Kontrola logu - padá explorer,nejde PDF, ... Vyřešeno

[jaro3]

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

[Reklama]

[Martinor]

ComboFix 14-12-10.03 - Martas 14.12.2014 10:34:01.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.3764.2199 [GMT 1:00]
Spuštěný z: c:\users\Martas\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
SP: Microsoft Security Essentials *Disabled/Updated* {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Martas\AppData\Roaming\Microsoft\SystemCertificates\My\Updater\jusched.exe
c:\users\Martas\AppData\Roaming\Microsoft\SystemCertificates\My\Updater\libcurl-4.dll
c:\users\Martas\AppData\Roaming\Microsoft\SystemCertificates\My\Updater\libcurl.dll
c:\users\Martas\AppData\Roaming\Microsoft\SystemCertificates\My\Updater\libeay32.dll
c:\users\Martas\AppData\Roaming\Microsoft\SystemCertificates\My\Updater\libidn-11.dll
c:\users\Martas\AppData\Roaming\Microsoft\SystemCertificates\My\Updater\librtmp.dll
c:\users\Martas\AppData\Roaming\Microsoft\SystemCertificates\My\Updater\libssh2.dll
c:\users\Martas\AppData\Roaming\Microsoft\SystemCertificates\My\Updater\libusb-1.0.dll
c:\users\Martas\AppData\Roaming\Microsoft\SystemCertificates\My\Updater\libwinpthread-1.dll
c:\users\Martas\AppData\Roaming\Microsoft\SystemCertificates\My\Updater\pthreadGC2.dll
c:\users\Martas\AppData\Roaming\Microsoft\SystemCertificates\My\Updater\SearchIndexer.exe
c:\users\Martas\AppData\Roaming\Microsoft\SystemCertificates\My\Updater\ssl.exe
c:\users\Martas\AppData\Roaming\Microsoft\SystemCertificates\My\Updater\ssleay32.dll
c:\users\Martas\AppData\Roaming\Microsoft\SystemCertificates\My\Updater\svchost.exe
c:\users\Martas\AppData\Roaming\Microsoft\SystemCertificates\My\Updater\updater.exe
c:\users\Martas\AppData\Roaming\Microsoft\SystemCertificates\My\Updater\zlib1.dll
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NETHFDRV
-------\Service_Service KMSELDI
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-11-14 do 2014-12-14 )))))))))))))))))))))))))))))))
.
.
2014-12-14 09:41 . 2014-12-14 09:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-12-13 20:34 . 2014-12-13 20:15 24064 ----a-w- c:\windows\zoek-delete.exe
2014-12-13 20:34 . 2014-12-14 09:43 -------- d-----w- c:\users\Martas\AppData\Local\Temp
2014-12-13 20:15 . 2014-12-13 20:31 -------- d-----w- C:\zoek_backup
2014-12-12 18:39 . 2014-11-02 04:20 11632448 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5B7F81EE-FCB6-4A4F-87A2-2391AFF64E29}\mpengine.dll
2014-12-11 17:28 . 2014-07-07 02:02 2048 ----a-w- c:\windows\system32\mferror.dll
2014-12-11 17:28 . 2014-07-07 01:37 2048 ----a-w- c:\windows\SysWow64\mferror.dll
2014-12-11 17:27 . 2014-07-07 02:06 55808 ----a-w- c:\windows\system32\rrinstaller.exe
2014-12-11 17:27 . 2014-07-07 02:06 24576 ----a-w- c:\windows\system32\mfpmp.exe
2014-12-11 17:27 . 2014-07-07 01:39 23040 ----a-w- c:\windows\SysWow64\mfpmp.exe
2014-12-11 17:27 . 2014-10-18 01:33 3209728 ----a-w- c:\windows\SysWow64\mf.dll
2014-12-11 17:27 . 2014-07-07 02:06 206848 ----a-w- c:\windows\system32\mfps.dll
2014-12-11 17:27 . 2014-07-07 01:40 103424 ----a-w- c:\windows\SysWow64\mfps.dll
2014-12-11 17:27 . 2014-07-07 01:39 50176 ----a-w- c:\windows\SysWow64\rrinstaller.exe
2014-12-11 17:27 . 2014-10-18 02:05 4121600 ----a-w- c:\windows\system32\mf.dll
2014-12-10 21:18 . 2014-12-10 21:18 -------- d-----w- c:\users\Martas\AppData\Roaming\AdbDriverInstaller
2014-12-10 19:38 . 2014-09-10 14:30 1188440 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F5A3C98D-9E1C-4DB1-B7FF-C5FBDED42CBB}\gapaengine.dll
2014-12-10 19:37 . 2014-11-02 04:20 11632448 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-12-10 11:40 . 2014-12-10 11:41 -------- d-----w- c:\users\Martas\AppData\Local\Facebook
2014-12-10 09:27 . 2014-11-11 01:46 119296 ----a-w- c:\windows\system32\drivers\tdx.sys
2014-12-10 09:27 . 2014-11-22 02:06 47616 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2014-12-10 09:24 . 2014-10-30 02:03 165888 ----a-w- c:\windows\system32\charmap.exe
2014-12-10 09:24 . 2014-10-30 01:45 155136 ----a-w- c:\windows\SysWow64\charmap.exe
2014-12-10 09:24 . 2014-10-03 02:12 2020352 ----a-w- c:\windows\system32\WsmSvc.dll
2014-12-10 09:24 . 2014-10-03 01:45 1177088 ----a-w- c:\windows\SysWow64\WsmSvc.dll
2014-12-10 09:24 . 2014-10-03 02:12 310272 ----a-w- c:\windows\system32\WsmWmiPl.dll
2014-12-10 09:24 . 2014-10-03 02:12 346624 ----a-w- c:\windows\system32\WSManMigrationPlugin.dll
2014-12-10 09:24 . 2014-10-03 02:12 181248 ----a-w- c:\windows\system32\WsmAuto.dll
2014-12-10 09:24 . 2014-10-03 02:11 266240 ----a-w- c:\windows\system32\WSManHTTPConfig.exe
2014-12-10 09:24 . 2014-10-03 01:45 248832 ----a-w- c:\windows\SysWow64\WSManMigrationPlugin.dll
2014-12-10 09:24 . 2014-10-03 01:45 214016 ----a-w- c:\windows\SysWow64\WsmWmiPl.dll
2014-12-10 09:24 . 2014-10-03 01:44 198656 ----a-w- c:\windows\SysWow64\WSManHTTPConfig.exe
2014-12-10 09:24 . 2014-10-03 01:45 145920 ----a-w- c:\windows\SysWow64\WsmAuto.dll
2014-12-10 09:23 . 2014-11-08 03:16 2048 ----a-w- c:\windows\system32\tzres.dll
2014-12-10 09:23 . 2014-11-08 02:45 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2014-12-08 21:42 . 2014-06-16 06:01 206080 ----a-w- c:\windows\system32\drivers\ssudmdm.sys
2014-12-08 21:42 . 2014-06-16 06:01 110336 ----a-w- c:\windows\system32\drivers\ssudbus.sys
2014-12-08 21:37 . 2014-12-08 21:37 -------- d-----w- c:\program files (x86)\MarkAny
2014-12-08 21:36 . 2014-12-08 21:36 -------- d-----w- c:\users\Martas\AppData\Local\Samsung
2014-12-08 21:36 . 2014-12-08 21:36 -------- d-----w- c:\users\Martas\AppData\Roaming\Samsung
2014-12-08 21:31 . 2014-04-30 18:43 144664 ----a-w- c:\windows\SysWow64\secman.dll
2014-12-08 21:31 . 2014-04-30 18:43 4659712 ----a-w- c:\windows\SysWow64\Redemption.dll
2014-12-08 21:30 . 2014-12-08 21:34 -------- d-----w- c:\program files (x86)\Samsung
2014-12-08 21:20 . 2014-12-08 21:30 -------- d-----w- c:\programdata\Samsung
2014-12-08 21:20 . 2014-12-08 21:20 -------- d-----w- C:\SS_Drv
2014-12-07 13:28 . 2014-12-07 13:28 -------- d-----w- c:\program files (x86)\DotNes
2014-12-07 12:25 . 2014-12-13 20:06 37624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2014-12-07 12:25 . 2014-12-07 12:25 -------- d-----w- c:\programdata\RogueKiller
2014-12-07 12:16 . 2014-12-07 12:16 -------- d-----w- c:\windows\ERUNT
2014-12-03 21:20 . 2014-12-03 21:26 -------- d-----w- c:\program files\KMSpico
2014-11-30 15:49 . 2014-11-30 15:49 -------- d-----w- c:\programdata\Western Digital
2014-11-30 12:37 . 2014-11-30 12:37 -------- d-----w- c:\users\Martas\AppData\Roaming\TeamViewer
2014-11-30 12:35 . 2014-11-30 12:35 -------- d-----w- c:\program files (x86)\TeamViewer
2014-11-26 09:04 . 2014-11-26 09:04 3063992 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\1029\MSOINTL.DLL
2014-11-25 21:07 . 2014-12-13 20:43 -------- d-----w- C:\CrashDumpsApp
2014-11-25 14:23 . 2014-11-25 14:23 81234104 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\MSORES.DLL
2014-11-25 14:23 . 2014-11-25 14:23 26373816 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\MSO.DLL
2014-11-25 14:20 . 2014-11-25 14:20 81234104 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\MSORES.DLL
2014-11-25 14:20 . 2014-11-25 14:20 654512 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\MSOSQM.EXE
2014-11-25 14:20 . 2014-11-25 14:20 36827832 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\MSO.DLL
2014-11-24 20:55 . 2014-11-24 20:55 -------- d-----w- c:\users\Martas\AppData\Roaming\GTCO CalComp
2014-11-24 20:54 . 2014-11-24 20:54 -------- d-----w- c:\users\Martas\AppData\Roaming\eInstruction
2014-11-24 20:53 . 2007-03-08 03:53 102400 ----a-w- c:\windows\SysWow64\tsccvid.dll
2014-11-24 20:53 . 2014-11-24 20:53 -------- d-----w- c:\windows\SysWow64\Macromed
2014-11-24 20:51 . 2014-11-24 20:51 -------- d-----w- c:\users\Martas\AppData\Roaming\Hermitech Laboratory
2014-11-24 20:50 . 2014-11-24 20:50 -------- d-----w- c:\program files (x86)\Hermitech Laboratory
2014-11-24 20:47 . 2014-11-24 20:52 -------- d-----w- c:\program files (x86)\eInstruction
2014-11-24 20:47 . 2014-11-24 20:47 -------- d--h--w- c:\users\Martas\InstallAnywhere
2014-11-23 08:02 . 2014-12-13 18:11 -------- d-----w- c:\users\Martas\HellSpy
2014-11-23 07:57 . 2014-11-23 07:59 -------- d-----w- c:\users\Martas\AppData\Roaming\HellSpy.cz Download Manager
2014-11-22 18:59 . 2014-12-13 19:51 -------- d-----w- c:\users\Martas\AppData\Roaming\vlc
2014-11-22 18:58 . 2014-11-22 18:58 -------- d-----w- c:\program files (x86)\VideoLAN
2014-11-22 09:22 . 2014-12-07 17:04 -------- d-----w- c:\program files\FlatOut2
2014-11-22 09:21 . 2014-11-22 09:21 -------- d-----w- c:\users\Martas\AppData\Roaming\dvdcss
2014-11-19 03:22 . 2014-11-11 03:08 241152 ----a-w- c:\windows\system32\pku2u.dll
2014-11-19 03:22 . 2014-11-11 03:08 728064 ----a-w- c:\windows\system32\kerberos.dll
2014-11-19 03:22 . 2014-11-11 02:44 186880 ----a-w- c:\windows\SysWow64\pku2u.dll
2014-11-19 03:22 . 2014-11-11 02:44 550912 ----a-w- c:\windows\SysWow64\kerberos.dll
2014-11-18 19:51 . 2014-11-18 19:51 5681880 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\CMigrate.exe
2014-11-18 19:51 . 2014-11-18 19:51 5387456 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\Csi.dll
2014-11-18 19:47 . 2014-11-18 19:47 2226848 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\RICHED20.DLL
2014-11-18 19:47 . 2014-11-18 19:47 7765720 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\CMigrate.exe
2014-11-18 19:47 . 2014-11-18 19:47 7536832 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\Csi.dll
2014-11-18 19:47 . 2014-11-18 19:47 1691816 ----a-w- c:\windows\system32\FM20.DLL
2014-11-16 15:47 . 2014-11-16 15:48 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-11-16 15:47 . 2014-11-16 15:47 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-11-16 15:47 . 2014-11-16 15:47 -------- d-----w- c:\programdata\Malwarebytes
2014-11-16 15:47 . 2014-10-01 10:11 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-11-16 15:47 . 2014-10-01 10:11 93400 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-11-16 15:47 . 2014-10-01 10:11 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-11-16 15:35 . 2014-12-07 12:07 -------- d-----w- C:\AdwCleaner
2014-11-15 21:27 . 2014-11-15 21:27 -------- d-sh--w- c:\users\Martas\AppData\Local\EmieUserList
2014-11-15 21:27 . 2014-11-15 21:27 -------- d-sh--w- c:\users\Martas\AppData\Local\EmieSiteList
2014-11-15 21:27 . 2014-11-15 21:27 -------- d-sh--w- c:\users\Martas\AppData\Local\EmieBrowserModeList
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-12-11 17:37 . 2014-11-07 11:29 112710672 ----a-w- c:\windows\system32\MRT.exe
2014-11-10 03:53 . 2014-11-10 03:53 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2014-11-10 03:53 . 2014-11-10 03:53 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll
2014-11-10 03:53 . 2014-11-10 03:53 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2014-11-09 10:07 . 2013-08-20 15:10 107368 ----a-w- c:\windows\system32\xinput1_3.dll
2014-11-08 04:22 . 2014-11-08 04:22 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2014-11-08 04:22 . 2014-11-08 04:22 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2014-11-08 04:22 . 2014-11-08 04:22 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2014-11-08 04:22 . 2014-11-08 04:22 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2014-11-08 04:22 . 2014-11-08 04:22 337408 ----a-w- c:\windows\SysWow64\html.iec
2014-11-08 04:22 . 2014-11-08 04:22 235008 ----a-w- c:\windows\system32\elshyph.dll
