Prosím o kontrolu logu

[Orcus]

Tak ani tak nejde, takže jinak:

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

====================================================

Prosím stáhni příslušnou verzi programu pro Tvůj systém 32-bit/64-bit FarbarRecovery Scan Tool (FrSt)
32bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/81/
64bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/82/
a ulož jej na plochu. ,pak spusť FrSt.
Potvrď způsob užití.
Neměň žádné z výchozích nastavení a klikni na položku „Scan“ („Skenovat“) .Když je skenování dokončeno, ukážou se dva logy = FRST.txt a Addition.txt a uloží se na ploše.Prosím zkopíruj sem celý jejich obsah.

[Reklama]

[John82]

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:31-08-2015
Ran by JOHNNY (administrator) on JOHNNY-PC (01-09-2015 12:29:48)
Running from C:\Users\JOHNNY\Desktop
Loaded Profiles: JOHNNY & UpdatusUser (Available Profiles: JOHNNY & UpdatusUser)
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(BrainSystems) C:\Program Files\CapsUnlock\CapsUnlock.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\wimserv.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12017368 2013-10-24] (Realtek Semiconductor)
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2012-02-08] (Tonec Inc.)
Startup: C:\Users\JOHNNY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CapsUnlock.lnk [2015-08-18]
ShortcutTarget: CapsUnlock.lnk -> C:\Program Files\CapsUnlock\CapsUnlock.exe (BrainSystems)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{FE7A8836-65F5-4B67-8C5A-7B7DC9005C5C}: [DhcpNameServer] 213.46.172.37 213.46.172.36

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-168637296-2484197520-3016577837-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
SearchScopes: HKU\S-1-5-21-168637296-2484197520-3016577837-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files\Internet Download Manager\IDMIECC.dll [2012-05-02] (Internet Download Manager, Tonec Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-08-18] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-18] (Oracle Corporation)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-18] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1219160.dll [2015-07-23] (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-18] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2012-12-29] (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2012-12-29] (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.13\npGoogleUpdate3.dll [No File]
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.13\npGoogleUpdate3.dll [No File]
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\JOHNNY\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\JOHNNY\AppData\Roaming\IDM\idmmzcc5 [2015-08-18]

Chrome:
=======
CHR Profile: C:\Users\JOHNNY\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\JOHNNY\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-20]
CHR Extension: (Google Docs) - C:\Users\JOHNNY\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-20]
CHR Extension: (Google Drive) - C:\Users\JOHNNY\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-08-20]
CHR Extension: (YouTube) - C:\Users\JOHNNY\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-08-20]
CHR Extension: (Adblock Plus) - C:\Users\JOHNNY\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-09-01]
CHR Extension: (Google Search) - C:\Users\JOHNNY\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-08-20]
CHR Extension: (Google Sheets) - C:\Users\JOHNNY\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-20]
CHR Extension: (Glowtxt) - C:\Users\JOHNNY\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkcilhknnakepbgkpmhhebooffgefidk [2015-09-01]
CHR Extension: (Stopwatch) - C:\Users\JOHNNY\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggnidjbcahhbnleinchgobfnabopeioh [2015-09-01]
CHR Extension: (AdBlock) - C:\Users\JOHNNY\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-09-01]
CHR Extension: (IP Address) - C:\Users\JOHNNY\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpnjjlbngpejmmhgcaagljaomgnginml [2015-09-01]
CHR Extension: (Chrome Web Store Payments) - C:\Users\JOHNNY\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-20]
CHR Extension: (Gmail) - C:\Users\JOHNNY\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-20]

