Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-12-2014
Ran by Jiří (administrator) on PC-JIRKA on 24-12-2014 01:10:56
Running from C:\Users\Jiří\Desktop
Loaded Profile: Jiří (Available profiles: Jiří)
Platform: Windows 8 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMMsg.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1114.318_x64__8wekyb3d8bbwe\LiveComm.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
() C:\Program Files\WindowsApps\25098DragonCz.Poznmky_1.0.0.1_neutral__3a9jx6nzdp6zp\Poznamky.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13427784 2013-03-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-14] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2014-12-14] (AVAST Software)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
BootExecute: autocheck autochk * aswBoot.exe /M:863ec05e6 /wow /dir:"C:\Program Files\AVAST Software\Avast"
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-409746375-2400753399-3449076528-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-409746375-2400753399-3449076528-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-409746375-2400753399-3449076528-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-409746375-2400753399-3449076528-1001 -> {1408DE8B-446B-4168-910F-8D43FC32837F} URL = http://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 81.200.55.50 81.200.55.34
FireFox:
========
FF ProfilePath: C:\Users\Jiří\AppData\Roaming\Mozilla\Firefox\Profiles\yctljdej.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Heuréka
FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q=
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: https://www.seznam.cz/
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF SearchPlugin: C:\Users\Jiří\AppData\Roaming\Mozilla\Firefox\Profiles\yctljdej.default\searchplugins\doplky-pro-firefox.xml
FF SearchPlugin: C:\Users\Jiří\AppData\Roaming\Mozilla\Firefox\Profiles\yctljdej.default\searchplugins\yahoo_ff.xml
FF Extension: Seznam lištička - C:\Users\Jiří\AppData\Roaming\Mozilla\Firefox\Profiles\yctljdej.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2014-12-23]
FF Extension: Adblock Plus - C:\Users\Jiří\AppData\Roaming\Mozilla\Firefox\Profiles\yctljdej.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-12-14]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-14]
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-12-14]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-14]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [228480 2013-04-15] (Qualcomm Atheros Commnucations)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-14] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-14] (Avast Software)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-20] (Acer Incorporated)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-16] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-08] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [431656 2013-03-15] (Acer Incorporate)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16032 2014-09-22] (Microsoft Corporation)
S2 0210721419376804mcinstcleanup; C:\Users\JI10BB~1\AppData\Local\Temp\021072~1.EXE -cleanup -nolog [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36520 2012-09-13] (Advanced Micro Devices, Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2013-04-21] (Microsoft Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-14] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-14] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-14] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-14] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-14] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-14] ()
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-04-15] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99800 2013-05-08] (Intel Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31984 2013-05-20] (Synaptics Incorporated)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-14] (Avast Software)
U3 catchme; \??\C:\ComboFix\catchme.sys [X]
R4 ccSet_NARA; \SystemRoot\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-24 01:10 - 2014-12-24 01:10 - 00030544 _____ () C:\Users\Jiří\Desktop\Addition.txt
2014-12-24 01:09 - 2014-12-24 01:10 - 00012389 _____ () C:\Users\Jiří\Desktop\FRST.txt
2014-12-24 01:09 - 2014-12-24 01:10 - 00000000 ____D () C:\FRST
2014-12-24 01:08 - 2014-12-24 00:40 - 02122240 _____ (Farbar) C:\Users\Jiří\Desktop\FRST64.exe
2014-12-24 00:54 - 2014-12-24 00:54 - 00022618 _____ () C:\ComboFix.txt
2014-12-24 00:40 - 2014-12-24 00:40 - 02122240 _____ (Farbar) C:\Users\Jiří\Downloads\FRST64.exe
2014-12-24 00:19 - 2014-12-24 00:19 - 00000000 ____D () C:\Program Files\McAfee
2014-12-24 00:01 - 2014-12-24 00:54 - 00000000 ____D () C:\Qoobox
2014-12-24 00:01 - 2014-12-24 00:09 - 00000000 ____D () C:\WINDOWS\erdnt
2014-12-24 00:01 - 2014-12-24 00:00 - 05603465 ____R (Swearware) C:\Users\Jiří\Desktop\ComboFix.exe
2014-12-24 00:01 - 2011-06-26 07:45 - 00256000 _____ () C:\WINDOWS\PEV.exe
2014-12-24 00:01 - 2010-11-07 18:20 - 00208896 _____ () C:\WINDOWS\MBR.exe
2014-12-24 00:01 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2014-12-24 00:01 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2014-12-24 00:01 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2014-12-24 00:01 - 2000-08-31 01:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2014-12-24 00:01 - 2000-08-31 01:00 - 00098816 _____ () C:\WINDOWS\sed.exe
2014-12-24 00:01 - 2000-08-31 01:00 - 00080412 _____ () C:\WINDOWS\grep.exe
2014-12-24 00:01 - 2000-08-31 01:00 - 00068096 _____ () C:\WINDOWS\zip.exe
2014-12-23 23:59 - 2014-12-24 00:00 - 05603465 _____ (Swearware) C:\Users\Jiří\Downloads\ComboFix.exe
2014-12-23 23:57 - 2014-12-23 23:57 - 00002770 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2014-12-23 23:57 - 2014-12-23 23:57 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-23 23:57 - 2014-12-23 23:57 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-23 23:56 - 2014-12-23 23:56 - 05317104 _____ (Piriform Ltd) C:\Users\Jiří\Downloads\ccsetup501.exe
2014-12-23 23:56 - 2014-12-23 23:56 - 00384529 _____ () C:\Users\Jiří\Downloads\Lista_centrum.exe