2014-11-08 04:22 . 2014-11-08 04:22 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2014-11-08 04:22 . 2014-11-08 04:22 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2014-11-08 04:22 . 2014-11-08 04:22 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2014-11-08 04:22 . 2014-11-08 04:22 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2014-11-08 04:22 . 2014-11-08 04:22 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2014-11-08 04:22 . 2014-11-08 04:22 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2014-11-08 04:22 . 2014-11-08 04:22 942592 ----a-w- c:\windows\system32\jsIntl.dll
2014-11-08 04:22 . 2014-11-08 04:22 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2014-11-08 04:22 . 2014-11-08 04:22 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2014-11-08 04:22 . 2014-11-08 04:22 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2014-11-08 04:22 . 2014-11-08 04:22 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2014-11-08 04:22 . 2014-11-08 04:22 247808 ----a-w- c:\windows\system32\msls31.dll
2014-11-08 04:22 . 2014-11-08 04:22 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2014-11-08 04:22 . 2014-11-08 04:22 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2014-11-08 04:22 . 2014-11-08 04:22 77312 ----a-w- c:\windows\system32\tdc.ocx
2014-11-08 04:22 . 2014-11-08 04:22 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2014-11-08 04:22 . 2014-11-08 04:22 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2014-11-08 04:22 . 2014-11-08 04:22 48640 ----a-w- c:\windows\system32\mshtmler.dll
2014-11-08 04:22 . 2014-11-08 04:22 413696 ----a-w- c:\windows\system32\html.iec
2014-11-08 04:22 . 2014-11-08 04:22 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2014-11-08 04:22 . 2014-11-08 04:22 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2014-11-08 04:22 . 2014-11-08 04:22 105984 ----a-w- c:\windows\system32\iesysprep.dll
2014-11-08 04:22 . 2014-11-08 04:22 81408 ----a-w- c:\windows\system32\icardie.dll
2014-11-08 04:22 . 2014-11-08 04:22 30208 ----a-w- c:\windows\system32\licmgr10.dll
2014-11-08 04:22 . 2014-11-08 04:22 243200 ----a-w- c:\windows\system32\webcheck.dll
2014-11-08 04:22 . 2014-11-08 04:22 235520 ----a-w- c:\windows\system32\url.dll
2014-11-08 04:22 . 2014-11-08 04:22 167424 ----a-w- c:\windows\system32\iexpress.exe
2014-11-08 04:22 . 2014-11-08 04:22 143872 ----a-w- c:\windows\system32\wextract.exe
2014-11-08 04:22 . 2014-11-08 04:22 101376 ----a-w- c:\windows\system32\inseng.dll
2014-11-08 04:22 . 2014-11-08 04:22 147968 ----a-w- c:\windows\system32\occache.dll
2014-11-08 04:22 . 2014-11-08 04:22 774144 ----a-w- c:\windows\system32\jscript.dll
2014-11-08 04:22 . 2014-11-08 04:22 62464 ----a-w- c:\windows\system32\pngfilt.dll
2014-11-08 04:22 . 2014-11-08 04:22 48128 ----a-w- c:\windows\system32\imgutil.dll
2014-11-08 04:22 . 2014-11-08 04:22 13824 ----a-w- c:\windows\system32\mshta.exe
2014-11-08 04:22 . 2014-11-08 04:22 135680 ----a-w- c:\windows\system32\iepeers.dll
2014-11-06 08:51 . 2014-11-06 08:51 386680 ----a-w- c:\windows\system32\drivers\sptd.sys
2014-10-30 11:25 . 2010-11-21 03:27 275080 ------w- c:\windows\system32\MpSigStub.exe
2014-10-30 02:03 . 2014-12-10 09:24 165888 ----a-w- c:\windows\system32\charmap.exe
2014-10-20 01:37 . 2014-11-07 10:18 11627712 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B06946FF-CB27-415A-AFBA-151C7B58AC57}\mpengine.dll
2014-10-18 02:05 . 2014-11-12 04:04 861696 ----a-w- c:\windows\system32\oleaut32.dll
2014-10-18 01:33 . 2014-11-12 04:04 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2014-10-14 02:16 . 2014-11-12 16:25 155064 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2014-10-14 02:13 . 2014-11-12 16:25 683520 ----a-w- c:\windows\system32\termsrv.dll
2014-10-14 02:12 . 2014-11-12 16:25 1460736 ----a-w- c:\windows\system32\lsasrv.dll
2014-10-14 02:09 . 2014-11-12 16:25 146432 ----a-w- c:\windows\system32\msaudite.dll
2014-10-14 02:07 . 2014-11-12 16:25 681984 ----a-w- c:\windows\system32\adtschema.dll
2014-10-14 01:50 . 2014-11-12 16:25 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2014-10-14 01:49 . 2014-11-12 16:25 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2014-10-14 01:47 . 2014-11-12 16:25 146432 ----a-w- c:\windows\SysWow64\msaudite.dll
2014-10-14 01:46 . 2014-11-12 16:25 681984 ----a-w- c:\windows\SysWow64\adtschema.dll
2014-10-09 09:07 . 2014-10-09 09:07 89088 ----a-w- c:\windows\SysWow64\rzdevinfo.dll
2014-10-03 02:12 . 2014-11-12 16:23 500224 ----a-w- c:\windows\system32\AUDIOKSE.dll
2014-10-03 02:11 . 2014-11-12 16:23 284672 ----a-w- c:\windows\system32\EncDump.dll
2014-10-03 02:11 . 2014-11-12 16:23 680960 ----a-w- c:\windows\system32\audiosrv.dll
2014-10-03 02:11 . 2014-11-12 16:23 440832 ----a-w- c:\windows\system32\AudioEng.dll
2014-10-03 02:11 . 2014-11-12 16:23 296448 ----a-w- c:\windows\system32\AudioSes.dll
2014-10-03 01:44 . 2014-11-12 16:23 442880 ----a-w- c:\windows\SysWow64\AUDIOKSE.dll
2014-10-03 01:44 . 2014-11-12 16:23 374784 ----a-w- c:\windows\SysWow64\AudioEng.dll
2014-10-03 01:44 . 2014-11-12 16:23 195584 ----a-w- c:\windows\SysWow64\AudioSes.dll
2014-09-30 05:32 . 2014-09-30 05:32 901632 ----a-w- c:\windows\SysWow64\rzdevicedll.dll
2014-09-30 05:32 . 2014-09-30 05:32 419840 ----a-w- c:\windows\SysWow64\rzaudiodll.dll
2014-09-29 00:58 . 2014-11-07 10:40 3198976 ----a-w- c:\windows\system32\win32k.sys
2014-09-25 02:08 . 2014-11-07 10:38 371712 ----a-w- c:\windows\system32\qdvd.dll
2014-09-25 01:40 . 2014-11-07 10:38 519680 ----a-w- c:\windows\SysWow64\qdvd.dll
2014-09-19 09:42 . 2014-11-12 16:26 210944 ----a-w- c:\windows\system32\wdigest.dll
2014-09-19 09:42 . 2014-11-12 16:26 86528 ----a-w- c:\windows\system32\TSpkg.dll
2014-09-19 09:42 . 2014-11-12 16:25 342016 ----a-w- c:\windows\system32\schannel.dll
2014-09-19 09:42 . 2014-11-12 16:26 314880 ----a-w- c:\windows\system32\msv1_0.dll
2014-09-19 09:42 . 2014-11-12 16:25 309760 ----a-w- c:\windows\system32\ncrypt.dll
2014-09-19 09:42 . 2014-11-12 16:26 22016 ----a-w- c:\windows\system32\credssp.dll
2014-09-19 09:23 . 2014-11-12 16:26 172032 ----a-w- c:\windows\SysWow64\wdigest.dll
2014-09-19 09:23 . 2014-11-12 16:26 65536 ----a-w- c:\windows\SysWow64\TSpkg.dll
2014-09-19 09:23 . 2014-11-12 16:26 248832 ----a-w- c:\windows\SysWow64\schannel.dll
2014-09-19 09:23 . 2014-11-12 16:26 221184 ----a-w- c:\windows\SysWow64\ncrypt.dll
2014-09-19 09:23 . 2014-11-12 16:26 259584 ----a-w- c:\windows\SysWow64\msv1_0.dll
2014-09-19 09:23 . 2014-11-12 16:26 17408 ----a-w- c:\windows\SysWow64\credssp.dll
2014-09-18 02:00 . 2014-11-07 10:37 3241472 ----a-w- c:\windows\system32\msi.dll
2014-09-18 01:32 . 2014-11-07 10:37 2363904 ----a-w- c:\windows\SysWow64\msi.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-11-12 16:19 1729744 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-11-12 16:19 1729744 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-11-12 16:19 1729744 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Raptr"="c:\progra~2\Raptr\raptrstub.exe" [2014-10-17 55568]
"HydraVisionDesktopManager"="c:\program files (x86)\ATI Technologies\HydraVision\HydraDM.exe" [2014-04-17 1967616]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
"DevidAgent"="d:\downloads\DevIDagent.exe" [2014-10-04 1078784]
"GoogleChromeAutoLaunch_6CCB82E9F9D31A691E8DB8EFEF07F82E"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2014-12-06 856904]
"KiesPreload"="c:\program files (x86)\Samsung\Kies\Kies.exe" [2014-07-25 1562264]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"MobileBroadband"="c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe" [2013-10-24 78336]
"VmbNotifier"="c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe" [2013-10-24 1893888]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2014-04-17 767200]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-02-25 1289296]
"Razer Synapse"="c:\program files (x86)\Razer\Synapse\RzSynapse.exe" [2014-10-24 585536]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2014-07-25 311616]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
eInstruction Device Manager.lnk - c:\program files (x86)\eInstruction\Device Manager\Launch.exe [2014-11-24 4912184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"HideSCAPower"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"midi3"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
R3 AthDfu;Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys;c:\windows\SYSNATIVE\Drivers\AthDfu.sys [x]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys;c:\windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 rzudd;Razer Mouse Driver;c:\windows\system32\DRIVERS\rzudd.sys;c:\windows\SYSNATIVE\DRIVERS\rzudd.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 usbrndis6;Adaptér USB RNDIS6;c:\windows\system32\DRIVERS\usb80236.sys;c:\windows\SYSNATIVE\DRIVERS\usb80236.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\BatteryCare\WinRing0x64.sys;c:\program files (x86)\BatteryCare\WinRing0x64.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer PowerSmart Manager\ePowerSvc.exe;c:\program files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [x]
S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
S2 tvnserver;TightVNC Server;c:\program files\TightVNC\tvnserver.exe;c:\program files\TightVNC\tvnserver.exe [x]
S2 VmbService;Vodafone Mobile Connect Service;c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe;c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-12-12 18:27 1087816 ----a-w- c:\program files (x86)\Google\Chrome\Application\39.0.2171.95\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-12-12 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1364881098-370321881-3166410940-1000Core.job
- c:\users\Martas\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-10 11:40]
.
2014-12-14 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1364881098-370321881-3166410940-1000UA.job
- c:\users\Martas\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-10 11:40]
.
2014-12-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-11-06 06:51]
.
2014-12-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-11-06 06:51]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-11-12 16:17 2334928 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-11-12 16:17 2334928 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-11-12 16:17 2334928 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-02-23 168944]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-02-23 394224]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-02-23 418800]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-01-19 9996320]
"Acer ePower Management"="c:\program files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe" [2010-01-20 496160]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2009-10-28 388608]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2014-08-22 1331288]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do Microsoft Excelu - c:\progra~1\MICROS~2\Office15\EXCEL.EXE/3000
IE: Od&eslat do OneNotu - c:\progra~1\MICROS~2\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.1.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-{15134cb0-b767-4960-a911-f2d16ae54797} - c:\programdata\Package Cache\{15134cb0-b767-4960-a911-f2d16ae54797}\vcredist_x64.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10d.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10d.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Google\Chrome Remote Desktop\39.0.2171.46\remoting_host.exe
c:\program files (x86)\Google\Chrome Remote Desktop\39.0.2171.46\remoting_host.exe
.
**************************************************************************
.
Celkový čas: 2014-12-14 10:47:44 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-12-14 09:47
.
Před spuštěním: Volných bajtů: 536 819 503 104
Po spuštění: Volných bajtů: 536 110 993 408
.
- - End Of File - - BA9E3E3A8D672D78FBCD2F5B2DD889A2
A36C5E4F47E84449FF07ED3517B43A31