Opera:
=======
OPR Extension: (No Name) - C:\Users\JOHNNY\AppData\Roaming\Opera Software\Opera Stable\Extensions\akaelkiagnbfcccfnmbimdbplecgbikh [2015-08-30]
OPR Extension: (No Name) - C:\Users\JOHNNY\AppData\Roaming\Opera Software\Opera Stable\Extensions\fijhlnmmmgflacagjecncpmpnhjieggk [2015-08-30]
OPR Extension: (No Name) - C:\Users\JOHNNY\AppData\Roaming\Opera Software\Opera Stable\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh [2015-08-30]
OPR Extension: (No Name) - C:\Users\JOHNNY\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-08-30]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 FlashUSB; C:\Windows\System32\DRIVERS\FlashUSB.sys [16896 2010-05-12] (Danish Wireless Design A/S)
R2 giveio; C:\Windows\system32\giveio.sys [5248 1996-04-03] () [File not signed]
S3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbus.sys [10496 2009-09-29] (LG Electronics Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R2 speedfan; C:\Windows\system32\speedfan.sys [24184 2012-12-29] (Almico Software)
S3 usbbus; C:\Windows\System32\DRIVERS\lgusbbus.sys [13056 2008-11-19] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgusbdiag.sys [19968 2008-11-19] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgusbmodem.sys [24832 2008-11-19] (LG Electronics Inc.)
S3 catchme; \??\C:\Users\JOHNNY\AppData\Local\Temp\catchme.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-01 12:29 - 2015-09-01 12:30 - 00010318 _____ C:\Users\JOHNNY\Desktop\FRST.txt
2015-09-01 12:29 - 2015-09-01 12:29 - 00000000 ___SD C:\ComboFix
2015-09-01 12:29 - 2015-09-01 12:29 - 00000000 ____D C:\FRST
2015-09-01 12:26 - 2015-09-01 12:26 - 01690624 _____ (Farbar) C:\Users\JOHNNY\Desktop\FRST.exe
2015-09-01 12:11 - 2015-09-01 12:11 - 00000000 ____D C:\Users\JOHNNY\AppData\Local\CEF
2015-09-01 12:11 - 2015-09-01 12:11 - 00000000 ____D C:\Users\JOHNNY\AppData\Local\Adobe
2015-09-01 04:00 - 2015-09-01 04:00 - 00000000 ____D C:\ifx
2015-09-01 04:00 - 2010-05-12 03:23 - 00016896 _____ (Danish Wireless Design A/S) C:\Windows\system32\Drivers\FlashUSB.sys
2015-09-01 03:58 - 2015-09-01 03:58 - 00000000 ____D C:\GT350
2015-09-01 03:54 - 2015-09-01 04:11 - 00002760 _____ C:\Windows\system32\lgAxconfig.ini
2015-09-01 03:54 - 2015-09-01 04:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LGMobile Support Tool
2015-09-01 03:54 - 2015-09-01 03:56 - 00000000 ____D C:\ProgramData\LGMOBILEAX
2015-09-01 03:54 - 2011-05-06 10:37 - 00655872 _____ (Microsoft Corporation) C:\Windows\system32\msvcr90.dll
2015-09-01 03:54 - 2011-05-06 10:37 - 00568832 _____ (Microsoft Corporation) C:\Windows\system32\msvcp90.dll
2015-09-01 03:54 - 2011-05-06 10:37 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\msvcm90.dll
2015-09-01 03:54 - 2010-03-13 21:15 - 04342088 _____ (Microsoft Corporation) C:\Windows\system32\mfc100.dll
2015-09-01 03:54 - 2006-04-30 05:33 - 00053248 _____ () C:\Windows\system32\CommonDL.dll
2015-09-01 03:54 - 2005-09-29 22:39 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\msxml4a.dll
2015-09-01 03:40 - 2015-09-01 03:40 - 00001162 _____ C:\ProgramData\Microsoft\Windows\Start Menu\LG PC Suite IV.lnk
2015-09-01 03:40 - 2015-09-01 03:40 - 00000000 ____D C:\Users\JOHNNY\AppData\Local\LG Electronics
2015-09-01 03:40 - 2015-09-01 03:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG PC Suite IV
2015-09-01 03:39 - 2015-09-01 03:39 - 00000000 ____D C:\Program Files\MSXML 4.0
2015-09-01 03:29 - 2015-09-01 04:19 - 00000000 ____D C:\Program Files\LG Electronics
2015-09-01 03:29 - 2015-09-01 03:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG Internet Kit
2015-08-31 23:37 - 2015-08-31 23:36 - 00016917 _____ C:\Users\JOHNNY\Desktop\ComboFix.txt
2015-08-31 23:30 - 2015-08-31 23:30 - 00000546 _____ C:\Windows\PFRO.log
2015-08-31 23:19 - 2015-08-31 23:19 - 00000611 _____ C:\Users\JOHNNY\Desktop\Nový textový dokument.txt
2015-08-31 23:14 - 2015-09-01 12:29 - 00000000 ____D C:\Qoobox
2015-08-31 23:14 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-08-31 23:14 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-08-31 23:14 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-08-31 23:14 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-08-31 23:14 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-08-31 23:14 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-08-31 23:14 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-08-31 23:14 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-08-31 23:06 - 2015-08-31 23:07 - 05635666 ____R (Swearware) C:\Users\JOHNNY\Desktop\ComboFix.exe
2015-08-31 22:26 - 2015-09-01 03:33 - 00002248 _____ C:\Windows\setupact.log
2015-08-31 22:26 - 2015-08-31 22:26 - 00000000 _____ C:\Windows\setuperr.log
2015-08-31 18:22 - 2015-08-31 18:22 - 00388608 _____ (Trend Micro Inc.) C:\Users\JOHNNY\Desktop\HijackThis.exe
2015-08-31 17:57 - 2015-08-31 17:57 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled
2015-08-31 00:28 - 2015-08-31 23:29 - 00000000 ____D C:\Windows\erdnt
2015-08-30 20:39 - 2015-08-30 20:39 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\ProductData
2015-08-30 20:35 - 2015-08-30 20:18 - 00024064 _____ C:\Windows\zoek-delete.exe
2015-08-30 20:18 - 2015-08-30 20:34 - 00000000 ____D C:\zoek_backup
2015-08-30 20:02 - 2015-08-30 20:02 - 01308672 _____ C:\Users\JOHNNY\Desktop\zoek.exe
2015-08-30 14:53 - 2015-08-30 14:53 - 01798640 _____ (Malwarebytes Corporation) C:\Users\JOHNNY\Desktop\JRT.exe
2015-08-30 10:50 - 2015-08-30 10:50 - 01618432 _____ C:\Users\JOHNNY\Desktop\adwcleaner_5.004.exe
2015-08-30 10:44 - 2015-08-30 10:45 - 00448512 _____ (OldTimer Tools) C:\Users\JOHNNY\Desktop\TFC.exe
2015-08-30 10:44 - 2015-08-30 10:44 - 00050688 _____ (Atribune.org) C:\Users\JOHNNY\Desktop\ATF-Cleaner.exe
2015-08-30 10:26 - 2015-08-30 10:27 - 00000000 ____D C:\qycache
2015-08-30 08:28 - 2015-08-30 10:36 - 00000000 ____D C:\ProgramData\OWdsManProO
2015-08-30 07:43 - 2015-08-30 10:36 - 00000000 ____D C:\ProgramData\FLEXnet
2015-08-28 19:43 - 2015-08-28 19:53 - 3244687360 _____ C:\Users\JOHNNY\Downloads\Windows10.iso
2015-08-28 19:42 - 2015-08-28 19:46 - 00000000 ____D C:\Users\JOHNNY\Downloads\Hra o trůny 5. serie
2015-08-27 18:03 - 2015-08-27 18:03 - 00000000 ____D C:\Users\JOHNNY\AppData\Local\Microsoft Games
2015-08-27 15:59 - 2015-08-30 10:36 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\vlc
2015-08-27 15:59 - 2015-08-30 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-08-27 15:58 - 2015-08-27 15:58 - 00000000 ____D C:\Program Files\VideoLAN
2015-08-27 14:49 - 2015-08-27 14:58 - 94130202 _____ C:\Users\JOHNNY\Desktop\Soccer Boys _ GayBoysTube.mp4
2015-08-27 14:46 - 2015-08-27 14:48 - 79732239 _____ C:\Users\JOHNNY\Desktop\19905255decbfc23de1.flv
2015-08-23 02:24 - 2015-08-23 02:24 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\WinRAR
2015-08-23 01:53 - 2015-08-23 01:53 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-23 01:53 - 2015-08-23 01:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-23 01:52 - 2015-08-23 01:53 - 00000000 ____D C:\Program Files\WinRAR
2015-08-20 21:35 - 2015-08-30 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-08-20 17:44 - 2015-08-11 02:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-08-20 17:44 - 2015-08-11 02:20 - 19871232 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-20 17:42 - 2015-07-22 19:57 - 03989952 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-08-20 17:42 - 2015-07-22 19:57 - 03934656 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-20 17:42 - 2015-07-22 19:57 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-08-20 17:42 - 2015-07-22 19:57 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-08-20 17:42 - 2015-07-22 19:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-08-20 17:42 - 2015-07-22 19:53 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-08-20 17:42 - 2015-07-22 19:52 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-20 17:42 - 2015-07-22 19:52 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-20 17:42 - 2015-07-22 19:52 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-08-20 17:42 - 2015-07-22 19:52 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-08-20 17:42 - 2015-07-22 19:47 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-08-20 17:42 - 2015-07-22 19:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-08-20 17:42 - 2015-07-22 19:42 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-08-20 17:42 - 2015-07-22 19:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-20 17:42 - 2015-07-22 18:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-08-20 17:42 - 2015-07-22 18:34 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-08-20 17:42 - 2015-07-22 18:34 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-08-20 17:42 - 2015-07-22 18:33 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-08-20 17:42 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-08-20 17:42 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-08-20 17:42 - 2015-06-25 11:48 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-08-20 17:42 - 2015-06-25 11:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-08-20 17:42 - 2015-06-25 11:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-08-20 17:40 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-08-18 22:36 - 2015-08-18 22:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-08-18 22:36 - 2015-08-18 22:36 - 00000000 ____D C:\Program Files\CCleaner
2015-08-18 22:10 - 2015-08-31 18:13 - 30785536 _____ C:\Windows\system32\config\COMPONENTS.iodefrag.bak
2015-08-18 22:10 - 2015-08-18 22:10 - 35946496 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2015-08-18 22:10 - 2015-08-18 22:10 - 00245760 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak
2015-08-18 22:10 - 2015-08-18 22:10 - 00065536 _____ C:\Windows\system32\config\SAM.iodefrag.bak
2015-08-18 22:10 - 2015-08-18 22:10 - 00028672 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak
2015-08-18 22:08 - 2013-06-27 18:05 - 00024384 _____ (IObit) C:\Windows\system32\RegistryDefragBootTime.exe
2015-08-18 22:06 - 2015-08-30 20:48 - 36339712 _____ C:\Windows\system32\config\SOFTWARE.iobit
2015-08-18 22:06 - 2015-08-30 20:48 - 30785536 _____ C:\Windows\system32\config\components.iobit
2015-08-18 22:06 - 2015-08-30 20:48 - 00245760 _____ C:\Windows\system32\config\DEFAULT.iobit
2015-08-18 22:06 - 2015-08-30 20:48 - 00065536 _____ C:\Windows\system32\config\SAM.iobit
2015-08-18 22:06 - 2015-08-30 20:48 - 00028672 _____ C:\Windows\system32\config\SECURITY.iobit
2015-08-18 22:01 - 2015-08-31 21:20 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\IObit
2015-08-18 22:01 - 2015-08-18 22:01 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\Apple Computer
2015-08-18 21:26 - 2015-08-18 21:40 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\TuneUp Software
2015-08-18 18:25 - 2015-08-18 18:25 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Opera Software
2015-08-18 18:25 - 2015-08-18 18:25 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\Opera Software
2015-08-18 18:23 - 2015-08-18 18:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2015-08-18 18:23 - 2015-08-18 18:23 - 00000000 ____D C:\Program Files\CrystalDiskInfo
2015-08-18 18:14 - 2015-08-18 18:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bogan
2015-08-18 18:14 - 2015-08-18 18:14 - 00000000 ____D C:\Program Files\Bogan
2015-08-18 18:11 - 2015-08-31 18:35 - 00000000 ____D C:\Program Files\The KMPlayer
2015-08-18 18:11 - 2015-08-18 18:11 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2015-08-18 17:58 - 2015-08-18 17:58 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online
2015-08-18 17:58 - 2015-08-18 17:58 - 00000000 ____D C:\Program Files\Drakensang Online
2015-08-18 17:52 - 2015-08-30 14:57 - 00000000 ____D C:\AdwCleaner
2015-08-18 17:50 - 2015-08-18 17:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2015-08-18 17:50 - 2015-08-18 17:50 - 00000000 ____D C:\Program Files\CPUID
2015-08-18 17:47 - 2015-08-18 17:49 - 00000000 ____D C:\Program Files\SpeedFan
2015-08-18 17:47 - 2015-08-18 17:47 - 00000045 _____ C:\Windows\system32\initdebug.nfo
2015-08-18 17:47 - 2015-08-18 17:47 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2015-08-18 17:42 - 2015-08-30 20:07 - 00035064 _____ C:\Windows\system32\Drivers\TrueSight.sys
2015-08-18 17:42 - 2015-08-18 17:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2015-08-18 17:41 - 2015-08-18 17:42 - 00000000 ____D C:\Program Files\RogueKiller
2015-08-18 16:42 - 2015-08-18 16:42 - 00000000 ____D C:\Windows\system32\Adobe
2015-08-18 16:42 - 2015-08-18 16:42 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2015-08-18 16:42 - 2015-08-18 16:42 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2015-08-18 16:42 - 2015-08-18 16:42 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2015-08-18 16:41 - 2015-08-18 16:43 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-08-18 16:41 - 2015-08-18 16:42 - 00000000 ____D C:\ProgramData\Adobe
2015-08-18 16:41 - 2015-08-18 16:42 - 00000000 ____D C:\Program Files\Adobe
