový stroj spustil novou instanci (0). (Čas=0 s)
Sekvence interního načasování: [1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000.
Record Number: 21559
Source Name: ESENT
Time Written: 20141003153211.000000-000
Event Type: Informace
User:
Computer Name: NTB
Event Code: 102
Message: svchost (4364) Instance: Databázový stroj (6.03.9600.0000) spouští novou instanci (0).
Record Number: 21558
Source Name: ESENT
Time Written: 20141003153211.000000-000
Event Type: Informace
User:
=====Security event log=====
Computer Name: NTB
Event Code: 4672
Message: Novému přihlášení byla přiřazena zvláštní oprávnění.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3E7
Oprávnění: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 72746
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20141003153209.833154-000
Event Type: Úspěšný audit
User:
Computer Name: NTB
Event Code: 4624
Message: Účet byl úspěšně přihlášen.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: NTB$
Doména účtu: WORKGROUP
ID přihlášení: 0x3E7
Typ přihlášení: 5
Úroveň zosobnění: Zosobnění
Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3E7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}
Informace o procesu:
ID procesu: 0x374
Název procesu: C:\Windows\System32\services.exe
Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -
Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0
Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.
Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.
Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).
Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.
Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.
Pole úrovně zosobnění označuje rozsah, ve kterém může být proces v přihlašovací relaci zosobněn.
Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 72745
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20141003153209.833154-000
Event Type: Úspěšný audit
User:
Computer Name: NTB
Event Code: 4672
Message: Novému přihlášení byla přiřazena zvláštní oprávnění.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3E7
Oprávnění: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 72744
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20141003153200.378979-000
Event Type: Úspěšný audit
User:
Computer Name: NTB
Event Code: 4624
Message: Účet byl úspěšně přihlášen.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: NTB$
Doména účtu: WORKGROUP
ID přihlášení: 0x3E7
Typ přihlášení: 5
Úroveň zosobnění: Zosobnění
Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3E7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}
Informace o procesu:
ID procesu: 0x374
Název procesu: C:\Windows\System32\services.exe
Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -
Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0
Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.
Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.
Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).
Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.
Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.
Pole úrovně zosobnění označuje rozsah, ve kterém může být proces v přihlašovací relaci zosobněn.
Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 72743
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20141003153200.378979-000
Event Type: Úspěšný audit
User:
Computer Name: NTB
Event Code: 1102
Message: Protokol auditu byl vymazán.
Předmět:
ID zabezpečení: S-1-5-21-3261597805-2257011035-590661094-1002
Název účtu: Karolínka
Název domény: NTB
ID přihlášení: 0xBE022
Record Number: 72742
Source Name: Microsoft-Windows-Eventlog
Time Written: 20141003152637.345874-000
Event Type: Úspěšný audit
User:
======Environment variables======
"FP_NO_HOST_CHECK"=NO
"USERNAME"=SYSTEM
"ComSpec"=%SystemRoot%\system32\cmd.exe
"TMP"=%SystemRoot%\TEMP
"OS"=Windows_NT
"windir"=%SystemRoot%
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=3a09
"Path"=C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64
"configsetroot"=%SystemRoot%\ConfigSetRoot
"asl.log"=Destination=file
-----------------EOF-----------------
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Zavirovaný počítač
Moderátor: Moderátoři
Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Re: Zavirovaný počítač
2. Log:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Karolínka at 2014-10-05 20:26:30
Microsoft Windows 8.1 Pro
System drive C: has 151 GB (53%) free of 286 GB
Total RAM: 6030 MB (70% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:26:34, on 5. 10. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17278)
Boot mode: Normal
Running processes:
C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\APRP\APRP.EXE
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files\trend micro\Karolínka.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O4 - Startup: Odeslat do OneNote.lnk = C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
O23 - Service: Asus WebStorage Windows Service - Unknown owner - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
--
End of file - 10264 bytes
======Listing Processes======
wininit.exe
winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Windows\system32\FBAgent.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
dashost.exe {07b862c4-8b23-4463-899956ec57d6db3f}
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
taskeng.exe {E422E8AC-BF92-4AAF-83B9-ABA90C26A2EA}
taskhostex.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\WINDOWS\Explorer.EXE
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE" /tsr
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe"
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3261597805-2257011035-590661094-10022_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3261597805-2257011035-590661094-10022 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
KBFiltr.exe
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe"
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe"
"C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files\Internet Explorer\iexplore.exe" -ServerName:DefaultBrowserServer
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:4844 CREDAT:267777 /prefetch:1
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\WINDOWS\system32\hkcmd.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\WINDOWS\system32\igfxtray.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX3
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe"
"C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe"
"C:\Program Files\ASUS\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
wmiadap.exe /F /T /R
"C:\Windows\System32\WWAHost.exe" -ServerName:Windows.Store
C:\WINDOWS\WinStore\WSHost.exe -Embedding
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17246_none_fa4ae8e99b1f603c\TiWorker.exe -Embedding
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 580 584 592 65536 588
"C:\Users\Karolínka\Desktop\RSITx64.exe"
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-10-04 612248]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2014-09-21 2334416]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-29 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-10-04 457712]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-29 171944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-01 769496]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-03-27 132736]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-09-04 40336]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSPRP]
C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2013-05-01 3187360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSWebStorage]
C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [2012-12-19 3576784]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DisableS3S4]
c:\windows\temp\DisableS3S464\sethigh.cmd []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\WINDOWS\system32\hkcmd.exe [2013-10-01 771032]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
C:\WINDOWS\system32\igfxtray.exe [2013-10-01 391128]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl10]
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-03-28 91432]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-05-20 1308232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDVCPL]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-05-30 13550152]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"CLMLServer"=C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2012-05-24 111120]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-10-04 4085896]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-03-27 132736]
C:\Users\Karolínka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Odeslat do OneNote.lnk - C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-10-01 623104]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"midi3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2014-10-05 20:26:30 ----D---- C:\rsit
2014-10-05 20:26:30 ----D---- C:\Program Files\trend micro
2014-10-05 20:09:55 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-10-05 20:09:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2014-10-05 20:09:51 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-10-05 20:09:48 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-10-05 20:09:46 ----A---- C:\WINDOWS\system32\mfcore.dll
2014-10-05 20:09:45 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2014-10-05 20:09:45 ----A---- C:\WINDOWS\system32\gpsvc.dll
2014-10-05 20:09:44 ----A---- C:\WINDOWS\system32\wlansvc.dll
2014-10-05 20:09:44 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2014-10-05 20:09:43 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2014-10-05 20:09:43 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2014-10-05 20:09:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2014-10-05 20:09:41 ----A---- C:\WINDOWS\system32\localspl.dll
2014-10-05 20:09:40 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2014-10-05 20:09:40 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-10-05 20:09:40 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2014-10-05 20:09:40 ----A---- C:\WINDOWS\system32\SRH.dll
2014-10-05 20:09:40 ----A---- C:\WINDOWS\system32\printui.dll
2014-10-05 20:09:40 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2014-10-05 20:09:40 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2014-10-05 20:09:40 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2014-10-05 20:09:39 ----A---- C:\WINDOWS\SYSWOW64\printui.dll
2014-10-05 20:09:39 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2014-10-05 20:09:39 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2014-10-05 20:09:39 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2014-10-05 20:09:39 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2014-10-05 20:09:38 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2014-10-05 20:09:38 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2014-10-05 20:09:38 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2014-10-05 20:09:38 ----A---- C:\WINDOWS\system32\srvsvc.dll
2014-10-05 20:09:38 ----A---- C:\WINDOWS\system32\spoolsv.exe
2014-10-05 20:09:38 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-10-05 20:09:37 ----A---- C:\WINDOWS\SYSWOW64\wlanmsm.dll
2014-10-05 20:09:37 ----A---- C:\WINDOWS\SYSWOW64\mftranscode.dll
2014-10-05 20:09:37 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2014-10-05 20:09:37 ----A---- C:\WINDOWS\system32\storagewmi.dll
2014-10-05 20:09:37 ----A---- C:\WINDOWS\system32\SHCore.dll
2014-10-05 20:09:37 ----A---- C:\WINDOWS\system32\puiobj.dll
2014-10-05 20:09:37 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2014-10-05 20:09:36 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\winload.exe
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\usbmon.dll
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\netcfgx.dll
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\mftranscode.dll
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\mfplat.dll
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\comdlg32.dll
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2014-10-05 20:09:35 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2014-10-05 20:09:35 ----A---- C:\WINDOWS\system32\wsecedit.dll
2014-10-05 20:09:35 ----A---- C:\WINDOWS\system32\wisp.dll
2014-10-05 20:09:35 ----A---- C:\WINDOWS\system32\winresume.exe
2014-10-05 20:09:35 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-10-05 20:09:35 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys
2014-10-05 20:09:35 ----A---- C:\WINDOWS\system32\defragsvc.dll
2014-10-05 20:09:35 ----A---- C:\WINDOWS\system32\aclui.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\wpdbusenum.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\winmmbase.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\user32.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2014-10-05 20:09:33 ----A---- C:\WINDOWS\SYSWOW64\winmmbase.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\WorkFoldersGPExt.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\VAN.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\SndVol.exe
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\SettingSync.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\osk.exe
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\conhost.exe
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\clusapi.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\AppxSip.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\SYSWOW64\wisp.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\SYSWOW64\aclui.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\winmm.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\mfps.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\drivers\NdisImPlatform.sys
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\DafPrintProvider.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2014-10-05 20:09:31 ----A---- C:\WINDOWS\SYSWOW64\wsecedit.dll
2014-10-05 20:09:31 ----A---- C:\WINDOWS\SYSWOW64\AppxSip.dll
2014-10-05 20:09:31 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-10-05 20:09:31 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2014-10-05 20:09:31 ----A---- C:\WINDOWS\system32\twinapi.dll
2014-10-05 20:09:31 ----A---- C:\WINDOWS\system32\prnntfy.dll
2014-10-05 20:09:31 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2014-10-05 20:09:31 ----A---- C:\WINDOWS\system32\dwmapi.dll
2014-10-05 20:09:30 ----A---- C:\WINDOWS\SYSWOW64\prnntfy.dll
2014-10-05 20:09:30 ----A---- C:\WINDOWS\system32\gpedit.dll
2014-10-05 20:09:30 ----A---- C:\WINDOWS\system32\Display.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\winmm.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\WebClnt.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\VAN.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\SndVol.exe
2014-10-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\puiapi.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\system32\WebClnt.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\system32\puiapi.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\system32\profsvc.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\system32\ppcsnap.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\system32\iasnap.dll
2014-10-05 20:09:28 ----A---- C:\WINDOWS\system32\wups.dll
2014-10-05 20:09:28 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2014-10-05 20:09:27 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2014-10-05 20:09:27 ----A---- C:\WINDOWS\system32\wwanconn.dll
2014-10-05 20:09:27 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2014-10-05 20:09:27 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-10-05 20:09:27 ----A---- C:\WINDOWS\system32\stobject.dll
2014-10-05 20:09:27 ----A---- C:\WINDOWS\system32\mispace.dll
2014-10-05 20:09:27 ----A---- C:\WINDOWS\system32\drivers\IPMIDrv.sys
2014-10-05 20:09:27 ----A---- C:\WINDOWS\system32\dab.dll
2014-10-05 20:09:27 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\rsaenh.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\osk.exe
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\iasnap.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\gpedit.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\DafPrintProvider.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\system32\wups2.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-10-05 20:09:26 ----A---- C:\WINDOWS\system32\wshbth.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\system32\wlanapi.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\system32\schannel.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\system32\rsaenh.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\system32\pmcsnap.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2014-10-05 20:09:25 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-10-05 20:09:25 ----A---- C:\WINDOWS\SYSWOW64\wshbth.dll
2014-10-05 20:09:25 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2014-10-05 20:09:25 ----A---- C:\WINDOWS\SYSWOW64\KBDRUM.DLL
2014-10-05 20:09:25 ----A---- C:\WINDOWS\SYSWOW64\ActionCenter.dll
2014-10-05 20:09:25 ----A---- C:\WINDOWS\system32\wlansvcpal.dll
2014-10-05 20:09:25 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2014-10-05 20:09:25 ----A---- C:\WINDOWS\system32\PrintDialogs.dll
2014-10-05 20:09:25 ----A---- C:\WINDOWS\system32\KBDRUM.DLL
2014-10-05 20:09:25 ----A---- C:\WINDOWS\system32\Defrag.exe
2014-10-05 20:09:25 ----A---- C:\WINDOWS\system32\browser.dll
2014-10-05 20:09:24 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2014-10-05 20:09:24 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2014-10-05 20:09:24 ----A---- C:\WINDOWS\SYSWOW64\KBDYAK.DLL
2014-10-05 20:09:24 ----A---- C:\WINDOWS\SYSWOW64\KBDRU1.DLL
2014-10-05 20:09:24 ----A---- C:\WINDOWS\SYSWOW64\KBDRU.DLL
2014-10-05 20:09:24 ----A---- C:\WINDOWS\SYSWOW64\KBDBASH.DLL
2014-10-05 20:09:24 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2014-10-05 20:09:24 ----A---- C:\WINDOWS\system32\KBDYAK.DLL
2014-10-05 20:09:24 ----A---- C:\WINDOWS\system32\KBDRU1.DLL
2014-10-05 20:09:24 ----A---- C:\WINDOWS\system32\KBDRU.DLL
2014-10-05 20:09:24 ----A---- C:\WINDOWS\system32\KBDBASH.DLL
2014-10-05 20:09:24 ----A---- C:\WINDOWS\system32\BluetoothApis.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\SYSWOW64\KBDTAT.DLL
2014-10-05 20:09:23 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\SYSWOW64\BluetoothApis.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\system32\wwanmm.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\system32\wlansec.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\system32\rdpudd.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\system32\KBDTAT.DLL
2014-10-05 20:09:23 ----A---- C:\WINDOWS\system32\drivers\bthpan.sys
2014-10-05 20:09:23 ----A---- C:\WINDOWS\system32\compstui.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\system32\certcli.dll
2014-10-05 20:09:22 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-10-05 20:09:22 ----A---- C:\WINDOWS\SYSWOW64\KBDTT102.DLL
2014-10-05 20:09:22 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-10-05 20:09:22 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-10-05 20:09:22 ----A---- C:\WINDOWS\system32\KBDTT102.DLL
2014-10-05 19:12:12 ----A---- C:\WINDOWS\system32\termsrv.dll
2014-10-05 19:05:47 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2014-10-05 19:05:47 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2014-10-05 19:05:45 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-10-05 19:05:45 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-10-05 19:05:44 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-10-05 19:05:44 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-10-05 19:05:44 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-10-05 19:05:44 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-10-05 19:05:41 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-10-05 19:05:41 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-10-05 19:05:41 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-10-05 19:05:41 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-10-05 19:05:41 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-10-05 19:05:40 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-10-05 19:05:40 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-10-05 19:05:40 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-10-05 19:05:40 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-10-05 19:05:39 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-10-05 19:05:39 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-10-05 19:05:39 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2014-10-05 19:05:39 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-10-05 19:05:38 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-10-05 19:05:38 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-10-05 19:05:37 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-10-05 19:05:33 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-10-05 19:05:33 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-10-05 19:05:33 ----A---- C:\WINDOWS\system32\wininet.dll
2014-10-05 19:05:32 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-10-05 19:05:32 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-10-05 19:05:32 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-10-05 19:05:31 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-10-05 19:05:30 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-10-05 19:05:29 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-10-05 19:05:28 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-10-05 19:05:28 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-10-05 19:04:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-10-05 19:04:53 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-10-05 19:04:52 ----A---- C:\WINDOWS\SYSWOW64\SkyDriveShell.dll
2014-10-05 19:04:52 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-10-05 19:04:51 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-10-05 19:04:50 ----A---- C:\WINDOWS\system32\SkyDriveShell.dll
2014-10-05 19:04:50 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-10-05 19:04:50 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2014-10-05 19:04:50 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2014-10-05 19:04:50 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-10-05 19:04:49 ----A---- C:\WINDOWS\system32\shell32.dll
2014-10-05 19:04:48 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-10-05 19:04:47 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2014-10-05 19:04:47 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-10-05 19:04:47 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2014-10-05 19:04:46 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-10-05 19:04:46 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2014-10-05 19:04:46 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-10-05 19:04:46 ----A---- C:\WINDOWS\system32\propsys.dll
2014-10-05 19:04:46 ----A---- C:\WINDOWS\system32\ntdll.dll
2014-10-05 19:04:46 ----A---- C:\WINDOWS\system32\KernelBase.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\SYSWOW64\Wldap32.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\system32\Wldap32.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2014-10-05 19:04:44 ----A---- C:\WINDOWS\SYSWOW64\rdvidcrl.dll