[Orcus]

Microsoft Security Essentials nahraď něčím z kvarteta Avast, AVG, Avira či Comodo.

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok).
Zkopíruj do něj následující celý text označený červeně:

ClearJavaCache::
KillAll::

File::
c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1364881098-370321881-3166410940-1000Core.job
c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1364881098-370321881-3166410940-1000UA.job
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

DirLook::
c:\program files\KMSpico

RegLock::
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10d.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10d.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.


Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe
a když se oba soubory překryjí, skript upusť.


- Automaticky se spustí ComboFix, oprava může trvat i déle než 10 minut. ! Nech ComboFix dokončit svou práci !
- Vlož sem log, který vyběhne v závěru čistícího procesu

Upozornění : Může se stát, že po aplikaci skriptu a restartu počítače Windows nenaběhnou, pak znovu restartuj počítač, mačkej F8 a pak zvol poslední známou funkční konfiguraci.

====================================================

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

[Martinor]

ComboFix 14-12-10.03 - Martas 14.12.2014 11:35:14.2.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.3764.2500 [GMT 1:00]
Spuštěný z: c:\users\Martas\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\Martas\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1364881098-370321881-3166410940-1000Core.job"
"c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1364881098-370321881-3166410940-1000UA.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-11-14 do 2014-12-14 )))))))))))))))))))))))))))))))
.
.
2014-12-14 10:43 . 2014-12-14 10:43 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-12-14 10:29 . 2014-12-14 10:29 -------- d-----w- c:\users\Martas\AppData\Roaming\AVAST Software
2014-12-14 10:13 . 2014-12-14 10:13 116728 ----a-w- c:\windows\system32\drivers\aswStm.sys
2014-12-14 10:13 . 2014-12-14 10:13 436624 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-12-14 10:13 . 2014-12-14 10:13 267632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-12-14 10:13 . 2014-12-14 10:13 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-12-14 10:13 . 2014-12-14 10:13 83280 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-12-14 10:13 . 2014-12-14 10:13 29208 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2014-12-14 10:13 . 2014-12-14 10:13 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2014-12-14 10:13 . 2014-12-14 10:14 1050432 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2014-12-14 10:13 . 2014-12-14 10:13 364512 ----a-w- c:\windows\system32\aswBoot.exe
2014-12-14 10:13 . 2014-12-14 10:13 43152 ----a-w- c:\windows\avastSS.scr
2014-12-14 10:11 . 2014-12-14 10:11 -------- d-----w- c:\program files\AVAST Software
2014-12-14 10:10 . 2014-12-14 10:11 -------- d-----w- c:\programdata\AVAST Software
2014-12-13 20:34 . 2014-12-13 20:15 24064 ----a-w- c:\windows\zoek-delete.exe
2014-12-13 20:34 . 2014-12-14 10:45 -------- d-----w- c:\users\Martas\AppData\Local\Temp
2014-12-13 20:15 . 2014-12-13 20:31 -------- d-----w- C:\zoek_backup
2014-12-11 17:28 . 2014-07-07 02:02 2048 ----a-w- c:\windows\system32\mferror.dll
2014-12-11 17:28 . 2014-07-07 01:37 2048 ----a-w- c:\windows\SysWow64\mferror.dll
2014-12-11 17:27 . 2014-07-07 02:06 55808 ----a-w- c:\windows\system32\rrinstaller.exe
2014-12-11 17:27 . 2014-07-07 02:06 24576 ----a-w- c:\windows\system32\mfpmp.exe
2014-12-11 17:27 . 2014-07-07 01:39 23040 ----a-w- c:\windows\SysWow64\mfpmp.exe
2014-12-11 17:27 . 2014-10-18 01:33 3209728 ----a-w- c:\windows\SysWow64\mf.dll
2014-12-11 17:27 . 2014-07-07 02:06 206848 ----a-w- c:\windows\system32\mfps.dll
2014-12-11 17:27 . 2014-07-07 01:40 103424 ----a-w- c:\windows\SysWow64\mfps.dll
2014-12-11 17:27 . 2014-07-07 01:39 50176 ----a-w- c:\windows\SysWow64\rrinstaller.exe
2014-12-11 17:27 . 2014-10-18 02:05 4121600 ----a-w- c:\windows\system32\mf.dll
2014-12-10 21:18 . 2014-12-10 21:18 -------- d-----w- c:\users\Martas\AppData\Roaming\AdbDriverInstaller
2014-12-10 11:40 . 2014-12-10 11:41 -------- d-----w- c:\users\Martas\AppData\Local\Facebook
2014-12-10 09:27 . 2014-11-11 01:46 119296 ----a-w- c:\windows\system32\drivers\tdx.sys
2014-12-10 09:27 . 2014-11-22 02:06 47616 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2014-12-10 09:24 . 2014-10-30 02:03 165888 ----a-w- c:\windows\system32\charmap.exe
2014-12-10 09:24 . 2014-10-30 01:45 155136 ----a-w- c:\windows\SysWow64\charmap.exe
2014-12-10 09:24 . 2014-10-03 02:12 2020352 ----a-w- c:\windows\system32\WsmSvc.dll
2014-12-10 09:24 . 2014-10-03 01:45 1177088 ----a-w- c:\windows\SysWow64\WsmSvc.dll
2014-12-10 09:24 . 2014-10-03 02:12 310272 ----a-w- c:\windows\system32\WsmWmiPl.dll
2014-12-10 09:24 . 2014-10-03 02:12 346624 ----a-w- c:\windows\system32\WSManMigrationPlugin.dll
2014-12-10 09:24 . 2014-10-03 02:12 181248 ----a-w- c:\windows\system32\WsmAuto.dll
2014-12-10 09:24 . 2014-10-03 02:11 266240 ----a-w- c:\windows\system32\WSManHTTPConfig.exe
2014-12-10 09:24 . 2014-10-03 01:45 248832 ----a-w- c:\windows\SysWow64\WSManMigrationPlugin.dll
2014-12-10 09:24 . 2014-10-03 01:45 214016 ----a-w- c:\windows\SysWow64\WsmWmiPl.dll
2014-12-10 09:24 . 2014-10-03 01:44 198656 ----a-w- c:\windows\SysWow64\WSManHTTPConfig.exe
2014-12-10 09:24 . 2014-10-03 01:45 145920 ----a-w- c:\windows\SysWow64\WsmAuto.dll
2014-12-10 09:23 . 2014-11-08 03:16 2048 ----a-w- c:\windows\system32\tzres.dll
2014-12-10 09:23 . 2014-11-08 02:45 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2014-12-08 21:42 . 2014-06-16 06:01 206080 ----a-w- c:\windows\system32\drivers\ssudmdm.sys
2014-12-08 21:42 . 2014-06-16 06:01 110336 ----a-w- c:\windows\system32\drivers\ssudbus.sys
2014-12-08 21:37 . 2014-12-08 21:37 -------- d-----w- c:\program files (x86)\MarkAny
2014-12-08 21:36 . 2014-12-08 21:36 -------- d-----w- c:\users\Martas\AppData\Local\Samsung
2014-12-08 21:36 . 2014-12-08 21:36 -------- d-----w- c:\users\Martas\AppData\Roaming\Samsung
2014-12-08 21:31 . 2014-04-30 18:43 144664 ----a-w- c:\windows\SysWow64\secman.dll
2014-12-08 21:31 . 2014-04-30 18:43 4659712 ----a-w- c:\windows\SysWow64\Redemption.dll
2014-12-08 21:30 . 2014-12-08 21:34 -------- d-----w- c:\program files (x86)\Samsung
2014-12-08 21:20 . 2014-12-08 21:30 -------- d-----w- c:\programdata\Samsung
2014-12-08 21:20 . 2014-12-08 21:20 -------- d-----w- C:\SS_Drv
2014-12-07 13:28 . 2014-12-07 13:28 -------- d-----w- c:\program files (x86)\DotNes
2014-12-07 12:25 . 2014-12-13 20:06 37624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2014-12-07 12:25 . 2014-12-07 12:25 -------- d-----w- c:\programdata\RogueKiller
2014-12-07 12:16 . 2014-12-07 12:16 -------- d-----w- c:\windows\ERUNT
2014-12-03 21:20 . 2014-12-03 21:26 -------- d-----w- c:\program files\KMSpico
2014-11-30 15:49 . 2014-11-30 15:49 -------- d-----w- c:\programdata\Western Digital
2014-11-30 12:37 . 2014-11-30 12:37 -------- d-----w- c:\users\Martas\AppData\Roaming\TeamViewer
2014-11-30 12:35 . 2014-11-30 12:35 -------- d-----w- c:\program files (x86)\TeamViewer
2014-11-26 09:04 . 2014-11-26 09:04 3063992 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\1029\MSOINTL.DLL
2014-11-25 21:07 . 2014-12-13 20:43 -------- d-----w- C:\CrashDumpsApp
2014-11-25 14:23 . 2014-11-25 14:23 81234104 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\MSORES.DLL
2014-11-25 14:23 . 2014-11-25 14:23 26373816 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\MSO.DLL
2014-11-25 14:20 . 2014-11-25 14:20 81234104 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\MSORES.DLL
2014-11-25 14:20 . 2014-11-25 14:20 654512 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\MSOSQM.EXE
2014-11-25 14:20 . 2014-11-25 14:20 36827832 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\MSO.DLL
2014-11-24 20:55 . 2014-11-24 20:55 -------- d-----w- c:\users\Martas\AppData\Roaming\GTCO CalComp
2014-11-24 20:54 . 2014-11-24 20:54 -------- d-----w- c:\users\Martas\AppData\Roaming\eInstruction
2014-11-24 20:53 . 2007-03-08 03:53 102400 ----a-w- c:\windows\SysWow64\tsccvid.dll
2014-11-24 20:53 . 2014-11-24 20:53 -------- d-----w- c:\windows\SysWow64\Macromed
2014-11-24 20:51 . 2014-11-24 20:51 -------- d-----w- c:\users\Martas\AppData\Roaming\Hermitech Laboratory
2014-11-24 20:50 . 2014-11-24 20:50 -------- d-----w- c:\program files (x86)\Hermitech Laboratory
2014-11-24 20:47 . 2014-11-24 20:52 -------- d-----w- c:\program files (x86)\eInstruction
2014-11-24 20:47 . 2014-11-24 20:47 -------- d--h--w- c:\users\Martas\InstallAnywhere
2014-11-23 08:02 . 2014-12-13 18:11 -------- d-----w- c:\users\Martas\HellSpy
2014-11-23 07:57 . 2014-11-23 07:59 -------- d-----w- c:\users\Martas\AppData\Roaming\HellSpy.cz Download Manager
2014-11-22 18:59 . 2014-12-13 19:51 -------- d-----w- c:\users\Martas\AppData\Roaming\vlc
2014-11-22 18:58 . 2014-11-22 18:58 -------- d-----w- c:\program files (x86)\VideoLAN
2014-11-22 09:22 . 2014-12-07 17:04 -------- d-----w- c:\program files\FlatOut2
2014-11-22 09:21 . 2014-11-22 09:21 -------- d-----w- c:\users\Martas\AppData\Roaming\dvdcss
2014-11-19 03:22 . 2014-11-11 03:08 241152 ----a-w- c:\windows\system32\pku2u.dll
2014-11-19 03:22 . 2014-11-11 03:08 728064 ----a-w- c:\windows\system32\kerberos.dll
2014-11-19 03:22 . 2014-11-11 02:44 186880 ----a-w- c:\windows\SysWow64\pku2u.dll
2014-11-19 03:22 . 2014-11-11 02:44 550912 ----a-w- c:\windows\SysWow64\kerberos.dll
2014-11-18 19:51 . 2014-11-18 19:51 5681880 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\CMigrate.exe
2014-11-18 19:51 . 2014-11-18 19:51 5387456 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\Csi.dll
2014-11-18 19:47 . 2014-11-18 19:47 2226848 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\RICHED20.DLL
2014-11-18 19:47 . 2014-11-18 19:47 7765720 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\CMigrate.exe
2014-11-18 19:47 . 2014-11-18 19:47 7536832 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\Csi.dll
2014-11-18 19:47 . 2014-11-18 19:47 1691816 ----a-w- c:\windows\system32\FM20.DLL
2014-11-16 15:47 . 2014-11-16 15:48 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-11-16 15:47 . 2014-11-16 15:47 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-11-16 15:47 . 2014-11-16 15:47 -------- d-----w- c:\programdata\Malwarebytes
2014-11-16 15:47 . 2014-10-01 10:11 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-11-16 15:47 . 2014-10-01 10:11 93400 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-11-16 15:47 . 2014-10-01 10:11 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-11-16 15:35 . 2014-12-07 12:07 -------- d-----w- C:\AdwCleaner
2014-11-15 21:27 . 2014-11-15 21:27 -------- d-sh--w- c:\users\Martas\AppData\Local\EmieUserList
2014-11-15 21:27 . 2014-11-15 21:27 -------- d-sh--w- c:\users\Martas\AppData\Local\EmieSiteList
2014-11-15 21:27 . 2014-11-15 21:27 -------- d-sh--w- c:\users\Martas\AppData\Local\EmieBrowserModeList
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-12-11 17:37 . 2014-11-07 11:29 112710672 ----a-w- c:\windows\system32\MRT.exe
2014-11-10 03:53 . 2014-11-10 03:53 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2014-11-10 03:53 . 2014-11-10 03:53 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll
2014-11-10 03:53 . 2014-11-10 03:53 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2014-11-09 10:07 . 2013-08-20 15:10 107368 ----a-w- c:\windows\system32\xinput1_3.dll
2014-11-08 04:22 . 2014-11-08 04:22 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2014-11-08 04:22 . 2014-11-08 04:22 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2014-11-08 04:22 . 2014-11-08 04:22 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2014-11-08 04:22 . 2014-11-08 04:22 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2014-11-08 04:22 . 2014-11-08 04:22 337408 ----a-w- c:\windows\SysWow64\html.iec
2014-11-08 04:22 . 2014-11-08 04:22 235008 ----a-w- c:\windows\system32\elshyph.dll