2015-08-18 16:41 - 2015-08-18 16:41 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-08-18 16:29 - 2015-08-18 16:29 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\Macromedia
2015-08-18 16:27 - 2015-09-01 11:59 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-18 16:27 - 2015-08-18 16:27 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-08-18 16:27 - 2015-08-18 16:27 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-08-18 16:27 - 2015-08-18 16:27 - 00000000 ____D C:\Windows\system32\Macromed
2015-08-18 16:21 - 2015-08-18 16:21 - 00000000 ____D C:\Windows\Sun
2015-08-18 16:20 - 2015-08-18 16:20 - 00096352 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-08-18 16:20 - 2015-08-18 16:20 - 00000000 ____D C:\ProgramData\Sun
2015-08-18 16:20 - 2015-08-18 16:20 - 00000000 ____D C:\ProgramData\Oracle
2015-08-18 16:20 - 2015-08-18 16:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-18 16:20 - 2015-08-18 16:20 - 00000000 ____D C:\Program Files\Common Files\Java
2015-08-18 16:19 - 2015-08-18 16:19 - 00000000 ____D C:\Program Files\Java
2015-08-18 16:17 - 2015-08-18 16:24 - 3983441920 _____ C:\Users\JOHNNY\Downloads\Win7.iso
2015-08-18 16:15 - 2015-09-01 12:26 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\uTorrent
2015-08-18 16:15 - 2015-08-18 16:15 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2015-08-18 15:53 - 2015-08-18 15:53 - 00000000 ____D C:\Users\JOHNNY\Tracing
2015-08-18 15:16 - 2015-09-01 12:11 - 00117248 ___SH C:\Users\JOHNNY\Documents\Thumbs.db
2015-08-18 15:08 - 2015-08-26 18:20 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\IDM
2015-08-18 15:08 - 2015-08-18 16:06 - 00000000 ____D C:\Users\JOHNNY\Downloads\Video
2015-08-18 15:08 - 2015-08-18 15:09 - 00000000 ____D C:\Program Files\Internet Download Manager
2015-08-18 15:08 - 2015-08-18 15:08 - 00000000 ____D C:\Users\JOHNNY\Downloads\Compressed
2015-08-18 15:08 - 2015-08-18 15:08 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2015-08-18 15:08 - 2015-08-18 15:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2015-08-18 14:34 - 2015-08-29 23:07 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\DMCache
2015-08-18 14:30 - 2015-08-18 14:30 - 00000896 _____ C:\Users\JOHNNY\Desktop\Dokumenty.lnk
2015-08-18 14:30 - 2015-08-18 14:30 - 00000892 _____ C:\Users\JOHNNY\Desktop\Stažené soubory.lnk
2015-08-18 13:59 - 2015-08-18 13:59 - 00001787 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-08-18 13:59 - 2015-08-18 13:59 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\Opera
2015-08-18 13:59 - 2015-08-18 13:59 - 00000000 ____D C:\Users\JOHNNY\AppData\Local\Opera
2015-08-18 13:59 - 2015-08-18 13:59 - 00000000 ____D C:\Program Files\Opera
2015-08-18 13:41 - 2015-08-18 13:41 - 00001167 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2015-08-18 13:41 - 2015-08-18 13:41 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\Thunderbird
2015-08-18 13:41 - 2015-08-18 13:41 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\Mozilla
2015-08-18 13:41 - 2015-08-18 13:41 - 00000000 ____D C:\Users\JOHNNY\AppData\Local\Thunderbird
2015-08-18 13:41 - 2015-08-18 13:41 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2015-08-18 13:41 - 2015-08-18 13:41 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-08-18 13:29 - 2015-08-18 22:40 - 00000000 ____D C:\Users\JOHNNY\AppData\Local\Google
2015-08-18 13:28 - 2015-08-20 21:35 - 00000000 ____D C:\Program Files\Google
2015-08-18 13:28 - 2015-08-20 21:25 - 00000000 ____D C:\Users\JOHNNY\AppData\Local\Deployment
2015-08-18 13:18 - 2015-08-30 11:53 - 00058016 _____ C:\Users\JOHNNY\AppData\Local\GDIPFONTCACHEV1.DAT
2015-08-18 13:06 - 2015-08-18 13:06 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\Malwarebytes
2015-08-18 13:05 - 2015-08-18 13:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
2015-08-18 13:05 - 2015-08-18 13:05 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-18 13:05 - 2015-08-18 13:05 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2015-08-18 13:05 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-18 12:56 - 2015-08-18 12:56 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-08-18 12:56 - 2015-08-18 12:56 - 00000000 ____D C:\Windows\system32\RTCOM
2015-08-18 12:55 - 2015-09-01 03:56 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2015-08-18 12:55 - 2015-08-18 12:56 - 00000000 ___HD C:\Program Files\Temp
2015-08-18 12:55 - 2015-08-18 12:55 - 00000000 ____D C:\Program Files\Realtek
2015-08-18 12:55 - 2015-08-18 12:55 - 00000000 ____D C:\Program Files\Common Files\InstallShield
2015-08-18 12:55 - 2013-11-05 19:47 - 02888536 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2015-08-18 12:55 - 2013-11-05 18:55 - 38385664 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2015-08-18 12:55 - 2013-11-05 15:48 - 00681905 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2015-08-18 12:55 - 2013-11-04 19:26 - 00124632 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2015-08-18 12:55 - 2013-11-04 11:11 - 02328792 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO.dll
2015-08-18 12:55 - 2013-10-30 16:30 - 00877880 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2015-08-18 12:55 - 2013-10-30 16:29 - 05773592 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2015-08-18 12:55 - 2013-10-28 17:29 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2015-08-18 12:55 - 2013-10-16 03:43 - 00182472 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2015-08-18 12:55 - 2013-10-11 12:47 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2015-08-18 12:55 - 2013-10-11 11:31 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2015-08-18 12:55 - 2013-10-09 20:14 - 13881088 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2015-08-18 12:55 - 2013-10-09 20:14 - 03444992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2015-08-18 12:55 - 2013-10-09 20:13 - 01677568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2015-08-18 12:55 - 2013-10-09 20:13 - 01097984 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2015-08-18 12:55 - 2013-10-09 20:13 - 00926976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2015-08-18 12:55 - 2013-10-09 20:12 - 27369216 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2015-08-18 12:55 - 2013-10-09 20:12 - 01935104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2015-08-18 12:55 - 2013-10-09 20:12 - 01824000 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2015-08-18 12:55 - 2013-10-09 20:12 - 00859904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2015-08-18 12:55 - 2013-10-07 11:05 - 02547928 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2015-08-18 12:55 - 2013-10-07 00:14 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2015-08-18 12:55 - 2013-10-07 00:14 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2015-08-18 12:55 - 2013-10-07 00:14 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2015-08-18 12:55 - 2013-09-13 18:44 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2015-08-18 12:55 - 2013-09-10 04:02 - 06176944 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2015-08-18 12:55 - 2013-09-10 04:02 - 00272048 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2015-08-18 12:55 - 2013-09-10 04:01 - 01489072 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2015-08-18 12:55 - 2013-09-10 04:01 - 00219312 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2015-08-18 12:55 - 2013-09-09 15:32 - 05681192 _____ C:\Windows\system32\Drivers\rtvienna.dat
2015-08-18 12:55 - 2013-08-24 03:14 - 00938752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2015-08-18 12:55 - 2013-08-24 03:14 - 00823040 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2015-08-18 12:55 - 2013-08-24 03:14 - 00604928 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2015-08-18 12:55 - 2013-08-24 03:14 - 00218368 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2015-08-18 12:55 - 2013-08-20 17:36 - 00502584 _____ C:\Windows\system32\audioLibVc.dll
2015-08-18 12:55 - 2013-08-14 16:36 - 00873728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2015-08-18 12:55 - 2013-08-14 16:36 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2015-08-18 12:55 - 2013-08-14 16:35 - 00761088 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2015-08-18 12:55 - 2013-08-14 16:35 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2015-08-18 12:55 - 2013-08-05 18:10 - 02395680 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2015-08-18 12:55 - 2013-06-17 20:20 - 00188696 _____ C:\Windows\system32\AcpiServiceVnA.dll
2015-08-18 12:55 - 2013-04-24 17:16 - 01596488 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2015-08-18 12:55 - 2013-04-03 14:12 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2015-08-18 12:55 - 2012-08-31 19:17 - 07162128 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll
2015-08-18 12:55 - 2012-08-31 19:17 - 00352016 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll
2015-08-18 12:55 - 2012-08-31 19:17 - 00106768 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll
2015-08-18 12:55 - 2012-08-31 19:17 - 00091920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll
2015-08-18 12:55 - 2012-08-31 19:17 - 00062224 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll
2015-08-18 12:55 - 2012-03-08 11:47 - 00095840 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTARen.dll
2015-08-18 12:55 - 2012-01-30 11:42 - 00819648 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo2.dll
2015-08-18 12:55 - 2012-01-10 10:20 - 00058264 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\TepeqAPO.dll
2015-08-18 12:55 - 2011-11-22 16:28 - 00013416 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR.dll
2015-08-18 12:55 - 2011-09-02 14:21 - 00214368 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK.dll
2015-08-18 12:55 - 2011-09-02 14:21 - 00074080 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM.dll
2015-08-18 12:55 - 2011-09-02 14:21 - 00068960 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO.dll
2015-08-18 12:55 - 2011-08-23 17:00 - 00357712 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT.dll
2015-08-18 12:55 - 2011-05-31 09:42 - 01509480 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL.dll
2015-08-18 12:55 - 2011-05-31 09:42 - 01292904 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL.dll
2015-08-18 12:55 - 2011-05-31 09:42 - 01220200 _____ (DTS) C:\Windows\system32\DTSBoostDLL.dll
2015-08-18 12:55 - 2011-05-31 09:42 - 00654952 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL.dll
2015-08-18 12:55 - 2011-05-31 09:42 - 00631400 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL.dll
2015-08-18 12:55 - 2011-05-31 09:42 - 00601704 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL.dll
2015-08-18 12:55 - 2011-05-31 09:42 - 00458344 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL.dll
2015-08-18 12:55 - 2011-05-31 09:42 - 00389736 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL.dll
2015-08-18 12:55 - 2011-05-31 09:42 - 00375400 _____ (DTS) C:\Windows\system32\DTSLimiterDLL.dll
2015-08-18 12:55 - 2011-05-31 09:42 - 00218728 _____ (DTS) C:\Windows\system32\DTSGFXAPONS.dll
2015-08-18 12:55 - 2011-05-31 09:42 - 00218728 _____ (DTS) C:\Windows\system32\DTSGFXAPO.dll
2015-08-18 12:55 - 2011-05-31 09:42 - 00218216 _____ (DTS) C:\Windows\system32\DTSLFXAPO.dll
2015-08-18 12:55 - 2011-03-17 12:16 - 01379760 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2015-08-18 12:55 - 2011-03-07 17:03 - 00134584 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2015-08-18 12:55 - 2010-11-08 07:31 - 00359768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP32A.dll
2015-08-18 12:55 - 2010-11-08 07:31 - 00295768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT32.dll
2015-08-18 12:55 - 2010-11-08 07:31 - 00295768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA32.dll
2015-08-18 12:55 - 2010-11-08 07:31 - 00170840 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED32A.dll
2015-08-18 12:55 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL32A.dll
2015-08-18 12:55 - 2010-11-08 07:31 - 00064856 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG32A.dll
2015-08-18 12:55 - 2010-09-27 09:34 - 00232792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2015-08-18 12:55 - 2009-12-04 15:43 - 00132368 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO.dll
2015-08-18 12:55 - 2009-11-24 09:55 - 00345328 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSXT.dll
2015-08-18 12:55 - 2009-11-24 09:55 - 00185584 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSHD.dll
2015-08-18 12:55 - 2009-11-24 09:55 - 00173296 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP360.dll
2015-08-18 12:55 - 2009-11-24 09:55 - 00140528 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW.dll
2015-08-18 12:55 - 2009-11-18 18:42 - 01783056 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesLib.dll
2015-08-18 12:53 - 2015-09-01 02:48 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-18 12:53 - 2015-08-18 12:53 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2015-08-18 12:53 - 2015-08-18 12:53 - 00000000 _SHDL C:\Users\UpdatusUser\Šablony