2014-12-23 23:53 - 2014-12-23 23:53 - 00733352 _____ () C:\Users\Jiří\Downloads\ccleaner-lista-centrumcz.exe
2014-12-23 23:33 - 2014-12-23 23:33 - 00388608 _____ (Trend Micro Inc.) C:\Users\Jiří\Downloads\HiJackThis.exe
2014-12-23 23:33 - 2014-12-23 23:33 - 00008659 _____ () C:\Users\Jiří\Downloads\hijackthis.log
2014-12-23 22:28 - 2014-12-23 22:28 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-12-23 22:27 - 2014-12-23 22:13 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-12-23 22:14 - 2014-12-23 22:29 - 00011288 _____ () C:\zoek-results.log
2014-12-23 22:13 - 2014-12-23 22:24 - 00000000 ____D () C:\zoek_backup
2014-12-23 22:10 - 2014-12-23 22:10 - 01295360 _____ () C:\Users\Jiří\Desktop\zoek.exe
2014-12-23 21:52 - 2014-12-23 21:52 - 04134156 _____ () C:\Users\Jiří\Downloads\zoek.zip
2014-12-23 15:35 - 2014-12-23 21:35 - 00037624 _____ () C:\WINDOWS\system32\Drivers\TrueSight.sys
2014-12-23 15:35 - 2014-12-23 15:35 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-12-23 15:34 - 2014-12-23 15:34 - 18423384 _____ () C:\Users\Jiří\Desktop\RogueKillerX64.exe
2014-12-23 15:32 - 2014-12-23 15:32 - 00001835 _____ () C:\Users\Jiří\Desktop\JRT.txt
2014-12-23 15:28 - 2014-12-23 15:28 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-12-23 15:24 - 2014-12-23 15:24 - 01707646 _____ (Thisisu) C:\Users\Jiří\Desktop\JRT.exe
2014-12-22 19:31 - 2014-12-22 19:31 - 00001111 _____ () C:\Users\Jiří\Desktop\txt.txt
2014-12-22 19:29 - 2014-12-22 19:29 - 00001111 _____ () C:\txt.txt
2014-12-22 18:42 - 2014-12-22 19:33 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-12-22 18:42 - 2014-12-22 18:42 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-22 18:42 - 2014-12-22 18:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-12-22 18:42 - 2014-12-22 18:42 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-22 18:42 - 2014-12-22 18:42 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-22 18:42 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-12-22 18:42 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-12-22 18:42 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-12-22 18:32 - 2014-12-23 10:19 - 00000000 ____D () C:\AdwCleaner
2014-12-22 18:31 - 2014-12-22 18:31 - 02173952 _____ () C:\Users\Jiří\Desktop\AdwCleaner.exe
2014-12-21 15:48 - 2014-12-23 21:28 - 00000000 ____D () C:\Users\Jiří\AppData\Local\CrashDumps
2014-12-21 15:45 - 2014-12-21 15:45 - 00307576 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-12-19 19:16 - 2008-02-11 11:33 - 00418816 _____ (c't Magazin für Computertechnik) C:\Users\Jiří\Desktop\h2testw.exe
2014-12-17 09:49 - 2014-12-17 09:49 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\OpenOffice
2014-12-16 22:11 - 2014-12-16 22:12 - 12167603 _____ () C:\Users\Jiří\Desktop\Disappearing Matchbox Trick, how it's done.flv
2014-12-16 21:50 - 2014-12-16 21:53 - 26798195 _____ () C:\Users\Jiří\Desktop\3 Rubber Band Tricks.flv
2014-12-16 18:44 - 2014-12-16 18:44 - 00000000 ____D () C:\Users\Jiří\AppData\Local\Cyberlink
2014-12-16 18:43 - 2014-12-16 18:43 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-12-16 18:41 - 2014-12-17 15:42 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\FLV and Media Player
2014-12-16 18:41 - 2014-12-16 18:41 - 00001325 _____ () C:\Users\Public\Desktop\FLV and Media Player.lnk
2014-12-16 18:41 - 2014-12-16 18:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Applian Technologies
2014-12-16 18:40 - 2014-12-16 18:40 - 00000000 ____D () C:\Program Files (x86)\Applian Technologies
2014-12-16 18:36 - 2014-12-16 18:36 - 03679794 _____ () C:\Users\Jiří\Desktop\Automatic-Call-Recorder-Pro-v4.02.apk
2014-12-16 18:13 - 2014-12-16 18:16 - 26839888 _____ () C:\Users\Jiří\Desktop\How to do the best money magic trick ever.flv
2014-12-15 21:40 - 2014-12-24 00:45 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-409746375-2400753399-3449076528-1001
2014-12-15 21:01 - 2014-12-17 19:15 - 00003118 _____ () C:\WINDOWS\comsetup.log
2014-12-15 20:53 - 2014-12-17 19:19 - 00045723 _____ () C:\WINDOWS\diagwrn.xml
2014-12-15 20:53 - 2014-12-17 19:19 - 00045723 _____ () C:\WINDOWS\diagerr.xml
2014-12-15 16:44 - 2014-12-15 16:44 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-12-15 16:22 - 2014-12-15 20:06 - 00000000 ____D () C:\WINDOWS\system32\AutoUpdateLicense
2014-12-15 16:11 - 2014-07-15 23:51 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-12-15 14:49 - 2013-06-01 12:34 - 02391280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-12-15 14:49 - 2013-06-01 11:24 - 02106176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-12-15 14:49 - 2013-06-01 10:25 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2014-12-15 14:49 - 2013-06-01 10:24 - 01453568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-12-15 14:49 - 2013-06-01 10:24 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2014-12-15 14:49 - 2013-06-01 10:24 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll
2014-12-15 14:49 - 2013-06-01 10:23 - 01842176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-12-15 14:49 - 2013-06-01 10:23 - 00680960 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe
2014-12-15 14:49 - 2013-06-01 10:22 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll
2014-12-15 14:49 - 2013-06-01 10:22 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeParserTask.exe
2014-12-15 14:49 - 2013-06-01 10:21 - 00729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2014-12-15 14:49 - 2013-06-01 10:21 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2014-12-15 14:49 - 2013-06-01 10:20 - 02219520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-12-15 14:49 - 2013-06-01 10:20 - 01527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-12-15 14:49 - 2013-06-01 10:20 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2014-12-15 14:49 - 2013-06-01 10:20 - 00583168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll
2014-12-15 14:49 - 2013-06-01 10:19 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2014-12-15 14:49 - 2013-06-01 04:08 - 00037632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthAvrcpTg.sys