2014-11-08 04:22 . 2014-11-08 04:22 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2014-11-08 04:22 . 2014-11-08 04:22 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2014-11-08 04:22 . 2014-11-08 04:22 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2014-11-08 04:22 . 2014-11-08 04:22 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2014-11-08 04:22 . 2014-11-08 04:22 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2014-11-08 04:22 . 2014-11-08 04:22 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2014-11-08 04:22 . 2014-11-08 04:22 942592 ----a-w- c:\windows\system32\jsIntl.dll
2014-11-08 04:22 . 2014-11-08 04:22 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2014-11-08 04:22 . 2014-11-08 04:22 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2014-11-08 04:22 . 2014-11-08 04:22 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2014-11-08 04:22 . 2014-11-08 04:22 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2014-11-08 04:22 . 2014-11-08 04:22 247808 ----a-w- c:\windows\system32\msls31.dll
2014-11-08 04:22 . 2014-11-08 04:22 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2014-11-08 04:22 . 2014-11-08 04:22 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2014-11-08 04:22 . 2014-11-08 04:22 77312 ----a-w- c:\windows\system32\tdc.ocx
2014-11-08 04:22 . 2014-11-08 04:22 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2014-11-08 04:22 . 2014-11-08 04:22 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2014-11-08 04:22 . 2014-11-08 04:22 48640 ----a-w- c:\windows\system32\mshtmler.dll
2014-11-08 04:22 . 2014-11-08 04:22 413696 ----a-w- c:\windows\system32\html.iec
2014-11-08 04:22 . 2014-11-08 04:22 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2014-11-08 04:22 . 2014-11-08 04:22 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2014-11-08 04:22 . 2014-11-08 04:22 105984 ----a-w- c:\windows\system32\iesysprep.dll
2014-11-08 04:22 . 2014-11-08 04:22 81408 ----a-w- c:\windows\system32\icardie.dll
2014-11-08 04:22 . 2014-11-08 04:22 30208 ----a-w- c:\windows\system32\licmgr10.dll
2014-11-08 04:22 . 2014-11-08 04:22 243200 ----a-w- c:\windows\system32\webcheck.dll
2014-11-08 04:22 . 2014-11-08 04:22 235520 ----a-w- c:\windows\system32\url.dll
2014-11-08 04:22 . 2014-11-08 04:22 167424 ----a-w- c:\windows\system32\iexpress.exe
2014-11-08 04:22 . 2014-11-08 04:22 143872 ----a-w- c:\windows\system32\wextract.exe
2014-11-08 04:22 . 2014-11-08 04:22 101376 ----a-w- c:\windows\system32\inseng.dll
2014-11-08 04:22 . 2014-11-08 04:22 147968 ----a-w- c:\windows\system32\occache.dll
2014-11-08 04:22 . 2014-11-08 04:22 774144 ----a-w- c:\windows\system32\jscript.dll
2014-11-08 04:22 . 2014-11-08 04:22 62464 ----a-w- c:\windows\system32\pngfilt.dll
2014-11-08 04:22 . 2014-11-08 04:22 48128 ----a-w- c:\windows\system32\imgutil.dll
2014-11-08 04:22 . 2014-11-08 04:22 13824 ----a-w- c:\windows\system32\mshta.exe
2014-11-08 04:22 . 2014-11-08 04:22 135680 ----a-w- c:\windows\system32\iepeers.dll
2014-11-06 08:51 . 2014-11-06 08:51 386680 ----a-w- c:\windows\system32\drivers\sptd.sys
2014-10-30 11:25 . 2010-11-21 03:27 275080 ------w- c:\windows\system32\MpSigStub.exe
2014-10-30 02:03 . 2014-12-10 09:24 165888 ----a-w- c:\windows\system32\charmap.exe
2014-10-20 01:37 . 2014-11-07 10:18 11627712 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B06946FF-CB27-415A-AFBA-151C7B58AC57}\mpengine.dll
2014-10-18 02:05 . 2014-11-12 04:04 861696 ----a-w- c:\windows\system32\oleaut32.dll
2014-10-18 01:33 . 2014-11-12 04:04 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2014-10-14 02:16 . 2014-11-12 16:25 155064 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2014-10-14 02:13 . 2014-11-12 16:25 683520 ----a-w- c:\windows\system32\termsrv.dll
2014-10-14 02:12 . 2014-11-12 16:25 1460736 ----a-w- c:\windows\system32\lsasrv.dll
2014-10-14 02:09 . 2014-11-12 16:25 146432 ----a-w- c:\windows\system32\msaudite.dll
2014-10-14 02:07 . 2014-11-12 16:25 681984 ----a-w- c:\windows\system32\adtschema.dll
2014-10-14 01:50 . 2014-11-12 16:25 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2014-10-14 01:49 . 2014-11-12 16:25 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2014-10-14 01:47 . 2014-11-12 16:25 146432 ----a-w- c:\windows\SysWow64\msaudite.dll
2014-10-14 01:46 . 2014-11-12 16:25 681984 ----a-w- c:\windows\SysWow64\adtschema.dll
2014-10-09 09:07 . 2014-10-09 09:07 89088 ----a-w- c:\windows\SysWow64\rzdevinfo.dll
2014-10-03 02:12 . 2014-11-12 16:23 500224 ----a-w- c:\windows\system32\AUDIOKSE.dll
2014-10-03 02:11 . 2014-11-12 16:23 284672 ----a-w- c:\windows\system32\EncDump.dll
2014-10-03 02:11 . 2014-11-12 16:23 680960 ----a-w- c:\windows\system32\audiosrv.dll
2014-10-03 02:11 . 2014-11-12 16:23 440832 ----a-w- c:\windows\system32\AudioEng.dll
2014-10-03 02:11 . 2014-11-12 16:23 296448 ----a-w- c:\windows\system32\AudioSes.dll
2014-10-03 01:44 . 2014-11-12 16:23 442880 ----a-w- c:\windows\SysWow64\AUDIOKSE.dll
2014-10-03 01:44 . 2014-11-12 16:23 374784 ----a-w- c:\windows\SysWow64\AudioEng.dll
2014-10-03 01:44 . 2014-11-12 16:23 195584 ----a-w- c:\windows\SysWow64\AudioSes.dll
2014-09-30 05:32 . 2014-09-30 05:32 901632 ----a-w- c:\windows\SysWow64\rzdevicedll.dll
2014-09-30 05:32 . 2014-09-30 05:32 419840 ----a-w- c:\windows\SysWow64\rzaudiodll.dll
2014-09-29 00:58 . 2014-11-07 10:40 3198976 ----a-w- c:\windows\system32\win32k.sys
2014-09-25 02:08 . 2014-11-07 10:38 371712 ----a-w- c:\windows\system32\qdvd.dll
2014-09-25 01:40 . 2014-11-07 10:38 519680 ----a-w- c:\windows\SysWow64\qdvd.dll
2014-09-19 09:42 . 2014-11-12 16:26 210944 ----a-w- c:\windows\system32\wdigest.dll
2014-09-19 09:42 . 2014-11-12 16:26 86528 ----a-w- c:\windows\system32\TSpkg.dll
2014-09-19 09:42 . 2014-11-12 16:25 342016 ----a-w- c:\windows\system32\schannel.dll
2014-09-19 09:42 . 2014-11-12 16:26 314880 ----a-w- c:\windows\system32\msv1_0.dll
2014-09-19 09:42 . 2014-11-12 16:25 309760 ----a-w- c:\windows\system32\ncrypt.dll
2014-09-19 09:42 . 2014-11-12 16:26 22016 ----a-w- c:\windows\system32\credssp.dll
2014-09-19 09:23 . 2014-11-12 16:26 172032 ----a-w- c:\windows\SysWow64\wdigest.dll
2014-09-19 09:23 . 2014-11-12 16:26 65536 ----a-w- c:\windows\SysWow64\TSpkg.dll
2014-09-19 09:23 . 2014-11-12 16:26 248832 ----a-w- c:\windows\SysWow64\schannel.dll
2014-09-19 09:23 . 2014-11-12 16:26 221184 ----a-w- c:\windows\SysWow64\ncrypt.dll
2014-09-19 09:23 . 2014-11-12 16:26 259584 ----a-w- c:\windows\SysWow64\msv1_0.dll
2014-09-19 09:23 . 2014-11-12 16:26 17408 ----a-w- c:\windows\SysWow64\credssp.dll
2014-09-18 02:00 . 2014-11-07 10:37 3241472 ----a-w- c:\windows\system32\msi.dll
2014-09-18 01:32 . 2014-11-07 10:37 2363904 ----a-w- c:\windows\SysWow64\msi.dll
.
.
(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of c:\program files\KMSpico ----
.
2014-12-03 21:26 . 2014-12-03 21:26 730273 ----a-w- c:\program files\KMSpico\unins000.exe
2014-12-03 21:20 . 2013-11-12 15:32 1720 ----a-w- c:\program files\KMSpico\driver\OpenVPN.cer
2014-12-03 21:20 . 2013-10-26 21:28 72 ----a-w- c:\program files\KMSpico\scripts\EnableSmartScreen.cmd
2014-12-03 21:20 . 2013-10-26 21:04 636 ----a-w- c:\program files\KMSpico\scripts\EnableSmartScreen.reg
2014-12-03 21:20 . 2012-10-02 00:09 6786 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Word\LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:09 9584 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Word\LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.PL.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:09 11592 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Word\LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:09 6721 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Word\LicenseSetData._9CEDEF15_BE37_4FF0_A08A_13A045540641.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:09 10607 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Word\LicenseSetData._9CEDEF15_BE37_4FF0_A08A_13A045540641.PL.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:09 19904 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Word\LicenseSetData._9CEDEF15_BE37_4FF0_A08A_13A045540641.PHN.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:09 11559 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Word\LicenseSetData._9CEDEF15_BE37_4FF0_A08A_13A045540641.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:09 480303 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Word\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:09 4392 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Word\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:09 4208 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Word\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:09 3380 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Word\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:09 3219 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Word\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:09 3103 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Word\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:09 3211 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Word\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:07 6790 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioStd\LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:07 9604 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioStd\LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.PL.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:07 11612 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioStd\LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:07 6725 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioStd\LicenseSetData._44A1F6FF_0876_4EDB_9169_DBB43101EE89.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:07 10623 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioStd\LicenseSetData._44A1F6FF_0876_4EDB_9169_DBB43101EE89.PL.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:07 19924 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioStd\LicenseSetData._44A1F6FF_0876_4EDB_9169_DBB43101EE89.PHN.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:07 11579 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioStd\LicenseSetData._44A1F6FF_0876_4EDB_9169_DBB43101EE89.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:07 480303 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioStd\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:07 4392 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioStd\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:07 4208 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioStd\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:07 3380 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioStd\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:07 3219 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioStd\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:07 3103 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioStd\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
2014-12-03 21:20 . 2012-10-02 00:07 3211 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioStd\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
2014-12-03 21:20 . 2012-11-03 14:12 20610 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioPro\visio.reg
2014-12-03 21:20 . 2012-10-01 23:43 6864 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioPro\LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 9604 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioPro\LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 11612 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioPro\LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 6799 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioPro\LicenseSetData._3E4294DD_A765_49BC_8DBD_CF8B62A4BD3D.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 10623 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioPro\LicenseSetData._3E4294DD_A765_49BC_8DBD_CF8B62A4BD3D.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 19924 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioPro\LicenseSetData._3E4294DD_A765_49BC_8DBD_CF8B62A4BD3D.PHN.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 11579 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioPro\LicenseSetData._3E4294DD_A765_49BC_8DBD_CF8B62A4BD3D.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 480303 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioPro\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 4392 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioPro\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 4208 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioPro\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3380 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioPro\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3219 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioPro\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3103 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioPro\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3211 ----a-w- c:\program files\KMSpico\cert\kmscert2013\VisioPro\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