2015-08-18 12:53 - 2015-08-18 12:53 - 00000000 _SHDL C:\Users\UpdatusUser\Soubory cookie
2015-08-18 12:53 - 2015-08-18 12:53 - 00000000 _SHDL C:\Users\UpdatusUser\Poslední
2015-08-18 12:53 - 2015-08-18 12:53 - 00000000 _SHDL C:\Users\UpdatusUser\Okolní tiskárny
2015-08-18 12:53 - 2015-08-18 12:53 - 00000000 _SHDL C:\Users\UpdatusUser\Okolní síť
2015-08-18 12:53 - 2015-08-18 12:53 - 00000000 _SHDL C:\Users\UpdatusUser\Nabídka Start
2015-08-18 12:53 - 2015-08-18 12:53 - 00000000 _SHDL C:\Users\UpdatusUser\Dokumenty
2015-08-18 12:53 - 2015-08-18 12:53 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Obrázky
2015-08-18 12:53 - 2015-08-18 12:53 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Hudba
2015-08-18 12:53 - 2015-08-18 12:53 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Filmy
2015-08-18 12:53 - 2015-08-18 12:53 - 00000000 _SHDL C:\Users\UpdatusUser\Data aplikací
2015-08-18 12:53 - 2015-08-18 12:53 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-08-18 12:53 - 2015-08-18 12:53 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Data aplikací
2015-08-18 12:53 - 2015-08-18 12:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-08-18 12:53 - 2009-07-14 06:42 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-18 12:53 - 2009-07-14 06:37 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-18 12:52 - 2015-08-18 12:52 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-18 12:52 - 2012-12-29 12:26 - 20450232 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2015-08-18 12:52 - 2012-12-29 12:26 - 17560504 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-08-18 12:52 - 2012-12-29 12:26 - 15129064 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll
2015-08-18 12:52 - 2012-12-29 12:26 - 08904632 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-08-18 12:52 - 2012-12-29 12:26 - 07931896 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-08-18 12:52 - 2012-12-29 12:26 - 06263784 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-08-18 12:52 - 2012-12-29 12:26 - 02720696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-08-18 12:52 - 2012-12-29 12:26 - 02504248 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi.dll
2015-08-18 12:52 - 2012-12-29 12:26 - 01985976 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2015-08-18 12:52 - 2012-12-29 12:26 - 01017272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco32.dll
2015-08-18 12:52 - 2012-12-29 12:26 - 00889784 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco32.dll
2015-08-18 12:52 - 2012-12-29 12:26 - 00053176 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-08-18 12:52 - 2012-12-29 12:26 - 00013153 _____ C:\Windows\system32\nvinfo.pb
2015-08-18 12:52 - 2012-12-29 10:26 - 04129720 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-08-18 12:52 - 2012-12-29 10:26 - 03001272 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll
2015-08-18 12:52 - 2012-12-29 10:25 - 00639928 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-08-18 12:52 - 2012-12-29 10:25 - 00108984 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-08-18 12:52 - 2012-12-29 10:25 - 00062904 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-08-18 12:51 - 2015-08-18 12:53 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-08-18 12:48 - 2015-08-18 12:48 - 00000000 ____D C:\Users\JOHNNY\AppData\Local\VS Revo Group
2015-08-18 12:48 - 2015-08-18 12:48 - 00000000 ____D C:\ProgramData\VS Revo Group
2015-08-18 12:48 - 2015-08-18 12:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2015-08-18 12:48 - 2015-08-18 12:48 - 00000000 ____D C:\Program Files\VS Revo Group
2015-08-18 12:48 - 2009-12-30 11:21 - 00027192 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2015-08-18 12:45 - 2015-08-18 12:45 - 00000000 ____D C:\Program Files\CapsUnlock
2015-08-18 12:44 - 2015-08-31 18:12 - 00000000 ___RD C:\Program Files\Skype
2015-08-18 12:44 - 2015-08-30 10:35 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\Skype
2015-08-18 12:44 - 2015-08-18 12:44 - 00000000 ____D C:\Users\JOHNNY\AppData\Local\Skype
2015-08-18 12:44 - 2015-08-18 12:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-18 12:44 - 2015-08-18 12:44 - 00000000 ____D C:\Program Files\Common Files\Skype
2015-08-18 12:43 - 2015-08-18 12:44 - 00000000 ____D C:\ProgramData\Skype
2015-08-18 12:43 - 2015-08-18 12:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-18 12:43 - 2015-08-18 12:43 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-08-18 12:39 - 2015-08-18 12:39 - 00000000 ____D C:\Users\JOHNNY\AppData\Local\WindowsUpdate
2015-08-18 12:16 - 2015-08-18 12:16 - 00000000 ____D C:\Users\JOHNNY\AppData\Local\GWX
2015-08-17 14:52 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-08-17 14:44 - 2015-07-21 02:12 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-08-17 14:44 - 2015-07-16 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-08-17 14:44 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-17 14:44 - 2015-07-16 21:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-08-17 14:44 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-17 14:44 - 2015-07-16 21:50 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-08-17 14:44 - 2015-07-16 21:49 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-08-17 14:44 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-17 14:44 - 2015-07-16 21:43 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-08-17 14:44 - 2015-07-16 21:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-08-17 14:44 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-17 14:44 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-17 14:44 - 2015-07-16 21:39 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-08-17 14:44 - 2015-07-16 21:39 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-08-17 14:44 - 2015-07-16 21:38 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-08-17 14:44 - 2015-07-16 21:32 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-17 14:44 - 2015-07-16 21:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-08-17 14:44 - 2015-07-16 21:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-17 14:44 - 2015-07-16 21:20 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-08-17 14:44 - 2015-07-16 21:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-08-17 14:44 - 2015-07-16 21:17 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-08-17 14:44 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-17 14:44 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-17 14:44 - 2015-07-16 21:06 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-17 14:44 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-17 14:44 - 2015-07-16 21:06 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-08-17 14:44 - 2015-07-16 21:05 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-08-17 14:44 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-17 14:44 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-17 14:44 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-17 14:44 - 2015-06-09 21:35 - 02745856 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-08-17 14:44 - 2015-06-09 21:35 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-08-17 14:44 - 2015-06-09 17:17 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-08-17 14:44 - 2012-02-11 07:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2015-08-17 14:44 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2015-08-17 14:43 - 2015-07-16 21:12 - 06131200 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-17 14:43 - 2015-07-16 21:12 - 00856064 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-08-17 14:43 - 2015-07-16 21:12 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-08-17 14:43 - 2015-07-16 17:14 - 00355840 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2015-08-17 14:43 - 2014-12-11 19:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-08-17 14:43 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2015-08-17 14:43 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2015-08-17 14:43 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2015-08-17 14:43 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2015-08-17 14:43 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2015-08-17 14:43 - 2011-03-11 07:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2015-08-17 14:43 - 2011-03-11 07:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2015-08-17 14:43 - 2011-03-11 07:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2015-08-17 14:43 - 2011-03-11 07:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2015-08-17 14:43 - 2011-03-11 07:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2015-08-17 14:43 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2015-08-17 14:43 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2015-08-17 14:43 - 2011-03-11 06:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2015-08-17 14:41 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2015-08-17 00:44 - 2015-08-17 00:44 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-17 00:44 - 2015-08-17 00:44 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-17 00:39 - 2012-08-23 16:46 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\terminpt.sys
2015-08-17 00:39 - 2012-08-23 16:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-08-17 00:38 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2015-08-17 00:26 - 2013-10-02 02:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2015-08-17 00:26 - 2013-10-02 02:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-08-17 00:26 - 2013-10-02 02:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-08-17 00:26 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2015-08-17 00:26 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2015-08-17 00:26 - 2013-10-02 01:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2015-08-17 00:26 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-08-17 00:25 - 2015-01-09 01:44 - 00419936 _____ C:\Windows\system32\locale.nls
2015-08-16 22:47 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-08-16 22:40 - 2015-07-30 19:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-08-16 22:40 - 2015-07-30 19:57 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-16 22:40 - 2015-07-30 19:57 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-16 22:40 - 2015-07-30 19:57 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-08-16 22:40 - 2015-07-30 19:57 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-16 22:40 - 2015-07-30 19:57 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-08-16 22:40 - 2015-07-30 19:57 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-08-16 22:40 - 2015-07-30 18:52 - 02384384 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-16 22:40 - 2015-07-30 18:49 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-16 22:39 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-08-16 20:26 - 2015-08-16 20:26 - 00000000 ____D C:\Program Files\Microsoft.NET
2015-08-16 20:17 - 2015-08-18 16:42 - 00000000 ____D C:\Users\JOHNNY\AppData\Roaming\Adobe
2015-08-16 17:21 - 2012-07-26 05:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2015-08-16 17:21 - 2012-07-26 05:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2015-08-16 17:21 - 2012-07-26 05:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2015-08-16 17:21 - 2012-07-26 05:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2015-08-16 17:21 - 2012-07-26 05:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2015-08-16 17:21 - 2012-07-26 04:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2015-08-16 17:21 - 2012-07-26 04:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2015-08-16 17:21 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2015-08-16 17:19 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2015-08-16 17:19 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-08-16 17:19 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2015-08-16 17:19 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2015-08-16 17:18 - 2012-03-01 07:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2015-08-16 17:18 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2015-08-16 16:39 - 2015-08-16 16:39 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2015-08-16 16:39 - 2015-08-16 16:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2015-08-16 16:39 - 2015-08-16 16:39 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2015-08-16 16:39 - 2015-08-16 16:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2015-08-16 16:39 - 2015-08-16 16:39 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2015-08-16 16:39 - 2015-08-16 16:39 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2015-08-16 16:39 - 2015-08-16 16:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-08-16 16:39 - 2015-08-16 16:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-08-16 16:38 - 2015-08-16 16:38 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2015-08-16 16:37 - 2015-08-16 16:37 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2015-08-16 16:35 - 2015-08-16 16:35 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