2014-12-15 14:48 - 2014-11-19 08:29 - 00582552 _____ (Microsoft Corporation) C:\WINDOWS\system32\AutoUpdate.exe
2014-12-15 14:48 - 2014-11-19 08:29 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationUI.exe
2014-12-15 14:48 - 2014-10-22 04:34 - 00010777 _____ () C:\WINDOWS\system32\AutoconfigV2.cab
2014-12-15 14:48 - 2014-10-22 02:08 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-12-15 14:48 - 2014-10-22 02:08 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-15 14:48 - 2014-10-22 02:01 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-12-15 14:48 - 2014-10-22 02:01 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2014-12-15 14:48 - 2014-10-22 02:01 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-15 14:48 - 2014-10-22 02:00 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2014-12-15 14:48 - 2013-06-16 23:41 - 00997632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-12-15 14:47 - 2014-02-04 00:56 - 00332632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-12-15 14:47 - 2014-02-04 00:56 - 00278872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-12-15 14:47 - 2014-01-31 01:48 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2014-12-15 14:47 - 2014-01-31 01:06 - 00599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2014-12-15 14:47 - 2014-01-27 04:39 - 01939288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-12-15 14:47 - 2014-01-16 00:42 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-12-15 14:47 - 2014-01-03 00:35 - 00365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-12-15 14:47 - 2014-01-03 00:32 - 00523264 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-12-15 14:18 - 2014-03-25 00:42 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2014-12-15 14:18 - 2014-03-24 23:56 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-12-15 14:17 - 2013-10-05 07:10 - 00285016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-12-15 14:17 - 2013-08-30 06:19 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-12-15 14:17 - 2013-08-30 06:18 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-12-15 14:17 - 2013-08-30 00:48 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-12-15 14:17 - 2013-08-30 00:47 - 00302080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-12-15 14:14 - 2013-09-13 23:36 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ubpm.dll
2014-12-15 14:14 - 2013-09-13 23:33 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-12-15 14:14 - 2013-08-30 06:43 - 00061784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2014-12-15 14:14 - 2013-08-30 06:20 - 01173504 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2014-12-15 14:14 - 2013-08-30 00:48 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2014-12-15 14:14 - 2013-08-21 07:39 - 00465240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-12-15 14:14 - 2013-08-10 07:30 - 00151896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2014-12-15 14:14 - 2013-07-25 00:10 - 10799104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-12-15 14:14 - 2013-07-25 00:07 - 13661696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-12-15 14:12 - 2014-07-12 01:02 - 00478352 _____ () C:\WINDOWS\SysWOW64\locale.nls
2014-12-15 14:12 - 2014-07-12 01:00 - 00478352 _____ () C:\WINDOWS\system32\locale.nls
2014-12-15 14:12 - 2014-07-08 23:32 - 01539584 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2014-12-15 14:12 - 2014-07-04 11:52 - 00328000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-12-15 14:12 - 2014-07-03 02:59 - 01824784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-12-15 14:12 - 2014-07-03 01:30 - 01408952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-12-15 14:12 - 2014-06-28 08:01 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-12-15 14:12 - 2014-06-25 08:07 - 01023488 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-12-15 14:12 - 2014-06-18 00:23 - 02238464 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2014-12-15 14:12 - 2014-06-11 15:47 - 02842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2014-12-15 14:12 - 2014-06-11 05:40 - 02620928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2014-12-15 14:12 - 2014-06-10 23:44 - 01403896 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-12-15 14:12 - 2014-02-04 11:57 - 01271664 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-12-15 14:12 - 2013-07-09 09:04 - 00120144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2014-12-15 14:12 - 2013-07-09 07:18 - 00439488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-12-15 14:12 - 2013-07-09 05:25 - 00385768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2014-12-15 14:12 - 2013-07-09 04:57 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-12-15 14:12 - 2013-07-08 23:46 - 00543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2014-12-15 14:12 - 2013-07-08 23:46 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2014-12-15 14:12 - 2013-07-08 23:46 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanadvui.dll
2014-12-15 14:12 - 2013-07-08 23:45 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-12-15 14:12 - 2013-07-03 01:23 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2014-12-15 14:12 - 2013-07-03 01:22 - 02839552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-12-15 14:12 - 2013-07-03 01:11 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2014-12-15 14:12 - 2013-07-03 01:10 - 02273792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-12-15 14:12 - 2013-06-30 23:30 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\openfiles.exe
2014-12-15 14:12 - 2013-06-30 23:29 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\openfiles.exe
2014-12-15 14:12 - 2013-06-29 07:15 - 00195416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2014-12-15 14:12 - 2013-06-29 07:15 - 00125784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2014-12-15 14:12 - 2013-06-26 04:01 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2014-12-15 14:12 - 2013-06-26 03:59 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HdAudio.sys