2014-12-03 21:20 . 2012-10-01 12:43 8617 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Standard\LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 12:43 9604 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Standard\LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 12:43 11612 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Standard\LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 12:43 8552 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Standard\LicenseSetData._A24CCA51_3D54_4C41_8A76_4031F5338CB2.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 12:43 10623 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Standard\LicenseSetData._A24CCA51_3D54_4C41_8A76_4031F5338CB2.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 12:43 19924 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Standard\LicenseSetData._A24CCA51_3D54_4C41_8A76_4031F5338CB2.PHN.xrm-ms
2014-12-03 21:20 . 2012-10-01 12:43 11579 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Standard\LicenseSetData._A24CCA51_3D54_4C41_8A76_4031F5338CB2.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 12:43 480303 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Standard\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
2014-12-03 21:20 . 2012-10-01 12:43 4392 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Standard\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 12:43 4208 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Standard\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
2014-12-03 21:20 . 2012-10-01 12:43 3380 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Standard\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
2014-12-03 21:20 . 2012-10-01 12:43 3219 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Standard\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
2014-12-03 21:20 . 2012-10-01 12:43 3103 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Standard\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
2014-12-03 21:20 . 2012-10-01 12:43 3211 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Standard\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:47 6726 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Publisher\LicenseSetData._38EA49F6_AD1D_43F1_9888_99A35D7C9409.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:47 10627 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Publisher\LicenseSetData._38EA49F6_AD1D_43F1_9888_99A35D7C9409.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:47 19929 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Publisher\LicenseSetData._38EA49F6_AD1D_43F1_9888_99A35D7C9409.PHN.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:47 11584 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Publisher\LicenseSetData._38EA49F6_AD1D_43F1_9888_99A35D7C9409.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:47 6791 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Publisher\LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:47 9609 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Publisher\LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:47 11617 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Publisher\LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:47 480303 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Publisher\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:47 4392 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Publisher\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:47 4208 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Publisher\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:47 3380 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Publisher\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:47 3219 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Publisher\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:47 3103 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Publisher\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:47 3211 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Publisher\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
2014-12-03 21:20 . 2012-11-03 14:14 21140 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProPlus\proplus.reg
2014-12-03 21:20 . 2012-10-01 23:46 10742 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProPlus\LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:46 9599 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProPlus\LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:46 11607 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProPlus\LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:46 10677 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProPlus\LicenseSetData._2B88C4F2_EA8F_43CD_805E_4D41346E18A7.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:46 10619 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProPlus\LicenseSetData._2B88C4F2_EA8F_43CD_805E_4D41346E18A7.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:46 19919 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProPlus\LicenseSetData._2B88C4F2_EA8F_43CD_805E_4D41346E18A7.PHN.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:46 11574 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProPlus\LicenseSetData._2B88C4F2_EA8F_43CD_805E_4D41346E18A7.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:46 480303 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProPlus\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:46 4392 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProPlus\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:46 4208 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProPlus\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:46 3380 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProPlus\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:46 3219 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProPlus\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:46 3103 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProPlus\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:46 3211 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProPlus\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
2014-12-03 21:20 . 2012-10-01 22:55 6792 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectStd\LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 22:55 9614 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectStd\LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 22:55 11622 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectStd\LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 22:55 6727 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectStd\LicenseSetData._2B9E4A37_6230_4B42_BEE2_E25CE86C8C7A.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 22:55 10631 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectStd\LicenseSetData._2B9E4A37_6230_4B42_BEE2_E25CE86C8C7A.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 22:55 19934 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectStd\LicenseSetData._2B9E4A37_6230_4B42_BEE2_E25CE86C8C7A.PHN.xrm-ms
2014-12-03 21:20 . 2012-10-01 22:55 11589 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectStd\LicenseSetData._2B9E4A37_6230_4B42_BEE2_E25CE86C8C7A.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 22:55 480303 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectStd\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
2014-12-03 21:20 . 2012-10-01 22:55 4392 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectStd\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 22:55 4208 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectStd\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
2014-12-03 21:20 . 2012-10-01 22:55 3380 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectStd\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
2014-12-03 21:20 . 2012-10-01 22:55 3219 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectStd\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
2014-12-03 21:20 . 2012-10-01 22:55 3103 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectStd\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
2014-12-03 21:20 . 2012-10-01 22:55 3211 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectStd\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 6795 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectPro\LicenseSetData._ED34DC89_1C27_4ECD_8B2F_63D0F4CEDC32.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 10631 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectPro\LicenseSetData._ED34DC89_1C27_4ECD_8B2F_63D0F4CEDC32.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 19934 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectPro\LicenseSetData._ED34DC89_1C27_4ECD_8B2F_63D0F4CEDC32.PHN.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 11589 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectPro\LicenseSetData._ED34DC89_1C27_4ECD_8B2F_63D0F4CEDC32.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 6860 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectPro\LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 9614 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectPro\LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 11622 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectPro\LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 480303 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectPro\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 4392 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectPro\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 4208 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectPro\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3380 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectPro\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3219 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectPro\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3103 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectPro\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3211 ----a-w- c:\program files\KMSpico\cert\kmscert2013\ProjectPro\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 6727 ----a-w- c:\program files\KMSpico\cert\kmscert2013\PowerPoint\LicenseSetData._E40DCB44_1D5C_4085_8E8F_943F33C4F004.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 10631 ----a-w- c:\program files\KMSpico\cert\kmscert2013\PowerPoint\LicenseSetData._E40DCB44_1D5C_4085_8E8F_943F33C4F004.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 19934 ----a-w- c:\program files\KMSpico\cert\kmscert2013\PowerPoint\LicenseSetData._E40DCB44_1D5C_4085_8E8F_943F33C4F004.PHN.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 11589 ----a-w- c:\program files\KMSpico\cert\kmscert2013\PowerPoint\LicenseSetData._E40DCB44_1D5C_4085_8E8F_943F33C4F004.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 6792 ----a-w- c:\program files\KMSpico\cert\kmscert2013\PowerPoint\LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 9614 ----a-w- c:\program files\KMSpico\cert\kmscert2013\PowerPoint\LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 11622 ----a-w- c:\program files\KMSpico\cert\kmscert2013\PowerPoint\LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 480303 ----a-w- c:\program files\KMSpico\cert\kmscert2013\PowerPoint\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 4392 ----a-w- c:\program files\KMSpico\cert\kmscert2013\PowerPoint\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms

[Martinor]

2014-12-03 21:20 . 2012-10-01 23:43 4208 ----a-w- c:\program files\KMSpico\cert\kmscert2013\PowerPoint\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3380 ----a-w- c:\program files\KMSpico\cert\kmscert2013\PowerPoint\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3219 ----a-w- c:\program files\KMSpico\cert\kmscert2013\PowerPoint\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3103 ----a-w- c:\program files\KMSpico\cert\kmscert2013\PowerPoint\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3211 ----a-w- c:\program files\KMSpico\cert\kmscert2013\PowerPoint\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:39 6724 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Outlook\LicenseSetData._8D577C50_AE5E_47FD_A240_24986F73D503.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:39 10619 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Outlook\LicenseSetData._8D577C50_AE5E_47FD_A240_24986F73D503.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:39 19919 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Outlook\LicenseSetData._8D577C50_AE5E_47FD_A240_24986F73D503.PHN.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:39 11574 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Outlook\LicenseSetData._8D577C50_AE5E_47FD_A240_24986F73D503.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:39 6789 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Outlook\LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:39 9599 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Outlook\LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:39 11607 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Outlook\LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:39 480303 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Outlook\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:39 4392 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Outlook\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:39 4208 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Outlook\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:39 3380 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Outlook\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:39 3219 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Outlook\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:39 3103 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Outlook\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:39 3211 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Outlook\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 6789 ----a-w- c:\program files\KMSpico\cert\kmscert2013\OneNote\LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 9599 ----a-w- c:\program files\KMSpico\cert\kmscert2013\OneNote\LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 11607 ----a-w- c:\program files\KMSpico\cert\kmscert2013\OneNote\LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 6724 ----a-w- c:\program files\KMSpico\cert\kmscert2013\OneNote\LicenseSetData._B067E965_7521_455B_B9F7_C740204578A2.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 10619 ----a-w- c:\program files\KMSpico\cert\kmscert2013\OneNote\LicenseSetData._B067E965_7521_455B_B9F7_C740204578A2.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 19919 ----a-w- c:\program files\KMSpico\cert\kmscert2013\OneNote\LicenseSetData._B067E965_7521_455B_B9F7_C740204578A2.PHN.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 11574 ----a-w- c:\program files\KMSpico\cert\kmscert2013\OneNote\LicenseSetData._B067E965_7521_455B_B9F7_C740204578A2.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 480303 ----a-w- c:\program files\KMSpico\cert\kmscert2013\OneNote\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 4392 ----a-w- c:\program files\KMSpico\cert\kmscert2013\OneNote\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 4208 ----a-w- c:\program files\KMSpico\cert\kmscert2013\OneNote\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 3380 ----a-w- c:\program files\KMSpico\cert\kmscert2013\OneNote\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 3219 ----a-w- c:\program files\KMSpico\cert\kmscert2013\OneNote\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 3103 ----a-w- c:\program files\KMSpico\cert\kmscert2013\OneNote\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 3211 ----a-w- c:\program files\KMSpico\cert\kmscert2013\OneNote\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 6786 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Lync\LicenseSetData._E1264E10_AFAF_4439_A98B_256DF8BB156F.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 10607 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Lync\LicenseSetData._E1264E10_AFAF_4439_A98B_256DF8BB156F.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 19904 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Lync\LicenseSetData._E1264E10_AFAF_4439_A98B_256DF8BB156F.PHN.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 11559 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Lync\LicenseSetData._E1264E10_AFAF_4439_A98B_256DF8BB156F.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 6851 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Lync\LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 9584 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Lync\LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 11592 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Lync\LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 480303 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Lync\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 4392 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Lync\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 4208 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Lync\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3380 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Lync\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3219 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Lync\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3103 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Lync\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3211 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Lync\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 6790 ----a-w- c:\program files\KMSpico\cert\kmscert2013\InfoPath\LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 9604 ----a-w- c:\program files\KMSpico\cert\kmscert2013\InfoPath\LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 11612 ----a-w- c:\program files\KMSpico\cert\kmscert2013\InfoPath\LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 6725 ----a-w- c:\program files\KMSpico\cert\kmscert2013\InfoPath\LicenseSetData._9E016989_4007_42A6_8051_64EB97110CF2.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 10623 ----a-w- c:\program files\KMSpico\cert\kmscert2013\InfoPath\LicenseSetData._9E016989_4007_42A6_8051_64EB97110CF2.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 19924 ----a-w- c:\program files\KMSpico\cert\kmscert2013\InfoPath\LicenseSetData._9E016989_4007_42A6_8051_64EB97110CF2.PHN.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 11579 ----a-w- c:\program files\KMSpico\cert\kmscert2013\InfoPath\LicenseSetData._9E016989_4007_42A6_8051_64EB97110CF2.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 480303 ----a-w- c:\program files\KMSpico\cert\kmscert2013\InfoPath\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 4392 ----a-w- c:\program files\KMSpico\cert\kmscert2013\InfoPath\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 4208 ----a-w- c:\program files\KMSpico\cert\kmscert2013\InfoPath\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 3380 ----a-w- c:\program files\KMSpico\cert\kmscert2013\InfoPath\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 3219 ----a-w- c:\program files\KMSpico\cert\kmscert2013\InfoPath\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 3103 ----a-w- c:\program files\KMSpico\cert\kmscert2013\InfoPath\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:38 3211 ----a-w- c:\program files\KMSpico\cert\kmscert2013\InfoPath\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 6787 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Excel\LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 9589 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Excel\LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 11597 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Excel\LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 6722 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Excel\LicenseSetData._AC1AE7FD_B949_4E04_A330_849BC40638CF.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 10611 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Excel\LicenseSetData._AC1AE7FD_B949_4E04_A330_849BC40638CF.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 19909 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Excel\LicenseSetData._AC1AE7FD_B949_4E04_A330_849BC40638CF.PHN.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 11564 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Excel\LicenseSetData._AC1AE7FD_B949_4E04_A330_849BC40638CF.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 480303 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Excel\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 4392 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Excel\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 4208 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Excel\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3380 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Excel\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3219 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Excel\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3103 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Excel\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:43 3211 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Excel\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:41 6788 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Access\LicenseSetData._6EE7622C_18D8_4005_9FB7_92DB644A279B.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:41 9594 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Access\LicenseSetData._6EE7622C_18D8_4005_9FB7_92DB644A279B.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:41 11602 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Access\LicenseSetData._6EE7622C_18D8_4005_9FB7_92DB644A279B.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:41 6723 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Access\LicenseSetData._4374022D_56B8_48C1_9BB7_D8F2FC726343.PPDLIC.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:41 10615 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Access\LicenseSetData._4374022D_56B8_48C1_9BB7_D8F2FC726343.PL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:41 19914 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Access\LicenseSetData._4374022D_56B8_48C1_9BB7_D8F2FC726343.PHN.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:41 11569 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Access\LicenseSetData._4374022D_56B8_48C1_9BB7_D8F2FC726343.OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:41 480303 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Access\Licenses.sl.PKEYCONFIG.SIGNED.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:41 4392 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Access\Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:41 4208 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Access\Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:41 3380 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Access\Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:41 3219 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Access\Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:41 3103 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Access\Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms
2014-12-03 21:20 . 2012-10-01 23:41 3211 ----a-w- c:\program files\KMSpico\cert\kmscert2013\Access\Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:52 6595 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Word\Word_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:52 13391 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Word\Word_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:52 16588 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Word\Word_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:52 13374 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Word\Word_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:52 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:52 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:52 6667 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:52 11380 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:52 13417 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Word\Word_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-07-11 22:07 5272 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Word\WordVLRegWOW.reg
2014-12-03 21:20 . 2010-07-11 22:07 5176 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Word\WordVLReg64.reg
2014-12-03 21:20 . 2010-07-11 22:06 5176 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Word\WordVLReg32.reg
2014-12-03 21:20 . 2010-07-11 22:04 7568 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioVLRegWOW.reg
2014-12-03 21:20 . 2010-07-11 22:05 7376 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioVLReg64.reg
2014-12-03 21:20 . 2010-07-11 22:04 7376 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioVLReg32.reg
2014-12-03 21:20 . 2010-05-20 12:51 6603 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioStd_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13399 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioStd_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 16607 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioStd_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13393 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioStd_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 6675 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 11399 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13436 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioStd_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 6677 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPro_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13399 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPro_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 16607 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPro_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13393 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPro_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 6749 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 11399 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13436 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPro_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 6752 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPrem_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13401 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPrem_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 16611 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPrem_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13397 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPrem_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 6824 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 11403 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13440 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Visio\VisioPrem_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 7698 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Standard\Standard_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13399 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Standard\Standard_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 16608 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Standard\Standard_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13394 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Standard\Standard_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 7770 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 11400 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13437 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Standard\Standard_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-07-11 22:02 6236 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Standard\StandardVLRegWOW.reg
2014-12-03 21:20 . 2010-07-11 22:03 6116 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Standard\StandardVLReg64.reg
2014-12-03 21:20 . 2010-07-11 22:02 6116 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Standard\StandardVLReg32.reg
2014-12-03 21:20 . 2010-05-20 12:51 7706 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Standard\StandardAcad_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13407 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Standard\StandardAcad_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 16628 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Standard\StandardAcad_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13414 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Standard\StandardAcad_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-03-31 09:27 7062 ----a-w- c:\program files\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-03-31 09:27 13411 ----a-w- c:\program files\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-03-31 09:27 16638 ----a-w- c:\program files\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-03-31 09:27 13424 ----a-w- c:\program files\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-03-31 09:27 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-03-31 09:27 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-03-31 09:27 7134 ----a-w- c:\program files\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-03-31 09:27 11430 ----a-w- c:\program files\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-03-31 09:27 13467 ----a-w- c:\program files\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasics_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-07-11 21:58 5732 ----a-w- c:\program files\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasicsVLRegWOW.reg
2014-12-03 21:20 . 2010-07-11 21:59 5636 ----a-w- c:\program files\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasicsVLReg64.reg
2014-12-03 21:20 . 2010-07-11 21:58 5636 ----a-w- c:\program files\KMSpico\cert\kmscert2010\SmallBusBasics\SmallBusBasicsVLReg32.reg
2014-12-03 21:20 . 2010-05-20 12:51 6605 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Publisher\Publisher_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13401 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Publisher\Publisher_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 16613 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Publisher\Publisher_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13399 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Publisher\Publisher_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 6677 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 11405 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:51 13442 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Publisher\Publisher_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-07-11 21:56 5312 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Publisher\PublisherVLRegWOW.reg
2014-12-03 21:20 . 2010-07-11 21:56 5216 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Publisher\PublisherVLReg64.reg
2014-12-03 21:20 . 2010-07-11 21:55 5216 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Publisher\PublisherVLReg32.reg
2014-12-03 21:20 . 2010-05-20 12:50 9325 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProPlus\ProPlus_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:50 13397 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProPlus\ProPlus_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:50 16603 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProPlus\ProPlus_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:50 13389 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProPlus\ProPlus_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:50 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:50 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:50 9397 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:50 11395 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:50 13432 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProPlus\ProPlus_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-07-11 21:53 6398 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProPlus\ProPlusVLRegWOW.reg