[John82]

nevlezlo se druhá část


2015-08-16 16:35 - 2015-08-16 16:35 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2015-08-16 16:35 - 2015-08-16 16:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2015-08-16 16:34 - 2015-08-16 16:34 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2015-08-16 16:32 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-16 16:17 - 2015-01-09 04:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-08-16 16:17 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-08-16 16:17 - 2015-01-09 04:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-08-16 16:16 - 2015-07-28 22:04 - 00015808 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-08-16 16:16 - 2015-07-28 22:00 - 00952832 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-08-16 16:16 - 2015-07-28 22:00 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-08-16 16:16 - 2015-07-28 22:00 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-08-16 16:16 - 2015-07-28 22:00 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-08-16 16:16 - 2015-07-28 22:00 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-08-16 16:16 - 2015-07-28 22:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-08-16 16:16 - 2015-07-28 21:54 - 00934400 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-08-16 16:16 - 2015-07-20 19:56 - 02943488 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-16 16:16 - 2015-07-20 19:56 - 02061312 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-16 16:16 - 2015-07-20 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-16 16:16 - 2015-07-20 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-16 16:16 - 2015-07-20 19:56 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-16 16:16 - 2015-07-20 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-16 16:16 - 2015-07-20 19:56 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-16 16:16 - 2015-07-20 19:56 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-16 16:16 - 2015-07-20 19:56 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-16 16:16 - 2015-07-20 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-16 16:16 - 2015-07-20 19:56 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-16 16:16 - 2015-07-01 22:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-16 16:16 - 2015-07-01 22:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-16 16:16 - 2015-06-03 22:17 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-08-16 16:16 - 2015-06-03 22:17 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-08-16 16:16 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-08-16 16:16 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2015-08-16 16:16 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2015-08-16 16:16 - 2013-07-03 05:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2015-08-16 16:16 - 2013-07-03 05:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2015-08-16 16:16 - 2013-02-12 05:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2015-08-16 16:16 - 2012-08-22 19:16 - 00712048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-08-16 16:16 - 2012-07-04 21:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2015-08-16 16:16 - 2011-04-29 04:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2015-08-16 16:16 - 2011-04-29 04:46 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2015-08-16 16:16 - 2011-04-29 04:46 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2015-08-16 16:15 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-16 16:15 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-16 16:15 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-08-16 16:15 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-08-16 16:15 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-08-16 16:15 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-08-16 16:15 - 2014-11-11 04:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-08-16 16:15 - 2014-11-11 03:32 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-08-16 16:15 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-08-16 16:15 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2015-08-16 16:15 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2015-08-16 16:15 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2015-08-16 16:15 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2015-08-16 16:15 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2015-08-16 16:15 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2015-08-16 16:15 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2015-08-16 16:15 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2015-08-16 16:15 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2015-08-16 16:15 - 2013-10-30 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2015-08-16 16:15 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2015-08-16 16:15 - 2013-01-24 06:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2015-08-16 16:15 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2015-08-16 16:15 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2015-08-16 16:15 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2015-08-16 16:15 - 2011-03-03 07:38 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2015-08-16 16:15 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2015-08-16 16:15 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2015-08-16 16:14 - 2015-07-15 19:59 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-16 16:14 - 2015-07-15 19:55 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-16 16:14 - 2015-07-15 19:54 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-08-16 16:14 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-08-16 16:14 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-08-16 16:14 - 2014-08-12 03:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2015-08-16 16:14 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2015-08-16 16:14 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2015-08-16 16:14 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2015-08-16 16:14 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2015-08-16 16:14 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2015-08-16 16:14 - 2012-08-21 22:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2015-08-16 16:14 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2015-08-16 16:14 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2015-08-16 16:14 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2015-08-16 16:14 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2015-08-16 16:14 - 2011-05-24 12:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2015-08-16 16:13 - 2015-06-17 19:39 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-08-16 16:13 - 2015-04-11 05:07 - 00054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-08-16 16:13 - 2015-03-04 06:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-08-16 16:13 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-08-16 16:13 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-08-16 16:13 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2015-08-16 16:13 - 2014-02-04 04:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-08-16 16:13 - 2014-02-04 04:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-08-16 16:13 - 2014-02-04 04:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2015-08-16 16:13 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2015-08-16 16:13 - 2014-01-28 04:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2015-08-16 16:13 - 2013-08-28 02:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2015-08-16 16:13 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2015-08-16 16:13 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2015-08-16 16:13 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2015-08-16 16:13 - 2013-03-19 05:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2015-08-16 16:13 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2015-08-16 16:13 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2015-08-16 16:13 - 2012-10-03 18:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2015-08-16 16:13 - 2012-10-03 17:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2015-08-16 16:13 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2015-08-16 16:13 - 2012-07-04 23:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2015-08-16 16:13 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2015-08-16 16:13 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2015-08-16 16:13 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2015-08-16 16:13 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2015-08-16 16:13 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2015-08-16 16:13 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2015-08-16 16:13 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2015-08-16 16:13 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2015-08-16 16:13 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2015-08-16 16:13 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2015-08-16 16:13 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2015-08-16 16:13 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2015-08-16 16:13 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-08-16 16:13 - 2011-02-12 07:35 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2015-08-16 16:12 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-08-16 16:12 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-08-16 16:12 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-08-16 16:12 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-08-16 16:12 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-08-16 16:12 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-08-16 16:12 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-08-16 16:12 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-08-16 16:12 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-08-16 16:12 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-08-16 16:12 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-08-16 16:12 - 2015-04-13 05:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-08-16 16:12 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-08-16 16:12 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2015-08-16 16:12 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2015-08-16 16:12 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2015-08-16 16:12 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2015-08-16 16:12 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-08-16 16:12 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-08-16 16:12 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-08-16 16:12 - 2014-01-24 04:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-08-16 16:12 - 2013-11-26 13:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-08-16 16:12 - 2013-10-04 03:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2015-08-16 16:12 - 2013-10-04 03:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2015-08-16 16:12 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2015-08-16 16:12 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2015-08-16 16:12 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2015-08-16 16:12 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2015-08-16 16:12 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2015-08-16 16:12 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2015-08-16 16:12 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2015-08-16 16:12 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2015-08-16 16:12 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2015-08-16 16:12 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2015-08-16 16:12 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2015-08-16 16:12 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2015-08-16 16:12 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2015-08-16 16:12 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2015-08-16 16:12 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2015-08-16 16:12 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2015-08-16 16:12 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2015-08-16 16:12 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2015-08-16 16:12 - 2010-12-23 07:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2015-08-16 16:12 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2015-08-16 16:11 - 2015-07-10 19:34 - 12875776 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-08-16 16:11 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-08-16 16:11 - 2015-04-08 05:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-08-16 16:11 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-08-16 16:11 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-08-16 16:11 - 2015-03-04 06:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-08-16 16:11 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-08-16 16:11 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-08-16 16:11 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-08-16 16:11 - 2014-12-19 04:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-08-16 16:11 - 2014-11-26 05:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-08-16 16:11 - 2014-10-30 03:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-08-16 16:11 - 2014-10-25 03:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-08-16 16:11 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2015-08-16 16:11 - 2014-07-17 03:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-08-16 16:11 - 2014-07-17 03:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2015-08-16 16:11 - 2014-07-17 03:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2015-08-16 16:11 - 2014-07-17 03:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2015-08-16 16:11 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2015-08-16 16:11 - 2013-10-12 04:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2015-08-16 16:11 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2015-08-16 16:11 - 2013-08-05 03:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2015-08-16 16:11 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2015-08-16 16:11 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2015-08-16 16:11 - 2012-05-14 06:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2015-08-16 16:11 - 2012-04-26 06:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2015-08-16 16:11 - 2012-04-26 06:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2015-08-16 16:11 - 2012-03-17 09:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2015-08-16 16:11 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2015-08-16 16:11 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2015-08-16 16:11 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2015-08-16 16:11 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll
2015-08-16 16:11 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2015-08-16 16:11 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2015-08-16 16:11 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2015-08-16 16:11 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2015-08-16 16:10 - 2015-07-15 04:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-08-16 16:10 - 2015-07-15 04:55 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-08-16 16:10 - 2015-07-15 04:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-08-16 16:10 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-08-16 16:10 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-08-16 16:10 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-08-16 16:10 - 2015-05-09 05:14 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-08-16 16:10 - 2015-05-09 05:13 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-08-16 16:10 - 2015-05-09 05:13 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-08-16 16:10 - 2015-05-09 05:12 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-08-16 16:10 - 2015-05-09 05:08 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 03:59 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 03:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 03:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-16 16:10 - 2015-05-09 03:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-16 16:10 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-08-16 16:10 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-08-16 16:10 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-08-16 16:10 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-08-16 16:10 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-08-16 16:10 - 2015-02-25 05:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-08-16 16:10 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-08-16 16:10 - 2015-02-03 05:12 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-08-16 16:10 - 2015-02-03 05:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-08-16 16:10 - 2015-02-03 05:11 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-08-16 16:10 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-08-16 16:10 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-08-16 16:10 - 2015-02-03 05:11 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-08-16 16:10 - 2015-02-03 05:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-08-16 16:10 - 2015-02-03 05:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-08-16 16:10 - 2015-02-03 05:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-08-16 16:10 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-08-16 16:10 - 2015-02-03 05:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-08-16 16:10 - 2015-02-03 04:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-08-16 16:10 - 2015-01-31 01:56 - 00370488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-08-16 16:10 - 2014-12-19 03:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-08-16 16:10 - 2014-12-06 05:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-08-16 16:10 - 2014-11-01 00:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-08-16 16:10 - 2014-06-28 02:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-08-16 16:10 - 2014-06-28 02:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-08-16 16:10 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-08-16 16:10 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-08-16 16:10 - 2013-11-27 03:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-08-16 16:10 - 2013-11-27 03:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-08-16 16:10 - 2013-11-27 03:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2015-08-16 16:10 - 2013-11-27 03:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-08-16 16:10 - 2013-11-27 03:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2015-08-16 16:10 - 2013-11-27 03:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-08-16 16:10 - 2013-07-12 12:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2015-08-16 16:10 - 2013-06-26 00:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2015-08-16 16:10 - 2012-11-29 00:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2015-08-16 16:10 - 2012-11-29 00:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2015-08-16 16:10 - 2012-11-29 00:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2015-08-16 16:10 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2015-08-16 16:10 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2015-08-16 16:10 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-08-16 16:10 - 2012-10-03 18:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2015-08-16 16:10 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2015-08-16 16:10 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2015-08-16 16:10 - 2011-02-23 06:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2015-08-16 16:09 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-08-16 16:09 - 2014-12-08 04:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-08-16 16:09 - 2014-10-14 03:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-08-16 16:09 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-08-16 16:09 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-08-16 16:09 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-08-16 16:09 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-08-16 16:09 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-08-16 16:09 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-08-16 16:09 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-08-16 16:09 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-08-16 16:09 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-08-16 15:54 - 2014-10-03 03:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-08-16 15:54 - 2014-10-03 03:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-08-16 15:54 - 2014-10-03 03:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-08-16 15:54 - 2014-10-03 03:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-08-16 15:54 - 2014-10-03 03:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-08-16 15:48 - 2015-06-23 13:27 - 00246952 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-08-16 15:47 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2015-08-16 15:47 - 2012-02-17 06:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2015-08-16 14:59 - 2015-09-01 04:06 - 00000000 ____D C:\Windows\Panther
2015-08-16 14:59 - 2015-08-16 14:59 - 00008192 __RSH C:\BOOTSECT.BAK
2015-08-16 14:59 - 2014-06-28 02:21 - 00391640 __RSH C:\bootmgr
2015-08-16 14:09 - 2015-08-16 14:09 - 00001413 _____ C:\Users\JOHNNY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-08-16 14:08 - 2015-08-30 20:48 - 00000000 ____D C:\Users\JOHNNY
2015-08-16 14:08 - 2015-08-16 14:08 - 00000020 ___SH C:\Users\JOHNNY\ntuser.ini
2015-08-16 14:08 - 2015-08-16 14:08 - 00000000 _SHDL C:\Users\JOHNNY\Šablony
2015-08-16 14:08 - 2015-08-16 14:08 - 00000000 _SHDL C:\Users\JOHNNY\Soubory cookie
2015-08-16 14:08 - 2015-08-16 14:08 - 00000000 _SHDL C:\Users\JOHNNY\Poslední
2015-08-16 14:08 - 2015-08-16 14:08 - 00000000 _SHDL C:\Users\JOHNNY\Okolní tiskárny
2015-08-16 14:08 - 2015-08-16 14:08 - 00000000 _SHDL C:\Users\JOHNNY\Okolní síť
2015-08-16 14:08 - 2015-08-16 14:08 - 00000000 _SHDL C:\Users\JOHNNY\Nabídka Start
2015-08-16 14:08 - 2015-08-16 14:08 - 00000000 _SHDL C:\Users\JOHNNY\Dokumenty
2015-08-16 14:08 - 2015-08-16 14:08 - 00000000 _SHDL C:\Users\JOHNNY\Documents\Obrázky
2015-08-16 14:08 - 2015-08-16 14:08 - 00000000 _SHDL C:\Users\JOHNNY\Documents\Hudba
2015-08-16 14:08 - 2015-08-16 14:08 - 00000000 _SHDL C:\Users\JOHNNY\Documents\Filmy
2015-08-16 14:08 - 2015-08-16 14:08 - 00000000 _SHDL C:\Users\JOHNNY\Data aplikací
2015-08-16 14:08 - 2015-08-16 14:08 - 00000000 _SHDL C:\Users\JOHNNY\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-08-16 14:08 - 2015-08-16 14:08 - 00000000 _SHDL C:\Users\JOHNNY\AppData\Local\Data aplikací
2015-08-16 14:08 - 2009-07-14 06:42 - 00000000 ___RD C:\Users\JOHNNY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-16 14:08 - 2009-07-14 06:37 - 00000000 ___RD C:\Users\JOHNNY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-16 14:07 - 2015-08-16 14:07 - 00203464 __RSH C:\grldr
2015-08-16 14:07 - 2015-08-16 14:07 - 00000015 __RSH C:\win7.ld
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Public\Documents\Obrázky
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Public\Documents\Hudba
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Public\Documents\Filmy
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default\Šablony
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default\Poslední
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default\Okolní síť
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default\Dokumenty
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default\Documents\Obrázky
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default\Documents\Hudba
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default\Documents\Filmy
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default\Data aplikací
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default User\Documents\Obrázky
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default User\Documents\Hudba
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default User\Documents\Filmy
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\ProgramData\Šablony
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\ProgramData\Plocha
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\ProgramData\Oblíbené položky
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\ProgramData\Nabídka Start
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\ProgramData\Dokumenty
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 _SHDL C:\ProgramData\Data aplikací
2015-08-16 14:07 - 2015-08-16 14:07 - 00000000 ____D C:\Recovery
2015-08-16 14:04 - 2015-08-16 14:04 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2015-08-16 14:04 - 2015-08-16 14:04 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-08-16 14:03 - 2015-09-01 11:59 - 01889893 _____ C:\Windows\WindowsUpdate.log
2015-08-16 14:02 - 2015-08-16 14:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2015-08-15 11:53 - 2015-08-28 19:41 - 00000000 ____D C:\Users\JOHNNY\Documents\Torrenty
2015-08-15 11:53 - 2015-08-18 15:16 - 00000000 ____D C:\Users\JOHNNY\Documents\TrackMania
2015-08-15 11:52 - 2015-08-18 15:16 - 00000000 ____D C:\Users\JOHNNY\Documents\tapety na plochu
2015-08-15 11:52 - 2015-08-18 15:15 - 00000000 ____D C:\Users\JOHNNY\Documents\stopky_2.51_plna_1.0
2015-08-15 11:52 - 2015-08-18 15:15 - 00000000 ____D C:\Users\JOHNNY\Documents\Sms-hlášky-zvuky----Tunning-do-mobilu-vyzvanění
2015-08-15 11:52 - 2015-08-18 15:15 - 00000000 ____D C:\Users\JOHNNY\Documents\OpenTTD
2015-08-15 11:52 - 2015-08-18 15:15 - 00000000 ____D C:\Users\JOHNNY\Documents\My Games
2015-08-15 11:52 - 2015-08-18 15:15 - 00000000 ____D C:\Users\JOHNNY\Documents\meverikx deník
2015-08-15 11:52 - 2015-08-18 15:15 - 00000000 ____D C:\Users\JOHNNY\Documents\LG PC Suite IV
2015-08-15 11:52 - 2015-08-18 15:15 - 00000000 ____D C:\Users\JOHNNY\Documents\Bandicam
2015-08-15 11:52 - 2014-12-11 07:06 - 00000000 ____D C:\Users\JOHNNY\Documents\FFOutput
2015-08-15 11:52 - 2014-10-18 05:02 - 05835504 _____ (Cablecom GmbH ) C:\Users\JOHNNY\Documents\FiberPowerOptimizer.exe
2015-08-15 11:52 - 2014-09-26 23:05 - 00000000 ____H C:\Users\JOHNNY\Documents\Default.rdp
2015-08-15 11:52 - 2014-09-24 00:15 - 00036846 _____ C:\Users\JOHNNY\Documents\od 20.9. INFI Pokec.ods
2015-08-15 11:52 - 2014-09-17 15:48 - 00000526 _____ C:\Users\JOHNNY\Documents\KODY do GOOGLE učtu Backup-codes-cube1280.txt
2015-08-15 11:52 - 2014-08-27 21:26 - 00000242 _____ C:\Users\JOHNNY\Documents\Nový textový dokument.txt
2015-08-15 11:52 - 2014-07-04 20:52 - 00121635 _____ C:\Users\JOHNNY\Documents\skype chat infi C16.ods
2015-08-15 11:52 - 2014-04-08 23:15 - 02753523 _____ C:\Users\JOHNNY\Documents\Nový Kresba OpenDocument.odg
2015-08-15 11:52 - 2014-03-31 21:36 - 00005772 _____ C:\Users\JOHNNY\Documents\Putin a Obama.txt
2015-08-15 11:52 - 2014-03-16 10:08 - 00020880 _____ C:\Users\JOHNNY\Documents\Deník dvouletého děcka.....ods
2015-08-15 11:52 - 2014-01-16 12:38 - 00028535 _____ C:\Users\JOHNNY\Documents\Dokument Z projevu Václava Havla v prosinci 1989.odt
2015-08-15 11:52 - 2013-09-21 17:12 - 00000044 _____ C:\Users\JOHNNY\Documents\Pozitivní inteligence Autor Shirzad Chamine.txt