2014-12-15 14:12 - 2013-06-24 23:54 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2014-12-15 14:12 - 2013-06-19 06:36 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmmbase.dll
2014-12-15 14:12 - 2013-06-19 06:36 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmm.dll
2014-12-15 14:12 - 2013-06-18 23:38 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmmbase.dll
2014-12-15 14:12 - 2013-06-18 23:38 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmm.dll
2014-12-15 14:12 - 2013-06-12 00:43 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2014-12-15 14:12 - 2013-06-12 00:26 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2014-12-15 14:12 - 2013-06-06 09:03 - 00119040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-12-15 14:12 - 2013-05-24 23:09 - 01217352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-12-15 14:11 - 2014-07-12 05:41 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRUM.DLL
2014-12-15 14:11 - 2014-07-12 05:41 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDYAK.DLL
2014-12-15 14:11 - 2014-07-12 05:41 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTAT.DLL
2014-12-15 14:11 - 2014-07-12 05:41 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRU1.DLL
2014-12-15 14:11 - 2014-07-12 05:41 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRU.DLL
2014-12-15 14:11 - 2014-07-12 05:41 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBASH.DLL
2014-12-15 14:11 - 2014-07-12 05:16 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRUM.DLL
2014-12-15 14:11 - 2014-07-12 05:16 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDYAK.DLL
2014-12-15 14:11 - 2014-07-12 05:16 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTAT.DLL
2014-12-15 14:11 - 2014-07-12 05:16 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRU1.DLL
2014-12-15 14:11 - 2014-07-12 05:16 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRU.DLL
2014-12-15 14:11 - 2014-07-12 05:15 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBASH.DLL
2014-12-15 14:11 - 2014-07-08 23:33 - 00181248 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe
2014-12-15 14:11 - 2014-07-08 23:32 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-12-15 14:11 - 2014-07-08 23:30 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2014-12-15 14:11 - 2014-07-07 06:52 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2014-12-15 14:11 - 2014-07-07 06:52 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2014-12-15 14:11 - 2014-06-28 07:57 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-12-15 14:11 - 2014-06-28 07:56 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-12-15 14:11 - 2014-06-25 08:09 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-12-15 14:11 - 2014-06-18 00:27 - 02032640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2014-12-15 14:11 - 2013-05-24 23:09 - 01093904 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-12-15 14:09 - 2014-05-03 07:34 - 06974808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-12-15 14:09 - 2013-08-10 06:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2014-12-15 14:09 - 2013-08-10 06:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll
2014-12-15 14:09 - 2013-08-10 04:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2014-12-15 14:09 - 2013-08-03 07:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2014-12-15 14:09 - 2013-08-03 07:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2014-12-15 14:09 - 2013-08-03 07:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2014-12-15 14:09 - 2013-08-03 06:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2014-12-15 14:09 - 2013-08-03 06:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2014-12-15 14:09 - 2013-08-03 06:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2014-12-15 14:09 - 2013-08-02 07:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2014-12-15 14:09 - 2013-08-02 06:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2014-12-15 14:09 - 2013-07-25 00:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2014-12-15 14:09 - 2013-07-25 00:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2014-12-15 14:09 - 2013-04-10 00:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2014-12-15 14:09 - 2013-04-09 23:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2014-12-15 14:08 - 2014-07-24 14:50 - 00447296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-12-15 14:08 - 2014-07-17 00:28 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll
2014-12-15 14:08 - 2014-07-16 23:59 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-12-15 14:08 - 2014-07-16 23:59 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2014-12-15 14:08 - 2014-07-12 07:45 - 01549824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2014-12-15 14:08 - 2014-07-12 05:36 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-12-15 14:08 - 2014-07-12 05:36 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-12-15 14:08 - 2014-07-12 05:34 - 00404480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-12-15 14:08 - 2014-07-12 05:34 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-12-15 14:08 - 2014-06-28 07:57 - 01341952 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-12-15 14:08 - 2014-06-28 03:23 - 01126400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-12-15 14:08 - 2014-05-29 05:04 - 00094552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2014-12-15 14:08 - 2014-04-29 23:32 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-12-15 14:08 - 2014-04-29 23:32 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-12-15 14:08 - 2014-03-01 10:47 - 01258496 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-12-15 14:08 - 2014-03-01 10:47 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll
2014-12-15 14:08 - 2014-03-01 09:07 - 01075200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpedit.dll