2014-10-05 19:04:44 ----A---- C:\WINDOWS\system32\rdvidcrl.dll
2014-10-05 19:04:44 ----A---- C:\WINDOWS\system32\ProximityService.dll
2014-10-05 19:04:44 ----A---- C:\WINDOWS\system32\pcsvDevice.dll
2014-10-05 19:04:44 ----A---- C:\WINDOWS\system32\httpprxm.dll
2014-10-05 19:04:44 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-10-05 19:04:44 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2014-10-05 19:04:44 ----A---- C:\WINDOWS\system32\bisrv.dll
2014-10-05 19:04:44 ----A---- C:\WINDOWS\system32\adhsvc.dll
2014-10-05 19:04:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-05 19:04:43 ----A---- C:\WINDOWS\system32\WSReset.exe
2014-10-05 19:04:43 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-05 19:04:36 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-10-05 19:04:36 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-10-05 19:04:36 ----A---- C:\WINDOWS\system32\uDWM.dll
2014-10-05 19:04:36 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-10-05 19:04:35 ----A---- C:\WINDOWS\system32\twinui.dll
2014-10-05 19:04:35 ----A---- C:\WINDOWS\explorer.exe
2014-10-05 19:04:34 ----A---- C:\WINDOWS\SYSWOW64\UXInit.dll
2014-10-05 19:04:34 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2014-10-05 19:04:34 ----A---- C:\WINDOWS\system32\UXInit.dll
2014-10-05 19:04:32 ----A---- C:\WINDOWS\system32\win32k.sys
2014-10-05 19:04:31 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-10-05 19:04:31 ----A---- C:\WINDOWS\system32\authui.dll
2014-10-05 19:04:30 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-10-05 19:04:30 ----A---- C:\WINDOWS\system32\msi.dll
2014-10-05 19:04:30 ----A---- C:\WINDOWS\system32\appinfo.dll
2014-10-05 19:03:27 ----A---- C:\WINDOWS\system32\d3d9.dll
2014-10-05 19:03:25 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2014-10-05 19:03:25 ----A---- C:\WINDOWS\system32\vpnike.dll
2014-10-05 19:03:24 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore.dll
2014-10-05 19:03:24 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2014-10-05 19:03:24 ----A---- C:\WINDOWS\system32\dhcpcore.dll
2014-10-05 19:03:23 ----A---- C:\WINDOWS\SYSWOW64\framedynos.dll
2014-10-05 19:03:23 ----A---- C:\WINDOWS\system32\fveapi.dll
2014-10-05 19:03:23 ----A---- C:\WINDOWS\system32\framedynos.dll
2014-10-05 19:03:23 ----A---- C:\WINDOWS\system32\dhcpcore6.dll
2014-10-05 19:03:23 ----A---- C:\WINDOWS\system32\bdesvc.dll
2014-10-05 19:03:22 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore6.dll
2014-10-05 19:03:22 ----A---- C:\WINDOWS\system32\winbici.dll
2014-10-05 19:03:22 ----A---- C:\WINDOWS\system32\ncobjapi.dll
2014-10-05 19:03:22 ----A---- C:\WINDOWS\system32\framedyn.dll
2014-10-05 19:03:22 ----A---- C:\WINDOWS\system32\drivers\agilevpn.sys
2014-10-05 19:03:22 ----A---- C:\WINDOWS\system32\BFE.DLL
2014-10-05 19:03:21 ----A---- C:\WINDOWS\SYSWOW64\ncobjapi.dll
2014-10-05 19:03:21 ----A---- C:\WINDOWS\system32\drivers\vwifimp.sys
2014-10-05 19:03:20 ----A---- C:\WINDOWS\SYSWOW64\Robocopy.exe
2014-10-05 19:03:20 ----A---- C:\WINDOWS\SYSWOW64\framedyn.dll
2014-10-05 19:03:20 ----A---- C:\WINDOWS\SYSWOW64\dhcpcsvc6.dll
2014-10-05 19:03:20 ----A---- C:\WINDOWS\SYSWOW64\dhcpcsvc.dll
2014-10-05 19:03:20 ----A---- C:\WINDOWS\SYSWOW64\d3d8thk.dll
2014-10-05 19:03:20 ----A---- C:\WINDOWS\system32\Robocopy.exe
2014-10-05 19:03:20 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2014-10-05 19:03:20 ----A---- C:\WINDOWS\system32\fvecpl.dll
2014-10-05 19:03:20 ----A---- C:\WINDOWS\system32\drivers\vwififlt.sys
2014-10-05 19:03:20 ----A---- C:\WINDOWS\system32\dhcpcsvc6.dll
2014-10-05 19:03:20 ----A---- C:\WINDOWS\system32\dhcpcsvc.dll
2014-10-05 19:03:20 ----A---- C:\WINDOWS\system32\BulkOperationHost.exe
2014-10-05 19:03:19 ----A---- C:\WINDOWS\system32\srms.dat
2014-10-05 19:03:19 ----A---- C:\WINDOWS\system32\reseteng.dll
2014-10-05 19:03:19 ----A---- C:\WINDOWS\system32\fvewiz.dll
2014-10-05 19:03:19 ----A---- C:\WINDOWS\system32\BdeHdCfgLib.dll
2014-10-05 19:03:19 ----A---- C:\WINDOWS\system32\BdeHdCfg.exe
2014-10-05 19:03:15 ----A---- C:\WINDOWS\system32\WSDMon.dll
2014-10-05 19:03:15 ----A---- C:\WINDOWS\system32\tcpmon.dll
2014-10-05 19:03:15 ----A---- C:\WINDOWS\system32\drivers\msgpioclx.sys
2014-10-05 19:03:11 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2014-10-05 19:03:11 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2014-10-05 19:02:57 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2014-10-05 19:02:57 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2014-10-05 19:02:06 ----A---- C:\WINDOWS\SYSWOW64\msvcr120_clr0400.dll
2014-10-05 19:02:06 ----A---- C:\WINDOWS\system32\msvcr120_clr0400.dll
2014-10-05 19:01:57 ----A---- C:\WINDOWS\system32\DWrite.dll
2014-10-05 19:01:56 ----A---- C:\WINDOWS\system32\FntCache.dll
2014-10-05 19:01:55 ----A---- C:\WINDOWS\SYSWOW64\mrt100.dll
2014-10-05 19:01:55 ----A---- C:\WINDOWS\SYSWOW64\mrt_map.dll
2014-10-05 19:01:55 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2014-10-05 19:01:55 ----A---- C:\WINDOWS\system32\mrt100.dll
2014-10-05 19:01:55 ----A---- C:\WINDOWS\system32\mrt_map.dll
2014-10-05 19:01:53 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-10-05 19:01:53 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2014-10-05 19:01:53 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-10-05 19:01:53 ----A---- C:\WINDOWS\system32\dxgi.dll
2014-10-05 19:01:53 ----A---- C:\WINDOWS\system32\dwmcore.dll
2014-10-05 19:01:53 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2014-10-05 19:01:49 ----A---- C:\WINDOWS\system32\drivers\usbport.sys
2014-10-05 19:01:48 ----A---- C:\WINDOWS\SYSWOW64\gpprefcl.dll
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\WUDFSvc.dll
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\WUDFPlatform.dll
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\WUDFHost.exe
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\hal.dll
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\gpprefcl.dll
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\drivers\WUDFRd.sys
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\drivers\WUDFPf.sys
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\drivers\usbuhci.sys
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\drivers\usbd.sys
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\cscui.dll
2014-10-05 19:01:47 ----A---- C:\WINDOWS\SYSWOW64\DaOtpCredentialProvider.dll
2014-10-05 19:01:40 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-10-05 19:01:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2014-10-05 19:01:30 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-10-05 19:01:29 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2014-10-05 19:01:29 ----A---- C:\WINDOWS\system32\winmde.dll
2014-10-05 19:01:28 ----A---- C:\WINDOWS\system32\wmpmde.dll
2014-10-05 19:01:28 ----A---- C:\WINDOWS\system32\services.exe
2014-10-05 19:01:27 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-10-05 19:01:27 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-10-05 19:01:27 ----A---- C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-10-05 19:01:27 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-10-05 19:01:26 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-10-05 19:01:26 ----A---- C:\WINDOWS\SYSWOW64\GeofenceMonitorService.dll
2014-10-05 19:01:26 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-10-05 19:01:26 ----A---- C:\WINDOWS\system32\mfsvr.dll
2014-10-05 19:01:26 ----A---- C:\WINDOWS\system32\MDEServer.exe
2014-10-05 19:01:25 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2014-10-05 19:01:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2014-10-05 19:01:25 ----A---- C:\WINDOWS\system32\XpsGdiConverter.dll
2014-10-05 19:01:24 ----A---- C:\WINDOWS\SYSWOW64\rdpencom.dll
2014-10-05 19:01:24 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2014-10-05 19:01:24 ----A---- C:\WINDOWS\system32\rdpencom.dll
2014-10-05 19:01:24 ----A---- C:\WINDOWS\system32\ploptin.dll
2014-10-05 19:01:24 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2014-10-05 19:01:24 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\SYSWOW64\XpsGdiConverter.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\wscsvc.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\VSSVC.exe
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\swprv.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\rpchttp.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\resutils.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\gpapi.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2014-10-05 19:01:22 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\SYSWOW64\rpchttp.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\SYSWOW64\MSVideoDSP.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\SYSWOW64\gpapi.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\wintrust.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\srcore.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\mfpmp.exe
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\mf.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\energyprov.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-10-05 19:01:21 ----A---- C:\WINDOWS\SYSWOW64\tlscsp.dll
2014-10-05 19:01:21 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2014-10-05 19:01:21 ----A---- C:\WINDOWS\system32\tlscsp.dll
2014-10-05 19:01:21 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2014-10-05 19:01:20 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2014-10-05 19:01:20 ----A---- C:\WINDOWS\SYSWOW64\srclient.dll
2014-10-05 19:01:20 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2014-10-05 19:01:20 ----A---- C:\WINDOWS\system32\tsgqec.dll
2014-10-05 19:01:20 ----A---- C:\WINDOWS\system32\srclient.dll
2014-10-05 19:01:20 ----A---- C:\WINDOWS\system32\rstrui.exe
2014-10-05 19:01:20 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-10-05 19:01:14 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2014-10-05 19:01:13 ----A---- C:\WINDOWS\system32\schedsvc.dll
2014-10-05 19:01:01 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2014-10-05 19:01:01 ----A---- C:\WINDOWS\system32\qedit.dll
2014-10-05 19:01:01 ----A---- C:\WINDOWS\system32\gdi32.dll
2014-10-05 19:01:00 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2014-10-05 19:00:59 ----A---- C:\WINDOWS\system32\wpccpl.dll
2014-10-05 19:00:58 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2014-10-05 19:00:57 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-10-05 19:00:57 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-10-05 19:00:57 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-10-05 19:00:56 ----A---- C:\WINDOWS\SYSWOW64\wusa.exe
2014-10-05 19:00:56 ----A---- C:\WINDOWS\system32\wusa.exe
2014-10-05 19:00:54 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys
2014-10-05 19:00:54 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2014-10-05 19:00:53 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2014-10-05 19:00:49 ----A---- C:\WINDOWS\system32\WpcMon.exe
2014-10-05 19:00:48 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2014-10-05 19:00:48 ----A---- C:\WINDOWS\system32\WpcWebSync.dll
2014-10-05 19:00:48 ----A---- C:\WINDOWS\system32\Wpc.dll
2014-10-05 19:00:41 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2014-10-05 19:00:41 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-10-05 19:00:41 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-10-05 19:00:41 ----A---- C:\WINDOWS\system32\ubpm.dll
2014-10-05 19:00:41 ----A---- C:\WINDOWS\system32\storewuauth.dll
2014-10-05 19:00:40 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-10-05 19:00:40 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-10-05 19:00:37 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-10-05 19:00:36 ----A---- C:\WINDOWS\system32\devinv.dll
2014-10-05 19:00:36 ----A---- C:\WINDOWS\system32\aepic.dll
2014-10-05 19:00:36 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-10-05 19:00:07 ----A---- C:\WINDOWS\SYSWOW64\drvinst.exe
2014-10-05 19:00:07 ----A---- C:\WINDOWS\system32\drvinst.exe
2014-10-05 19:00:07 ----A---- C:\WINDOWS\system32\drvcfg.exe
2014-10-05 18:59:37 ----A---- C:\WINDOWS\SYSWOW64\msihnd.dll
2014-10-05 18:59:37 ----A---- C:\WINDOWS\system32\msihnd.dll
2014-10-05 18:59:37 ----A---- C:\WINDOWS\system32\consent.exe
2014-10-05 18:59:12 ----A---- C:\WINDOWS\system32\MDMAgent.exe
2014-10-05 18:58:57 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2014-10-05 18:58:57 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2014-10-05 18:58:57 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2014-10-05 18:05:34 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-10-05 18:05:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2014-10-05 18:05:27 ----A---- C:\WINDOWS\system32\msftedit.dll
2014-10-05 18:05:26 ----A---- C:\WINDOWS\system32\msxml6.dll
2014-10-05 18:05:25 ----A---- C:\WINDOWS\system32\d3d11.dll
2014-10-05 18:05:25 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-10-05 18:05:24 ----A---- C:\WINDOWS\system32\ole32.dll
2014-10-05 18:05:23 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2014-10-05 18:05:23 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2014-10-05 18:05:22 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2014-10-05 18:05:22 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
Logfile of random's system information tool 1.10 (written by random/random)
Run by Karolínka at 2014-10-05 20:26:30
Microsoft Windows 8.1 Pro
System drive C: has 151 GB (53%) free of 286 GB
Total RAM: 6030 MB (70% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:26:34, on 5. 10. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17278)
Boot mode: Normal
Running processes:
C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\APRP\APRP.EXE
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files\trend micro\Karolínka.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O4 - Startup: Odeslat do OneNote.lnk = C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
O23 - Service: Asus WebStorage Windows Service - Unknown owner - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
--
End of file - 10264 bytes
======Listing Processes======
wininit.exe
winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Windows\system32\FBAgent.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
dashost.exe {07b862c4-8b23-4463-899956ec57d6db3f}
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
taskeng.exe {E422E8AC-BF92-4AAF-83B9-ABA90C26A2EA}
taskhostex.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\WINDOWS\Explorer.EXE
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE" /tsr
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe"
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3261597805-2257011035-590661094-10022_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3261597805-2257011035-590661094-10022 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
KBFiltr.exe
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe"
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe"
"C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files\Internet Explorer\iexplore.exe" -ServerName:DefaultBrowserServer
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:4844 CREDAT:267777 /prefetch:1
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\WINDOWS\system32\hkcmd.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\WINDOWS\system32\igfxtray.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX3
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe"
"C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe"
"C:\Program Files\ASUS\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
wmiadap.exe /F /T /R
"C:\Windows\System32\WWAHost.exe" -ServerName:Windows.Store
C:\WINDOWS\WinStore\WSHost.exe -Embedding
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17246_none_fa4ae8e99b1f603c\TiWorker.exe -Embedding
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 580 584 592 65536 588
"C:\Users\Karolínka\Desktop\RSITx64.exe"
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-10-04 612248]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2014-09-21 2334416]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-29 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-10-04 457712]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-29 171944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-01 769496]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-03-27 132736]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-09-04 40336]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSPRP]
C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2013-05-01 3187360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSWebStorage]
C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [2012-12-19 3576784]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DisableS3S4]
c:\windows\temp\DisableS3S464\sethigh.cmd []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\WINDOWS\system32\hkcmd.exe [2013-10-01 771032]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
C:\WINDOWS\system32\igfxtray.exe [2013-10-01 391128]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl10]
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-03-28 91432]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-05-20 1308232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDVCPL]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-05-30 13550152]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"CLMLServer"=C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2012-05-24 111120]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-10-04 4085896]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-03-27 132736]
C:\Users\Karolínka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Odeslat do OneNote.lnk - C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-10-01 623104]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"midi3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2014-10-05 20:26:30 ----D---- C:\rsit
2014-10-05 20:26:30 ----D---- C:\Program Files\trend micro
2014-10-05 20:09:55 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-10-05 20:09:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2014-10-05 20:09:51 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-10-05 20:09:48 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-10-05 20:09:46 ----A---- C:\WINDOWS\system32\mfcore.dll
2014-10-05 20:09:45 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2014-10-05 20:09:45 ----A---- C:\WINDOWS\system32\gpsvc.dll
2014-10-05 20:09:44 ----A---- C:\WINDOWS\system32\wlansvc.dll
2014-10-05 20:09:44 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2014-10-05 20:09:43 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2014-10-05 20:09:43 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2014-10-05 20:09:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2014-10-05 20:09:41 ----A---- C:\WINDOWS\system32\localspl.dll
2014-10-05 20:09:40 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2014-10-05 20:09:40 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-10-05 20:09:40 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2014-10-05 20:09:40 ----A---- C:\WINDOWS\system32\SRH.dll
2014-10-05 20:09:40 ----A---- C:\WINDOWS\system32\printui.dll
2014-10-05 20:09:40 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2014-10-05 20:09:40 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2014-10-05 20:09:40 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2014-10-05 20:09:39 ----A---- C:\WINDOWS\SYSWOW64\printui.dll
2014-10-05 20:09:39 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2014-10-05 20:09:39 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2014-10-05 20:09:39 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2014-10-05 20:09:39 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2014-10-05 20:09:38 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2014-10-05 20:09:38 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2014-10-05 20:09:38 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2014-10-05 20:09:38 ----A---- C:\WINDOWS\system32\srvsvc.dll
2014-10-05 20:09:38 ----A---- C:\WINDOWS\system32\spoolsv.exe
2014-10-05 20:09:38 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-10-05 20:09:37 ----A---- C:\WINDOWS\SYSWOW64\wlanmsm.dll
2014-10-05 20:09:37 ----A---- C:\WINDOWS\SYSWOW64\mftranscode.dll
2014-10-05 20:09:37 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2014-10-05 20:09:37 ----A---- C:\WINDOWS\system32\storagewmi.dll
2014-10-05 20:09:37 ----A---- C:\WINDOWS\system32\SHCore.dll
2014-10-05 20:09:37 ----A---- C:\WINDOWS\system32\puiobj.dll
2014-10-05 20:09:37 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2014-10-05 20:09:36 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\winload.exe
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\usbmon.dll
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\netcfgx.dll
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\mftranscode.dll
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\mfplat.dll
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\comdlg32.dll
2014-10-05 20:09:36 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2014-10-05 20:09:35 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2014-10-05 20:09:35 ----A---- C:\WINDOWS\system32\wsecedit.dll
2014-10-05 20:09:35 ----A---- C:\WINDOWS\system32\wisp.dll
2014-10-05 20:09:35 ----A---- C:\WINDOWS\system32\winresume.exe
2014-10-05 20:09:35 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-10-05 20:09:35 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys
2014-10-05 20:09:35 ----A---- C:\WINDOWS\system32\defragsvc.dll
2014-10-05 20:09:35 ----A---- C:\WINDOWS\system32\aclui.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\wpdbusenum.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\winmmbase.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\user32.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2014-10-05 20:09:34 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2014-10-05 20:09:33 ----A---- C:\WINDOWS\SYSWOW64\winmmbase.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\WorkFoldersGPExt.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\VAN.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\SndVol.exe
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\SettingSync.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\osk.exe
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\conhost.exe
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\clusapi.dll
2014-10-05 20:09:33 ----A---- C:\WINDOWS\system32\AppxSip.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\SYSWOW64\wisp.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\SYSWOW64\aclui.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\winmm.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\mfps.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\drivers\NdisImPlatform.sys
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\DafPrintProvider.dll
2014-10-05 20:09:32 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2014-10-05 20:09:31 ----A---- C:\WINDOWS\SYSWOW64\wsecedit.dll
2014-10-05 20:09:31 ----A---- C:\WINDOWS\SYSWOW64\AppxSip.dll
2014-10-05 20:09:31 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-10-05 20:09:31 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2014-10-05 20:09:31 ----A---- C:\WINDOWS\system32\twinapi.dll