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-01 12:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2015-09-01 04:22 - 2014-09-26 18:06 - 00000000 ___RD C:\Users\JOHNNY\Desktop\Zástupci
2015-09-01 04:00 - 2015-07-10 15:47 - 00000000 ___HD C:\$Windows.~BT
2015-09-01 03:59 - 2009-07-14 06:34 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-01 03:59 - 2009-07-14 06:34 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-01 03:39 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-09-01 03:34 - 2010-11-20 23:01 - 01582262 _____ C:\Windows\system32\PerfStringBackup.INI
2015-09-01 02:48 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-31 23:33 - 2009-07-14 04:04 - 00000215 _____ C:\Windows\system.ini
2015-08-31 21:34 - 2009-07-14 04:03 - 36339712 _____ C:\Windows\system32\config\SOFTWARE.bak
2015-08-31 21:34 - 2009-07-14 04:03 - 14942208 _____ C:\Windows\system32\config\SYSTEM.bak
2015-08-31 21:34 - 2009-07-14 04:03 - 00245760 _____ C:\Windows\system32\config\DEFAULT.bak
2015-08-31 21:34 - 2009-07-14 04:03 - 00065536 _____ C:\Windows\system32\config\SAM.bak
2015-08-31 21:34 - 2009-07-14 04:03 - 00028672 _____ C:\Windows\system32\config\SECURITY.bak
2015-08-31 00:42 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Default
2015-08-31 00:42 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public
2015-08-30 10:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp
2015-08-30 10:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration
2015-08-22 21:54 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2015-08-18 22:49 - 2014-09-26 12:51 - 00000000 ____D C:\Users\JOHNNY\Desktop\Killers
2015-08-18 17:59 - 2014-11-16 03:34 - 00000000 ___RD C:\Users\JOHNNY\Desktop\Games
2015-08-18 14:32 - 2014-09-26 12:51 - 00000000 ___RD C:\Users\JOHNNY\Desktop\HESLA Odkazy atd
2015-08-18 13:02 - 2009-07-14 06:46 - 00001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-08-18 12:52 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Help
2015-08-18 12:15 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\LogFiles
2015-08-17 15:12 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2015-08-17 14:59 - 2009-07-14 06:33 - 00267432 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-17 14:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\AppCompat
2015-08-17 00:46 - 2009-07-14 04:37 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-17 00:44 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\tracing
2015-08-17 00:44 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-08-17 00:44 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\System
2015-08-16 20:09 - 2010-11-21 03:24 - 00000000 ____D C:\Program Files\Windows Journal
2015-08-16 20:09 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\zh-TW
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\zh-HK
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\zh-CN
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\tr-TR
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\sv-SE
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ru-RU
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\pt-PT
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\pt-BR
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\pl-PL
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\nl-NL
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\nb-NO
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ko-KR
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ja-JP
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\it-IT
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\hu-HU
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\fr-FR
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\fi-FI
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\el-GR
2015-08-16 20:09 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2015-08-16 14:59 - 2009-07-14 06:57 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2015-08-16 14:59 - 2009-07-14 06:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2015-08-16 14:15 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Public\Libraries
2015-08-16 14:14 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\system32\restore
2015-08-16 14:07 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\Recovery
2015-08-16 14:07 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Windows NT
2015-08-16 14:04 - 2009-07-14 06:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-08-16 14:00 - 2010-11-21 03:24 - 00000000 ____D C:\Windows\CSC

==================== Files in the root of some directories =======

2015-08-18 12:56 - 2015-08-18 12:56 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\JOHNNY\AppData\Local\temp\vcredist9_x86.exe
C:\Users\JOHNNY\AppData\Local\temp\wmfdist.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-08-22 21:43

==================== End of FRST.txt ============================

[John82]

Additional scan result of Farbar Recovery Scan Tool (x86) Version:31-08-2015
Ran by JOHNNY (2015-09-01 12:30:43)
Running from C:\Users\JOHNNY\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-168637296-2484197520-3016577837-500 - Administrator - Disabled)
Guest (S-1-5-21-168637296-2484197520-3016577837-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-168637296-2484197520-3016577837-1002 - Limited - Enabled)
JOHNNY (S-1-5-21-168637296-2484197520-3016577837-1000 - Administrator - Enabled) => C:\Users\JOHNNY
UpdatusUser (S-1-5-21-168637296-2484197520-3016577837-1003 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 18.0.0.199 - Adobe Systems Incorporated)
Adobe Flash Player 10 ActiveX (HKLM\...\{B001064C-D061-4BAE-9031-416A838D5536}) (Version: 10.2.153.1 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.9.160 - Adobe Systems, Inc.)
Aktualizace NVIDIA 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
BoganTranslator 1.17 (HKLM\...\BoganTranslator) (Version: 1.17 - Bogan)
CCleaner (HKLM\...\CCleaner) (Version: 5.08 - Piriform)
CPUID HWMonitor 1.28 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
CrystalDiskInfo 6.5.2 (HKLM\...\CrystalDiskInfo_is1) (Version: 6.5.2 - Crystal Dew World)
Drakensang Online (HKLM\...\Drakensang Online) (Version: - )
Google Chrome (HKLM\...\Google Chrome) (Version: 44.0.2403.157 - Google Inc.)
Google Update Helper (Version: 1.3.28.13 - Google Inc.) Hidden
Internet Download Manager (HKLM\...\Internet Download Manager) (Version: - )
Java 8 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
LG Bluetooth Drivers (HKLM\...\{AC7EE5F1-0DE4-4256-8E43-92B73C8E6019}) (Version: 1.1 - LG Electronics)
LG Internet Kit (HKLM\...\LG Internet Kit) (Version: 4.1.13 - LG Electronics)
LG PC Suite IV (HKLM\...\LG PC Suite IV) (Version: 4.3.80.20121017 - LG Electronics)
LG United Mobile Driver (HKLM\...\{2A3A4BD6-6CE0-4e2a-80D2-1D0FF6ACBFBA}) (Version: 3.10.1.0 - LG Electronics)
LG USB Modem Drivers (HKLM\...\{E1640DA5-89B4-4F52-B15D-5DA3D14F29D4}) (Version: 4.9.4 - LG Electronics)
Malwarebytes Anti-Malware verze 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile CSY Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile CSY Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 38.2.0 - Mozilla)
Mozilla Thunderbird 38.2.0 (x86 cs) (HKLM\...\Mozilla Thunderbird 38.2.0 (x86 cs)) (Version: 38.2.0 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
NVIDIA Ovladač 3D Vision 310.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 310.90 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 310.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 310.90 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 310.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 310.90 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
Opera 12.15 (HKLM\...\Opera 12.15.1748) (Version: 12.15.1748 - Opera Software ASA)
Ovládací panel NVIDIA 310.90 (Version: 310.90 - NVIDIA Corporation) Hidden
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 3.0.5 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.0.5 - VS Revo Group, Ltd.)
RogueKiller version 10 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 10 - Adlice Software)
Skype™ 7.3 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM\...\SpeedFan) (Version: - )
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
The KMPlayer (remove only) (HKLM\...\The KMPlayer) (Version: - )
WinRAR 5.21 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-168637296-2484197520-3016577837-1000_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-168637296-2484197520-3016577837-1003_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

==================== Restore Points =========================

31-08-2015 22:24:58 ComboFix created restore point
01-09-2015 03:35:15 Installed LG USB Modem Drivers.
01-09-2015 03:38:16 Install LG UNITED Drivers

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2015-08-31 23:33 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {21D7DC24-D8EA-4E5E-ADFF-67B62E03A38A} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {944B049C-4098-42D2-A81F-B086B215838C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-07-17] (Piriform Ltd)
Task: {992BFA6D-43B4-4E99-A17A-E93B635F996D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-18] (Adobe Systems Incorporated)
Task: {CEDCF638-7050-4789-824C-20DCF918E017} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {ED1B6A63-F18A-464B-B6A0-77327974F44C} - System32\Tasks\{F2810A0D-DF93-4865-8EA1-8A407DB8D0F0} => pcalua.exe -a "C:\Program Files\LG Electronics\LG USB Modem Drivers\UninstallShld.exe" -d C:\Windows\system32 -c C:\Program Files\\LG Electronics\LG USB Modem Drivers

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (Whitelisted) ==============

2015-08-18 12:52 - 2012-12-29 10:25 - 00079800 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2015-08-18 12:45 - 2015-08-18 12:45 - 00003072 _____ () C:\Program Files\CapsUnlock\CapsUnlock.dll
2015-08-16 14:11 - 2015-08-16 14:11 - 00012520 _____ () C:\Users\JOHNNY\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\CoreTempReader.dll
2015-08-16 14:11 - 2015-08-16 14:11 - 00015080 _____ () C:\Users\JOHNNY\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\GetCoreTempInfoNET.dll
2015-08-16 14:11 - 2015-08-16 14:11 - 00014056 _____ () C:\Users\JOHNNY\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\SystemInfo.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\100sexlinks.com -> 100sexlinks.com

There are 4788 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\JOHNNY\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 213.46.172.37 - 213.46.172.36
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{9A599CA9-B158-4BAF-9FBA-1BBFD9A99A1B}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{9E342888-FCA3-44C2-9CD7-C4B9EA93BD86}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2D8178F7-E680-4533-BB40-0F876138090B}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{9D5D80E3-71DD-4B9A-A664-8B21B351B65F}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{6485513E-362A-4ED2-BF55-72D9909172E9}] => (Allow) C:\Program Files\Opera\opera.exe
FirewallRules: [{C099F7EA-ABE0-4F9E-8F94-C19AAEAE25EE}] => (Allow) C:\Program Files\Opera\opera.exe
FirewallRules: [{D2035B6D-0718-43BB-A039-B78FD14DFEBF}] => (Allow) C:\Users\JOHNNY\AppData\Roaming\uTorrent\utorrent.exe
FirewallRules: [{4F981546-F358-4A69-8D27-A5B9EF87DC08}] => (Allow) C:\Users\JOHNNY\AppData\Roaming\uTorrent\utorrent.exe
FirewallRules: [{92765EEE-09C3-4354-AA42-CDF8029FBE54}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: LG Bluetooth Bus Enumerator
Description: LG Bluetooth Bus Enumerator
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: LG Electronics Inc.
Service: lgbusenum
Problem: : Windows successfully loaded the device driver for this hardware but cannot find the hardware device. (Code 41)
Resolution: A driver was loaded but Windows cannot find the device. This happens when Windows does not detect a non-Plug and Play device.
If the device was removed, uninstall the driver, install the device, and then click "Scan for hardware changes" to reinstall the driver. If the hardware was not removed, obtain a new or updated driver for the device.
If the device is a non-Plug and Play device, a newer version of the driver might be needed. To install non-Plug and Play devices, use the Add Hardware wizard.
Click "Performance and Maintenance" on "Control Panel", click "System", and on the "Hardware" tab, click "Add Hardware Wizard".


==================== Event log errors: =========================

Application errors:
==================
Error: (09/01/2015 02:50:36 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:51:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:48:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:44:42 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:40:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:31:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:22:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:22:06 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Vytvoření bodu obnovení se nezdařilo (Proces = C:\Windows\system32\wbem\wmiprvse.exe; Popis = ComboFix created restore point; Chyba = 0x8007043c).

Error: (08/31/2015 11:22:06 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007043c, Tuto službu nelze spustit v nouzovém režimu.
.


Operace:
Vytvoření instance serveru VSS

Error: (08/31/2015 11:22:06 PM) (Source: VSS) (EventID: 18) (User: )
Description: Chyba služby Stínová kopie svazku: Server COM s identifikátorem CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} a názvem IVssCoordinatorEx2 nelze spustit v nouzovém režimu.
Službu Stínová kopie svazku nelze spustit v nouzovém režimu. [0x8007043c, Tuto službu nelze spustit v nouzovém režimu.
]


Operace:
Vytvoření instance serveru VSS


System errors:
=============
Error: (09/01/2015 08:23:28 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby ShellHWDetection bylo dosaženo časového limitu (30000 ms).

Error: (09/01/2015 03:14:58 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (09/01/2015 12:07:11 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (09/01/2015 12:07:11 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby ShellHWDetection bylo dosaženo časového limitu (30000 ms).