2014-12-03 21:20 . 2010-07-11 21:54 6278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProPlus\ProPlusVLReg64.reg
2014-12-03 21:20 . 2010-07-11 21:52 6278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProPlus\ProPlusVLReg32.reg
2014-12-03 21:20 . 2010-05-20 12:50 9333 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProPlus\ProPlusAcad_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:50 13405 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProPlus\ProPlusAcad_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:50 16623 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProPlus\ProPlusAcad_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:50 13409 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProPlus\ProPlusAcad_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 6609 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_MAK2.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 13405 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_MAK2.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 16622 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_MAK2.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 13408 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_MAK2.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 6607 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 13403 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 16618 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 13404 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 6679 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 11410 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 13447 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectStd\ProjectStd_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-07-11 21:46 5924 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectStd\ProjectStdVLRegWOW.reg
2014-12-03 21:20 . 2010-07-11 21:47 5804 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectStd\ProjectStdVLReg64.reg
2014-12-03 21:20 . 2010-07-11 21:45 5804 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectStd\ProjectStdVLReg32.reg
2014-12-03 21:20 . 2010-05-20 12:49 6607 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 13403 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 16618 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 13404 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 6679 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 11410 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:49 13447 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectPro\ProjectPro_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-07-11 21:43 5400 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectPro\ProjectProVLRegWOW.reg
2014-12-03 21:20 . 2010-07-11 21:44 5304 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectPro\ProjectProVLReg64.reg
2014-12-03 21:20 . 2010-07-11 21:42 5304 ----a-w- c:\program files\KMSpico\cert\kmscert2010\ProjectPro\ProjectProVLReg32.reg
2014-12-03 21:20 . 2010-05-20 12:48 6607 ----a-w- c:\program files\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:48 13403 ----a-w- c:\program files\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:48 16618 ----a-w- c:\program files\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:48 13404 ----a-w- c:\program files\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:48 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:48 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:48 6679 ----a-w- c:\program files\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:48 11410 ----a-w- c:\program files\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:48 13447 ----a-w- c:\program files\KMSpico\cert\kmscert2010\PowerPoint\PowerPoint_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-07-11 21:41 5320 ----a-w- c:\program files\KMSpico\cert\kmscert2010\PowerPoint\PowerPointVLRegWOW.reg
2014-12-03 21:20 . 2010-07-11 21:40 5224 ----a-w- c:\program files\KMSpico\cert\kmscert2010\PowerPoint\PowerPointVLReg64.reg
2014-12-03 21:20 . 2010-07-11 21:39 5224 ----a-w- c:\program files\KMSpico\cert\kmscert2010\PowerPoint\PowerPointVLReg32.reg
2014-12-03 21:20 . 2010-05-20 12:48 6601 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Outlook\Outlook_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:48 13397 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Outlook\Outlook_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:48 16603 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Outlook\Outlook_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:48 13389 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Outlook\Outlook_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:48 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:48 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:48 6673 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:48 11395 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:48 13432 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Outlook\Outlook_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-07-11 21:37 5296 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Outlook\OutlookVLRegWOW.reg
2014-12-03 21:20 . 2010-07-11 21:37 5200 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Outlook\OutlookVLReg64.reg
2014-12-03 21:20 . 2010-07-11 21:32 5200 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Outlook\OutlookVLReg32.reg
2014-12-03 21:20 . 2010-05-20 12:47 6601 ----a-w- c:\program files\KMSpico\cert\kmscert2010\OneNote\OneNote_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:47 13397 ----a-w- c:\program files\KMSpico\cert\kmscert2010\OneNote\OneNote_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:47 16603 ----a-w- c:\program files\KMSpico\cert\kmscert2010\OneNote\OneNote_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:47 13389 ----a-w- c:\program files\KMSpico\cert\kmscert2010\OneNote\OneNote_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:47 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:47 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:47 6673 ----a-w- c:\program files\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:47 11395 ----a-w- c:\program files\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:47 13432 ----a-w- c:\program files\KMSpico\cert\kmscert2010\OneNote\OneNote_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-07-11 21:28 5296 ----a-w- c:\program files\KMSpico\cert\kmscert2010\OneNote\OneNoteVLRegWOW.reg
2014-12-03 21:20 . 2010-07-11 21:28 5200 ----a-w- c:\program files\KMSpico\cert\kmscert2010\OneNote\OneNoteVLReg64.reg
2014-12-03 21:20 . 2010-07-11 21:27 5200 ----a-w- c:\program files\KMSpico\cert\kmscert2010\OneNote\OneNoteVLReg32.reg
2014-12-03 21:20 . 2010-05-20 12:46 6603 ----a-w- c:\program files\KMSpico\cert\kmscert2010\InfoPath\InfoPath_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:46 13399 ----a-w- c:\program files\KMSpico\cert\kmscert2010\InfoPath\InfoPath_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:46 16608 ----a-w- c:\program files\KMSpico\cert\kmscert2010\InfoPath\InfoPath_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:46 13394 ----a-w- c:\program files\KMSpico\cert\kmscert2010\InfoPath\InfoPath_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:46 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:46 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:46 6675 ----a-w- c:\program files\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:46 11400 ----a-w- c:\program files\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:46 13437 ----a-w- c:\program files\KMSpico\cert\kmscert2010\InfoPath\InfoPath_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-07-11 21:26 5304 ----a-w- c:\program files\KMSpico\cert\kmscert2010\InfoPath\InfoPathVLRegWOW.reg
2014-12-03 21:20 . 2010-07-11 21:25 5208 ----a-w- c:\program files\KMSpico\cert\kmscert2010\InfoPath\InfoPathVLReg64.reg
2014-12-03 21:20 . 2010-07-11 21:25 5208 ----a-w- c:\program files\KMSpico\cert\kmscert2010\InfoPath\InfoPathVLReg32.reg
2014-12-03 21:20 . 2010-05-20 12:46 6599 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Groove\Groove_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:46 13395 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Groove\Groove_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:46 16598 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Groove\Groove_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:46 13384 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Groove\Groove_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:46 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:46 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:46 6671 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:46 11390 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:46 13427 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Groove\Groove_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-07-11 21:23 5400 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Groove\GrooveVLRegWOW.reg
2014-12-03 21:20 . 2010-07-11 21:23 5304 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Groove\GrooveVLReg64.reg
2014-12-03 21:20 . 2010-07-11 21:22 5304 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Groove\GrooveVLReg32.reg
2014-12-03 21:20 . 2010-05-20 12:45 6597 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Excel\Excel_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:45 13393 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Excel\Excel_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:45 16593 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Excel\Excel_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:45 13379 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Excel\Excel_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:45 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:45 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:45 6669 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:45 11385 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:45 13422 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Excel\Excel_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-07-11 21:20 5280 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Excel\ExcelVLRegWOW.reg
2014-12-03 21:20 . 2010-07-11 21:19 5184 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Excel\ExcelVLReg64.reg
2014-12-03 21:20 . 2010-07-11 21:19 5184 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Excel\ExcelVLReg32.reg
2014-12-03 21:20 . 2010-05-20 12:45 6599 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Access\Access_MAK.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:45 13395 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Access\Access_MAK.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:45 16598 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Access\Access_MAK.PHN.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:45 13384 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Access\Access_MAK.OOB.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:45 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.RAC_Pub.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:45 5278 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.RAC_Priv.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:45 6671 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.PPDLIC.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:45 11390 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.PL.xrm-ms
2014-12-03 21:20 . 2010-05-20 12:45 13427 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Access\Access_KMS_Client.OOB.xrm-ms
2014-12-03 21:20 . 2010-07-11 21:15 5288 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Access\AccessVLRegWOW.reg
2014-12-03 21:20 . 2010-07-11 21:14 5192 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Access\AccessVLReg64.reg
2014-12-03 21:20 . 2010-07-11 21:13 5192 ----a-w- c:\program files\KMSpico\cert\kmscert2010\Access\AccessVLReg32.reg
2014-12-03 21:20 . 2013-09-05 19:08 175 ----a-w- c:\program files\KMSpico\cert\installAll.cmd
2014-12-03 21:20 . 2013-02-09 11:54 10400 ----a-w- c:\program files\KMSpico\sounds\warning.mp3
2014-12-03 21:20 . 2013-02-09 08:18 9152 ----a-w- c:\program files\KMSpico\sounds\verified.mp3
2014-12-03 21:20 . 2013-02-09 08:18 12224 ----a-w- c:\program files\KMSpico\sounds\transfer.mp3
2014-12-03 21:20 . 2013-10-08 19:21 6307 ----a-w- c:\program files\KMSpico\sounds\processing.mp3
2014-12-03 21:20 . 2013-10-08 19:19 2851 ----a-w- c:\program files\KMSpico\sounds\inputok.mp3
2014-12-03 21:20 . 2013-10-08 19:40 2851 ----a-w- c:\program files\KMSpico\sounds\inputfailed.mp3
2014-12-03 21:20 . 2013-10-08 19:19 8995 ----a-w- c:\program files\KMSpico\sounds\incomingtransmission.mp3
2014-12-03 21:20 . 2013-10-08 19:22 8419 ----a-w- c:\program files\KMSpico\sounds\enterauthorizationcode.mp3
2014-12-03 21:20 . 2013-02-09 11:54 16640 ----a-w- c:\program files\KMSpico\sounds\diagnostic.mp3
2014-12-03 21:20 . 2013-02-09 08:18 5408 ----a-w- c:\program files\KMSpico\sounds\complete.mp3
2014-12-03 21:20 . 2013-02-09 11:54 9536 ----a-w- c:\program files\KMSpico\sounds\begin.mp3
2014-12-03 21:20 . 2013-02-09 12:24 4544 ----a-w- c:\program files\KMSpico\sounds\affirmative.mp3
2014-12-03 21:20 . 2013-10-24 12:53 146 ----a-w- c:\program files\KMSpico\scripts\UnInstall_Service.cmd
2014-12-03 21:20 . 2013-10-24 12:58 84 ----a-w- c:\program files\KMSpico\scripts\Silent.cmd
2014-12-03 21:20 . 2013-10-24 15:18 155 ----a-w- c:\program files\KMSpico\scripts\Log.cmd
2014-12-03 21:20 . 2013-11-20 08:41 373 ----a-w- c:\program files\KMSpico\scripts\Install_Task.cmd
2014-12-03 21:20 . 2013-10-24 12:57 213 ----a-w- c:\program files\KMSpico\scripts\Install_Service.cmd
2014-12-03 21:20 . 2014-12-13 20:43 2347 ----a-w- c:\program files\KMSpico\logs\Service_KMS.log
2014-12-03 21:20 . 2014-12-03 21:27 3783 ----a-w- c:\program files\KMSpico\logs\KMSELDI.log
2014-12-03 21:20 . 2014-12-13 08:32 1983 ----a-w- c:\program files\KMSpico\logs\AutoPico.log
2014-12-03 21:20 . 2013-10-08 22:38 25386 ----a-w- c:\program files\KMSpico\icons\Warning.png
2014-12-03 21:20 . 2013-10-08 22:38 45318 ----a-w- c:\program files\KMSpico\icons\Question.png
2014-12-03 21:20 . 2013-10-08 22:38 41228 ----a-w- c:\program files\KMSpico\icons\Information.png
2014-12-03 21:20 . 2013-10-08 22:38 57661 ----a-w- c:\program files\KMSpico\icons\Error.png
2014-12-03 21:20 . 2008-07-20 23:55 30208 ----a-w- c:\program files\KMSpico\UninsHs.exe
2014-12-03 21:20 . 2013-12-11 14:59 1050904 ----a-w- c:\program files\KMSpico\Service_KMS.exe
2014-12-03 21:20 . 2013-12-11 14:59 1175320 ----a-w- c:\program files\KMSpico\KMSELDI.exe
2014-12-03 21:20 . 2013-05-21 20:39 4947968 ----a-w- c:\program files\KMSpico\DevComponents.DotNetBar2.dll
2014-12-03 21:20 . 2013-12-11 14:59 1051416 ----a-w- c:\program files\KMSpico\AutoPico.exe
2014-12-03 21:20 . 2013-12-10 16:32 192 ----a-w- c:\program files\KMSpico\driver\UnInstallDriver.cmd
2014-12-03 21:20 . 2013-11-09 09:24 240536 ----a-w- c:\program files\KMSpico\driver\tap-windows-9.9.2_3.exe
2014-12-03 21:20 . 2014-12-03 21:26 106479 ----a-w- c:\program files\KMSpico\unins000.dat
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-11-12 16:19 1729744 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-11-12 16:19 1729744 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-11-12 16:19 1729744 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Raptr"="c:\progra~2\Raptr\raptrstub.exe" [2014-10-17 55568]
"HydraVisionDesktopManager"="c:\program files (x86)\ATI Technologies\HydraVision\HydraDM.exe" [2014-04-17 1967616]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
"DevidAgent"="d:\downloads\DevIDagent.exe" [2014-10-04 1078784]
"GoogleChromeAutoLaunch_6CCB82E9F9D31A691E8DB8EFEF07F82E"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2014-12-06 856904]
"KiesPreload"="c:\program files (x86)\Samsung\Kies\Kies.exe" [2014-07-25 1562264]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"MobileBroadband"="c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe" [2013-10-24 78336]
"VmbNotifier"="c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe" [2013-10-24 1893888]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2014-04-17 767200]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-02-25 1289296]
"Razer Synapse"="c:\program files (x86)\Razer\Synapse\RzSynapse.exe" [2014-10-24 585536]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2014-07-25 311616]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-12-14 5227112]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
eInstruction Device Manager.lnk - c:\program files (x86)\eInstruction\Device Manager\Launch.exe [2014-11-24 4912184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"HideSCAPower"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"midi3"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
R3 AthDfu;Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys;c:\windows\SYSNATIVE\Drivers\AthDfu.sys [x]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys;c:\windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 rzudd;Razer Mouse Driver;c:\windows\system32\DRIVERS\rzudd.sys;c:\windows\SYSNATIVE\DRIVERS\rzudd.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 usbrndis6;Adaptér USB RNDIS6;c:\windows\system32\DRIVERS\usb80236.sys;c:\windows\SYSNATIVE\DRIVERS\usb80236.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\BatteryCare\WinRing0x64.sys;c:\program files (x86)\BatteryCare\WinRing0x64.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer PowerSmart Manager\ePowerSvc.exe;c:\program files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [x]
S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
S2 tvnserver;TightVNC Server;c:\program files\TightVNC\tvnserver.exe;c:\program files\TightVNC\tvnserver.exe [x]
S2 VmbService;Vodafone Mobile Connect Service;c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe;c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - ASWRVRT
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-12-12 18:27 1087816 ----a-w- c:\program files (x86)\Google\Chrome\Application\39.0.2171.95\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-12-12 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1364881098-370321881-3166410940-1000Core.job
- c:\users\Martas\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-10 11:40]
.
2014-12-14 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1364881098-370321881-3166410940-1000UA.job
- c:\users\Martas\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-10 11:40]
.
2014-12-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-11-06 06:51]
.
2014-12-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-11-06 06:51]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-11-12 16:17 2334928 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-11-12 16:17 2334928 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-11-12 16:17 2334928 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-12-14 10:13 860984 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-02-23 168944]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-02-23 394224]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-02-23 418800]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-01-19 9996320]
"Acer ePower Management"="c:\program files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe" [2010-01-20 496160]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2009-10-28 388608]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do Microsoft Excelu - c:\progra~1\MICROS~2\Office15\EXCEL.EXE/3000
IE: Od&eslat do OneNotu - c:\progra~1\MICROS~2\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.1.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
AddRemove-{15134cb0-b767-4960-a911-f2d16ae54797} - c:\programdata\Package Cache\{15134cb0-b767-4960-a911-f2d16ae54797}\vcredist_x64.exe
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Google\Chrome Remote Desktop\39.0.2171.46\remoting_host.exe
c:\program files (x86)\Google\Chrome Remote Desktop\39.0.2171.46\remoting_host.exe
.
**************************************************************************
.
Celkový čas: 2014-12-14 11:49:19 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-12-14 10:49
ComboFix2.txt 2014-12-14 09:47
.
Před spuštěním: Volných bajtů: 535 122 796 544
Po spuštění: Volných bajtů: 534 838 104 064
.
- - End Of File - - 4C1801F250284B7A7AFA01C6ABE2C51D
A36C5E4F47E84449FF07ED3517B43A31