2014-10-05 20:09:31 ----A---- C:\WINDOWS\system32\prnntfy.dll
2014-10-05 20:09:31 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2014-10-05 20:09:31 ----A---- C:\WINDOWS\system32\dwmapi.dll
2014-10-05 20:09:30 ----A---- C:\WINDOWS\SYSWOW64\prnntfy.dll
2014-10-05 20:09:30 ----A---- C:\WINDOWS\system32\gpedit.dll
2014-10-05 20:09:30 ----A---- C:\WINDOWS\system32\Display.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\winmm.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\WebClnt.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\VAN.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\SndVol.exe
2014-10-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\puiapi.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\system32\WebClnt.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\system32\puiapi.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\system32\profsvc.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\system32\ppcsnap.dll
2014-10-05 20:09:29 ----A---- C:\WINDOWS\system32\iasnap.dll
2014-10-05 20:09:28 ----A---- C:\WINDOWS\system32\wups.dll
2014-10-05 20:09:28 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2014-10-05 20:09:27 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2014-10-05 20:09:27 ----A---- C:\WINDOWS\system32\wwanconn.dll
2014-10-05 20:09:27 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2014-10-05 20:09:27 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-10-05 20:09:27 ----A---- C:\WINDOWS\system32\stobject.dll
2014-10-05 20:09:27 ----A---- C:\WINDOWS\system32\mispace.dll
2014-10-05 20:09:27 ----A---- C:\WINDOWS\system32\drivers\IPMIDrv.sys
2014-10-05 20:09:27 ----A---- C:\WINDOWS\system32\dab.dll
2014-10-05 20:09:27 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\rsaenh.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\osk.exe
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\iasnap.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\gpedit.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\SYSWOW64\DafPrintProvider.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\system32\wups2.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-10-05 20:09:26 ----A---- C:\WINDOWS\system32\wshbth.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\system32\wlanapi.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\system32\schannel.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\system32\rsaenh.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\system32\pmcsnap.dll
2014-10-05 20:09:26 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2014-10-05 20:09:25 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-10-05 20:09:25 ----A---- C:\WINDOWS\SYSWOW64\wshbth.dll
2014-10-05 20:09:25 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2014-10-05 20:09:25 ----A---- C:\WINDOWS\SYSWOW64\KBDRUM.DLL
2014-10-05 20:09:25 ----A---- C:\WINDOWS\SYSWOW64\ActionCenter.dll
2014-10-05 20:09:25 ----A---- C:\WINDOWS\system32\wlansvcpal.dll
2014-10-05 20:09:25 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2014-10-05 20:09:25 ----A---- C:\WINDOWS\system32\PrintDialogs.dll
2014-10-05 20:09:25 ----A---- C:\WINDOWS\system32\KBDRUM.DLL
2014-10-05 20:09:25 ----A---- C:\WINDOWS\system32\Defrag.exe
2014-10-05 20:09:25 ----A---- C:\WINDOWS\system32\browser.dll
2014-10-05 20:09:24 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2014-10-05 20:09:24 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2014-10-05 20:09:24 ----A---- C:\WINDOWS\SYSWOW64\KBDYAK.DLL
2014-10-05 20:09:24 ----A---- C:\WINDOWS\SYSWOW64\KBDRU1.DLL
2014-10-05 20:09:24 ----A---- C:\WINDOWS\SYSWOW64\KBDRU.DLL
2014-10-05 20:09:24 ----A---- C:\WINDOWS\SYSWOW64\KBDBASH.DLL
2014-10-05 20:09:24 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2014-10-05 20:09:24 ----A---- C:\WINDOWS\system32\KBDYAK.DLL
2014-10-05 20:09:24 ----A---- C:\WINDOWS\system32\KBDRU1.DLL
2014-10-05 20:09:24 ----A---- C:\WINDOWS\system32\KBDRU.DLL
2014-10-05 20:09:24 ----A---- C:\WINDOWS\system32\KBDBASH.DLL
2014-10-05 20:09:24 ----A---- C:\WINDOWS\system32\BluetoothApis.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\SYSWOW64\KBDTAT.DLL
2014-10-05 20:09:23 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\SYSWOW64\BluetoothApis.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\system32\wwanmm.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\system32\wlansec.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\system32\rdpudd.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\system32\KBDTAT.DLL
2014-10-05 20:09:23 ----A---- C:\WINDOWS\system32\drivers\bthpan.sys
2014-10-05 20:09:23 ----A---- C:\WINDOWS\system32\compstui.dll
2014-10-05 20:09:23 ----A---- C:\WINDOWS\system32\certcli.dll
2014-10-05 20:09:22 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-10-05 20:09:22 ----A---- C:\WINDOWS\SYSWOW64\KBDTT102.DLL
2014-10-05 20:09:22 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-10-05 20:09:22 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-10-05 20:09:22 ----A---- C:\WINDOWS\system32\KBDTT102.DLL
2014-10-05 19:12:12 ----A---- C:\WINDOWS\system32\termsrv.dll
2014-10-05 19:05:47 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2014-10-05 19:05:47 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2014-10-05 19:05:45 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-10-05 19:05:45 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-10-05 19:05:44 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-10-05 19:05:44 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-10-05 19:05:44 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-10-05 19:05:44 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-10-05 19:05:41 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-10-05 19:05:41 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-10-05 19:05:41 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-10-05 19:05:41 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-10-05 19:05:41 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-10-05 19:05:40 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-10-05 19:05:40 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-10-05 19:05:40 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-10-05 19:05:40 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-10-05 19:05:39 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-10-05 19:05:39 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-10-05 19:05:39 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2014-10-05 19:05:39 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-10-05 19:05:38 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-10-05 19:05:38 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-10-05 19:05:37 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-10-05 19:05:33 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-10-05 19:05:33 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-10-05 19:05:33 ----A---- C:\WINDOWS\system32\wininet.dll
2014-10-05 19:05:32 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-10-05 19:05:32 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-10-05 19:05:32 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-10-05 19:05:31 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-10-05 19:05:30 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-10-05 19:05:29 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-10-05 19:05:28 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-10-05 19:05:28 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-10-05 19:04:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-10-05 19:04:53 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-10-05 19:04:52 ----A---- C:\WINDOWS\SYSWOW64\SkyDriveShell.dll
2014-10-05 19:04:52 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-10-05 19:04:51 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-10-05 19:04:50 ----A---- C:\WINDOWS\system32\SkyDriveShell.dll
2014-10-05 19:04:50 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-10-05 19:04:50 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2014-10-05 19:04:50 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2014-10-05 19:04:50 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-10-05 19:04:49 ----A---- C:\WINDOWS\system32\shell32.dll
2014-10-05 19:04:48 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-10-05 19:04:47 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2014-10-05 19:04:47 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-10-05 19:04:47 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2014-10-05 19:04:46 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-10-05 19:04:46 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2014-10-05 19:04:46 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-10-05 19:04:46 ----A---- C:\WINDOWS\system32\propsys.dll
2014-10-05 19:04:46 ----A---- C:\WINDOWS\system32\ntdll.dll
2014-10-05 19:04:46 ----A---- C:\WINDOWS\system32\KernelBase.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\SYSWOW64\Wldap32.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\system32\Wldap32.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2014-10-05 19:04:45 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2014-10-05 19:04:44 ----A---- C:\WINDOWS\SYSWOW64\rdvidcrl.dll
2014-10-05 19:04:44 ----A---- C:\WINDOWS\system32\rdvidcrl.dll
2014-10-05 19:04:44 ----A---- C:\WINDOWS\system32\ProximityService.dll
2014-10-05 19:04:44 ----A---- C:\WINDOWS\system32\pcsvDevice.dll
2014-10-05 19:04:44 ----A---- C:\WINDOWS\system32\httpprxm.dll
2014-10-05 19:04:44 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-10-05 19:04:44 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2014-10-05 19:04:44 ----A---- C:\WINDOWS\system32\bisrv.dll
2014-10-05 19:04:44 ----A---- C:\WINDOWS\system32\adhsvc.dll
2014-10-05 19:04:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-05 19:04:43 ----A---- C:\WINDOWS\system32\WSReset.exe
2014-10-05 19:04:43 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-05 19:04:36 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-10-05 19:04:36 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-10-05 19:04:36 ----A---- C:\WINDOWS\system32\uDWM.dll
2014-10-05 19:04:36 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-10-05 19:04:35 ----A---- C:\WINDOWS\system32\twinui.dll
2014-10-05 19:04:35 ----A---- C:\WINDOWS\explorer.exe
2014-10-05 19:04:34 ----A---- C:\WINDOWS\SYSWOW64\UXInit.dll
2014-10-05 19:04:34 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2014-10-05 19:04:34 ----A---- C:\WINDOWS\system32\UXInit.dll
2014-10-05 19:04:32 ----A---- C:\WINDOWS\system32\win32k.sys
2014-10-05 19:04:31 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-10-05 19:04:31 ----A---- C:\WINDOWS\system32\authui.dll
2014-10-05 19:04:30 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-10-05 19:04:30 ----A---- C:\WINDOWS\system32\msi.dll
2014-10-05 19:04:30 ----A---- C:\WINDOWS\system32\appinfo.dll
2014-10-05 19:03:27 ----A---- C:\WINDOWS\system32\d3d9.dll
2014-10-05 19:03:25 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2014-10-05 19:03:25 ----A---- C:\WINDOWS\system32\vpnike.dll
2014-10-05 19:03:24 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore.dll
2014-10-05 19:03:24 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2014-10-05 19:03:24 ----A---- C:\WINDOWS\system32\dhcpcore.dll
2014-10-05 19:03:23 ----A---- C:\WINDOWS\SYSWOW64\framedynos.dll
2014-10-05 19:03:23 ----A---- C:\WINDOWS\system32\fveapi.dll
2014-10-05 19:03:23 ----A---- C:\WINDOWS\system32\framedynos.dll
2014-10-05 19:03:23 ----A---- C:\WINDOWS\system32\dhcpcore6.dll
2014-10-05 19:03:23 ----A---- C:\WINDOWS\system32\bdesvc.dll
2014-10-05 19:03:22 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore6.dll
2014-10-05 19:03:22 ----A---- C:\WINDOWS\system32\winbici.dll
2014-10-05 19:03:22 ----A---- C:\WINDOWS\system32\ncobjapi.dll
2014-10-05 19:03:22 ----A---- C:\WINDOWS\system32\framedyn.dll
2014-10-05 19:03:22 ----A---- C:\WINDOWS\system32\drivers\agilevpn.sys
2014-10-05 19:03:22 ----A---- C:\WINDOWS\system32\BFE.DLL
2014-10-05 19:03:21 ----A---- C:\WINDOWS\SYSWOW64\ncobjapi.dll
2014-10-05 19:03:21 ----A---- C:\WINDOWS\system32\drivers\vwifimp.sys
2014-10-05 19:03:20 ----A---- C:\WINDOWS\SYSWOW64\Robocopy.exe
2014-10-05 19:03:20 ----A---- C:\WINDOWS\SYSWOW64\framedyn.dll
2014-10-05 19:03:20 ----A---- C:\WINDOWS\SYSWOW64\dhcpcsvc6.dll
2014-10-05 19:03:20 ----A---- C:\WINDOWS\SYSWOW64\dhcpcsvc.dll
2014-10-05 19:03:20 ----A---- C:\WINDOWS\SYSWOW64\d3d8thk.dll
2014-10-05 19:03:20 ----A---- C:\WINDOWS\system32\Robocopy.exe
2014-10-05 19:03:20 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2014-10-05 19:03:20 ----A---- C:\WINDOWS\system32\fvecpl.dll
2014-10-05 19:03:20 ----A---- C:\WINDOWS\system32\drivers\vwififlt.sys
2014-10-05 19:03:20 ----A---- C:\WINDOWS\system32\dhcpcsvc6.dll
2014-10-05 19:03:20 ----A---- C:\WINDOWS\system32\dhcpcsvc.dll
2014-10-05 19:03:20 ----A---- C:\WINDOWS\system32\BulkOperationHost.exe
2014-10-05 19:03:19 ----A---- C:\WINDOWS\system32\srms.dat
2014-10-05 19:03:19 ----A---- C:\WINDOWS\system32\reseteng.dll
2014-10-05 19:03:19 ----A---- C:\WINDOWS\system32\fvewiz.dll
2014-10-05 19:03:19 ----A---- C:\WINDOWS\system32\BdeHdCfgLib.dll
2014-10-05 19:03:19 ----A---- C:\WINDOWS\system32\BdeHdCfg.exe
2014-10-05 19:03:15 ----A---- C:\WINDOWS\system32\WSDMon.dll
2014-10-05 19:03:15 ----A---- C:\WINDOWS\system32\tcpmon.dll
2014-10-05 19:03:15 ----A---- C:\WINDOWS\system32\drivers\msgpioclx.sys
2014-10-05 19:03:11 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2014-10-05 19:03:11 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2014-10-05 19:02:57 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2014-10-05 19:02:57 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2014-10-05 19:02:06 ----A---- C:\WINDOWS\SYSWOW64\msvcr120_clr0400.dll
2014-10-05 19:02:06 ----A---- C:\WINDOWS\system32\msvcr120_clr0400.dll
2014-10-05 19:01:57 ----A---- C:\WINDOWS\system32\DWrite.dll
2014-10-05 19:01:56 ----A---- C:\WINDOWS\system32\FntCache.dll
2014-10-05 19:01:55 ----A---- C:\WINDOWS\SYSWOW64\mrt100.dll
2014-10-05 19:01:55 ----A---- C:\WINDOWS\SYSWOW64\mrt_map.dll
2014-10-05 19:01:55 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2014-10-05 19:01:55 ----A---- C:\WINDOWS\system32\mrt100.dll
2014-10-05 19:01:55 ----A---- C:\WINDOWS\system32\mrt_map.dll
2014-10-05 19:01:53 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-10-05 19:01:53 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2014-10-05 19:01:53 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-10-05 19:01:53 ----A---- C:\WINDOWS\system32\dxgi.dll
2014-10-05 19:01:53 ----A---- C:\WINDOWS\system32\dwmcore.dll
2014-10-05 19:01:53 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2014-10-05 19:01:49 ----A---- C:\WINDOWS\system32\drivers\usbport.sys
2014-10-05 19:01:48 ----A---- C:\WINDOWS\SYSWOW64\gpprefcl.dll
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\WUDFSvc.dll
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\WUDFPlatform.dll
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\WUDFHost.exe
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\hal.dll
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\gpprefcl.dll
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\drivers\WUDFRd.sys
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\drivers\WUDFPf.sys
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\drivers\usbuhci.sys
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\drivers\usbd.sys
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-10-05 19:01:48 ----A---- C:\WINDOWS\system32\cscui.dll
2014-10-05 19:01:47 ----A---- C:\WINDOWS\SYSWOW64\DaOtpCredentialProvider.dll
2014-10-05 19:01:40 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-10-05 19:01:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2014-10-05 19:01:30 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-10-05 19:01:29 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2014-10-05 19:01:29 ----A---- C:\WINDOWS\system32\winmde.dll
2014-10-05 19:01:28 ----A---- C:\WINDOWS\system32\wmpmde.dll
2014-10-05 19:01:28 ----A---- C:\WINDOWS\system32\services.exe
2014-10-05 19:01:27 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-10-05 19:01:27 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-10-05 19:01:27 ----A---- C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-10-05 19:01:27 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-10-05 19:01:26 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-10-05 19:01:26 ----A---- C:\WINDOWS\SYSWOW64\GeofenceMonitorService.dll
2014-10-05 19:01:26 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-10-05 19:01:26 ----A---- C:\WINDOWS\system32\mfsvr.dll
2014-10-05 19:01:26 ----A---- C:\WINDOWS\system32\MDEServer.exe
2014-10-05 19:01:25 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2014-10-05 19:01:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2014-10-05 19:01:25 ----A---- C:\WINDOWS\system32\XpsGdiConverter.dll
2014-10-05 19:01:24 ----A---- C:\WINDOWS\SYSWOW64\rdpencom.dll
2014-10-05 19:01:24 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2014-10-05 19:01:24 ----A---- C:\WINDOWS\system32\rdpencom.dll
2014-10-05 19:01:24 ----A---- C:\WINDOWS\system32\ploptin.dll
2014-10-05 19:01:24 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2014-10-05 19:01:24 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\SYSWOW64\XpsGdiConverter.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\wscsvc.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\VSSVC.exe
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\swprv.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\rpchttp.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\resutils.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\gpapi.dll
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2014-10-05 19:01:23 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2014-10-05 19:01:22 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\SYSWOW64\rpchttp.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\SYSWOW64\MSVideoDSP.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\SYSWOW64\gpapi.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\wintrust.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\srcore.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\mfpmp.exe
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\mf.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\energyprov.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-10-05 19:01:22 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-10-05 19:01:21 ----A---- C:\WINDOWS\SYSWOW64\tlscsp.dll
2014-10-05 19:01:21 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2014-10-05 19:01:21 ----A---- C:\WINDOWS\system32\tlscsp.dll
2014-10-05 19:01:21 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2014-10-05 19:01:20 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2014-10-05 19:01:20 ----A---- C:\WINDOWS\SYSWOW64\srclient.dll
2014-10-05 19:01:20 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2014-10-05 19:01:20 ----A---- C:\WINDOWS\system32\tsgqec.dll
2014-10-05 19:01:20 ----A---- C:\WINDOWS\system32\srclient.dll
2014-10-05 19:01:20 ----A---- C:\WINDOWS\system32\rstrui.exe
2014-10-05 19:01:20 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-10-05 19:01:14 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2014-10-05 19:01:13 ----A---- C:\WINDOWS\system32\schedsvc.dll
2014-10-05 19:01:01 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2014-10-05 19:01:01 ----A---- C:\WINDOWS\system32\qedit.dll
2014-10-05 19:01:01 ----A---- C:\WINDOWS\system32\gdi32.dll
2014-10-05 19:01:00 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2014-10-05 19:00:59 ----A---- C:\WINDOWS\system32\wpccpl.dll
2014-10-05 19:00:58 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2014-10-05 19:00:57 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-10-05 19:00:57 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-10-05 19:00:57 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-10-05 19:00:56 ----A---- C:\WINDOWS\SYSWOW64\wusa.exe
2014-10-05 19:00:56 ----A---- C:\WINDOWS\system32\wusa.exe
2014-10-05 19:00:54 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys
2014-10-05 19:00:54 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2014-10-05 19:00:53 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2014-10-05 19:00:49 ----A---- C:\WINDOWS\system32\WpcMon.exe
2014-10-05 19:00:48 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2014-10-05 19:00:48 ----A---- C:\WINDOWS\system32\WpcWebSync.dll
2014-10-05 19:00:48 ----A---- C:\WINDOWS\system32\Wpc.dll
2014-10-05 19:00:41 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2014-10-05 19:00:41 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-10-05 19:00:41 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-10-05 19:00:41 ----A---- C:\WINDOWS\system32\ubpm.dll
2014-10-05 19:00:41 ----A---- C:\WINDOWS\system32\storewuauth.dll
2014-10-05 19:00:40 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-10-05 19:00:40 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-10-05 19:00:37 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-10-05 19:00:36 ----A---- C:\WINDOWS\system32\devinv.dll
2014-10-05 19:00:36 ----A---- C:\WINDOWS\system32\aepic.dll
2014-10-05 19:00:36 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-10-05 19:00:07 ----A---- C:\WINDOWS\SYSWOW64\drvinst.exe
2014-10-05 19:00:07 ----A---- C:\WINDOWS\system32\drvinst.exe
2014-10-05 19:00:07 ----A---- C:\WINDOWS\system32\drvcfg.exe
2014-10-05 18:59:37 ----A---- C:\WINDOWS\SYSWOW64\msihnd.dll
2014-10-05 18:59:37 ----A---- C:\WINDOWS\system32\msihnd.dll
2014-10-05 18:59:37 ----A---- C:\WINDOWS\system32\consent.exe
2014-10-05 18:59:12 ----A---- C:\WINDOWS\system32\MDMAgent.exe
2014-10-05 18:58:57 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2014-10-05 18:58:57 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2014-10-05 18:58:57 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2014-10-05 18:05:34 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-10-05 18:05:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2014-10-05 18:05:27 ----A---- C:\WINDOWS\system32\msftedit.dll
2014-10-05 18:05:26 ----A---- C:\WINDOWS\system32\msxml6.dll
2014-10-05 18:05:25 ----A---- C:\WINDOWS\system32\d3d11.dll
2014-10-05 18:05:25 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-10-05 18:05:24 ----A---- C:\WINDOWS\system32\ole32.dll
2014-10-05 18:05:23 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2014-10-05 18:05:23 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2014-10-05 18:05:22 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2014-10-05 18:05:22 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
Re: Zavirovaný počítač
Log 2: Pokračování:
2014-10-05 18:05:22 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2014-10-05 18:05:22 ----A---- C:\WINDOWS\system32\kernel32.dll
2014-10-05 18:05:22 ----A---- C:\WINDOWS\system32\kerberos.dll
2014-10-05 18:05:21 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2014-10-05 18:05:21 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2014-10-05 18:05:21 ----A---- C:\WINDOWS\system32\wlidprov.dll
2014-10-05 18:05:21 ----A---- C:\WINDOWS\system32\ReAgent.dll