Error: (08/31/2015 11:39:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (08/31/2015 11:39:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (08/31/2015 11:39:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (08/31/2015 11:39:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (08/31/2015 11:39:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (08/31/2015 11:39:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
%%1068


Microsoft Office:
=========================
Error: (09/01/2015 02:50:36 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:51:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:48:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:44:42 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:40:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:31:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:22:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:22:06 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\wbem\wmiprvse.exeComboFix created restore point0x8007043c

Error: (08/31/2015 11:22:06 PM) (Source: VSS) (EventID: 8193) (User: )
Description: CoCreateInstance0x8007043c, Tuto službu nelze spustit v nouzovém režimu.


Operace:
Vytvoření instance serveru VSS

Error: (08/31/2015 11:22:06 PM) (Source: VSS) (EventID: 18) (User: )
Description: {e579ab5f-1cc4-44b4-bed9-de0991ff0623}IVssCoordinatorEx20x8007043c, Tuto službu nelze spustit v nouzovém režimu.


Operace:
Vytvoření instance serveru VSS


==================== Memory info ===========================

Processor: Intel(R) Pentium(R) Dual CPU E2140 @ 1.60GHz
Percentage of memory in use: 22%
Total physical RAM: 3327.3 MB
Available physical RAM: 2563.04 MB
Total Virtual: 6650.86 MB
Available Virtual: 5351.98 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:216.41 GB) (Free:147.07 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (DATA F (E)) (Fixed) (Total:19.52 GB) (Free:6.24 GB) FAT32
Drive e: (DATA P) (Fixed) (Total:8.41 GB) (Free:1.31 GB) FAT32
Drive f: (DATA D) (Fixed) (Total:107.22 GB) (Free:25.15 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 28 GB) (Disk ID: 90D990D9)
Partition 1: (Active) - (Size=19.5 GB) - (Type=0C)
Partition 2: (Not Active) - (Size=8.4 GB) - (Type=0C)

========================================================
Disk: 1 (MBR Code: Windows 7 or (Size: 335.4 GB) (Disk ID: 71446ED5)
Partition 1: (Not Active) - (Size=11.7 GB) - (Type=27)
Partition 2: (Active) - (Size=216.4 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=107.2 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

[John82]

Additional scan result of Farbar Recovery Scan Tool (x86) Version:31-08-2015
Ran by JOHNNY (2015-09-01 12:30:43)
Running from C:\Users\JOHNNY\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-168637296-2484197520-3016577837-500 - Administrator - Disabled)
Guest (S-1-5-21-168637296-2484197520-3016577837-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-168637296-2484197520-3016577837-1002 - Limited - Enabled)
JOHNNY (S-1-5-21-168637296-2484197520-3016577837-1000 - Administrator - Enabled) => C:\Users\JOHNNY
UpdatusUser (S-1-5-21-168637296-2484197520-3016577837-1003 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 18.0.0.199 - Adobe Systems Incorporated)
Adobe Flash Player 10 ActiveX (HKLM\...\{B001064C-D061-4BAE-9031-416A838D5536}) (Version: 10.2.153.1 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.9.160 - Adobe Systems, Inc.)
Aktualizace NVIDIA 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
BoganTranslator 1.17 (HKLM\...\BoganTranslator) (Version: 1.17 - Bogan)
CCleaner (HKLM\...\CCleaner) (Version: 5.08 - Piriform)
CPUID HWMonitor 1.28 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
CrystalDiskInfo 6.5.2 (HKLM\...\CrystalDiskInfo_is1) (Version: 6.5.2 - Crystal Dew World)
Drakensang Online (HKLM\...\Drakensang Online) (Version: - )
Google Chrome (HKLM\...\Google Chrome) (Version: 44.0.2403.157 - Google Inc.)
Google Update Helper (Version: 1.3.28.13 - Google Inc.) Hidden
Internet Download Manager (HKLM\...\Internet Download Manager) (Version: - )
Java 8 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
LG Bluetooth Drivers (HKLM\...\{AC7EE5F1-0DE4-4256-8E43-92B73C8E6019}) (Version: 1.1 - LG Electronics)
LG Internet Kit (HKLM\...\LG Internet Kit) (Version: 4.1.13 - LG Electronics)
LG PC Suite IV (HKLM\...\LG PC Suite IV) (Version: 4.3.80.20121017 - LG Electronics)
LG United Mobile Driver (HKLM\...\{2A3A4BD6-6CE0-4e2a-80D2-1D0FF6ACBFBA}) (Version: 3.10.1.0 - LG Electronics)
LG USB Modem Drivers (HKLM\...\{E1640DA5-89B4-4F52-B15D-5DA3D14F29D4}) (Version: 4.9.4 - LG Electronics)
Malwarebytes Anti-Malware verze 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile CSY Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile CSY Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 38.2.0 - Mozilla)
Mozilla Thunderbird 38.2.0 (x86 cs) (HKLM\...\Mozilla Thunderbird 38.2.0 (x86 cs)) (Version: 38.2.0 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
NVIDIA Ovladač 3D Vision 310.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 310.90 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 310.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 310.90 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 310.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 310.90 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
Opera 12.15 (HKLM\...\Opera 12.15.1748) (Version: 12.15.1748 - Opera Software ASA)
Ovládací panel NVIDIA 310.90 (Version: 310.90 - NVIDIA Corporation) Hidden
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 3.0.5 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.0.5 - VS Revo Group, Ltd.)
RogueKiller version 10 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 10 - Adlice Software)
Skype™ 7.3 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM\...\SpeedFan) (Version: - )
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
The KMPlayer (remove only) (HKLM\...\The KMPlayer) (Version: - )
WinRAR 5.21 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-168637296-2484197520-3016577837-1000_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-168637296-2484197520-3016577837-1003_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

==================== Restore Points =========================

31-08-2015 22:24:58 ComboFix created restore point
01-09-2015 03:35:15 Installed LG USB Modem Drivers.
01-09-2015 03:38:16 Install LG UNITED Drivers

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2015-08-31 23:33 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {21D7DC24-D8EA-4E5E-ADFF-67B62E03A38A} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {944B049C-4098-42D2-A81F-B086B215838C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-07-17] (Piriform Ltd)
Task: {992BFA6D-43B4-4E99-A17A-E93B635F996D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-18] (Adobe Systems Incorporated)
Task: {CEDCF638-7050-4789-824C-20DCF918E017} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {ED1B6A63-F18A-464B-B6A0-77327974F44C} - System32\Tasks\{F2810A0D-DF93-4865-8EA1-8A407DB8D0F0} => pcalua.exe -a "C:\Program Files\LG Electronics\LG USB Modem Drivers\UninstallShld.exe" -d C:\Windows\system32 -c C:\Program Files\\LG Electronics\LG USB Modem Drivers

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (Whitelisted) ==============

2015-08-18 12:52 - 2012-12-29 10:25 - 00079800 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2015-08-18 12:45 - 2015-08-18 12:45 - 00003072 _____ () C:\Program Files\CapsUnlock\CapsUnlock.dll
2015-08-16 14:11 - 2015-08-16 14:11 - 00012520 _____ () C:\Users\JOHNNY\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\CoreTempReader.dll
2015-08-16 14:11 - 2015-08-16 14:11 - 00015080 _____ () C:\Users\JOHNNY\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\GetCoreTempInfoNET.dll
2015-08-16 14:11 - 2015-08-16 14:11 - 00014056 _____ () C:\Users\JOHNNY\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\SystemInfo.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\100sexlinks.com -> 100sexlinks.com

There are 4788 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\JOHNNY\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 213.46.172.37 - 213.46.172.36
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{9A599CA9-B158-4BAF-9FBA-1BBFD9A99A1B}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{9E342888-FCA3-44C2-9CD7-C4B9EA93BD86}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2D8178F7-E680-4533-BB40-0F876138090B}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{9D5D80E3-71DD-4B9A-A664-8B21B351B65F}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{6485513E-362A-4ED2-BF55-72D9909172E9}] => (Allow) C:\Program Files\Opera\opera.exe
FirewallRules: [{C099F7EA-ABE0-4F9E-8F94-C19AAEAE25EE}] => (Allow) C:\Program Files\Opera\opera.exe
FirewallRules: [{D2035B6D-0718-43BB-A039-B78FD14DFEBF}] => (Allow) C:\Users\JOHNNY\AppData\Roaming\uTorrent\utorrent.exe
FirewallRules: [{4F981546-F358-4A69-8D27-A5B9EF87DC08}] => (Allow) C:\Users\JOHNNY\AppData\Roaming\uTorrent\utorrent.exe
FirewallRules: [{92765EEE-09C3-4354-AA42-CDF8029FBE54}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: LG Bluetooth Bus Enumerator
Description: LG Bluetooth Bus Enumerator
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: LG Electronics Inc.
Service: lgbusenum
Problem: : Windows successfully loaded the device driver for this hardware but cannot find the hardware device. (Code 41)
Resolution: A driver was loaded but Windows cannot find the device. This happens when Windows does not detect a non-Plug and Play device.
If the device was removed, uninstall the driver, install the device, and then click "Scan for hardware changes" to reinstall the driver. If the hardware was not removed, obtain a new or updated driver for the device.
If the device is a non-Plug and Play device, a newer version of the driver might be needed. To install non-Plug and Play devices, use the Add Hardware wizard.
Click "Performance and Maintenance" on "Control Panel", click "System", and on the "Hardware" tab, click "Add Hardware Wizard".


==================== Event log errors: =========================

Application errors:
==================
Error: (09/01/2015 02:50:36 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:51:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:48:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:44:42 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:40:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:31:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:22:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:22:06 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Vytvoření bodu obnovení se nezdařilo (Proces = C:\Windows\system32\wbem\wmiprvse.exe; Popis = ComboFix created restore point; Chyba = 0x8007043c).

Error: (08/31/2015 11:22:06 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007043c, Tuto službu nelze spustit v nouzovém režimu.
.


Operace:
Vytvoření instance serveru VSS

Error: (08/31/2015 11:22:06 PM) (Source: VSS) (EventID: 18) (User: )
Description: Chyba služby Stínová kopie svazku: Server COM s identifikátorem CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} a názvem IVssCoordinatorEx2 nelze spustit v nouzovém režimu.
Službu Stínová kopie svazku nelze spustit v nouzovém režimu. [0x8007043c, Tuto službu nelze spustit v nouzovém režimu.
]


Operace:
Vytvoření instance serveru VSS


System errors:
=============
Error: (09/01/2015 08:23:28 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby ShellHWDetection bylo dosaženo časového limitu (30000 ms).

Error: (09/01/2015 03:14:58 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (09/01/2015 12:07:11 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (09/01/2015 12:07:11 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby ShellHWDetection bylo dosaženo časového limitu (30000 ms).

Error: (08/31/2015 11:39:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (08/31/2015 11:39:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (08/31/2015 11:39:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (08/31/2015 11:39:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (08/31/2015 11:39:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (08/31/2015 11:39:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
%%1068


Microsoft Office:
=========================
Error: (09/01/2015 02:50:36 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:51:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:48:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:44:42 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:40:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:31:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:22:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2015 11:22:06 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\wbem\wmiprvse.exeComboFix created restore point0x8007043c

Error: (08/31/2015 11:22:06 PM) (Source: VSS) (EventID: 8193) (User: )
Description: CoCreateInstance0x8007043c, Tuto službu nelze spustit v nouzovém režimu.


Operace:
Vytvoření instance serveru VSS

Error: (08/31/2015 11:22:06 PM) (Source: VSS) (EventID: 18) (User: )
Description: {e579ab5f-1cc4-44b4-bed9-de0991ff0623}IVssCoordinatorEx20x8007043c, Tuto službu nelze spustit v nouzovém režimu.