2014-12-15 14:08 - 2014-03-01 07:59 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-12-15 14:08 - 2014-02-15 05:15 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-12-15 14:08 - 2013-11-26 00:17 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-12-15 14:08 - 2013-10-31 06:56 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2014-12-15 14:08 - 2013-10-31 06:56 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2014-12-15 14:08 - 2013-10-31 05:01 - 00550400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2014-12-15 14:08 - 2013-10-31 04:42 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2014-12-15 14:08 - 2013-10-13 21:49 - 00100696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys
2014-12-15 14:08 - 2013-08-27 06:21 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2014-12-15 14:08 - 2013-08-27 06:19 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-12-15 14:08 - 2013-08-26 23:29 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2014-12-15 14:08 - 2013-08-26 23:28 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-12-15 13:19 - 2014-11-26 22:11 - 00714184 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-12-15 13:19 - 2014-11-26 22:11 - 00106440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-15 13:12 - 2014-12-15 13:24 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-12-15 13:09 - 2014-12-15 13:09 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-12-15 13:09 - 2014-12-15 13:09 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2014-12-15 12:40 - 2014-12-15 12:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-12-15 12:17 - 2014-12-15 12:19 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-12-15 12:17 - 2014-11-27 16:40 - 112710672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-12-15 12:13 - 2014-10-09 05:00 - 01519104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2014-12-15 12:13 - 2014-10-09 05:00 - 01484288 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-12-15 12:13 - 2014-10-09 05:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll
2014-12-15 12:13 - 2014-10-09 04:59 - 01195520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2014-12-15 12:13 - 2014-10-09 04:59 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll
2014-12-15 11:12 - 2014-06-10 23:44 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-12-15 11:12 - 2014-06-10 23:43 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-12-15 11:01 - 2014-12-15 11:02 - 00000000 ____D () C:\Program Files\Bandizip
2014-12-15 11:01 - 2014-12-15 11:01 - 00000928 _____ () C:\Users\Public\Desktop\Bandizip.lnk
2014-12-15 11:01 - 2014-12-15 11:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandizip
2014-12-15 04:16 - 2014-12-15 04:16 - 00000000 _____ () C:\Recovery.txt
2014-12-14 23:09 - 2014-12-14 23:09 - 00001138 _____ () C:\Users\Jiří\Desktop\save2pc Light.lnk
2014-12-14 23:09 - 2014-12-14 23:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\save2pc
2014-12-14 23:09 - 2014-12-14 23:09 - 00000000 ____D () C:\Program Files (x86)\FDRLab
2014-12-14 23:00 - 2014-12-14 23:00 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Auslogics
2014-12-14 22:57 - 2014-12-14 22:57 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\TuneUp Software
2014-12-14 22:35 - 2013-12-18 09:38 - 00042808 _____ (AVG) C:\WINDOWS\system32\uxtA1CD.tmp
2014-12-14 22:34 - 2014-12-14 22:34 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\AVG
2014-12-14 22:30 - 2014-12-14 22:36 - 00000000 ____D () C:\ProgramData\AVG
2014-12-14 22:30 - 2014-12-14 22:30 - 00000000 ____D () C:\Users\Jiří\AppData\Local\Skype
2014-12-14 22:29 - 2014-12-14 22:30 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Skype
2014-12-14 22:29 - 2014-12-14 22:29 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-12-14 22:29 - 2014-12-14 22:29 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-12-14 22:29 - 2014-12-14 22:29 - 00000000 ____D () C:\ProgramData\Skype
2014-12-14 22:29 - 2014-12-14 22:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-12-14 21:47 - 2014-12-14 21:47 - 00000247 _____ () C:\WINDOWS\system32\2014-12-14-20-47-56.084-aswFe.exe-6520.log
2014-12-14 21:47 - 2014-12-14 21:47 - 00000197 _____ () C:\WINDOWS\system32\2014-12-14-20-47-51.003-AvastVBoxSVC.exe-4656.log
2014-12-14 21:34 - 2014-12-14 21:34 - 00001100 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.0.lnk
2014-12-14 21:34 - 2014-12-14 21:34 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0
2014-12-14 21:33 - 2013-07-05 23:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
2014-12-14 21:33 - 2013-07-05 23:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2014-12-14 21:33 - 2013-06-22 06:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2014-12-14 21:33 - 2013-06-22 06:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2014-12-14 21:32 - 2013-07-06 01:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2014-12-14 21:32 - 2013-07-04 03:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2014-12-14 21:31 - 2014-12-14 21:32 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-12-14 21:31 - 2014-10-11 08:44 - 19764736 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-12-14 21:31 - 2014-10-11 06:57 - 17562112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-12-14 21:31 - 2014-10-09 04:59 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-12-14 21:31 - 2014-10-09 04:59 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-12-14 21:31 - 2014-10-09 04:58 - 00458240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-12-14 21:31 - 2014-09-22 06:38 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-12-14 21:31 - 2014-09-22 04:56 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-12-14 21:30 - 2014-10-03 02:21 - 00522728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-12-14 21:30 - 2014-10-02 23:29 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-12-14 21:30 - 2014-10-02 23:29 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2014-12-14 21:30 - 2014-10-02 23:29 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-12-14 21:30 - 2014-09-13 07:24 - 02233152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-12-14 21:30 - 2014-09-06 01:46 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-12-14 21:30 - 2014-09-03 03:48 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-12-14 21:30 - 2014-09-03 03:22 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-12-14 21:30 - 2014-08-29 05:17 - 02043392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-12-14 21:30 - 2014-08-29 05:17 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmWmiPl.dll