2014-10-05 18:05:20 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2014-10-05 18:05:20 ----A---- C:\WINDOWS\system32\dnsapi.dll
2014-10-05 18:05:20 ----A---- C:\WINDOWS\system32\dcomp.dll
2014-10-05 18:05:19 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2014-10-05 18:05:19 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2014-10-05 18:05:19 ----A---- C:\WINDOWS\system32\rasapi32.dll
2014-10-05 18:05:19 ----A---- C:\WINDOWS\system32\netlogon.dll
2014-10-05 18:05:19 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2014-10-05 18:05:19 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2014-10-05 18:05:18 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2014-10-05 18:05:18 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2014-10-05 18:05:18 ----A---- C:\WINDOWS\system32\SessEnv.dll
2014-10-05 18:05:17 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2014-10-05 18:05:16 ----A---- C:\WINDOWS\SYSWOW64\SessEnv.dll
2014-10-05 18:05:16 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2014-10-05 18:05:16 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-10-05 18:05:15 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2014-10-05 18:05:15 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2014-10-05 18:05:15 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2014-10-05 18:05:15 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2014-10-05 18:05:15 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\userenv.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\umpnpmgr.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\ReInfo.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\pdh.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\davclnt.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\cdd.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\AdmTmpl.dll
2014-10-05 18:05:13 ----A---- C:\WINDOWS\SYSWOW64\userenv.dll
2014-10-05 18:05:13 ----A---- C:\WINDOWS\SYSWOW64\spp.dll
2014-10-05 18:05:13 ----A---- C:\WINDOWS\SYSWOW64\pdh.dll
2014-10-05 18:05:13 ----A---- C:\WINDOWS\SYSWOW64\davclnt.dll
2014-10-05 18:05:13 ----A---- C:\WINDOWS\system32\wlangpui.dll
2014-10-05 18:05:13 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-10-05 18:05:13 ----A---- C:\WINDOWS\system32\spp.dll
2014-10-05 18:05:13 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2014-10-05 18:05:13 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2014-10-05 18:05:13 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2014-10-05 18:05:13 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2014-10-05 18:05:13 ----A---- C:\WINDOWS\system32\dafWfdProvider.dll
2014-10-05 18:05:12 ----A---- C:\WINDOWS\SYSWOW64\wlangpui.dll
2014-10-05 18:05:12 ----A---- C:\WINDOWS\SYSWOW64\w32tm.exe
2014-10-05 18:05:12 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2014-10-05 18:05:12 ----A---- C:\WINDOWS\SYSWOW64\CredentialMigrationHandler.dll
2014-10-05 18:05:12 ----A---- C:\WINDOWS\system32\w32tm.exe
2014-10-05 18:05:12 ----A---- C:\WINDOWS\system32\RMapi.dll
2014-10-05 18:05:12 ----A---- C:\WINDOWS\system32\fveapibase.dll
2014-10-05 18:05:12 ----A---- C:\WINDOWS\system32\drivers\tcpipreg.sys
2014-10-05 18:05:12 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2014-10-05 18:05:12 ----A---- C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\SYSWOW64\sxproxy.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\SYSWOW64\LocationApi.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\SYSWOW64\AdmTmpl.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\system32\sxproxy.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\system32\SetNetworkLocation.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\system32\nshwfp.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\system32\LocationApi.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2014-10-05 18:05:11 ----A---- C:\WINDOWS\system32\DevPropMgr.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2014-10-05 18:05:10 ----A---- C:\WINDOWS\SYSWOW64\l2gpstore.dll
2014-10-05 18:05:10 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2014-10-05 18:05:10 ----A---- C:\WINDOWS\system32\l2gpstore.dll
2014-10-05 18:05:10 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2014-10-05 18:01:30 ----A---- C:\WINDOWS\system32\glcndFilter.dll
2014-10-05 18:01:29 ----A---- C:\WINDOWS\SYSWOW64\OobeFldr.dll
2014-10-05 18:01:29 ----A---- C:\WINDOWS\system32\WSService.dll
2014-10-05 18:01:29 ----A---- C:\WINDOWS\system32\OobeFldr.dll
2014-10-05 18:01:22 ----A---- C:\WINDOWS\SYSWOW64\glcndFilter.dll
2014-10-05 18:01:10 ----A---- C:\WINDOWS\system32\wmp.dll
2014-10-05 18:01:08 ----A---- C:\WINDOWS\system32\sppobjs.dll
2014-10-05 18:01:05 ----A---- C:\WINDOWS\system32\tquery.dll
2014-10-05 18:01:04 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2014-10-05 18:01:02 ----A---- C:\WINDOWS\system32\sysmain.dll
2014-10-05 18:01:01 ----A---- C:\WINDOWS\system32\combase.dll
2014-10-05 18:01:00 ----A---- C:\WINDOWS\system32\mssrch.dll
2014-10-05 18:00:59 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2014-10-05 18:00:57 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2014-10-05 18:00:57 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2014-10-05 18:00:55 ----A---- C:\WINDOWS\system32\dui70.dll
2014-10-05 18:00:53 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2014-10-05 18:00:51 ----A---- C:\WINDOWS\system32\webservices.dll
2014-10-05 18:00:50 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2014-10-05 18:00:49 ----A---- C:\WINDOWS\system32\msctf.dll
2014-10-05 18:00:48 ----A---- C:\WINDOWS\SYSWOW64\dui70.dll
2014-10-05 18:00:48 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2014-10-05 18:00:48 ----A---- C:\WINDOWS\system32\msTextPrediction.dll
2014-10-05 18:00:47 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2014-10-05 18:00:47 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2014-10-05 18:00:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2014-10-05 18:00:44 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2014-10-05 18:00:44 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2014-10-05 18:00:44 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2014-10-05 18:00:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2014-10-05 18:00:43 ----A---- C:\WINDOWS\SYSWOW64\webservices.dll
2014-10-05 18:00:43 ----A---- C:\WINDOWS\system32\WinTypes.dll
2014-10-05 18:00:42 ----A---- C:\WINDOWS\system32\wer.dll
2014-10-05 18:00:42 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2014-10-05 18:00:41 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2014-10-05 18:00:41 ----A---- C:\WINDOWS\system32\WofTasks.dll
2014-10-05 18:00:41 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2014-10-05 18:00:41 ----A---- C:\WINDOWS\system32\setupapi.dll
2014-10-05 18:00:41 ----A---- C:\WINDOWS\system32\rpcss.dll
2014-10-05 18:00:41 ----A---- C:\WINDOWS\system32\DfpCommon.dll
2014-10-05 18:00:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2014-10-05 18:00:39 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2014-10-05 18:00:39 ----A---- C:\WINDOWS\system32\RacEngn.dll
2014-10-05 18:00:39 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2014-10-05 18:00:38 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2014-10-05 18:00:38 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2014-10-05 18:00:37 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2014-10-05 18:00:37 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2014-10-05 18:00:36 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2014-10-05 18:00:36 ----A---- C:\WINDOWS\SYSWOW64\StructuredQuery.dll
2014-10-05 18:00:36 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2014-10-05 18:00:35 ----A---- C:\WINDOWS\SYSWOW64\setupapi.dll
2014-10-05 18:00:35 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2014-10-05 18:00:35 ----A---- C:\WINDOWS\system32\uxtheme.dll
2014-10-05 18:00:35 ----A---- C:\WINDOWS\system32\samsrv.dll
2014-10-05 18:00:33 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2014-10-05 18:00:33 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2014-10-05 18:00:32 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2014-10-05 18:00:32 ----A---- C:\WINDOWS\system32\WofUtil.dll
2014-10-05 18:00:32 ----A---- C:\WINDOWS\system32\wimgapi.dll
2014-10-05 18:00:31 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2014-10-05 18:00:31 ----A---- C:\WINDOWS\system32\MMDevAPI.dll
2014-10-05 18:00:31 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2014-10-05 18:00:30 ----A---- C:\WINDOWS\system32\drivers\rdyboost.sys
2014-10-05 18:00:29 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2014-10-05 18:00:29 ----A---- C:\WINDOWS\SYSWOW64\Taskmgr.exe
2014-10-05 18:00:29 ----A---- C:\WINDOWS\SYSWOW64\RacEngn.dll
2014-10-05 18:00:29 ----A---- C:\WINDOWS\system32\wpncore.dll
2014-10-05 18:00:29 ----A---- C:\WINDOWS\system32\recimg.exe
2014-10-05 18:00:29 ----A---- C:\WINDOWS\system32\dfp.exe
2014-10-05 18:00:28 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2014-10-05 18:00:28 ----A---- C:\WINDOWS\system32\WerFault.exe
2014-10-05 18:00:28 ----A---- C:\WINDOWS\system32\usercpl.dll
2014-10-05 18:00:28 ----A---- C:\WINDOWS\system32\perftrack.dll
2014-10-05 18:00:28 ----A---- C:\WINDOWS\system32\dfpinc.dat
2014-10-05 18:00:27 ----A---- C:\WINDOWS\system32\WWAHost.exe
2014-10-05 18:00:27 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2014-10-05 18:00:27 ----A---- C:\WINDOWS\system32\lsm.dll
2014-10-05 18:00:27 ----A---- C:\WINDOWS\system32\advapi32.dll
2014-10-05 18:00:26 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2014-10-05 18:00:26 ----A---- C:\WINDOWS\system32\tdh.dll
2014-10-05 18:00:26 ----A---- C:\WINDOWS\system32\mssvp.dll
2014-10-05 18:00:26 ----A---- C:\WINDOWS\system32\energy.dll
2014-10-05 18:00:26 ----A---- C:\WINDOWS\system32\apphelp.dll
2014-10-05 18:00:25 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2014-10-05 18:00:24 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2014-10-05 18:00:24 ----A---- C:\WINDOWS\system32\winlogon.exe
2014-10-05 18:00:24 ----A---- C:\WINDOWS\system32\DismApi.dll
2014-10-05 18:00:23 ----A---- C:\WINDOWS\SYSWOW64\MMDevAPI.dll
2014-10-05 18:00:23 ----A---- C:\WINDOWS\SYSWOW64\apphelp.dll
2014-10-05 18:00:23 ----A---- C:\WINDOWS\system32\mssph.dll
2014-10-05 18:00:22 ----A---- C:\WINDOWS\system32\werconcpl.dll
2014-10-05 18:00:22 ----A---- C:\WINDOWS\system32\msvproc.dll
2014-10-05 18:00:21 ----A---- C:\WINDOWS\system32\thumbcache.dll
2014-10-05 18:00:20 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2014-10-05 18:00:20 ----A---- C:\WINDOWS\system32\WMALFXGFXDSP.dll
2014-10-05 18:00:20 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2014-10-05 18:00:20 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2014-10-05 18:00:19 ----A---- C:\WINDOWS\system32\Faultrep.dll
2014-10-05 18:00:19 ----A---- C:\WINDOWS\system32\ci.dll
2014-10-05 18:00:18 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2014-10-05 18:00:18 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll
2014-10-05 18:00:18 ----A---- C:\WINDOWS\system32\sppwinob.dll
2014-10-05 18:00:18 ----A---- C:\WINDOWS\system32\ntshrui.dll
2014-10-05 18:00:18 ----A---- C:\WINDOWS\system32\iuilp.dll
2014-10-05 18:00:18 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2014-10-05 18:00:17 ----A---- C:\WINDOWS\SYSWOW64\slc.dll
2014-10-05 18:00:17 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2014-10-05 18:00:17 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2014-10-05 18:00:17 ----A---- C:\WINDOWS\system32\wlidcli.dll
2014-10-05 18:00:17 ----A---- C:\WINDOWS\system32\vmrdvcore.dll
2014-10-05 18:00:17 ----A---- C:\WINDOWS\system32\slc.dll
2014-10-05 18:00:17 ----A---- C:\WINDOWS\system32\MrmIndexer.dll
2014-10-05 18:00:17 ----A---- C:\WINDOWS\system32\aelupsvc.dll
2014-10-05 18:00:16 ----A---- C:\WINDOWS\SYSWOW64\uxtheme.dll
2014-10-05 18:00:16 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2014-10-05 18:00:16 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2014-10-05 18:00:16 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2014-10-05 18:00:16 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2014-10-05 18:00:16 ----A---- C:\WINDOWS\system32\pnidui.dll
2014-10-05 18:00:16 ----A---- C:\WINDOWS\system32\nettrace.dll
2014-10-05 18:00:16 ----A---- C:\WINDOWS\system32\Dism.exe
2014-10-05 18:00:15 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2014-10-05 18:00:15 ----A---- C:\WINDOWS\system32\dwmredir.dll
2014-10-05 18:00:14 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2014-10-05 18:00:14 ----A---- C:\WINDOWS\system32\WlanMM.dll
2014-10-05 18:00:14 ----A---- C:\WINDOWS\system32\psmsrv.dll
2014-10-05 18:00:13 ----A---- C:\WINDOWS\system32\ninput.dll
2014-10-05 18:00:13 ----A---- C:\WINDOWS\system32\InputSwitch.dll
2014-10-05 18:00:13 ----A---- C:\WINDOWS\system32\authz.dll
2014-10-05 18:00:12 ----A---- C:\WINDOWS\system32\taskeng.exe
2014-10-05 18:00:12 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2014-10-05 18:00:12 ----A---- C:\WINDOWS\system32\rascustom.dll
2014-10-05 18:00:12 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2014-10-05 18:00:11 ----A---- C:\WINDOWS\system32\wlidcredprov.dll
2014-10-05 18:00:11 ----A---- C:\WINDOWS\system32\wersvc.dll
2014-10-05 18:00:11 ----A---- C:\WINDOWS\system32\themeui.dll
2014-10-05 18:00:11 ----A---- C:\WINDOWS\system32\sqmapi.dll
2014-10-05 18:00:11 ----A---- C:\WINDOWS\system32\rdbui.dll
2014-10-05 18:00:11 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2014-10-05 18:00:10 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2014-10-05 18:00:10 ----A---- C:\WINDOWS\SYSWOW64\DismApi.dll
2014-10-05 18:00:10 ----A---- C:\WINDOWS\system32\wbengine.exe
2014-10-05 18:00:10 ----A---- C:\WINDOWS\system32\rdpcore.dll
2014-10-05 18:00:10 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2014-10-05 18:00:09 ----A---- C:\WINDOWS\SYSWOW64\WSClient.dll
2014-10-05 18:00:09 ----A---- C:\WINDOWS\SYSWOW64\themeui.dll
2014-10-05 18:00:09 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2014-10-05 18:00:09 ----A---- C:\WINDOWS\SYSWOW64\MrmIndexer.dll
2014-10-05 18:00:09 ----A---- C:\WINDOWS\SYSWOW64\Dism.exe
2014-10-05 18:00:09 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2014-10-05 18:00:09 ----A---- C:\WINDOWS\system32\oleaut32.dll
2014-10-05 18:00:09 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2014-10-05 18:00:08 ----A---- C:\WINDOWS\SYSWOW64\mssphtb.dll
2014-10-05 18:00:08 ----A---- C:\WINDOWS\SYSWOW64\InputSwitch.dll
2014-10-05 18:00:08 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2014-10-05 18:00:08 ----A---- C:\WINDOWS\system32\sppc.dll
2014-10-05 18:00:08 ----A---- C:\WINDOWS\system32\clrhost.dll
2014-10-05 18:00:08 ----A---- C:\WINDOWS\system32\bcrypt.dll
2014-10-05 18:00:07 ----A---- C:\WINDOWS\SYSWOW64\sppc.dll
2014-10-05 18:00:07 ----A---- C:\WINDOWS\system32\WSClient.dll
2014-10-05 18:00:07 ----A---- C:\WINDOWS\system32\wscinterop.dll
2014-10-05 18:00:07 ----A---- C:\WINDOWS\system32\WLanConn.dll
2014-10-05 18:00:07 ----A---- C:\WINDOWS\system32\wimserv.exe
2014-10-05 18:00:07 ----A---- C:\WINDOWS\system32\PkgMgr.exe
2014-10-05 18:00:06 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2014-10-05 18:00:06 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2014-10-05 18:00:05 ----A---- C:\WINDOWS\SYSWOW64\SyncCenter.dll
2014-10-05 18:00:05 ----A---- C:\WINDOWS\system32\PurchaseWindowsLicense.dll
2014-10-05 18:00:05 ----A---- C:\WINDOWS\system32\gameux.dll
2014-10-05 18:00:04 ----A---- C:\WINDOWS\SYSWOW64\WlanMM.dll
2014-10-05 18:00:04 ----A---- C:\WINDOWS\system32\fhcfg.dll
2014-10-05 18:00:03 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2014-10-05 18:00:03 ----A---- C:\WINDOWS\system32\dwm.exe
2014-10-05 18:00:02 ----A---- C:\WINDOWS\system32\winsrv.dll
2014-10-05 18:00:02 ----A---- C:\WINDOWS\system32\taskhost.exe
2014-10-05 18:00:02 ----A---- C:\WINDOWS\system32\rasgcw.dll
2014-10-05 18:00:02 ----A---- C:\WINDOWS\system32\drivers\luafv.sys
2014-10-05 18:00:01 ----A---- C:\WINDOWS\SYSWOW64\authz.dll
2014-10-05 18:00:01 ----A---- C:\WINDOWS\system32\wscapi.dll
2014-10-05 18:00:01 ----A---- C:\WINDOWS\system32\wermgr.exe
2014-10-05 18:00:01 ----A---- C:\WINDOWS\system32\drivers\PEAuth.sys
2014-10-05 18:00:01 ----A---- C:\WINDOWS\system32\dmdskmgr.dll
2014-10-05 18:00:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2014-10-05 18:00:00 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2014-10-05 18:00:00 ----A---- C:\WINDOWS\SYSWOW64\ninput.dll
2014-10-05 18:00:00 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2014-10-05 18:00:00 ----A---- C:\WINDOWS\SYSWOW64\clrhost.dll
2014-10-05 18:00:00 ----A---- C:\WINDOWS\system32\srchadmin.dll
2014-10-05 18:00:00 ----A---- C:\WINDOWS\system32\drivers\rfcomm.sys
2014-10-05 18:00:00 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2014-10-05 17:59:59 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2014-10-05 17:59:59 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2014-10-05 17:59:59 ----A---- C:\WINDOWS\system32\smss.exe
2014-10-05 17:59:59 ----A---- C:\WINDOWS\system32\BioCredProv.dll
2014-10-05 17:59:58 ----A---- C:\WINDOWS\SYSWOW64\sqmapi.dll
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\vdsbas.dll
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\systemreset.exe
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\RASMM.dll
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\netid.dll
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\imm32.dll
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\fsutil.exe
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\fhcpl.dll
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\AltTab.dll
2014-10-05 17:59:57 ----A---- C:\WINDOWS\SYSWOW64\fsutil.exe
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\WSDApi.dll
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\UserLanguagesCpl.dll
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\taskhostex.exe
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\sharemediacpl.dll
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\sdclt.exe
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\drivers\fileinfo.sys
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\das.dll
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\CloudNotifications.exe
2014-10-05 17:59:56 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2014-10-05 17:59:56 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2014-10-05 17:59:56 ----A---- C:\WINDOWS\SYSWOW64\imm32.dll
2014-10-05 17:59:56 ----A---- C:\WINDOWS\SYSWOW64\CloudNotifications.exe
2014-10-05 17:59:56 ----A---- C:\WINDOWS\system32\powrprof.dll
2014-10-05 17:59:56 ----A---- C:\WINDOWS\system32\newdev.dll
2014-10-05 17:59:56 ----A---- C:\WINDOWS\system32\mssprxy.dll
2014-10-05 17:59:56 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2014-10-05 17:59:56 ----A---- C:\WINDOWS\system32\drivers\BasicRender.sys
2014-10-05 17:59:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2014-10-05 17:59:55 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2014-10-05 17:59:55 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2014-10-05 17:59:55 ----A---- C:\WINDOWS\system32\zipfldr.dll
2014-10-05 17:59:55 ----A---- C:\WINDOWS\system32\RestoreOptIn.exe
2014-10-05 17:59:55 ----A---- C:\WINDOWS\system32\drivers\sdstor.sys
2014-10-05 17:59:55 ----A---- C:\WINDOWS\system32\drivers\BthLEEnum.sys
2014-10-05 17:59:55 ----A---- C:\WINDOWS\system32\dmvdsitf.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\SYSWOW64\WLanConn.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2014-10-05 17:59:54 ----A---- C:\WINDOWS\SYSWOW64\rasgcw.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\SYSWOW64\powrprof.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\system32\wow64win.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\system32\vds.exe
2014-10-05 17:59:54 ----A---- C:\WINDOWS\system32\UserAccountBroker.exe
2014-10-05 17:59:54 ----A---- C:\WINDOWS\system32\spwizeng.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\system32\microsoft-windows-kernel-power-events.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\system32\LockScreenContent.dll
2014-10-05 17:59:53 ----A---- C:\WINDOWS\SYSWOW64\zipfldr.dll
2014-10-05 17:59:53 ----A---- C:\WINDOWS\SYSWOW64\WSDApi.dll
2014-10-05 17:59:53 ----A---- C:\WINDOWS\SYSWOW64\wscinterop.dll
2014-10-05 17:59:53 ----A---- C:\WINDOWS\SYSWOW64\UserAccountBroker.exe
2014-10-05 17:59:53 ----A---- C:\WINDOWS\SYSWOW64\srchadmin.dll
2014-10-05 17:59:53 ----A---- C:\WINDOWS\SYSWOW64\RestoreOptIn.exe
2014-10-05 17:59:53 ----A---- C:\WINDOWS\SYSWOW64\newdev.dll
2014-10-05 17:59:53 ----A---- C:\WINDOWS\system32\easinvoker.exe
2014-10-05 17:59:53 ----A---- C:\WINDOWS\system32\dot3mm.dll
2014-10-05 17:59:53 ----A---- C:\WINDOWS\system32\bcd.dll
2014-10-05 17:59:52 ----A---- C:\WINDOWS\SYSWOW64\cleanmgr.exe
2014-10-05 17:59:52 ----A---- C:\WINDOWS\SYSWOW64\bcd.dll
2014-10-05 17:59:52 ----A---- C:\WINDOWS\system32\drivers\dumpfve.sys
2014-10-05 17:59:52 ----A---- C:\WINDOWS\system32\DAMM.dll
2014-10-05 17:59:52 ----A---- C:\WINDOWS\system32\bootux.dll
2014-10-05 17:59:51 ----A---- C:\WINDOWS\system32\samlib.dll
2014-10-05 17:59:51 ----A---- C:\WINDOWS\system32\rasmans.dll
2014-10-05 17:59:51 ----A---- C:\WINDOWS\system32\provsvc.dll
2014-10-05 17:59:51 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2014-10-05 17:59:51 ----A---- C:\WINDOWS\system32\drivers\UCX01000.SYS
2014-10-05 17:59:51 ----A---- C:\WINDOWS\system32\cleanmgr.exe
2014-10-05 17:59:51 ----A---- C:\WINDOWS\system32\AuthHost.exe
2014-10-05 17:59:50 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe
2014-10-05 17:59:50 ----A---- C:\WINDOWS\SYSWOW64\taskeng.exe
2014-10-05 17:59:50 ----A---- C:\WINDOWS\SYSWOW64\netid.dll
2014-10-05 17:59:50 ----A---- C:\WINDOWS\SYSWOW64\dmvdsitf.dll
2014-10-05 17:59:50 ----A---- C:\WINDOWS\SYSWOW64\BioCredProv.dll
2014-10-05 17:59:50 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe
2014-10-05 17:59:50 ----A---- C:\WINDOWS\system32\netiohlp.dll
2014-10-05 17:59:50 ----A---- C:\WINDOWS\system32\korwbrkr.dll
2014-10-05 17:59:50 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2014-10-05 17:59:49 ----A---- C:\WINDOWS\SYSWOW64\netiohlp.dll
2014-10-05 17:59:49 ----A---- C:\WINDOWS\system32\scrrun.dll
2014-10-05 17:59:49 ----A---- C:\WINDOWS\system32\drivers\http.sys
2014-10-05 17:59:48 ----A---- C:\WINDOWS\SYSWOW64\SearchFilterHost.exe
2014-10-05 17:59:48 ----A---- C:\WINDOWS\system32\easwrt.dll
2014-10-05 17:59:47 ----A---- C:\WINDOWS\SYSWOW64\dmdskmgr.dll
2014-10-05 17:59:47 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2014-10-05 17:59:47 ----A---- C:\WINDOWS\system32\scrobj.dll
2014-10-05 17:59:47 ----A---- C:\WINDOWS\system32\netplwiz.dll
2014-10-05 17:59:47 ----A---- C:\WINDOWS\system32\LockScreenContentServer.exe
2014-10-05 17:59:47 ----A---- C:\WINDOWS\system32\CloudStorageWizard.exe
2014-10-05 17:59:47 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2014-10-05 17:59:47 ----A---- C:\WINDOWS\system32\acppage.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\SYSWOW64\scrrun.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\SYSWOW64\samlib.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\SYSWOW64\MicrosoftAccountTokenProvider.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\SYSWOW64\acppage.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\system32\winbrand.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\system32\slpts.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\system32\DWWIN.EXE