Operace:
Vytvoření instance serveru VSS


==================== Memory info ===========================

Processor: Intel(R) Pentium(R) Dual CPU E2140 @ 1.60GHz
Percentage of memory in use: 22%
Total physical RAM: 3327.3 MB
Available physical RAM: 2563.04 MB
Total Virtual: 6650.86 MB
Available Virtual: 5351.98 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:216.41 GB) (Free:147.07 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (DATA F (E)) (Fixed) (Total:19.52 GB) (Free:6.24 GB) FAT32
Drive e: (DATA P) (Fixed) (Total:8.41 GB) (Free:1.31 GB) FAT32
Drive f: (DATA D) (Fixed) (Total:107.22 GB) (Free:25.15 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 28 GB) (Disk ID: 90D990D9)
Partition 1: (Active) - (Size=19.5 GB) - (Type=0C)
Partition 2: (Not Active) - (Size=8.4 GB) - (Type=0C)

========================================================
Disk: 1 (MBR Code: Windows 7 or (Size: 335.4 GB) (Disk ID: 71446ED5)
Partition 1: (Not Active) - (Size=11.7 GB) - (Type=27)
Partition 2: (Active) - (Size=216.4 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=107.2 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

[jerabina]

Nevidím tam antivir, nainstaluj si třeba Avast/Aviru/Comodo a vypni trvale Windows Defender

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému.

Toto otestuj na Virustotal
C:\Windows\system32\audioLibVc.dll
C:\Windows\system32\slprp32.dll

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

Prosím, postupuj následujícím způsobem:
Otevřít poznámkový blok (Start => Všechny programy => Příslušenství => Poznámkový blok).
Prosím, zkopíruj do něj celý obsah níže.

Kód: Vybrat vše

Start
CloseProcesses:

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-168637296-2484197520-3016577837-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.13\npGoogleUpdate3.dll [No File]
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.13\npGoogleUpdate3.dll [No File]

OPR Extension: (No Name) - C:\Users\JOHNNY\AppData\Roaming\Opera Software\Opera Stable\Extensions\akaelkiagnbfcccfnmbimdbplecgbikh [2015-08-30]
OPR Extension: (No Name) - C:\Users\JOHNNY\AppData\Roaming\Opera Software\Opera Stable\Extensions\fijhlnmmmgflacagjecncpmpnhjieggk [2015-08-30]
OPR Extension: (No Name) - C:\Users\JOHNNY\AppData\Roaming\Opera Software\Opera Stable\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh [2015-08-30]
OPR Extension: (No Name) - C:\Users\JOHNNY\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-08-30]

S3 catchme; \??\C:\Users\JOHNNY\AppData\Local\Temp\catchme.sys [X]

c:\program files\IObit
c:\programdata\IObit
c:\programdata\TuneUp Software
c:\programdata\RogueKiller
C:\ProgramData\DP45977C.lfl

C:\Windows\system32\config\COMPONENTS.iodefrag.bak
C:\Windows\system32\config\SOFTWARE.iodefrag.bak
C:\Windows\system32\config\DEFAULT.iodefrag.bak
C:\Windows\system32\config\SAM.iodefrag.bak
C:\Windows\system32\config\SECURITY.iodefrag.bak
C:\Windows\system32\RegistryDefragBootTime.exe
C:\Windows\system32\config\SOFTWARE.iobit
C:\Windows\system32\config\components.iobit
C:\Windows\system32\config\DEFAULT.iobit
C:\Windows\system32\config\SAM.iobit
C:\Windows\system32\config\SECURITY.iobit
C:\Users\JOHNNY\AppData\Roaming\IObit
C:\Users\JOHNNY\AppData\Roaming\TuneUp Software

C:\Users\JOHNNY\AppData\Local\Temp\catchme.sys

Task: {21D7DC24-D8EA-4E5E-ADFF-67B62E03A38A} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {992BFA6D-43B4-4E99-A17A-E93B635F996D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-18] (Adobe Systems Incorporated)
Task: {CEDCF638-7050-4789-824C-20DCF918E017} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {ED1B6A63-F18A-464B-B6A0-77327974F44C} - System32\Tasks\{F2810A0D-DF93-4865-8EA1-8A407DB8D0F0} => pcalua.exe -a
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\100sexlinks.com -> 100sexlinks.com

EmptyTemp:
End

(Můžeš použít funkci „vybrat vše“, klepni pravým tlačítkem myši na levé horní políčko v otevřeném poznámkovém bloku a zvol „ Vložit“).

Ulož jej na na plochu jako fixlist.txt

Spusťt FRST a stiskni tlačítko „Fix“ (Opravit) jen jednou a čekej.
Nástroj vypracuje log na ploše (Fixlog.txt), prosím zkopíruj sem celý jeho obsah.

[John82]

https://www.virustotal.com/cs/file/5951 ... 441128987/

[John82]

https://www.virustotal.com/cs/file/d799 ... 441129267/

[John82]

spustil jsem FRST a zamrzl my comp musel jsem ho vypnout na trvdo, co mám přesně udělat jen spustit FRST jak si psal a s tím logem nedělat nic jenom ho uložit na plochu? dík

[John82]

Fix result of Farbar Recovery Scan Tool (x86) Version:31-08-2015
Ran by JOHNNY (2015-09-01 20:54:18) Run:2
Running from C:\Users\JOHNNY\Desktop
Loaded Profiles: JOHNNY & UpdatusUser (Available Profiles: JOHNNY & UpdatusUser)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CloseProcesses:

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-168637296-2484197520-3016577837-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.13\npGoogleUpdate3.dll [No File]
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.13\npGoogleUpdate3.dll [No File]

OPR Extension: (No Name) - C:\Users\JOHNNY\AppData\Roaming\Opera Software\Opera Stable\Extensions\akaelkiagnbfcccfnmbimdbplecgbikh [2015-08-30]
OPR Extension: (No Name) - C:\Users\JOHNNY\AppData\Roaming\Opera Software\Opera Stable\Extensions\fijhlnmmmgflacagjecncpmpnhjieggk [2015-08-30]
OPR Extension: (No Name) - C:\Users\JOHNNY\AppData\Roaming\Opera Software\Opera Stable\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh [2015-08-30]
OPR Extension: (No Name) - C:\Users\JOHNNY\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-08-30]

S3 catchme; \??\C:\Users\JOHNNY\AppData\Local\Temp\catchme.sys [X]

c:\program files\IObit
c:\programdata\IObit
c:\programdata\TuneUp Software
c:\programdata\RogueKiller
C:\ProgramData\DP45977C.lfl

C:\Windows\system32\config\COMPONENTS.iodefrag.bak
C:\Windows\system32\config\SOFTWARE.iodefrag.bak
C:\Windows\system32\config\DEFAULT.iodefrag.bak
C:\Windows\system32\config\SAM.iodefrag.bak
C:\Windows\system32\config\SECURITY.iodefrag.bak
C:\Windows\system32\RegistryDefragBootTime.exe
C:\Windows\system32\config\SOFTWARE.iobit
C:\Windows\system32\config\components.iobit
C:\Windows\system32\config\DEFAULT.iobit
C:\Windows\system32\config\SAM.iobit
C:\Windows\system32\config\SECURITY.iobit
C:\Users\JOHNNY\AppData\Roaming\IObit
C:\Users\JOHNNY\AppData\Roaming\TuneUp Software

C:\Users\JOHNNY\AppData\Local\Temp\catchme.sys

Task: {21D7DC24-D8EA-4E5E-ADFF-67B62E03A38A} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {992BFA6D-43B4-4E99-A17A-E93B635F996D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-18] (Adobe Systems Incorporated)
Task: {CEDCF638-7050-4789-824C-20DCF918E017} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {ED1B6A63-F18A-464B-B6A0-77327974F44C} - System32\Tasks\{F2810A0D-DF93-4865-8EA1-8A407DB8D0F0} => pcalua.exe -a
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-168637296-2484197520-3016577837-1000\...\100sexlinks.com -> 100sexlinks.com

EmptyTemp:
End
*****************

Processes closed successfully.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully.
"HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3" => key removed successfully.
"HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9" => key removed successfully.
C:\Users\JOHNNY\AppData\Roaming\Opera Software\Opera Stable\Extensions\akaelkiagnbfcccfnmbimdbplecgbikh => moved successfully
C:\Users\JOHNNY\AppData\Roaming\Opera Software\Opera Stable\Extensions\fijhlnmmmgflacagjecncpmpnhjieggk => moved successfully
C:\Users\JOHNNY\AppData\Roaming\Opera Software\Opera Stable\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh => moved successfully
C:\Users\JOHNNY\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp => moved successfully
catchme => service removed successfully.
"c:\program files\IObit" => File/Folder not found.
"c:\programdata\IObit" => File/Folder not found.
"c:\programdata\TuneUp Software" => File/Folder not found.
"c:\programdata\RogueKiller" => File/Folder not found.
C:\ProgramData\DP45977C.lfl => moved successfully
C:\Windows\system32\config\COMPONENTS.iodefrag.bak => moved successfully
C:\Windows\system32\config\SOFTWARE.iodefrag.bak => moved successfully
C:\Windows\system32\config\DEFAULT.iodefrag.bak => moved successfully
C:\Windows\system32\config\SAM.iodefrag.bak => moved successfully
C:\Windows\system32\config\SECURITY.iodefrag.bak => moved successfully
C:\Windows\system32\RegistryDefragBootTime.exe => moved successfully
C:\Windows\system32\config\SOFTWARE.iobit => moved successfully
C:\Windows\system32\config\components.iobit => moved successfully
C:\Windows\system32\config\DEFAULT.iobit => moved successfully
C:\Windows\system32\config\SAM.iobit => moved successfully
C:\Windows\system32\config\SECURITY.iobit => moved successfully
C:\Users\JOHNNY\AppData\Roaming\IObit => moved successfully
C:\Users\JOHNNY\AppData\Roaming\TuneUp Software => moved successfully
"C:\Users\JOHNNY\AppData\Local\Temp\catchme.sys" => File/Folder not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{21D7DC24-D8EA-4E5E-ADFF-67B62E03A38A}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{21D7DC24-D8EA-4E5E-ADFF-67B62E03A38A}" => key removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Application Experience\ProgramDataUpdater" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{992BFA6D-43B4-4E99-A17A-E93B635F996D}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{992BFA6D-43B4-4E99-A17A-E93B635F996D}" => key removed successfully.
C:\Windows\System32\Tasks\Adobe Flash Player Updater => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CEDCF638-7050-4789-824C-20DCF918E017}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CEDCF638-7050-4789-824C-20DCF918E017}" => key removed successfully.
C:\Windows\System32\Tasks\Adobe Acrobat Update Task => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Acrobat Update Task" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{ED1B6A63-F18A-464B-B6A0-77327974F44C}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ED1B6A63-F18A-464B-B6A0-77327974F44C}" => key removed successfully.
C:\Windows\System32\Tasks\{F2810A0D-DF93-4865-8EA1-8A407DB8D0F0} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{F2810A0D-DF93-4865-8EA1-8A407DB8D0F0}" => key removed successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => moved successfully
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\008i.com" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\008k.com" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\00hq.com" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\0190-dialers.com" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\01i.info" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\02pmnzy5eo29bfk4.com" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\05p.com" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\07ic5do2myz3vzpk.com" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\08nigbmwk43i01y6.com" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\093qpeuqpmz6ebfa.com" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\0calories.net" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\0cj.net" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\0scan.com" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1-britney-spears-nude.com" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1-domains-registrations.com" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1-se.com" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1001movie.com" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1001night.biz" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\100gal.net" => key removed successfully.
"HKU\S-1-5-21-168637296-2484197520-3016577837-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\100sexlinks.com" => key removed successfully.
EmptyTemp: => 237.2 MB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 20:54:44 ====

[Orcus]

FRST OK, jak to vypadá nyní?

[John82]

pc jede normálně žadný problém akorát se nemužu zbavit ComboFixu odinstaloval jsem ho a pořád tam je nevím jestly to vadí nebo ho tam mužu ponechat.