2014-12-14 21:30 - 2014-08-29 05:04 - 02837504 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-12-14 21:30 - 2014-08-29 05:04 - 00309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-12-14 21:30 - 2014-08-28 07:04 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll
2014-12-14 21:30 - 2014-08-28 07:04 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2014-12-14 21:30 - 2014-08-28 06:59 - 00616448 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2014-12-14 21:30 - 2014-08-28 06:59 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2014-12-14 21:30 - 2014-08-28 06:59 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSTIFF.dll
2014-12-14 21:30 - 2014-08-28 06:59 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXST30.dll
2014-12-14 21:30 - 2014-07-24 14:12 - 00328512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-12-14 21:30 - 2014-06-05 02:12 - 00678600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120_clr0400.dll
2014-12-14 21:30 - 2014-06-04 00:12 - 00536776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp120_clr0400.dll
2014-12-14 21:30 - 2013-10-19 06:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2014-12-14 21:30 - 2013-10-19 05:04 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2014-12-14 21:30 - 2013-07-01 23:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2014-12-14 21:30 - 2013-06-29 04:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2014-12-14 21:30 - 2013-05-04 05:48 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-12-14 21:29 - 2014-06-13 02:57 - 01453400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-12-14 21:29 - 2014-06-13 02:55 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-12-14 21:27 - 2013-03-02 11:39 - 00495336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2014-12-14 21:27 - 2013-03-02 09:23 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-12-14 21:27 - 2013-03-02 09:23 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2014-12-14 21:27 - 2013-03-02 09:23 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2014-12-14 21:27 - 2013-03-02 09:22 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-12-14 21:27 - 2013-03-02 09:21 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2014-12-14 21:27 - 2013-03-02 03:45 - 01149952 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-12-14 21:27 - 2013-03-02 03:45 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-12-14 21:27 - 2013-03-02 03:45 - 00951808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2014-12-14 21:27 - 2013-03-02 03:45 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2014-12-14 21:27 - 2013-03-02 03:45 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2014-12-14 21:27 - 2013-03-02 03:45 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-12-14 21:27 - 2013-03-02 03:45 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2014-12-14 21:27 - 2013-03-02 03:45 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2014-12-14 21:27 - 2013-03-02 03:44 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-12-14 21:27 - 2013-03-01 05:55 - 01175040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-12-14 21:26 - 2013-03-02 11:57 - 00077544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2014-12-14 21:26 - 2013-03-02 09:23 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncInfo.dll
2014-12-14 21:26 - 2013-03-02 09:21 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.cpl
2014-12-14 21:26 - 2013-03-02 09:21 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevDispItemProvider.dll
2014-12-14 21:26 - 2013-03-02 03:45 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsquirt.exe
2014-12-14 21:26 - 2013-03-02 03:45 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDPrintProxy.DLL
2014-12-14 21:26 - 2013-03-02 03:44 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2014-12-14 21:26 - 2013-03-02 03:44 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2014-12-14 21:26 - 2013-03-02 03:44 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\NdisImPlatform.dll
2014-12-14 21:26 - 2013-03-02 03:44 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevDispItemProvider.dll
2014-12-14 21:26 - 2013-03-02 03:43 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.cpl
2014-12-14 21:26 - 2013-03-02 03:15 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys
2014-12-14 21:26 - 2013-03-01 05:56 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2014-12-14 21:26 - 2013-03-01 05:56 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\monitor.sys
2014-12-14 21:23 - 2014-01-31 01:48 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2014-12-14 21:22 - 2014-12-14 21:22 - 00000000 ____D () C:\Program Files (x86)\redist
2014-12-14 21:22 - 2014-12-14 21:22 - 00000000 ____D () C:\Program Files (x86)\readmes
2014-12-14 21:22 - 2014-12-14 21:22 - 00000000 ____D () C:\Program Files (x86)\licenses
2014-12-14 21:22 - 2013-08-16 06:41 - 00058200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2014-12-14 21:22 - 2013-08-16 06:39 - 02371728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-12-14 21:22 - 2013-08-16 06:22 - 04917760 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2014-12-14 21:22 - 2013-08-16 06:21 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2014-12-14 21:22 - 2013-08-16 06:21 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2014-12-14 21:22 - 2013-08-16 06:21 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-12-14 21:22 - 2013-08-16 06:21 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2014-12-14 21:22 - 2013-08-16 06:21 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2014-12-14 21:22 - 2013-08-16 06:21 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll
2014-12-14 21:22 - 2013-08-15 23:43 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-12-14 21:22 - 2013-08-15 23:43 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2014-12-14 21:22 - 2013-08-15 23:43 - 00083968 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-12-14 21:22 - 2013-08-15 23:42 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2014-12-14 21:22 - 2013-08-15 23:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll
2014-12-14 21:21 - 2014-08-01 00:40 - 01287680 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-12-14 21:21 - 2014-06-18 00:27 - 01440256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-12-14 21:21 - 2014-06-18 00:24 - 01557504 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-12-14 21:16 - 2014-09-03 03:48 - 00510464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-12-14 21:16 - 2014-09-03 03:21 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-12-14 21:16 - 2013-10-10 12:53 - 00096600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-12-14 21:16 - 2013-10-10 10:21 - 01160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-12-14 21:16 - 2013-10-10 10:20 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-12-14 21:16 - 2013-06-10 20:16 - 00888832 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-12-14 21:16 - 2013-06-10 20:15 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-12-14 21:16 - 2013-06-10 20:10 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-12-14 21:16 - 2013-06-10 20:10 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-12-14 20:59 - 2014-09-22 06:53 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-12-14 20:59 - 2014-08-26 23:08 - 00270024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-12-14 20:58 - 2014-12-14 20:58 - 00002086 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-12-14 20:58 - 2014-12-14 20:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
Prosím o kontrolu Vyřešeno
Re: Prosím o kontrolu
2014-12-14 20:56 - 2014-08-09 09:29 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2014-12-14 20:55 - 2014-08-09 09:30 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-12-14 20:51 - 2014-12-14 20:51 - 00000000 ____D () C:\Users\Jiří\Desktop\Nová lednice
2014-12-14 20:42 - 2014-12-23 21:56 - 00001106 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-12-14 20:42 - 2014-12-23 21:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-12-14 20:42 - 2014-12-23 21:56 - 00000000 ____D () C:\Program Files (x86)\Revo Uninstaller Pro
2014-12-14 20:42 - 2014-12-14 20:42 - 00000000 ____D () C:\Users\Jiří\AppData\Local\VS Revo Group
2014-12-14 20:42 - 2014-12-14 20:42 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-12-14 20:42 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2014-12-14 20:41 - 2014-12-14 20:41 - 00000000 ____D () C:\ProgramData\FastStone
2014-12-14 20:40 - 2014-12-14 20:40 - 00001075 _____ () C:\Users\Public\Desktop\FastStone Capture.lnk
2014-12-14 20:40 - 2014-12-14 20:40 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\FastStone
2014-12-14 20:40 - 2014-12-14 20:40 - 00000000 ____D () C:\Users\Jiří\AppData\Local\FastStone
2014-12-14 20:40 - 2014-12-14 20:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture
2014-12-14 20:40 - 2014-12-14 20:40 - 00000000 ____D () C:\Program Files (x86)\FastStone Capture
2014-12-14 20:39 - 2014-12-14 20:42 - 00000247 _____ () C:\WINDOWS\system32\2014-12-14-19-39-35.038-aswFe.exe-2932.log
2014-12-14 20:38 - 2014-12-14 20:38 - 00001246 _____ () C:\Users\Jiří\Desktop\Auslogics Disk Defrag.lnk
2014-12-14 20:38 - 2014-12-14 20:38 - 00000197 _____ () C:\WINDOWS\system32\2014-12-14-19-38-54.071-AvastVBoxSVC.exe-3600.log
2014-12-14 20:38 - 2014-12-14 20:38 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Auslogics
2014-12-14 20:38 - 2014-12-14 20:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2014-12-14 20:38 - 2014-12-14 20:38 - 00000000 ____D () C:\Program Files (x86)\Auslogics
2014-12-14 20:34 - 2014-12-14 20:34 - 833840843 _____ () C:\WINDOWS\MEMORY.DMP
2014-12-14 20:34 - 2014-12-14 20:34 - 00285528 _____ () C:\WINDOWS\Minidump\121414-28171-01.dmp
2014-12-14 20:34 - 2014-12-14 20:34 - 00000000 ____D () C:\WINDOWS\Minidump
2014-12-14 20:32 - 2014-07-07 06:51 - 05982208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-12-14 20:32 - 2014-07-07 05:00 - 05095424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-12-14 20:31 - 2014-12-14 20:31 - 00000000 ____D () C:\Users\Jiří\AppData\Local\Macromedia
2014-12-14 20:31 - 2014-07-07 06:53 - 01125376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2014-12-14 20:31 - 2014-07-07 06:52 - 00724992 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2014-12-14 20:31 - 2014-07-07 06:52 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsta.dll
2014-12-14 20:31 - 2014-07-07 05:01 - 01049600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2014-12-14 20:31 - 2014-07-07 05:01 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsta.dll
2014-12-14 20:31 - 2014-07-07 04:59 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aaclient.dll
2014-12-14 20:31 - 2014-06-02 23:33 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2014-12-14 20:30 - 2014-10-18 09:44 - 00778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-12-14 20:30 - 2014-10-18 08:05 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-12-14 20:30 - 2014-07-24 04:33 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2014-12-14 20:30 - 2014-07-24 04:33 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2014-12-14 20:29 - 2014-12-05 02:41 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2014-12-14 20:29 - 2014-12-05 02:41 - 00740864 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2014-12-14 20:29 - 2014-12-05 02:41 - 00396288 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-12-14 20:29 - 2014-12-05 02:40 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-12-14 20:29 - 2014-12-03 02:48 - 01083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-12-14 20:29 - 2014-12-03 02:48 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2014-12-14 20:29 - 2014-12-03 02:48 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-12-14 20:29 - 2014-10-02 00:05 - 04068864 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-12-14 20:28 - 2014-12-24 00:49 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-12-14 20:28 - 2014-12-14 20:28 - 00003802 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-12-14 20:28 - 2014-10-11 08:45 - 