2014-10-05 17:59:46 ----A---- C:\WINDOWS\system32\bcdedit.exe
2014-10-05 17:59:45 ----A---- C:\WINDOWS\SYSWOW64\netplwiz.dll
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\wpnprv.dll
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\Windows.Media.Renewal.dll
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\wbadmin.exe
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\SysResetErr.exe
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\sud.dll
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\autofmt.exe
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\autoconv.exe
2014-10-05 17:59:44 ----A---- C:\WINDOWS\SYSWOW64\wlidcredprov.dll
2014-10-05 17:59:44 ----A---- C:\WINDOWS\SYSWOW64\scrobj.dll
2014-10-05 17:59:44 ----A---- C:\WINDOWS\SYSWOW64\provsvc.dll
2014-10-05 17:59:44 ----A---- C:\WINDOWS\system32\untfs.dll
2014-10-05 17:59:44 ----A---- C:\WINDOWS\system32\sppnp.dll
2014-10-05 17:59:44 ----A---- C:\WINDOWS\system32\bcdboot.exe
2014-10-05 17:59:43 ----A---- C:\WINDOWS\SYSWOW64\winbrand.dll
2014-10-05 17:59:43 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2014-10-05 17:59:43 ----A---- C:\WINDOWS\SYSWOW64\slpts.dll
2014-10-05 17:59:43 ----A---- C:\WINDOWS\SYSWOW64\PkgMgr.exe
2014-10-05 17:59:43 ----A---- C:\WINDOWS\SYSWOW64\autochk.exe
2014-10-05 17:59:43 ----A---- C:\WINDOWS\SYSWOW64\autofmt.exe
2014-10-05 17:59:43 ----A---- C:\WINDOWS\system32\spbcd.dll
2014-10-05 17:59:43 ----A---- C:\WINDOWS\system32\setbcdlocale.dll
2014-10-05 17:59:43 ----A---- C:\WINDOWS\system32\migisol.dll
2014-10-05 17:59:43 ----A---- C:\WINDOWS\system32\DAConn.dll
2014-10-05 17:59:43 ----A---- C:\WINDOWS\system32\autochk.exe
2014-10-05 17:59:42 ----A---- C:\WINDOWS\SYSWOW64\DWWIN.EXE
2014-10-05 17:59:42 ----A---- C:\WINDOWS\SYSWOW64\autoconv.exe
2014-10-05 17:59:42 ----A---- C:\WINDOWS\SYSWOW64\AuthBroker.dll
2014-10-05 17:59:42 ----A---- C:\WINDOWS\system32\WindowsAnytimeUpgradeResults.exe
2014-10-05 17:59:42 ----A---- C:\WINDOWS\system32\spcompat.dll
2014-10-05 17:59:42 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2014-10-05 17:59:42 ----A---- C:\WINDOWS\system32\fhevents.dll
2014-10-05 17:59:42 ----A---- C:\WINDOWS\system32\dafBth.dll
2014-10-05 17:59:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-10-05 17:59:41 ----A---- C:\WINDOWS\SYSWOW64\StorageContextHandler.dll
2014-10-05 17:59:41 ----A---- C:\WINDOWS\SYSWOW64\mssprxy.dll
2014-10-05 17:59:41 ----A---- C:\WINDOWS\system32\vdsutil.dll
2014-10-05 17:59:41 ----A---- C:\WINDOWS\system32\drivers\watchdog.sys
2014-10-05 17:59:41 ----A---- C:\WINDOWS\system32\drivers\BTHUSB.SYS
2014-10-05 17:59:41 ----A---- C:\WINDOWS\system32\cscript.exe
2014-10-05 17:59:40 ----A---- C:\WINDOWS\SYSWOW64\spwizeng.dll
2014-10-05 17:59:39 ----A---- C:\WINDOWS\SYSWOW64\WimBootCompress.ini
2014-10-05 17:59:39 ----A---- C:\WINDOWS\SYSWOW64\spbcd.dll
2014-10-05 17:59:39 ----A---- C:\WINDOWS\system32\WimBootCompress.ini
2014-10-05 17:59:39 ----A---- C:\WINDOWS\system32\werui.dll
2014-10-05 17:59:39 ----A---- C:\WINDOWS\system32\energytask.dll
2014-10-05 17:59:39 ----A---- C:\WINDOWS\system32\diskpart.exe
2014-10-05 17:59:38 ----A---- C:\WINDOWS\system32\powercfg.exe
2014-10-05 17:59:35 ----A---- C:\WINDOWS\SYSWOW64\sud.dll
2014-10-05 17:59:35 ----A---- C:\WINDOWS\system32\RelPost.exe
2014-10-05 17:59:33 ----A---- C:\WINDOWS\system32\SettingMonitor.dll
2014-10-05 17:59:33 ----A---- C:\WINDOWS\system32\pnpclean.dll
2014-10-05 17:59:33 ----A---- C:\WINDOWS\system32\deviceassociation.dll
2014-10-05 17:59:31 ----A---- C:\WINDOWS\SYSWOW64\wlidcli.dll
2014-10-05 17:59:31 ----A---- C:\WINDOWS\SYSWOW64\SettingMonitor.dll
2014-10-05 17:59:31 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2014-10-05 17:59:31 ----A---- C:\WINDOWS\system32\dasHost.exe
2014-10-05 17:59:29 ----A---- C:\WINDOWS\SYSWOW64\winsku.dll
2014-10-05 17:59:29 ----A---- C:\WINDOWS\SYSWOW64\SSShim.dll
2014-10-05 17:59:29 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2014-10-05 17:59:29 ----A---- C:\WINDOWS\SYSWOW64\CloudStorageWizard.exe
2014-10-05 17:59:29 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2014-10-05 17:59:29 ----A---- C:\WINDOWS\system32\srrstr.dll
2014-10-05 17:59:29 ----A---- C:\WINDOWS\system32\ReAgentc.exe
2014-10-05 17:59:29 ----A---- C:\WINDOWS\system32\offreg.dll
2014-10-05 17:59:29 ----A---- C:\WINDOWS\system32\ActionQueue.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\SYSWOW64\powercfg.exe
2014-10-05 17:59:28 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\SYSWOW64\IdCtrls.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\SYSWOW64\deviceassociation.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\system32\msshooks.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\system32\mf3216.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\system32\dfrgui.exe
2014-10-05 17:59:27 ----A---- C:\WINDOWS\SYSWOW64\migisol.dll
2014-10-05 17:59:27 ----A---- C:\WINDOWS\system32\f3ahvoas.dll
2014-10-05 17:59:26 ----A---- C:\WINDOWS\SYSWOW64\ReAgentc.exe
2014-10-05 17:59:26 ----A---- C:\WINDOWS\SYSWOW64\easwrt.dll
2014-10-05 17:59:26 ----A---- C:\WINDOWS\SYSWOW64\dfrgui.exe
2014-10-05 17:59:26 ----A---- C:\WINDOWS\system32\winsku.dll
2014-10-05 17:59:26 ----A---- C:\WINDOWS\system32\wercplsupport.dll
2014-10-05 17:59:26 ----A---- C:\WINDOWS\system32\vdsdyn.dll
2014-10-05 17:59:26 ----A---- C:\WINDOWS\system32\SrTasks.exe
2014-10-05 17:59:26 ----A---- C:\WINDOWS\system32\LockScreenContentHost.dll
2014-10-05 17:59:25 ----A---- C:\WINDOWS\SYSWOW64\diskpart.exe
2014-10-05 17:59:25 ----A---- C:\WINDOWS\SYSWOW64\cscript.exe
2014-10-05 17:59:25 ----A---- C:\WINDOWS\system32\themecpl.dll
2014-10-05 17:59:25 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2014-10-05 17:59:25 ----A---- C:\WINDOWS\system32\AepRoam.dll
2014-10-05 17:59:24 ----A---- C:\WINDOWS\SYSWOW64\sxshared.dll
2014-10-05 17:59:24 ----A---- C:\WINDOWS\SYSWOW64\msshooks.dll
2014-10-05 17:59:24 ----A---- C:\WINDOWS\SYSWOW64\ConfigureExpandedStorage.dll
2014-10-05 17:59:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2014-10-05 17:59:23 ----A---- C:\WINDOWS\system32\ConfigureExpandedStorage.dll
2014-10-05 17:59:17 ----A---- C:\WINDOWS\system32\scavengeui.dll
2014-10-05 17:59:15 ----A---- C:\WINDOWS\system32\wincorlib.dll
2014-10-05 17:59:14 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-session-winsta-l1-1-0.dll
2014-10-05 17:59:14 ----A---- C:\WINDOWS\SYSWOW64\setupugc.exe
2014-10-05 17:59:13 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2014-10-05 17:59:10 ----A---- C:\WINDOWS\system32\syncui.dll
2014-10-05 17:59:10 ----A---- C:\WINDOWS\system32\SettingSyncPolicy.dll
2014-10-05 17:59:09 ----A---- C:\WINDOWS\SYSWOW64\finger.exe
2014-10-05 17:59:08 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2014-10-05 17:59:08 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncPolicy.dll
2014-10-05 17:59:08 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2014-10-05 17:59:08 ----A---- C:\WINDOWS\system32\StorageContextHandler.dll
2014-10-05 17:59:08 ----A---- C:\WINDOWS\system32\ocsetapi.dll
2014-10-05 17:59:08 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2014-10-05 17:59:07 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-kernel32-package-l1-1-1.dll
2014-10-05 17:59:07 ----AH---- C:\WINDOWS\system32\ext-ms-win-session-winsta-l1-1-0.dll
2014-10-05 17:59:07 ----AH---- C:\WINDOWS\system32\ext-ms-win-kernel32-package-l1-1-1.dll
2014-10-05 17:59:07 ----A---- C:\WINDOWS\SYSWOW64\ocsetapi.dll
2014-10-05 17:59:07 ----A---- C:\WINDOWS\SYSWOW64\korwbrkr.dll
2014-10-05 17:59:07 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2014-10-05 17:59:07 ----A---- C:\WINDOWS\system32\shsetup.dll
2014-10-05 17:59:07 ----A---- C:\WINDOWS\system32\dataclen.dll
2014-10-05 17:59:07 ----A---- C:\WINDOWS\system32\aitagent.exe
2014-10-05 17:59:06 ----AH---- C:\WINDOWS\system32\ext-ms-win-ntuser-private-l1-1-1.dll
2014-10-05 17:59:06 ----AH---- C:\WINDOWS\system32\ext-ms-win-ntuser-private-l1-1-0.dll
2014-10-05 17:59:06 ----A---- C:\WINDOWS\SYSWOW64\dataclen.dll
2014-10-05 17:59:06 ----A---- C:\WINDOWS\system32\shimeng.dll
2014-10-05 17:59:06 ----A---- C:\WINDOWS\system32\lpksetupproxyserv.dll
2014-10-05 17:59:06 ----A---- C:\WINDOWS\system32\fhsvcctl.dll
2014-10-05 17:59:05 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-ntuser-private-l1-1-1.dll
2014-10-05 17:59:05 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-ntuser-private-l1-1-0.dll
2014-10-05 17:59:05 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-networking-wcmapi-l1-1-0.dll
2014-10-05 17:59:05 ----A---- C:\WINDOWS\SYSWOW64\occache.dll
2014-10-05 17:59:05 ----A---- C:\WINDOWS\SYSWOW64\f3ahvoas.dll
2014-10-05 17:59:05 ----A---- C:\WINDOWS\system32\occache.dll
2014-10-05 17:59:05 ----A---- C:\WINDOWS\system32\fveskybackup.dll
2014-10-05 17:59:05 ----A---- C:\WINDOWS\system32\finger.exe
2014-10-05 17:59:05 ----A---- C:\WINDOWS\system32\dxmasf.dll
2014-10-05 17:23:06 ----RD---- C:\WINDOWS\BrowserChoice
2014-10-05 17:02:33 ----A---- C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2014-10-05 17:02:31 ----A---- C:\WINDOWS\system32\pnrpsvc.dll
2014-10-05 17:02:30 ----A---- C:\WINDOWS\SYSWOW64\sti.dll
2014-10-05 17:02:30 ----A---- C:\WINDOWS\SYSWOW64\OEMLicense.dll
2014-10-05 17:02:30 ----A---- C:\WINDOWS\SYSWOW64\MsSpellCheckingFacility.dll
2014-10-05 17:02:30 ----A---- C:\WINDOWS\system32\sti.dll
2014-10-05 17:02:30 ----A---- C:\WINDOWS\system32\OEMLicense.dll
2014-10-05 17:02:30 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2014-10-05 17:02:03 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2014-10-05 17:02:02 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2014-10-05 17:02:02 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2014-10-05 17:02:01 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2014-10-05 17:02:00 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2014-10-05 17:02:00 ----A---- C:\WINDOWS\system32\d3d10level9.dll
2014-10-05 17:01:58 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2014-10-05 17:01:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2014-10-05 17:01:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2014-10-05 17:01:57 ----A---- C:\WINDOWS\SYSWOW64\d3d10level9.dll
2014-10-05 17:01:56 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2014-10-05 17:01:55 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2014-10-05 17:01:55 ----A---- C:\WINDOWS\system32\tsmf.dll
2014-10-05 17:01:55 ----A---- C:\WINDOWS\system32\kd_02_8086.dll
2014-10-05 17:01:55 ----A---- C:\WINDOWS\system32\eapphost.dll
2014-10-05 17:01:55 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2014-10-05 17:01:53 ----A---- C:\WINDOWS\SYSWOW64\tsmf.dll
2014-10-05 17:01:53 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll
2014-10-05 17:01:53 ----A---- C:\WINDOWS\system32\msched.dll
2014-10-05 17:01:53 ----A---- C:\WINDOWS\system32\embeddedapplauncher.exe
2014-10-05 17:01:52 ----A---- C:\WINDOWS\SYSWOW64\shsetup.dll
2014-10-05 17:01:52 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2014-10-05 17:01:52 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll
2014-10-05 17:01:52 ----A---- C:\WINDOWS\system32\wldp.dll
2014-10-05 17:01:52 ----A---- C:\WINDOWS\system32\TSWbPrxy.exe
2014-10-05 17:01:52 ----A---- C:\WINDOWS\system32\eappcfg.dll
2014-10-05 17:01:52 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2014-10-05 17:01:51 ----A---- C:\WINDOWS\SYSWOW64\ftp.exe
2014-10-05 17:01:51 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll
2014-10-05 17:01:51 ----A---- C:\WINDOWS\system32\rdpclip.exe
2014-10-05 17:01:51 ----A---- C:\WINDOWS\system32\ftp.exe
2014-10-05 17:01:51 ----A---- C:\WINDOWS\system32\eappgnui.dll
2014-10-05 17:01:50 ----A---- C:\WINDOWS\SYSWOW64\miutils.dll
2014-10-05 17:01:50 ----A---- C:\WINDOWS\system32\miutils.dll
2014-10-05 17:01:43 ----A---- C:\WINDOWS\system32\sppsvc.exe
2014-10-05 17:01:42 ----A---- C:\WINDOWS\system32\dbgeng.dll
2014-10-05 17:01:41 ----A---- C:\WINDOWS\SYSWOW64\dbghelp.dll
2014-10-05 17:01:41 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2014-10-05 17:01:41 ----A---- C:\WINDOWS\system32\dbghelp.dll
2014-10-05 17:01:40 ----A---- C:\WINDOWS\SYSWOW64\tsgqec.dll
2014-10-05 17:01:40 ----A---- C:\WINDOWS\system32\sppcomapi.dll
2014-10-05 17:01:25 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2014-10-05 17:01:25 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2014-10-05 17:01:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.dll
2014-10-05 17:01:22 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2014-10-05 17:01:22 ----A---- C:\WINDOWS\system32\Windows.Graphics.dll
2014-10-05 17:01:22 ----A---- C:\WINDOWS\system32\mfds.dll
2014-10-05 17:01:22 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2014-10-05 17:01:22 ----A---- C:\WINDOWS\system32\drivers\ipnat.sys
2014-10-05 17:01:21 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2014-10-05 17:01:21 ----A---- C:\WINDOWS\SYSWOW64\msieftp.dll
2014-10-05 17:01:21 ----A---- C:\WINDOWS\system32\rastls.dll
2014-10-05 17:01:21 ----A---- C:\WINDOWS\system32\msieftp.dll
2014-10-05 17:01:21 ----A---- C:\WINDOWS\system32\drivers\BtaMPM.sys
2014-10-05 17:01:21 ----A---- C:\WINDOWS\system32\deviceregistration.dll
2014-10-05 17:01:21 ----A---- C:\WINDOWS\system32\bi.dll
2014-10-05 17:00:57 ----A---- C:\WINDOWS\system32\drivers\intelpep.sys
2014-10-05 17:00:52 ----A---- C:\WINDOWS\SYSWOW64\appmgr.dll
2014-10-05 17:00:52 ----A---- C:\WINDOWS\system32\drivers\SerCx2.sys
2014-10-05 17:00:52 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2014-10-05 17:00:52 ----A---- C:\WINDOWS\system32\appmgr.dll
2014-10-05 17:00:47 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-10-05 17:00:47 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-10-05 17:00:47 ----A---- C:\WINDOWS\system32\ieetwcollectorres.dll
2014-10-05 17:00:46 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-10-05 17:00:45 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-10-05 17:00:44 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-10-05 17:00:44 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-10-05 17:00:43 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-10-05 17:00:43 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-10-05 17:00:42 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-10-05 17:00:41 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-10-05 17:00:40 ----A---- C:\WINDOWS\system32\msrating.dll
2014-10-05 17:00:24 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2014-10-05 17:00:24 ----A---- C:\WINDOWS\system32\d2d1.dll
2014-10-05 17:00:21 ----A---- C:\WINDOWS\system32\WSCollect.exe
2014-10-05 17:00:20 ----A---- C:\WINDOWS\SYSWOW64\imagehlp.dll
2014-10-05 17:00:20 ----A---- C:\WINDOWS\system32\imagehlp.dll
2014-10-05 16:59:43 ----A---- C:\WINDOWS\SYSWOW64\msdrm.dll
2014-10-05 16:59:43 ----A---- C:\WINDOWS\system32\msdrm.dll
2014-10-05 16:59:25 ----A---- C:\WINDOWS\SYSWOW64\WMPhoto.dll
2014-10-05 16:59:25 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2014-10-05 16:59:20 ----A---- C:\WINDOWS\SYSWOW64\poqexec.exe
2014-10-05 16:59:20 ----A---- C:\WINDOWS\system32\poqexec.exe
2014-10-05 16:59:13 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2014-10-05 16:59:13 ----A---- C:\WINDOWS\system32\crypt32.dll
2014-10-05 16:59:12 ----A---- C:\WINDOWS\SYSWOW64\pcaui.exe
2014-10-05 16:59:12 ----A---- C:\WINDOWS\system32\pcaui.exe
2014-10-05 15:57:49 ----DC---- C:\WINDOWS\Panther
2014-10-05 15:55:53 ----D---- C:\Windows.old
2014-10-05 15:53:13 ----D---- C:\Program Files (x86)\Reference Assemblies
2014-10-05 15:53:13 ----D---- C:\Program Files (x86)\MSBuild
2014-10-05 15:53:11 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2014-10-05 15:53:11 ----D---- C:\Program Files\Reference Assemblies
2014-10-05 15:53:11 ----D---- C:\Program Files\MSBuild
2014-10-05 15:52:33 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2014-10-05 15:52:33 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-10-05 15:52:32 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-10-05 15:52:32 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-10-05 15:18:22 ----D---- C:\WINDOWS\CSC
2014-10-05 15:06:47 ----SD---- C:\Users\Karolínka\AppData\Roaming\Microsoft
2014-10-05 15:01:16 ----D---- C:\Program Files\Common Files\Atheros
2014-10-05 15:01:05 ----A---- C:\WINDOWS\system32\drivers\RTWAVES30.dat
2014-10-05 15:00:52 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2014-10-05 15:00:52 ----D---- C:\Program Files\Realtek
2014-10-05 15:00:45 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2014-10-05 15:00:45 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2014-10-05 15:00:30 ----D---- C:\Program Files\Intel
2014-10-05 14:59:21 ----D---- C:\WINDOWS\Prefetch
2014-10-05 14:04:25 ----HD---- C:\$WINDOWS.~BT
2014-10-05 12:57:55 ----A---- C:\Recovery.txt
2014-10-04 13:34:35 ----D---- C:\FRST
2014-10-04 08:40:32 ----D---- C:\Users\Karolínka\AppData\Roaming\DropboxMaster
2014-10-04 08:37:13 ----D---- C:\Users\Karolínka\AppData\Roaming\Dropbox
2014-10-04 08:27:12 ----D---- C:\Users\Karolínka\AppData\Roaming\AVAST Software
2014-10-04 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2014-10-04 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2014-10-04 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aswsp.sys
2014-10-04 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2014-10-04 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2014-10-04 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2014-10-04 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2014-10-04 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2014-10-04 08:25:22 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-10-04 08:25:21 ----A---- C:\WINDOWS\avastSS.scr
2014-10-04 08:23:34 ----D---- C:\Program Files\AVAST Software
2014-10-04 08:23:10 ----D---- C:\ProgramData\AVAST Software
2014-10-04 08:12:13 ----SHD---- C:\Config.Msi
2014-09-29 23:14:43 ----D---- C:\Program Files\Microsoft Silverlight
2014-09-29 23:14:43 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-09-29 22:04:56 ----D---- C:\Program Files\CCleaner
2014-09-29 21:18:06 ----D---- C:\Program Files (x86)\ESET
======List of files/folders modified in the last 1 month======
2014-10-05 20:26:30 ----RD---- C:\Program Files
2014-10-05 20:26:01 ----D---- C:\WINDOWS\system32\config
2014-10-05 20:24:45 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2014-10-05 20:22:40 ----D---- C:\WINDOWS\Temp
2014-10-05 20:22:31 ----D---- C:\WINDOWS\Microsoft.NET
2014-10-05 20:22:29 ----D---- C:\WINDOWS\WinSxS
2014-10-05 20:21:05 ----D---- C:\WINDOWS\Inf
2014-10-05 20:19:10 ----RD---- C:\WINDOWS\ToastData
2014-10-05 20:19:09 ----D---- C:\WINDOWS\SYSWOW64\wbem
2014-10-05 20:19:09 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-10-05 20:19:09 ----D---- C:\Program Files\Windows Journal
2014-10-05 20:19:07 ----RD---- C:\WINDOWS\System32
2014-10-05 20:19:07 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-10-05 20:19:07 ----D---- C:\WINDOWS\SYSWOW64\setup
2014-10-05 20:19:07 ----D---- C:\WINDOWS\SysWOW64
2014-10-05 20:19:07 ----D---- C:\WINDOWS\system32\wbem
2014-10-05 20:19:07 ----D---- C:\WINDOWS\system32\setup
2014-10-05 20:19:07 ----D---- C:\WINDOWS\system32\oobe
2014-10-05 20:19:07 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2014-10-05 20:19:07 ----D---- C:\WINDOWS\system32\drivers
2014-10-05 20:19:07 ----D---- C:\WINDOWS\system32\cs-CZ
2014-10-05 20:19:07 ----D---- C:\WINDOWS\system32\Boot
2014-10-05 20:19:07 ----D---- C:\WINDOWS\PolicyDefinitions
2014-10-05 20:19:06 ----RSD---- C:\WINDOWS\Fonts
2014-10-05 20:19:06 ----D---- C:\WINDOWS\apppatch
2014-10-05 20:19:05 ----D---- C:\WINDOWS\system32\DriverStore
2014-10-05 20:18:30 ----RD---- C:\WINDOWS\assembly
2014-10-05 20:10:11 ----D---- C:\WINDOWS\CbsTemp
2014-10-05 20:07:51 ----D---- C:\WINDOWS\system32\catroot2
2014-10-05 20:00:02 ----D---- C:\WINDOWS\system32\sru
2014-10-05 19:59:27 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-10-05 19:51:35 ----SD---- C:\WINDOWS\system32\CompatTel
2014-10-05 19:51:34 ----D---- C:\Program Files\Windows Defender
2014-10-05 19:51:32 ----D---- C:\Program Files (x86)\Windows Defender
2014-10-05 19:51:27 ----D---- C:\WINDOWS\system32\migration
2014-10-05 19:51:26 ----D---- C:\Windows
2014-10-05 19:51:21 ----D---- C:\WINDOWS\WinStore
2014-10-05 19:51:20 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-10-05 19:51:19 ----D---- C:\WINDOWS\system32\en-US
2014-10-05 19:51:19 ----D---- C:\WINDOWS\MediaViewer
2014-10-05 19:51:19 ----D---- C:\WINDOWS\FileManager
2014-10-05 19:51:19 ----D---- C:\WINDOWS\Camera
2014-10-05 19:51:14 ----D---- C:\Program Files\Internet Explorer
2014-10-05 19:51:14 ----D---- C:\Program Files (x86)\Internet Explorer
2014-10-05 18:40:50 ----D---- C:\WINDOWS\AppReadiness
2014-10-05 18:23:21 ----D---- C:\WINDOWS\SYSWOW64\en-US
2014-10-05 18:23:12 ----D---- C:\Program Files\Windows Portable Devices
2014-10-05 18:23:12 ----D---- C:\Program Files\Windows Multimedia Platform
2014-10-05 18:23:12 ----D---- C:\Program Files\Windows Media Player
2014-10-05 18:23:11 ----D---- C:\WINDOWS\SYSWOW64\Dism
2014-10-05 18:23:11 ----D---- C:\WINDOWS\servicing
2014-10-05 18:23:11 ----D---- C:\Program Files (x86)\Windows Portable Devices
2014-10-05 18:23:11 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2014-10-05 18:23:11 ----D---- C:\Program Files (x86)\Windows Media Player
2014-10-05 18:23:10 ----D---- C:\WINDOWS\SYSWOW64\oobe
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\sk-SK
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\lv-LV
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\ko-KR
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\it-IT
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\hr-HR
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\et-EE
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\en-GB
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\el-GR
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\de-DE
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\da-DK
2014-10-05 18:23:05 ----D---- C:\WINDOWS\cs-CZ
2014-10-05 18:23:02 ----D---- C:\WINDOWS\system32\Sysprep
2014-10-05 18:23:02 ----D---- C:\WINDOWS\system32\sv-SE
2014-10-05 18:23:02 ----D---- C:\WINDOWS\system32\ru-RU
2014-10-05 18:23:02 ----D---- C:\WINDOWS\system32\he-IL
2014-10-05 18:23:02 ----D---- C:\WINDOWS\system32\fr-FR
2014-10-05 18:23:02 ----D---- C:\WINDOWS\system32\fi-FI
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\zh-TW
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\zh-HK
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\zh-CN
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\uk-UA
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\tr-TR
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\th-TH
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\sl-SI
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\ro-RO
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\pt-PT
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\pl-PL
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\ja-JP
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\hu-HU
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\es-ES
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\drivers\en-US