[Martinor]

aswMBR version 1.0.1.2252 Copyright(c) 2014 AVAST Software
Run date: 2014-12-14 11:50:54
-----------------------------
11:50:54.010 OS Version: Windows x64 6.1.7601 Service Pack 1
11:50:54.010 Number of processors: 4 586 0x2505
11:50:54.010 ComputerName: MARTAS-PC UserName: Martas
11:50:56.443 Initialize success
11:50:56.521 VM: initialized successfully
11:50:56.521 VM: Intel CPU supported virtualized
11:51:03.362 VM: not used
11:51:06.981 AVAST engine defs: 14121400
11:53:10.910 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
11:53:10.910 Disk 0 Vendor: WDC_WD7500BPKT-00PK4T0 01.01A01 Size: 715404MB BusType: 11
11:53:10.925 Disk 0 MBR read successfully
11:53:10.925 Disk 0 MBR scan
11:53:11.078 Disk 0 Windows 7 default MBR code
11:53:11.078 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
11:53:11.094 Disk 0 Boot: NTFS code=2
11:53:11.156 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 615303 MB offset 206848
11:53:11.187 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 99999 MB offset 1260347392
11:53:11.247 Disk 0 scanning C:\Windows\system32\drivers
11:53:20.786 Service scanning
11:53:38.399 Modules scanning
11:53:38.399 Disk 0 trace - called modules:
11:53:38.414 ntoskrnl.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0xfffffa80041262c0]<<sptd.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys
11:53:38.430 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8005256060]
11:53:38.446 3 CLASSPNP.SYS[fffff8800120143f] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa8004fcc680]
11:53:38.446 \Driver\atapi[0xfffffa8004fb0570] -> IRP_MJ_CREATE -> 0xfffffa80041262c0
11:53:39.600 AVAST engine scan C:\Windows
11:53:42.424 AVAST engine scan C:\Windows\system32
11:56:13.682 AVAST engine scan C:\Windows\system32\drivers
11:56:33.119 AVAST engine scan C:\Users\Martas
11:58:36.406 File: C:\Users\Martas\Downloads\zoek.exe **INFECTED** Win32:Malware-gen
11:58:38.107 AVAST engine scan C:\ProgramData
11:59:01.663 Disk 0 statistics 4240582/0/0 @ 9,49 MB/s
11:59:01.678 Scan finished successfully
12:01:40.908 Disk 0 MBR has been saved successfully to "C:\Users\Martas\Desktop\MBR.dat"
12:01:40.908 The log file has been saved successfully to "C:\Users\Martas\Desktop\aswMBR.txt"

[Martinor]

Mám zvláštní připojení v oblasti síťové, dělá mi to i u jiných wifi. Jsem si 100% jist, že mi to včera nedělalo

http://www.2i.cz/01fb0d27f4


EDIT : Už to zmizlo

[jaro3]

Hlavně si zlegalizuj Office!

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

V nouz. režimu:
Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

KillAll::
File::
c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1364881098-370321881-3166410940-1000Core.job
c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1364881098-370321881-3166410940-1000UA.job
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Folder::
c:\program files\KMSpico

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.