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\bg-BG
2014-10-05 18:23:00 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2014-10-05 18:23:00 ----D---- C:\WINDOWS\system32\pt-BR
2014-10-05 18:23:00 ----D---- C:\WINDOWS\system32\nl-NL
2014-10-05 18:23:00 ----D---- C:\WINDOWS\system32\nb-NO
2014-10-05 18:23:00 ----D---- C:\WINDOWS\system32\migwiz
2014-10-05 18:23:00 ----D---- C:\WINDOWS\system32\lt-LT
2014-10-05 18:23:00 ----D---- C:\WINDOWS\system32\Dism
2014-10-05 18:23:00 ----D---- C:\WINDOWS\system32\ar-SA
2014-10-05 18:22:37 ----D---- C:\WINDOWS\system32\drivers\UMDF
2014-10-05 18:10:12 ----SH---- C:\WINDOWS\system32\desktop.ini
2014-10-05 17:27:35 ----D---- C:\WINDOWS\system32\wdi
2014-10-05 17:04:06 ----D---- C:\WINDOWS\system32\SecureBootUpdates
2014-10-05 17:03:18 ----SHD---- C:\System Volume Information
2014-10-05 17:02:52 ----D---- C:\WINDOWS\system32\restore
2014-10-05 16:48:49 ----D---- C:\WINDOWS\Logs
2014-10-05 16:32:19 ----HD---- C:\Program Files\WindowsApps
2014-10-05 16:30:27 ----SHD---- C:\$Recycle.Bin
2014-10-05 15:57:38 ----SHD---- C:\Recovery
2014-10-05 15:55:37 ----SD---- C:\WINDOWS\system32\Microsoft
2014-10-05 15:28:32 ----D---- C:\WINDOWS\rescache
2014-10-05 15:27:22 ----D---- C:\Program Files\Windows NT
2014-10-05 15:26:44 ----D---- C:\WINDOWS\debug
2014-10-05 15:26:40 ----D---- C:\WINDOWS\SoftwareDistribution
2014-10-05 15:25:51 ----D---- C:\WINDOWS\Registration
2014-10-05 15:25:34 ----D---- C:\WINDOWS\system32\Tasks
2014-10-05 15:19:09 ----D---- C:\WINDOWS\system32\LogFiles
2014-10-05 15:18:37 ----RSD---- C:\WINDOWS\Media
2014-10-05 15:14:08 ----D---- C:\WINDOWS\SYSWOW64\drivers
2014-10-05 15:14:07 ----HD---- C:\WINDOWS\Installer
2014-10-05 15:14:07 ----D---- C:\WINDOWS\sk
2014-10-05 15:14:07 ----D---- C:\WINDOWS\pl
2014-10-05 15:14:07 ----D---- C:\WINDOWS\hu
2014-10-05 15:14:06 ----HD---- C:\ProgramData
2014-10-05 15:14:06 ----D---- C:\WINDOWS\en-GB
2014-10-05 15:14:06 ----D---- C:\WINDOWS\cs
2014-10-05 15:14:06 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-10-05 15:12:38 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2014-10-05 15:12:38 ----D---- C:\WINDOWS\SYSWOW64\zh-HK
2014-10-05 15:12:38 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2014-10-05 15:12:37 ----D---- C:\WINDOWS\SYSWOW64\WCN
2014-10-05 15:12:37 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2014-10-05 15:12:37 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2014-10-05 15:12:37 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2014-10-05 15:12:37 ----D---- C:\WINDOWS\SYSWOW64\sysprep
2014-10-05 15:12:37 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2014-10-05 15:12:37 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2014-10-05 15:12:36 ----D---- C:\WINDOWS\SYSWOW64\SMI
2014-10-05 15:12:35 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2014-10-05 15:12:35 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2014-10-05 15:12:35 ----D---- C:\WINDOWS\SYSWOW64\sda
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\MUI
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2014-10-05 15:12:33 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2014-10-05 15:12:33 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2014-10-05 15:12:33 ----D---- C:\WINDOWS\SYSWOW64\LogFiles
2014-10-05 15:12:33 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2014-10-05 15:12:33 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2014-10-05 15:12:33 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2014-10-05 15:12:32 ----D---- C:\WINDOWS\SYSWOW64\InputMethod
2014-10-05 15:12:32 ----D---- C:\WINDOWS\SYSWOW64\IME
2014-10-05 15:12:32 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2014-10-05 15:12:32 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2014-10-05 15:12:32 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2014-10-05 15:12:30 ----D---- C:\WINDOWS\SYSWOW64\catroot
2014-10-05 15:12:30 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2014-10-05 15:12:30 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2014-10-05 15:12:26 ----D---- C:\WINDOWS\system32\WCN
2014-10-05 15:12:26 ----D---- C:\WINDOWS\system32\spool
2014-10-05 15:12:22 ----D---- C:\WINDOWS\system32\NDF
2014-10-05 15:12:22 ----D---- C:\WINDOWS\system32\MUI
2014-10-05 15:12:21 ----DC---- C:\WINDOWS\system32\DRVSTORE
2014-10-05 15:12:21 ----D---- C:\WINDOWS\system32\IME
2014-10-05 15:12:20 ----D---- C:\WINDOWS\system32\drivers\etc
2014-10-05 15:11:25 ----D---- C:\WINDOWS\InputMethod
2014-10-05 15:11:24 ----D---- C:\WINDOWS\IME
2014-10-05 15:11:23 ----D---- C:\WINDOWS\Help
2014-10-05 15:11:20 ----D---- C:\WINDOWS\DigitalLocker
2014-10-05 15:11:18 ----RD---- C:\Users
2014-10-05 15:11:17 ----D---- C:\ProgramData\PRICache
2014-10-05 15:11:16 ----SD---- C:\ProgramData\Microsoft
2014-10-05 15:11:11 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2014-10-05 15:11:11 ----RD---- C:\Program Files (x86)
2014-10-05 15:11:11 ----D---- C:\Program Files (x86)\WindowsPowerShell
2014-10-05 15:11:08 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-10-05 15:11:07 ----D---- C:\Program Files (x86)\Common Files
2014-10-05 15:11:04 ----SHD---- C:\Program Files\Windows Sidebar
2014-10-05 15:11:04 ----D---- C:\Program Files\WindowsPowerShell
2014-10-05 15:11:02 ----D---- C:\Program Files\Common Files\microsoft shared
2014-10-05 15:11:01 ----D---- C:\Program Files\Common Files
2014-10-05 15:09:28 ----D---- C:\WINDOWS\system32\CodeIntegrity
2014-10-05 15:08:01 ----D---- C:\WINDOWS\system32\Recovery
2014-10-05 15:00:50 ----D---- C:\WINDOWS\system32\catroot
2014-10-04 08:20:23 ----D---- C:\ProgramData\AVG2014
2014-10-04 08:20:20 ----D---- C:\ProgramData\MFAData
2014-10-04 08:12:34 ----HD---- C:\WINDOWS\ELAMBKUP
2014-09-30 21:29:51 ----D---- C:\Users\Karolínka\AppData\Roaming\vlc
2014-09-29 22:20:47 ----D---- C:\Users\Karolínka\AppData\Roaming\uTorrent
2014-09-28 23:07:51 ----D---- C:\ProgramData\P4G
2014-09-28 23:07:51 ----D---- C:\Program Files (x86)\Google
2014-09-22 08:42:39 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2014-09-21 16:34:12 ----D---- C:\Program Files\Microsoft Office 15
2014-09-20 12:34:37 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-09-14 23:48:29 ----D---- C:\WINDOWS\system32\MRT
2014-09-14 23:43:43 ----A---- C:\WINDOWS\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-10-04 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-10-04 224896]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-09-14 647736]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-10-04 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-10-04 1041168]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-10-04 427360]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-10-04 29208]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-10-04 79184]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-10-04 92008]
R3 AiCharger;ASUS Charger Driver; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [2012-09-18 17152]
R3 athr;@oem92.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-08-22 3915264]
R3 ATP;@oem33.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2013-04-16 65784]
R3 BTATH_HCRP;@oem3.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\WINDOWS\System32\drivers\btath_hcrp.sys [2013-03-27 179432]
R3 BTATH_RCP;@oem8.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\WINDOWS\System32\drivers\btath_rcp.sys [2013-03-27 136784]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2014-01-28 593000]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2013-12-04 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-01-31 81920]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 HIDSwitch;@oem1.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2013-11-04 20280]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-01 4177920]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-06-04 3441992]
R3 IntcDAud;@oem64.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-01-09 342528]
R3 iwdbus;@oem96.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-08-23 26008]
R3 kbfiltr;@oem4.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-02 14992]
R3 MEIx64;@oem40.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2014-01-27 167424]
R3 RSBASTOR;@oem88.inf,%Rts5208%;Realtek PCIE CardReader Driver - BA; C:\WINDOWS\system32\DRIVERS\RtsBaStor.sys [2012-10-08 298640]
R3 RTL8168;@oem91.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-11-29 838872]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S3 AthBTPort;@oem87.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\WINDOWS\system32\DRIVERS\btath_flt.sys [2013-03-27 89168]
S3 BTATH_A2DP;@oem76.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\WINDOWS\system32\drivers\btath_a2dp.sys [2013-03-27 346192]
S3 btath_avdt;@oem76.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\WINDOWS\system32\drivers\btath_avdt.sys [2013-03-27 115280]
S3 BTATH_LWFLT;@oem6.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [2013-03-27 77464]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-07-24 1200640]
S3 intaud_WaveExtensible;@oem95.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-08-23 39320]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-04 64704]
R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2013-06-14 1281640]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-01-07 43336]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-10-04 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2014-08-12 2428088]
R3 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2012-10-05 110976]
R3 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [2012-04-13 277120]
R3 Asus WebStorage Windows Service;Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [2012-12-19 72192]
R3 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2013-03-27 227968]
R3 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
R3 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-09-13 2466448]
R3 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R3 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-06-27 129856]
R3 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R3 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R3 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-28 116648]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-01 279000]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-09-30 43696]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-28 116648]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-02-06 641352]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-02-01 150600]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
-----------------EOF-----------------
2014-10-05 18:05:22 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2014-10-05 18:05:22 ----A---- C:\WINDOWS\system32\kernel32.dll
2014-10-05 18:05:22 ----A---- C:\WINDOWS\system32\kerberos.dll
2014-10-05 18:05:21 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2014-10-05 18:05:21 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2014-10-05 18:05:21 ----A---- C:\WINDOWS\system32\wlidprov.dll
2014-10-05 18:05:21 ----A---- C:\WINDOWS\system32\ReAgent.dll
2014-10-05 18:05:20 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2014-10-05 18:05:20 ----A---- C:\WINDOWS\system32\dnsapi.dll
2014-10-05 18:05:20 ----A---- C:\WINDOWS\system32\dcomp.dll
2014-10-05 18:05:19 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2014-10-05 18:05:19 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2014-10-05 18:05:19 ----A---- C:\WINDOWS\system32\rasapi32.dll
2014-10-05 18:05:19 ----A---- C:\WINDOWS\system32\netlogon.dll
2014-10-05 18:05:19 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2014-10-05 18:05:19 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2014-10-05 18:05:18 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2014-10-05 18:05:18 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2014-10-05 18:05:18 ----A---- C:\WINDOWS\system32\SessEnv.dll
2014-10-05 18:05:17 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2014-10-05 18:05:16 ----A---- C:\WINDOWS\SYSWOW64\SessEnv.dll
2014-10-05 18:05:16 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2014-10-05 18:05:16 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-10-05 18:05:15 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2014-10-05 18:05:15 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2014-10-05 18:05:15 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2014-10-05 18:05:15 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2014-10-05 18:05:15 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\userenv.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\umpnpmgr.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\ReInfo.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\pdh.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\davclnt.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\cdd.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2014-10-05 18:05:14 ----A---- C:\WINDOWS\system32\AdmTmpl.dll
2014-10-05 18:05:13 ----A---- C:\WINDOWS\SYSWOW64\userenv.dll
2014-10-05 18:05:13 ----A---- C:\WINDOWS\SYSWOW64\spp.dll
2014-10-05 18:05:13 ----A---- C:\WINDOWS\SYSWOW64\pdh.dll
2014-10-05 18:05:13 ----A---- C:\WINDOWS\SYSWOW64\davclnt.dll
2014-10-05 18:05:13 ----A---- C:\WINDOWS\system32\wlangpui.dll
2014-10-05 18:05:13 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-10-05 18:05:13 ----A---- C:\WINDOWS\system32\spp.dll
2014-10-05 18:05:13 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2014-10-05 18:05:13 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2014-10-05 18:05:13 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2014-10-05 18:05:13 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2014-10-05 18:05:13 ----A---- C:\WINDOWS\system32\dafWfdProvider.dll
2014-10-05 18:05:12 ----A---- C:\WINDOWS\SYSWOW64\wlangpui.dll
2014-10-05 18:05:12 ----A---- C:\WINDOWS\SYSWOW64\w32tm.exe
2014-10-05 18:05:12 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2014-10-05 18:05:12 ----A---- C:\WINDOWS\SYSWOW64\CredentialMigrationHandler.dll
2014-10-05 18:05:12 ----A---- C:\WINDOWS\system32\w32tm.exe
2014-10-05 18:05:12 ----A---- C:\WINDOWS\system32\RMapi.dll
2014-10-05 18:05:12 ----A---- C:\WINDOWS\system32\fveapibase.dll
2014-10-05 18:05:12 ----A---- C:\WINDOWS\system32\drivers\tcpipreg.sys
2014-10-05 18:05:12 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2014-10-05 18:05:12 ----A---- C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\SYSWOW64\sxproxy.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\SYSWOW64\LocationApi.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\SYSWOW64\AdmTmpl.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\system32\sxproxy.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\system32\SetNetworkLocation.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\system32\nshwfp.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\system32\LocationApi.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2014-10-05 18:05:11 ----A---- C:\WINDOWS\system32\DevPropMgr.dll
2014-10-05 18:05:11 ----A---- C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2014-10-05 18:05:10 ----A---- C:\WINDOWS\SYSWOW64\l2gpstore.dll
2014-10-05 18:05:10 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2014-10-05 18:05:10 ----A---- C:\WINDOWS\system32\l2gpstore.dll
2014-10-05 18:05:10 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2014-10-05 18:01:30 ----A---- C:\WINDOWS\system32\glcndFilter.dll
2014-10-05 18:01:29 ----A---- C:\WINDOWS\SYSWOW64\OobeFldr.dll
2014-10-05 18:01:29 ----A---- C:\WINDOWS\system32\WSService.dll
2014-10-05 18:01:29 ----A---- C:\WINDOWS\system32\OobeFldr.dll
2014-10-05 18:01:22 ----A---- C:\WINDOWS\SYSWOW64\glcndFilter.dll
2014-10-05 18:01:10 ----A---- C:\WINDOWS\system32\wmp.dll
2014-10-05 18:01:08 ----A---- C:\WINDOWS\system32\sppobjs.dll
2014-10-05 18:01:05 ----A---- C:\WINDOWS\system32\tquery.dll
2014-10-05 18:01:04 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2014-10-05 18:01:02 ----A---- C:\WINDOWS\system32\sysmain.dll
2014-10-05 18:01:01 ----A---- C:\WINDOWS\system32\combase.dll
2014-10-05 18:01:00 ----A---- C:\WINDOWS\system32\mssrch.dll
2014-10-05 18:00:59 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2014-10-05 18:00:57 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2014-10-05 18:00:57 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2014-10-05 18:00:55 ----A---- C:\WINDOWS\system32\dui70.dll
2014-10-05 18:00:53 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2014-10-05 18:00:51 ----A---- C:\WINDOWS\system32\webservices.dll
2014-10-05 18:00:50 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2014-10-05 18:00:49 ----A---- C:\WINDOWS\system32\msctf.dll
2014-10-05 18:00:48 ----A---- C:\WINDOWS\SYSWOW64\dui70.dll
2014-10-05 18:00:48 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2014-10-05 18:00:48 ----A---- C:\WINDOWS\system32\msTextPrediction.dll
2014-10-05 18:00:47 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2014-10-05 18:00:47 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2014-10-05 18:00:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2014-10-05 18:00:44 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2014-10-05 18:00:44 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2014-10-05 18:00:44 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2014-10-05 18:00:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2014-10-05 18:00:43 ----A---- C:\WINDOWS\SYSWOW64\webservices.dll
2014-10-05 18:00:43 ----A---- C:\WINDOWS\system32\WinTypes.dll
2014-10-05 18:00:42 ----A---- C:\WINDOWS\system32\wer.dll
2014-10-05 18:00:42 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2014-10-05 18:00:41 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2014-10-05 18:00:41 ----A---- C:\WINDOWS\system32\WofTasks.dll
2014-10-05 18:00:41 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2014-10-05 18:00:41 ----A---- C:\WINDOWS\system32\setupapi.dll
2014-10-05 18:00:41 ----A---- C:\WINDOWS\system32\rpcss.dll
2014-10-05 18:00:41 ----A---- C:\WINDOWS\system32\DfpCommon.dll
2014-10-05 18:00:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2014-10-05 18:00:39 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2014-10-05 18:00:39 ----A---- C:\WINDOWS\system32\RacEngn.dll
2014-10-05 18:00:39 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2014-10-05 18:00:38 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2014-10-05 18:00:38 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2014-10-05 18:00:37 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2014-10-05 18:00:37 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2014-10-05 18:00:36 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2014-10-05 18:00:36 ----A---- C:\WINDOWS\SYSWOW64\StructuredQuery.dll
2014-10-05 18:00:36 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2014-10-05 18:00:35 ----A---- C:\WINDOWS\SYSWOW64\setupapi.dll
2014-10-05 18:00:35 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2014-10-05 18:00:35 ----A---- C:\WINDOWS\system32\uxtheme.dll
2014-10-05 18:00:35 ----A---- C:\WINDOWS\system32\samsrv.dll
2014-10-05 18:00:33 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2014-10-05 18:00:33 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2014-10-05 18:00:32 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2014-10-05 18:00:32 ----A---- C:\WINDOWS\system32\WofUtil.dll
2014-10-05 18:00:32 ----A---- C:\WINDOWS\system32\wimgapi.dll
2014-10-05 18:00:31 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2014-10-05 18:00:31 ----A---- C:\WINDOWS\system32\MMDevAPI.dll
2014-10-05 18:00:31 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2014-10-05 18:00:30 ----A---- C:\WINDOWS\system32\drivers\rdyboost.sys
2014-10-05 18:00:29 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2014-10-05 18:00:29 ----A---- C:\WINDOWS\SYSWOW64\Taskmgr.exe
2014-10-05 18:00:29 ----A---- C:\WINDOWS\SYSWOW64\RacEngn.dll
2014-10-05 18:00:29 ----A---- C:\WINDOWS\system32\wpncore.dll
2014-10-05 18:00:29 ----A---- C:\WINDOWS\system32\recimg.exe
2014-10-05 18:00:29 ----A---- C:\WINDOWS\system32\dfp.exe
2014-10-05 18:00:28 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2014-10-05 18:00:28 ----A---- C:\WINDOWS\system32\WerFault.exe
2014-10-05 18:00:28 ----A---- C:\WINDOWS\system32\usercpl.dll
2014-10-05 18:00:28 ----A---- C:\WINDOWS\system32\perftrack.dll
2014-10-05 18:00:28 ----A---- C:\WINDOWS\system32\dfpinc.dat
2014-10-05 18:00:27 ----A---- C:\WINDOWS\system32\WWAHost.exe
2014-10-05 18:00:27 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2014-10-05 18:00:27 ----A---- C:\WINDOWS\system32\lsm.dll
2014-10-05 18:00:27 ----A---- C:\WINDOWS\system32\advapi32.dll
2014-10-05 18:00:26 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2014-10-05 18:00:26 ----A---- C:\WINDOWS\system32\tdh.dll
2014-10-05 18:00:26 ----A---- C:\WINDOWS\system32\mssvp.dll
2014-10-05 18:00:26 ----A---- C:\WINDOWS\system32\energy.dll
2014-10-05 18:00:26 ----A---- C:\WINDOWS\system32\apphelp.dll
2014-10-05 18:00:25 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2014-10-05 18:00:24 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2014-10-05 18:00:24 ----A---- C:\WINDOWS\system32\winlogon.exe
2014-10-05 18:00:24 ----A---- C:\WINDOWS\system32\DismApi.dll
2014-10-05 18:00:23 ----A---- C:\WINDOWS\SYSWOW64\MMDevAPI.dll
2014-10-05 18:00:23 ----A---- C:\WINDOWS\SYSWOW64\apphelp.dll
2014-10-05 18:00:23 ----A---- C:\WINDOWS\system32\mssph.dll
2014-10-05 18:00:22 ----A---- C:\WINDOWS\system32\werconcpl.dll
2014-10-05 18:00:22 ----A---- C:\WINDOWS\system32\msvproc.dll
2014-10-05 18:00:21 ----A---- C:\WINDOWS\system32\thumbcache.dll
2014-10-05 18:00:20 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2014-10-05 18:00:20 ----A---- C:\WINDOWS\system32\WMALFXGFXDSP.dll
2014-10-05 18:00:20 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2014-10-05 18:00:20 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2014-10-05 18:00:19 ----A---- C:\WINDOWS\system32\Faultrep.dll
2014-10-05 18:00:19 ----A---- C:\WINDOWS\system32\ci.dll
2014-10-05 18:00:18 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2014-10-05 18:00:18 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll
2014-10-05 18:00:18 ----A---- C:\WINDOWS\system32\sppwinob.dll
2014-10-05 18:00:18 ----A---- C:\WINDOWS\system32\ntshrui.dll
2014-10-05 18:00:18 ----A---- C:\WINDOWS\system32\iuilp.dll
2014-10-05 18:00:18 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2014-10-05 18:00:17 ----A---- C:\WINDOWS\SYSWOW64\slc.dll
2014-10-05 18:00:17 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2014-10-05 18:00:17 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2014-10-05 18:00:17 ----A---- C:\WINDOWS\system32\wlidcli.dll
2014-10-05 18:00:17 ----A---- C:\WINDOWS\system32\vmrdvcore.dll
2014-10-05 18:00:17 ----A---- C:\WINDOWS\system32\slc.dll
2014-10-05 18:00:17 ----A---- C:\WINDOWS\system32\MrmIndexer.dll
2014-10-05 18:00:17 ----A---- C:\WINDOWS\system32\aelupsvc.dll
2014-10-05 18:00:16 ----A---- C:\WINDOWS\SYSWOW64\uxtheme.dll
2014-10-05 18:00:16 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2014-10-05 18:00:16 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2014-10-05 18:00:16 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2014-10-05 18:00:16 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2014-10-05 18:00:16 ----A---- C:\WINDOWS\system32\pnidui.dll
2014-10-05 18:00:16 ----A---- C:\WINDOWS\system32\nettrace.dll
2014-10-05 18:00:16 ----A---- C:\WINDOWS\system32\Dism.exe
2014-10-05 18:00:15 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2014-10-05 18:00:15 ----A---- C:\WINDOWS\system32\dwmredir.dll
2014-10-05 18:00:14 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2014-10-05 18:00:14 ----A---- C:\WINDOWS\system32\WlanMM.dll
2014-10-05 18:00:14 ----A---- C:\WINDOWS\system32\psmsrv.dll
2014-10-05 18:00:13 ----A---- C:\WINDOWS\system32\ninput.dll
2014-10-05 18:00:13 ----A---- C:\WINDOWS\system32\InputSwitch.dll
2014-10-05 18:00:13 ----A---- C:\WINDOWS\system32\authz.dll
2014-10-05 18:00:12 ----A---- C:\WINDOWS\system32\taskeng.exe
2014-10-05 18:00:12 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2014-10-05 18:00:12 ----A---- C:\WINDOWS\system32\rascustom.dll
2014-10-05 18:00:12 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2014-10-05 18:00:11 ----A---- C:\WINDOWS\system32\wlidcredprov.dll
2014-10-05 18:00:11 ----A---- C:\WINDOWS\system32\wersvc.dll
2014-10-05 18:00:11 ----A---- C:\WINDOWS\system32\themeui.dll
2014-10-05 18:00:11 ----A---- C:\WINDOWS\system32\sqmapi.dll
2014-10-05 18:00:11 ----A---- C:\WINDOWS\system32\rdbui.dll
2014-10-05 18:00:11 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2014-10-05 18:00:10 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2014-10-05 18:00:10 ----A---- C:\WINDOWS\SYSWOW64\DismApi.dll
2014-10-05 18:00:10 ----A---- C:\WINDOWS\system32\wbengine.exe
2014-10-05 18:00:10 ----A---- C:\WINDOWS\system32\rdpcore.dll
2014-10-05 18:00:10 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2014-10-05 18:00:09 ----A---- C:\WINDOWS\SYSWOW64\WSClient.dll
2014-10-05 18:00:09 ----A---- C:\WINDOWS\SYSWOW64\themeui.dll
2014-10-05 18:00:09 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2014-10-05 18:00:09 ----A---- C:\WINDOWS\SYSWOW64\MrmIndexer.dll
2014-10-05 18:00:09 ----A---- C:\WINDOWS\SYSWOW64\Dism.exe
2014-10-05 18:00:09 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2014-10-05 18:00:09 ----A---- C:\WINDOWS\system32\oleaut32.dll
2014-10-05 18:00:09 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2014-10-05 18:00:08 ----A---- C:\WINDOWS\SYSWOW64\mssphtb.dll
2014-10-05 18:00:08 ----A---- C:\WINDOWS\SYSWOW64\InputSwitch.dll
2014-10-05 18:00:08 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2014-10-05 18:00:08 ----A---- C:\WINDOWS\system32\sppc.dll
2014-10-05 18:00:08 ----A---- C:\WINDOWS\system32\clrhost.dll
2014-10-05 18:00:08 ----A---- C:\WINDOWS\system32\bcrypt.dll
2014-10-05 18:00:07 ----A---- C:\WINDOWS\SYSWOW64\sppc.dll
2014-10-05 18:00:07 ----A---- C:\WINDOWS\system32\WSClient.dll
2014-10-05 18:00:07 ----A---- C:\WINDOWS\system32\wscinterop.dll
2014-10-05 18:00:07 ----A---- C:\WINDOWS\system32\WLanConn.dll
2014-10-05 18:00:07 ----A---- C:\WINDOWS\system32\wimserv.exe
2014-10-05 18:00:07 ----A---- C:\WINDOWS\system32\PkgMgr.exe
2014-10-05 18:00:06 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2014-10-05 18:00:06 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2014-10-05 18:00:05 ----A---- C:\WINDOWS\SYSWOW64\SyncCenter.dll
2014-10-05 18:00:05 ----A---- C:\WINDOWS\system32\PurchaseWindowsLicense.dll
2014-10-05 18:00:05 ----A---- C:\WINDOWS\system32\gameux.dll
2014-10-05 18:00:04 ----A---- C:\WINDOWS\SYSWOW64\WlanMM.dll
2014-10-05 18:00:04 ----A---- C:\WINDOWS\system32\fhcfg.dll
2014-10-05 18:00:03 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2014-10-05 18:00:03 ----A---- C:\WINDOWS\system32\dwm.exe
2014-10-05 18:00:02 ----A---- C:\WINDOWS\system32\winsrv.dll
2014-10-05 18:00:02 ----A---- C:\WINDOWS\system32\taskhost.exe
2014-10-05 18:00:02 ----A---- C:\WINDOWS\system32\rasgcw.dll
2014-10-05 18:00:02 ----A---- C:\WINDOWS\system32\drivers\luafv.sys
2014-10-05 18:00:01 ----A---- C:\WINDOWS\SYSWOW64\authz.dll
2014-10-05 18:00:01 ----A---- C:\WINDOWS\system32\wscapi.dll
2014-10-05 18:00:01 ----A---- C:\WINDOWS\system32\wermgr.exe
2014-10-05 18:00:01 ----A---- C:\WINDOWS\system32\drivers\PEAuth.sys
2014-10-05 18:00:01 ----A---- C:\WINDOWS\system32\dmdskmgr.dll
2014-10-05 18:00:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2014-10-05 18:00:00 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2014-10-05 18:00:00 ----A---- C:\WINDOWS\SYSWOW64\ninput.dll
2014-10-05 18:00:00 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2014-10-05 18:00:00 ----A---- C:\WINDOWS\SYSWOW64\clrhost.dll
2014-10-05 18:00:00 ----A---- C:\WINDOWS\system32\srchadmin.dll
2014-10-05 18:00:00 ----A---- C:\WINDOWS\system32\drivers\rfcomm.sys
2014-10-05 18:00:00 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2014-10-05 17:59:59 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2014-10-05 17:59:59 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2014-10-05 17:59:59 ----A---- C:\WINDOWS\system32\smss.exe
2014-10-05 17:59:59 ----A---- C:\WINDOWS\system32\BioCredProv.dll
2014-10-05 17:59:58 ----A---- C:\WINDOWS\SYSWOW64\sqmapi.dll
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\vdsbas.dll
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\systemreset.exe
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\RASMM.dll
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\netid.dll
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\imm32.dll
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\fsutil.exe
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\fhcpl.dll
2014-10-05 17:59:58 ----A---- C:\WINDOWS\system32\AltTab.dll
2014-10-05 17:59:57 ----A---- C:\WINDOWS\SYSWOW64\fsutil.exe
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\WSDApi.dll
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\UserLanguagesCpl.dll
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\taskhostex.exe
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\sharemediacpl.dll
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\sdclt.exe
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\drivers\fileinfo.sys
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\das.dll
2014-10-05 17:59:57 ----A---- C:\WINDOWS\system32\CloudNotifications.exe
2014-10-05 17:59:56 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2014-10-05 17:59:56 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2014-10-05 17:59:56 ----A---- C:\WINDOWS\SYSWOW64\imm32.dll
2014-10-05 17:59:56 ----A---- C:\WINDOWS\SYSWOW64\CloudNotifications.exe
2014-10-05 17:59:56 ----A---- C:\WINDOWS\system32\powrprof.dll
2014-10-05 17:59:56 ----A---- C:\WINDOWS\system32\newdev.dll
2014-10-05 17:59:56 ----A---- C:\WINDOWS\system32\mssprxy.dll
2014-10-05 17:59:56 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2014-10-05 17:59:56 ----A---- C:\WINDOWS\system32\drivers\BasicRender.sys
2014-10-05 17:59:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2014-10-05 17:59:55 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2014-10-05 17:59:55 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2014-10-05 17:59:55 ----A---- C:\WINDOWS\system32\zipfldr.dll
2014-10-05 17:59:55 ----A---- C:\WINDOWS\system32\RestoreOptIn.exe
2014-10-05 17:59:55 ----A---- C:\WINDOWS\system32\drivers\sdstor.sys
2014-10-05 17:59:55 ----A---- C:\WINDOWS\system32\drivers\BthLEEnum.sys
2014-10-05 17:59:55 ----A---- C:\WINDOWS\system32\dmvdsitf.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\SYSWOW64\WLanConn.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2014-10-05 17:59:54 ----A---- C:\WINDOWS\SYSWOW64\rasgcw.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\SYSWOW64\powrprof.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\system32\wow64win.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\system32\vds.exe
2014-10-05 17:59:54 ----A---- C:\WINDOWS\system32\UserAccountBroker.exe
2014-10-05 17:59:54 ----A---- C:\WINDOWS\system32\spwizeng.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\system32\microsoft-windows-kernel-power-events.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2014-10-05 17:59:54 ----A---- C:\WINDOWS\system32\LockScreenContent.dll
2014-10-05 17:59:53 ----A---- C:\WINDOWS\SYSWOW64\zipfldr.dll
2014-10-05 17:59:53 ----A---- C:\WINDOWS\SYSWOW64\WSDApi.dll
2014-10-05 17:59:53 ----A---- C:\WINDOWS\SYSWOW64\wscinterop.dll
2014-10-05 17:59:53 ----A---- C:\WINDOWS\SYSWOW64\UserAccountBroker.exe
2014-10-05 17:59:53 ----A---- C:\WINDOWS\SYSWOW64\srchadmin.dll
2014-10-05 17:59:53 ----A---- C:\WINDOWS\SYSWOW64\RestoreOptIn.exe
2014-10-05 17:59:53 ----A---- C:\WINDOWS\SYSWOW64\newdev.dll
2014-10-05 17:59:53 ----A---- C:\WINDOWS\system32\easinvoker.exe
2014-10-05 17:59:53 ----A---- C:\WINDOWS\system32\dot3mm.dll
2014-10-05 17:59:53 ----A---- C:\WINDOWS\system32\bcd.dll
2014-10-05 17:59:52 ----A---- C:\WINDOWS\SYSWOW64\cleanmgr.exe
2014-10-05 17:59:52 ----A---- C:\WINDOWS\SYSWOW64\bcd.dll
2014-10-05 17:59:52 ----A---- C:\WINDOWS\system32\drivers\dumpfve.sys
2014-10-05 17:59:52 ----A---- C:\WINDOWS\system32\DAMM.dll
2014-10-05 17:59:52 ----A---- C:\WINDOWS\system32\bootux.dll
2014-10-05 17:59:51 ----A---- C:\WINDOWS\system32\samlib.dll
2014-10-05 17:59:51 ----A---- C:\WINDOWS\system32\rasmans.dll
2014-10-05 17:59:51 ----A---- C:\WINDOWS\system32\provsvc.dll
2014-10-05 17:59:51 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2014-10-05 17:59:51 ----A---- C:\WINDOWS\system32\drivers\UCX01000.SYS
2014-10-05 17:59:51 ----A---- C:\WINDOWS\system32\cleanmgr.exe
2014-10-05 17:59:51 ----A---- C:\WINDOWS\system32\AuthHost.exe
2014-10-05 17:59:50 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe
2014-10-05 17:59:50 ----A---- C:\WINDOWS\SYSWOW64\taskeng.exe
2014-10-05 17:59:50 ----A---- C:\WINDOWS\SYSWOW64\netid.dll
2014-10-05 17:59:50 ----A---- C:\WINDOWS\SYSWOW64\dmvdsitf.dll
2014-10-05 17:59:50 ----A---- C:\WINDOWS\SYSWOW64\BioCredProv.dll
2014-10-05 17:59:50 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe
2014-10-05 17:59:50 ----A---- C:\WINDOWS\system32\netiohlp.dll
2014-10-05 17:59:50 ----A---- C:\WINDOWS\system32\korwbrkr.dll
2014-10-05 17:59:50 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2014-10-05 17:59:49 ----A---- C:\WINDOWS\SYSWOW64\netiohlp.dll
2014-10-05 17:59:49 ----A---- C:\WINDOWS\system32\scrrun.dll
2014-10-05 17:59:49 ----A---- C:\WINDOWS\system32\drivers\http.sys
2014-10-05 17:59:48 ----A---- C:\WINDOWS\SYSWOW64\SearchFilterHost.exe
2014-10-05 17:59:48 ----A---- C:\WINDOWS\system32\easwrt.dll
2014-10-05 17:59:47 ----A---- C:\WINDOWS\SYSWOW64\dmdskmgr.dll
2014-10-05 17:59:47 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2014-10-05 17:59:47 ----A---- C:\WINDOWS\system32\scrobj.dll
2014-10-05 17:59:47 ----A---- C:\WINDOWS\system32\netplwiz.dll
2014-10-05 17:59:47 ----A---- C:\WINDOWS\system32\LockScreenContentServer.exe
2014-10-05 17:59:47 ----A---- C:\WINDOWS\system32\CloudStorageWizard.exe
2014-10-05 17:59:47 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2014-10-05 17:59:47 ----A---- C:\WINDOWS\system32\acppage.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\SYSWOW64\scrrun.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\SYSWOW64\samlib.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\SYSWOW64\MicrosoftAccountTokenProvider.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\SYSWOW64\acppage.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\system32\winbrand.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\system32\slpts.dll
2014-10-05 17:59:46 ----A---- C:\WINDOWS\system32\DWWIN.EXE
2014-10-05 17:59:46 ----A---- C:\WINDOWS\system32\bcdedit.exe
2014-10-05 17:59:45 ----A---- C:\WINDOWS\SYSWOW64\netplwiz.dll
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\wpnprv.dll
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\Windows.Media.Renewal.dll
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\wbadmin.exe
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\SysResetErr.exe
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\sud.dll
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\autofmt.exe
2014-10-05 17:59:45 ----A---- C:\WINDOWS\system32\autoconv.exe
2014-10-05 17:59:44 ----A---- C:\WINDOWS\SYSWOW64\wlidcredprov.dll
2014-10-05 17:59:44 ----A---- C:\WINDOWS\SYSWOW64\scrobj.dll
2014-10-05 17:59:44 ----A---- C:\WINDOWS\SYSWOW64\provsvc.dll
2014-10-05 17:59:44 ----A---- C:\WINDOWS\system32\untfs.dll
2014-10-05 17:59:44 ----A---- C:\WINDOWS\system32\sppnp.dll
2014-10-05 17:59:44 ----A---- C:\WINDOWS\system32\bcdboot.exe
2014-10-05 17:59:43 ----A---- C:\WINDOWS\SYSWOW64\winbrand.dll
2014-10-05 17:59:43 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2014-10-05 17:59:43 ----A---- C:\WINDOWS\SYSWOW64\slpts.dll
2014-10-05 17:59:43 ----A---- C:\WINDOWS\SYSWOW64\PkgMgr.exe
2014-10-05 17:59:43 ----A---- C:\WINDOWS\SYSWOW64\autochk.exe
2014-10-05 17:59:43 ----A---- C:\WINDOWS\SYSWOW64\autofmt.exe
2014-10-05 17:59:43 ----A---- C:\WINDOWS\system32\spbcd.dll
2014-10-05 17:59:43 ----A---- C:\WINDOWS\system32\setbcdlocale.dll
2014-10-05 17:59:43 ----A---- C:\WINDOWS\system32\migisol.dll
2014-10-05 17:59:43 ----A---- C:\WINDOWS\system32\DAConn.dll
2014-10-05 17:59:43 ----A---- C:\WINDOWS\system32\autochk.exe
2014-10-05 17:59:42 ----A---- C:\WINDOWS\SYSWOW64\DWWIN.EXE
2014-10-05 17:59:42 ----A---- C:\WINDOWS\SYSWOW64\autoconv.exe
2014-10-05 17:59:42 ----A---- C:\WINDOWS\SYSWOW64\AuthBroker.dll
2014-10-05 17:59:42 ----A---- C:\WINDOWS\system32\WindowsAnytimeUpgradeResults.exe
2014-10-05 17:59:42 ----A---- C:\WINDOWS\system32\spcompat.dll
2014-10-05 17:59:42 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2014-10-05 17:59:42 ----A---- C:\WINDOWS\system32\fhevents.dll
2014-10-05 17:59:42 ----A---- C:\WINDOWS\system32\dafBth.dll
2014-10-05 17:59:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-10-05 17:59:41 ----A---- C:\WINDOWS\SYSWOW64\StorageContextHandler.dll
2014-10-05 17:59:41 ----A---- C:\WINDOWS\SYSWOW64\mssprxy.dll
2014-10-05 17:59:41 ----A---- C:\WINDOWS\system32\vdsutil.dll
2014-10-05 17:59:41 ----A---- C:\WINDOWS\system32\drivers\watchdog.sys
2014-10-05 17:59:41 ----A---- C:\WINDOWS\system32\drivers\BTHUSB.SYS
2014-10-05 17:59:41 ----A---- C:\WINDOWS\system32\cscript.exe
2014-10-05 17:59:40 ----A---- C:\WINDOWS\SYSWOW64\spwizeng.dll
2014-10-05 17:59:39 ----A---- C:\WINDOWS\SYSWOW64\WimBootCompress.ini
2014-10-05 17:59:39 ----A---- C:\WINDOWS\SYSWOW64\spbcd.dll
2014-10-05 17:59:39 ----A---- C:\WINDOWS\system32\WimBootCompress.ini
2014-10-05 17:59:39 ----A---- C:\WINDOWS\system32\werui.dll
2014-10-05 17:59:39 ----A---- C:\WINDOWS\system32\energytask.dll
2014-10-05 17:59:39 ----A---- C:\WINDOWS\system32\diskpart.exe
2014-10-05 17:59:38 ----A---- C:\WINDOWS\system32\powercfg.exe
2014-10-05 17:59:35 ----A---- C:\WINDOWS\SYSWOW64\sud.dll
2014-10-05 17:59:35 ----A---- C:\WINDOWS\system32\RelPost.exe
2014-10-05 17:59:33 ----A---- C:\WINDOWS\system32\SettingMonitor.dll
2014-10-05 17:59:33 ----A---- C:\WINDOWS\system32\pnpclean.dll
2014-10-05 17:59:33 ----A---- C:\WINDOWS\system32\deviceassociation.dll
2014-10-05 17:59:31 ----A---- C:\WINDOWS\SYSWOW64\wlidcli.dll
2014-10-05 17:59:31 ----A---- C:\WINDOWS\SYSWOW64\SettingMonitor.dll
2014-10-05 17:59:31 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2014-10-05 17:59:31 ----A---- C:\WINDOWS\system32\dasHost.exe
2014-10-05 17:59:29 ----A---- C:\WINDOWS\SYSWOW64\winsku.dll
2014-10-05 17:59:29 ----A---- C:\WINDOWS\SYSWOW64\SSShim.dll
2014-10-05 17:59:29 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2014-10-05 17:59:29 ----A---- C:\WINDOWS\SYSWOW64\CloudStorageWizard.exe
2014-10-05 17:59:29 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2014-10-05 17:59:29 ----A---- C:\WINDOWS\system32\srrstr.dll
2014-10-05 17:59:29 ----A---- C:\WINDOWS\system32\ReAgentc.exe
2014-10-05 17:59:29 ----A---- C:\WINDOWS\system32\offreg.dll
2014-10-05 17:59:29 ----A---- C:\WINDOWS\system32\ActionQueue.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\SYSWOW64\powercfg.exe
2014-10-05 17:59:28 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\SYSWOW64\IdCtrls.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\SYSWOW64\deviceassociation.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\system32\msshooks.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\system32\mf3216.dll
2014-10-05 17:59:28 ----A---- C:\WINDOWS\system32\dfrgui.exe
2014-10-05 17:59:27 ----A---- C:\WINDOWS\SYSWOW64\migisol.dll
2014-10-05 17:59:27 ----A---- C:\WINDOWS\system32\f3ahvoas.dll
2014-10-05 17:59:26 ----A---- C:\WINDOWS\SYSWOW64\ReAgentc.exe
2014-10-05 17:59:26 ----A---- C:\WINDOWS\SYSWOW64\easwrt.dll
2014-10-05 17:59:26 ----A---- C:\WINDOWS\SYSWOW64\dfrgui.exe
2014-10-05 17:59:26 ----A---- C:\WINDOWS\system32\winsku.dll
2014-10-05 17:59:26 ----A---- C:\WINDOWS\system32\wercplsupport.dll
2014-10-05 17:59:26 ----A---- C:\WINDOWS\system32\vdsdyn.dll
2014-10-05 17:59:26 ----A---- C:\WINDOWS\system32\SrTasks.exe
2014-10-05 17:59:26 ----A---- C:\WINDOWS\system32\LockScreenContentHost.dll
2014-10-05 17:59:25 ----A---- C:\WINDOWS\SYSWOW64\diskpart.exe
2014-10-05 17:59:25 ----A---- C:\WINDOWS\SYSWOW64\cscript.exe
2014-10-05 17:59:25 ----A---- C:\WINDOWS\system32\themecpl.dll
2014-10-05 17:59:25 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2014-10-05 17:59:25 ----A---- C:\WINDOWS\system32\AepRoam.dll
2014-10-05 17:59:24 ----A---- C:\WINDOWS\SYSWOW64\sxshared.dll
2014-10-05 17:59:24 ----A---- C:\WINDOWS\SYSWOW64\msshooks.dll
2014-10-05 17:59:24 ----A---- C:\WINDOWS\SYSWOW64\ConfigureExpandedStorage.dll
2014-10-05 17:59:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2014-10-05 17:59:23 ----A---- C:\WINDOWS\system32\ConfigureExpandedStorage.dll
2014-10-05 17:59:17 ----A---- C:\WINDOWS\system32\scavengeui.dll
2014-10-05 17:59:15 ----A---- C:\WINDOWS\system32\wincorlib.dll
2014-10-05 17:59:14 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-session-winsta-l1-1-0.dll
2014-10-05 17:59:14 ----A---- C:\WINDOWS\SYSWOW64\setupugc.exe
2014-10-05 17:59:13 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2014-10-05 17:59:10 ----A---- C:\WINDOWS\system32\syncui.dll
2014-10-05 17:59:10 ----A---- C:\WINDOWS\system32\SettingSyncPolicy.dll
2014-10-05 17:59:09 ----A---- C:\WINDOWS\SYSWOW64\finger.exe
2014-10-05 17:59:08 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2014-10-05 17:59:08 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncPolicy.dll
2014-10-05 17:59:08 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2014-10-05 17:59:08 ----A---- C:\WINDOWS\system32\StorageContextHandler.dll
2014-10-05 17:59:08 ----A---- C:\WINDOWS\system32\ocsetapi.dll
2014-10-05 17:59:08 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2014-10-05 17:59:07 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-kernel32-package-l1-1-1.dll
2014-10-05 17:59:07 ----AH---- C:\WINDOWS\system32\ext-ms-win-session-winsta-l1-1-0.dll
2014-10-05 17:59:07 ----AH---- C:\WINDOWS\system32\ext-ms-win-kernel32-package-l1-1-1.dll
2014-10-05 17:59:07 ----A---- C:\WINDOWS\SYSWOW64\ocsetapi.dll
2014-10-05 17:59:07 ----A---- C:\WINDOWS\SYSWOW64\korwbrkr.dll
2014-10-05 17:59:07 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2014-10-05 17:59:07 ----A---- C:\WINDOWS\system32\shsetup.dll
2014-10-05 17:59:07 ----A---- C:\WINDOWS\system32\dataclen.dll
2014-10-05 17:59:07 ----A---- C:\WINDOWS\system32\aitagent.exe
2014-10-05 17:59:06 ----AH---- C:\WINDOWS\system32\ext-ms-win-ntuser-private-l1-1-1.dll
2014-10-05 17:59:06 ----AH---- C:\WINDOWS\system32\ext-ms-win-ntuser-private-l1-1-0.dll
2014-10-05 17:59:06 ----A---- C:\WINDOWS\SYSWOW64\dataclen.dll
2014-10-05 17:59:06 ----A---- C:\WINDOWS\system32\shimeng.dll
2014-10-05 17:59:06 ----A---- C:\WINDOWS\system32\lpksetupproxyserv.dll
2014-10-05 17:59:06 ----A---- C:\WINDOWS\system32\fhsvcctl.dll
2014-10-05 17:59:05 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-ntuser-private-l1-1-1.dll
2014-10-05 17:59:05 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-ntuser-private-l1-1-0.dll
2014-10-05 17:59:05 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-networking-wcmapi-l1-1-0.dll
2014-10-05 17:59:05 ----A---- C:\WINDOWS\SYSWOW64\occache.dll
2014-10-05 17:59:05 ----A---- C:\WINDOWS\SYSWOW64\f3ahvoas.dll
2014-10-05 17:59:05 ----A---- C:\WINDOWS\system32\occache.dll
2014-10-05 17:59:05 ----A---- C:\WINDOWS\system32\fveskybackup.dll
2014-10-05 17:59:05 ----A---- C:\WINDOWS\system32\finger.exe
2014-10-05 17:59:05 ----A---- C:\WINDOWS\system32\dxmasf.dll
2014-10-05 17:23:06 ----RD---- C:\WINDOWS\BrowserChoice
2014-10-05 17:02:33 ----A---- C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2014-10-05 17:02:31 ----A---- C:\WINDOWS\system32\pnrpsvc.dll
2014-10-05 17:02:30 ----A---- C:\WINDOWS\SYSWOW64\sti.dll
2014-10-05 17:02:30 ----A---- C:\WINDOWS\SYSWOW64\OEMLicense.dll
2014-10-05 17:02:30 ----A---- C:\WINDOWS\SYSWOW64\MsSpellCheckingFacility.dll
2014-10-05 17:02:30 ----A---- C:\WINDOWS\system32\sti.dll
2014-10-05 17:02:30 ----A---- C:\WINDOWS\system32\OEMLicense.dll
2014-10-05 17:02:30 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2014-10-05 17:02:03 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2014-10-05 17:02:02 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2014-10-05 17:02:02 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2014-10-05 17:02:01 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2014-10-05 17:02:00 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2014-10-05 17:02:00 ----A---- C:\WINDOWS\system32\d3d10level9.dll
2014-10-05 17:01:58 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2014-10-05 17:01:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2014-10-05 17:01:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2014-10-05 17:01:57 ----A---- C:\WINDOWS\SYSWOW64\d3d10level9.dll
2014-10-05 17:01:56 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2014-10-05 17:01:55 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2014-10-05 17:01:55 ----A---- C:\WINDOWS\system32\tsmf.dll
2014-10-05 17:01:55 ----A---- C:\WINDOWS\system32\kd_02_8086.dll
2014-10-05 17:01:55 ----A---- C:\WINDOWS\system32\eapphost.dll
2014-10-05 17:01:55 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2014-10-05 17:01:53 ----A---- C:\WINDOWS\SYSWOW64\tsmf.dll
2014-10-05 17:01:53 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll
2014-10-05 17:01:53 ----A---- C:\WINDOWS\system32\msched.dll
2014-10-05 17:01:53 ----A---- C:\WINDOWS\system32\embeddedapplauncher.exe
2014-10-05 17:01:52 ----A---- C:\WINDOWS\SYSWOW64\shsetup.dll
2014-10-05 17:01:52 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2014-10-05 17:01:52 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll
2014-10-05 17:01:52 ----A---- C:\WINDOWS\system32\wldp.dll
2014-10-05 17:01:52 ----A---- C:\WINDOWS\system32\TSWbPrxy.exe
2014-10-05 17:01:52 ----A---- C:\WINDOWS\system32\eappcfg.dll
2014-10-05 17:01:52 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2014-10-05 17:01:51 ----A---- C:\WINDOWS\SYSWOW64\ftp.exe
2014-10-05 17:01:51 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll
2014-10-05 17:01:51 ----A---- C:\WINDOWS\system32\rdpclip.exe
2014-10-05 17:01:51 ----A---- C:\WINDOWS\system32\ftp.exe
2014-10-05 17:01:51 ----A---- C:\WINDOWS\system32\eappgnui.dll
2014-10-05 17:01:50 ----A---- C:\WINDOWS\SYSWOW64\miutils.dll
2014-10-05 17:01:50 ----A---- C:\WINDOWS\system32\miutils.dll
2014-10-05 17:01:43 ----A---- C:\WINDOWS\system32\sppsvc.exe
2014-10-05 17:01:42 ----A---- C:\WINDOWS\system32\dbgeng.dll
2014-10-05 17:01:41 ----A---- C:\WINDOWS\SYSWOW64\dbghelp.dll
2014-10-05 17:01:41 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2014-10-05 17:01:41 ----A---- C:\WINDOWS\system32\dbghelp.dll
2014-10-05 17:01:40 ----A---- C:\WINDOWS\SYSWOW64\tsgqec.dll
2014-10-05 17:01:40 ----A---- C:\WINDOWS\system32\sppcomapi.dll
2014-10-05 17:01:25 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2014-10-05 17:01:25 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2014-10-05 17:01:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.dll
2014-10-05 17:01:22 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2014-10-05 17:01:22 ----A---- C:\WINDOWS\system32\Windows.Graphics.dll
2014-10-05 17:01:22 ----A---- C:\WINDOWS\system32\mfds.dll
2014-10-05 17:01:22 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2014-10-05 17:01:22 ----A---- C:\WINDOWS\system32\drivers\ipnat.sys
2014-10-05 17:01:21 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2014-10-05 17:01:21 ----A---- C:\WINDOWS\SYSWOW64\msieftp.dll
2014-10-05 17:01:21 ----A---- C:\WINDOWS\system32\rastls.dll
2014-10-05 17:01:21 ----A---- C:\WINDOWS\system32\msieftp.dll
2014-10-05 17:01:21 ----A---- C:\WINDOWS\system32\drivers\BtaMPM.sys
2014-10-05 17:01:21 ----A---- C:\WINDOWS\system32\deviceregistration.dll
2014-10-05 17:01:21 ----A---- C:\WINDOWS\system32\bi.dll
2014-10-05 17:00:57 ----A---- C:\WINDOWS\system32\drivers\intelpep.sys
2014-10-05 17:00:52 ----A---- C:\WINDOWS\SYSWOW64\appmgr.dll
2014-10-05 17:00:52 ----A---- C:\WINDOWS\system32\drivers\SerCx2.sys
2014-10-05 17:00:52 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2014-10-05 17:00:52 ----A---- C:\WINDOWS\system32\appmgr.dll
2014-10-05 17:00:47 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-10-05 17:00:47 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-10-05 17:00:47 ----A---- C:\WINDOWS\system32\ieetwcollectorres.dll
2014-10-05 17:00:46 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-10-05 17:00:45 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-10-05 17:00:44 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-10-05 17:00:44 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-10-05 17:00:43 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-10-05 17:00:43 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-10-05 17:00:42 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-10-05 17:00:41 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-10-05 17:00:40 ----A---- C:\WINDOWS\system32\msrating.dll
2014-10-05 17:00:24 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2014-10-05 17:00:24 ----A---- C:\WINDOWS\system32\d2d1.dll
2014-10-05 17:00:21 ----A---- C:\WINDOWS\system32\WSCollect.exe
2014-10-05 17:00:20 ----A---- C:\WINDOWS\SYSWOW64\imagehlp.dll
2014-10-05 17:00:20 ----A---- C:\WINDOWS\system32\imagehlp.dll
2014-10-05 16:59:43 ----A---- C:\WINDOWS\SYSWOW64\msdrm.dll
2014-10-05 16:59:43 ----A---- C:\WINDOWS\system32\msdrm.dll
2014-10-05 16:59:25 ----A---- C:\WINDOWS\SYSWOW64\WMPhoto.dll
2014-10-05 16:59:25 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2014-10-05 16:59:20 ----A---- C:\WINDOWS\SYSWOW64\poqexec.exe
2014-10-05 16:59:20 ----A---- C:\WINDOWS\system32\poqexec.exe
2014-10-05 16:59:13 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2014-10-05 16:59:13 ----A---- C:\WINDOWS\system32\crypt32.dll
2014-10-05 16:59:12 ----A---- C:\WINDOWS\SYSWOW64\pcaui.exe
2014-10-05 16:59:12 ----A---- C:\WINDOWS\system32\pcaui.exe
2014-10-05 15:57:49 ----DC---- C:\WINDOWS\Panther
2014-10-05 15:55:53 ----D---- C:\Windows.old
2014-10-05 15:53:13 ----D---- C:\Program Files (x86)\Reference Assemblies
2014-10-05 15:53:13 ----D---- C:\Program Files (x86)\MSBuild
2014-10-05 15:53:11 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2014-10-05 15:53:11 ----D---- C:\Program Files\Reference Assemblies
2014-10-05 15:53:11 ----D---- C:\Program Files\MSBuild
2014-10-05 15:52:33 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2014-10-05 15:52:33 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-10-05 15:52:32 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-10-05 15:52:32 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-10-05 15:18:22 ----D---- C:\WINDOWS\CSC
2014-10-05 15:06:47 ----SD---- C:\Users\Karolínka\AppData\Roaming\Microsoft
2014-10-05 15:01:16 ----D---- C:\Program Files\Common Files\Atheros
2014-10-05 15:01:05 ----A---- C:\WINDOWS\system32\drivers\RTWAVES30.dat
2014-10-05 15:00:52 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2014-10-05 15:00:52 ----D---- C:\Program Files\Realtek
2014-10-05 15:00:45 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2014-10-05 15:00:45 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2014-10-05 15:00:30 ----D---- C:\Program Files\Intel
2014-10-05 14:59:21 ----D---- C:\WINDOWS\Prefetch
2014-10-05 14:04:25 ----HD---- C:\$WINDOWS.~BT
2014-10-05 12:57:55 ----A---- C:\Recovery.txt
2014-10-04 13:34:35 ----D---- C:\FRST
2014-10-04 08:40:32 ----D---- C:\Users\Karolínka\AppData\Roaming\DropboxMaster
2014-10-04 08:37:13 ----D---- C:\Users\Karolínka\AppData\Roaming\Dropbox
2014-10-04 08:27:12 ----D---- C:\Users\Karolínka\AppData\Roaming\AVAST Software
2014-10-04 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2014-10-04 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2014-10-04 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aswsp.sys
2014-10-04 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2014-10-04 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2014-10-04 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2014-10-04 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2014-10-04 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2014-10-04 08:25:22 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-10-04 08:25:21 ----A---- C:\WINDOWS\avastSS.scr
2014-10-04 08:23:34 ----D---- C:\Program Files\AVAST Software
2014-10-04 08:23:10 ----D---- C:\ProgramData\AVAST Software
2014-10-04 08:12:13 ----SHD---- C:\Config.Msi
2014-09-29 23:14:43 ----D---- C:\Program Files\Microsoft Silverlight
2014-09-29 23:14:43 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-09-29 22:04:56 ----D---- C:\Program Files\CCleaner
2014-09-29 21:18:06 ----D---- C:\Program Files (x86)\ESET
======List of files/folders modified in the last 1 month======
2014-10-05 20:26:30 ----RD---- C:\Program Files
2014-10-05 20:26:01 ----D---- C:\WINDOWS\system32\config
2014-10-05 20:24:45 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2014-10-05 20:22:40 ----D---- C:\WINDOWS\Temp
2014-10-05 20:22:31 ----D---- C:\WINDOWS\Microsoft.NET
2014-10-05 20:22:29 ----D---- C:\WINDOWS\WinSxS
2014-10-05 20:21:05 ----D---- C:\WINDOWS\Inf
2014-10-05 20:19:10 ----RD---- C:\WINDOWS\ToastData
2014-10-05 20:19:09 ----D---- C:\WINDOWS\SYSWOW64\wbem
2014-10-05 20:19:09 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-10-05 20:19:09 ----D---- C:\Program Files\Windows Journal
2014-10-05 20:19:07 ----RD---- C:\WINDOWS\System32
2014-10-05 20:19:07 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-10-05 20:19:07 ----D---- C:\WINDOWS\SYSWOW64\setup
2014-10-05 20:19:07 ----D---- C:\WINDOWS\SysWOW64
2014-10-05 20:19:07 ----D---- C:\WINDOWS\system32\wbem
2014-10-05 20:19:07 ----D---- C:\WINDOWS\system32\setup
2014-10-05 20:19:07 ----D---- C:\WINDOWS\system32\oobe
2014-10-05 20:19:07 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2014-10-05 20:19:07 ----D---- C:\WINDOWS\system32\drivers
2014-10-05 20:19:07 ----D---- C:\WINDOWS\system32\cs-CZ
2014-10-05 20:19:07 ----D---- C:\WINDOWS\system32\Boot
2014-10-05 20:19:07 ----D---- C:\WINDOWS\PolicyDefinitions
2014-10-05 20:19:06 ----RSD---- C:\WINDOWS\Fonts
2014-10-05 20:19:06 ----D---- C:\WINDOWS\apppatch
2014-10-05 20:19:05 ----D---- C:\WINDOWS\system32\DriverStore
2014-10-05 20:18:30 ----RD---- C:\WINDOWS\assembly
2014-10-05 20:10:11 ----D---- C:\WINDOWS\CbsTemp
2014-10-05 20:07:51 ----D---- C:\WINDOWS\system32\catroot2
2014-10-05 20:00:02 ----D---- C:\WINDOWS\system32\sru
2014-10-05 19:59:27 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-10-05 19:51:35 ----SD---- C:\WINDOWS\system32\CompatTel
2014-10-05 19:51:34 ----D---- C:\Program Files\Windows Defender
2014-10-05 19:51:32 ----D---- C:\Program Files (x86)\Windows Defender
2014-10-05 19:51:27 ----D---- C:\WINDOWS\system32\migration
2014-10-05 19:51:26 ----D---- C:\Windows
2014-10-05 19:51:21 ----D---- C:\WINDOWS\WinStore
2014-10-05 19:51:20 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-10-05 19:51:19 ----D---- C:\WINDOWS\system32\en-US
2014-10-05 19:51:19 ----D---- C:\WINDOWS\MediaViewer
2014-10-05 19:51:19 ----D---- C:\WINDOWS\FileManager
2014-10-05 19:51:19 ----D---- C:\WINDOWS\Camera
2014-10-05 19:51:14 ----D---- C:\Program Files\Internet Explorer
2014-10-05 19:51:14 ----D---- C:\Program Files (x86)\Internet Explorer
2014-10-05 18:40:50 ----D---- C:\WINDOWS\AppReadiness
2014-10-05 18:23:21 ----D---- C:\WINDOWS\SYSWOW64\en-US
2014-10-05 18:23:12 ----D---- C:\Program Files\Windows Portable Devices
2014-10-05 18:23:12 ----D---- C:\Program Files\Windows Multimedia Platform
2014-10-05 18:23:12 ----D---- C:\Program Files\Windows Media Player
2014-10-05 18:23:11 ----D---- C:\WINDOWS\SYSWOW64\Dism
2014-10-05 18:23:11 ----D---- C:\WINDOWS\servicing
2014-10-05 18:23:11 ----D---- C:\Program Files (x86)\Windows Portable Devices
2014-10-05 18:23:11 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2014-10-05 18:23:11 ----D---- C:\Program Files (x86)\Windows Media Player
2014-10-05 18:23:10 ----D---- C:\WINDOWS\SYSWOW64\oobe
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\sk-SK
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\lv-LV
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\ko-KR
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\it-IT
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\hr-HR
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\et-EE
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\en-GB
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\el-GR
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\de-DE
2014-10-05 18:23:05 ----D---- C:\WINDOWS\system32\da-DK
2014-10-05 18:23:05 ----D---- C:\WINDOWS\cs-CZ
2014-10-05 18:23:02 ----D---- C:\WINDOWS\system32\Sysprep
2014-10-05 18:23:02 ----D---- C:\WINDOWS\system32\sv-SE
2014-10-05 18:23:02 ----D---- C:\WINDOWS\system32\ru-RU
2014-10-05 18:23:02 ----D---- C:\WINDOWS\system32\he-IL
2014-10-05 18:23:02 ----D---- C:\WINDOWS\system32\fr-FR
2014-10-05 18:23:02 ----D---- C:\WINDOWS\system32\fi-FI
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\zh-TW
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\zh-HK
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\zh-CN
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\uk-UA
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\tr-TR
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\th-TH
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\sl-SI
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\ro-RO
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\pt-PT
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\pl-PL
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\ja-JP
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\hu-HU
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\es-ES
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\drivers\en-US
2014-10-05 18:23:01 ----D---- C:\WINDOWS\system32\bg-BG
2014-10-05 18:23:00 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2014-10-05 18:23:00 ----D---- C:\WINDOWS\system32\pt-BR
2014-10-05 18:23:00 ----D---- C:\WINDOWS\system32\nl-NL
2014-10-05 18:23:00 ----D---- C:\WINDOWS\system32\nb-NO
2014-10-05 18:23:00 ----D---- C:\WINDOWS\system32\migwiz
2014-10-05 18:23:00 ----D---- C:\WINDOWS\system32\lt-LT
2014-10-05 18:23:00 ----D---- C:\WINDOWS\system32\Dism
2014-10-05 18:23:00 ----D---- C:\WINDOWS\system32\ar-SA
2014-10-05 18:22:37 ----D---- C:\WINDOWS\system32\drivers\UMDF
2014-10-05 18:10:12 ----SH---- C:\WINDOWS\system32\desktop.ini
2014-10-05 17:27:35 ----D---- C:\WINDOWS\system32\wdi
2014-10-05 17:04:06 ----D---- C:\WINDOWS\system32\SecureBootUpdates
2014-10-05 17:03:18 ----SHD---- C:\System Volume Information
2014-10-05 17:02:52 ----D---- C:\WINDOWS\system32\restore
2014-10-05 16:48:49 ----D---- C:\WINDOWS\Logs
2014-10-05 16:32:19 ----HD---- C:\Program Files\WindowsApps
2014-10-05 16:30:27 ----SHD---- C:\$Recycle.Bin
2014-10-05 15:57:38 ----SHD---- C:\Recovery
2014-10-05 15:55:37 ----SD---- C:\WINDOWS\system32\Microsoft
2014-10-05 15:28:32 ----D---- C:\WINDOWS\rescache
2014-10-05 15:27:22 ----D---- C:\Program Files\Windows NT
2014-10-05 15:26:44 ----D---- C:\WINDOWS\debug
2014-10-05 15:26:40 ----D---- C:\WINDOWS\SoftwareDistribution
2014-10-05 15:25:51 ----D---- C:\WINDOWS\Registration
2014-10-05 15:25:34 ----D---- C:\WINDOWS\system32\Tasks
2014-10-05 15:19:09 ----D---- C:\WINDOWS\system32\LogFiles
2014-10-05 15:18:37 ----RSD---- C:\WINDOWS\Media
2014-10-05 15:14:08 ----D---- C:\WINDOWS\SYSWOW64\drivers
2014-10-05 15:14:07 ----HD---- C:\WINDOWS\Installer
2014-10-05 15:14:07 ----D---- C:\WINDOWS\sk
2014-10-05 15:14:07 ----D---- C:\WINDOWS\pl
2014-10-05 15:14:07 ----D---- C:\WINDOWS\hu
2014-10-05 15:14:06 ----HD---- C:\ProgramData
2014-10-05 15:14:06 ----D---- C:\WINDOWS\en-GB
2014-10-05 15:14:06 ----D---- C:\WINDOWS\cs
2014-10-05 15:14:06 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-10-05 15:12:38 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2014-10-05 15:12:38 ----D---- C:\WINDOWS\SYSWOW64\zh-HK
2014-10-05 15:12:38 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2014-10-05 15:12:37 ----D---- C:\WINDOWS\SYSWOW64\WCN
2014-10-05 15:12:37 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2014-10-05 15:12:37 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2014-10-05 15:12:37 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2014-10-05 15:12:37 ----D---- C:\WINDOWS\SYSWOW64\sysprep
2014-10-05 15:12:37 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2014-10-05 15:12:37 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2014-10-05 15:12:36 ----D---- C:\WINDOWS\SYSWOW64\SMI
2014-10-05 15:12:35 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2014-10-05 15:12:35 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2014-10-05 15:12:35 ----D---- C:\WINDOWS\SYSWOW64\sda
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\MUI
2014-10-05 15:12:34 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2014-10-05 15:12:33 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2014-10-05 15:12:33 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2014-10-05 15:12:33 ----D---- C:\WINDOWS\SYSWOW64\LogFiles
2014-10-05 15:12:33 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2014-10-05 15:12:33 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2014-10-05 15:12:33 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2014-10-05 15:12:32 ----D---- C:\WINDOWS\SYSWOW64\InputMethod
2014-10-05 15:12:32 ----D---- C:\WINDOWS\SYSWOW64\IME
2014-10-05 15:12:32 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2014-10-05 15:12:32 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2014-10-05 15:12:32 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2014-10-05 15:12:31 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2014-10-05 15:12:30 ----D---- C:\WINDOWS\SYSWOW64\catroot
2014-10-05 15:12:30 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2014-10-05 15:12:30 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2014-10-05 15:12:26 ----D---- C:\WINDOWS\system32\WCN
2014-10-05 15:12:26 ----D---- C:\WINDOWS\system32\spool
2014-10-05 15:12:22 ----D---- C:\WINDOWS\system32\NDF
2014-10-05 15:12:22 ----D---- C:\WINDOWS\system32\MUI
2014-10-05 15:12:21 ----DC---- C:\WINDOWS\system32\DRVSTORE
2014-10-05 15:12:21 ----D---- C:\WINDOWS\system32\IME
2014-10-05 15:12:20 ----D---- C:\WINDOWS\system32\drivers\etc
2014-10-05 15:11:25 ----D---- C:\WINDOWS\InputMethod
2014-10-05 15:11:24 ----D---- C:\WINDOWS\IME
2014-10-05 15:11:23 ----D---- C:\WINDOWS\Help
2014-10-05 15:11:20 ----D---- C:\WINDOWS\DigitalLocker
2014-10-05 15:11:18 ----RD---- C:\Users
2014-10-05 15:11:17 ----D---- C:\ProgramData\PRICache
2014-10-05 15:11:16 ----SD---- C:\ProgramData\Microsoft
2014-10-05 15:11:11 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2014-10-05 15:11:11 ----RD---- C:\Program Files (x86)
2014-10-05 15:11:11 ----D---- C:\Program Files (x86)\WindowsPowerShell
2014-10-05 15:11:08 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-10-05 15:11:07 ----D---- C:\Program Files (x86)\Common Files
2014-10-05 15:11:04 ----SHD---- C:\Program Files\Windows Sidebar
2014-10-05 15:11:04 ----D---- C:\Program Files\WindowsPowerShell
2014-10-05 15:11:02 ----D---- C:\Program Files\Common Files\microsoft shared
2014-10-05 15:11:01 ----D---- C:\Program Files\Common Files
2014-10-05 15:09:28 ----D---- C:\WINDOWS\system32\CodeIntegrity
2014-10-05 15:08:01 ----D---- C:\WINDOWS\system32\Recovery
2014-10-05 15:00:50 ----D---- C:\WINDOWS\system32\catroot
2014-10-04 08:20:23 ----D---- C:\ProgramData\AVG2014
2014-10-04 08:20:20 ----D---- C:\ProgramData\MFAData
2014-10-04 08:12:34 ----HD---- C:\WINDOWS\ELAMBKUP
2014-09-30 21:29:51 ----D---- C:\Users\Karolínka\AppData\Roaming\vlc
2014-09-29 22:20:47 ----D---- C:\Users\Karolínka\AppData\Roaming\uTorrent
2014-09-28 23:07:51 ----D---- C:\ProgramData\P4G
2014-09-28 23:07:51 ----D---- C:\Program Files (x86)\Google
2014-09-22 08:42:39 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2014-09-21 16:34:12 ----D---- C:\Program Files\Microsoft Office 15
2014-09-20 12:34:37 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-09-14 23:48:29 ----D---- C:\WINDOWS\system32\MRT
2014-09-14 23:43:43 ----A---- C:\WINDOWS\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-10-04 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-10-04 224896]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-09-14 647736]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-10-04 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-10-04 1041168]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-10-04 427360]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-10-04 29208]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-10-04 79184]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-10-04 92008]
R3 AiCharger;ASUS Charger Driver; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [2012-09-18 17152]
R3 athr;@oem92.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-08-22 3915264]
R3 ATP;@oem33.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2013-04-16 65784]
R3 BTATH_HCRP;@oem3.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\WINDOWS\System32\drivers\btath_hcrp.sys [2013-03-27 179432]
R3 BTATH_RCP;@oem8.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\WINDOWS\System32\drivers\btath_rcp.sys [2013-03-27 136784]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2014-01-28 593000]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2013-12-04 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-01-31 81920]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 HIDSwitch;@oem1.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2013-11-04 20280]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-01 4177920]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-06-04 3441992]
R3 IntcDAud;@oem64.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-01-09 342528]
R3 iwdbus;@oem96.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-08-23 26008]
R3 kbfiltr;@oem4.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-02 14992]
R3 MEIx64;@oem40.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2014-01-27 167424]
R3 RSBASTOR;@oem88.inf,%Rts5208%;Realtek PCIE CardReader Driver - BA; C:\WINDOWS\system32\DRIVERS\RtsBaStor.sys [2012-10-08 298640]
R3 RTL8168;@oem91.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-11-29 838872]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S3 AthBTPort;@oem87.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\WINDOWS\system32\DRIVERS\btath_flt.sys [2013-03-27 89168]
S3 BTATH_A2DP;@oem76.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\WINDOWS\system32\drivers\btath_a2dp.sys [2013-03-27 346192]
S3 btath_avdt;@oem76.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\WINDOWS\system32\drivers\btath_avdt.sys [2013-03-27 115280]
S3 BTATH_LWFLT;@oem6.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [2013-03-27 77464]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-07-24 1200640]
S3 intaud_WaveExtensible;@oem95.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-08-23 39320]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-04 64704]
R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2013-06-14 1281640]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-01-07 43336]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-10-04 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2014-08-12 2428088]
R3 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2012-10-05 110976]
R3 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [2012-04-13 277120]
R3 Asus WebStorage Windows Service;Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [2012-12-19 72192]
R3 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2013-03-27 227968]
R3 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
R3 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-09-13 2466448]
R3 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R3 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-06-27 129856]
R3 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R3 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R3 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-28 116648]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-01 279000]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-09-30 43696]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-28 116648]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-02-06 641352]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-02-01 150600]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
-----------------EOF-----------------
Re: Zavirovaný počítač
Zdravím 
Stáhněte Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
-Uložte program na plochu a spusťte . Pak se zobrazí se licenční podminky - potvrďte start libovolnou klávesou.
- vytvoří se záloha a proběhne skenování.
Po skončení skenování na Vás vyběhne log (bude uložen v c:\JRT jako JRT.txt) - zkopírujte jej sem
Stáhněte AdwCleaner http://www.bleepingcomputer.com/download/adwcleaner/
-Uložte program na plochu a ukončete všechny spuštěné programy .
-spusťte AdwCleaner, klikněte na Scan a po dokončení skenu na Clean
- provede se oprava, restartuje se pc - (případně restartujte) a objeví se log C:\AdwCleaner\AdwCleaner.txt , obsah logu zkopírujte zde.
Stáhněte Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe-Uložte program na plochu a spusťte . Pak se zobrazí se licenční podminky - potvrďte start libovolnou klávesou.
- vytvoří se záloha a proběhne skenování.
Po skončení skenování na Vás vyběhne log (bude uložen v c:\JRT jako JRT.txt) - zkopírujte jej sem
Stáhněte AdwCleaner http://www.bleepingcomputer.com/download/adwcleaner/-Uložte program na plochu a ukončete všechny spuštěné programy .
-spusťte AdwCleaner, klikněte na Scan a po dokončení skenu na Clean
- provede se oprava, restartuje se pc - (případně restartujte) a objeví se log C:\AdwCleaner\AdwCleaner.txt , obsah logu zkopírujte zde.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Přispějete na provoz fóra?