10115072 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-12-14 20:28 - 2014-10-11 08:44 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-12-14 20:28 - 2014-10-11 08:44 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-12-14 20:28 - 2014-10-11 08:43 - 02307072 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-12-14 20:28 - 2014-10-11 06:58 - 08858624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-12-14 20:28 - 2014-10-11 06:57 - 02416640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-12-14 20:28 - 2014-10-11 06:57 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-12-14 20:28 - 2014-10-11 06:56 - 02037760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-12-14 20:28 - 2014-06-13 00:34 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-12-14 20:28 - 2014-06-13 00:29 - 02146304 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-12-14 20:28 - 2013-04-24 00:13 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2014-12-14 20:28 - 2013-04-24 00:12 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptnet.dll
2014-12-14 20:28 - 2013-04-23 23:56 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2014-12-14 20:28 - 2013-04-23 23:55 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptnet.dll
2014-12-14 20:25 - 2013-04-09 06:33 - 00489576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-12-14 20:25 - 2013-04-09 06:33 - 00446792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-12-14 20:25 - 2013-04-09 06:33 - 00253544 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-12-14 20:25 - 2013-04-09 06:20 - 00306952 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_10ec.dll
2014-12-14 20:25 - 2013-04-09 06:20 - 00086280 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2014-12-14 20:25 - 2013-04-09 06:18 - 00077960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdvm.dll
2014-12-14 20:25 - 2013-04-09 05:52 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2014-12-14 20:25 - 2013-04-09 05:52 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2014-12-14 20:25 - 2013-04-09 05:52 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2014-12-14 20:25 - 2013-04-09 05:52 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2014-12-14 20:25 - 2013-04-09 05:51 - 14267904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2014-12-14 20:25 - 2013-04-09 05:51 - 03552768 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2014-12-14 20:25 - 2013-04-09 05:51 - 00595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2014-12-14 20:25 - 2013-04-09 05:51 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-12-14 20:25 - 2013-04-09 05:51 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2014-12-14 20:25 - 2013-04-09 05:51 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-12-14 20:25 - 2013-04-09 05:50 - 02107904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2014-12-14 20:25 - 2013-04-09 05:50 - 00745984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2014-12-14 20:25 - 2013-04-09 05:50 - 00435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2014-12-14 20:25 - 2013-04-09 05:50 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenuineCenter.dll
2014-12-14 20:25 - 2013-04-09 05:50 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2014-12-14 20:25 - 2013-04-09 05:50 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2014-12-14 20:25 - 2013-04-09 05:50 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msshooks.dll
2014-12-14 20:25 - 2013-04-09 05:49 - 01444864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2014-12-14 20:25 - 2013-04-09 05:49 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-12-14 20:25 - 2013-04-09 05:49 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-12-14 20:25 - 2013-04-09 05:49 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhengine.dll
2014-12-14 20:25 - 2013-04-09 05:49 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2014-12-14 20:25 - 2013-04-09 05:49 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll
2014-12-14 20:25 - 2013-04-09 05:49 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2014-12-14 20:25 - 2013-04-09 05:49 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmifs.dll
2014-12-14 20:25 - 2013-04-09 03:34 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2014-12-14 20:25 - 2013-04-09 03:33 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2014-12-14 20:25 - 2013-04-09 03:32 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys
2014-12-14 20:25 - 2013-04-09 03:31 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2014-12-14 20:25 - 2013-04-09 00:44 - 00123880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2014-12-14 20:25 - 2013-04-09 00:37 - 00426024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-12-14 20:25 - 2013-04-09 00:37 - 00324368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-12-14 20:25 - 2013-04-08 22:52 - 11878912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2014-12-14 20:25 - 2013-04-08 22:52 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2014-12-14 20:25 - 2013-04-08 22:52 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2014-12-14 20:25 - 2013-04-08 22:52 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2014-12-14 20:25 - 2013-04-08 22:51 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 01593344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 01113600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00659456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00361984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssphtb.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fmifs.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msshooks.dll
2014-12-14 20:25 - 2013-04-05 00:30 - 00503080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2014-12-14 20:25 - 2013-03-15 23:05 - 00298456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-12-14 20:25 - 2013-03-15 23:05 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-12-14 20:25 - 2013-03-02 11:39 - 00069864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-12-14 20:24 - 2013-05-04 08:58 - 00120736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2014-12-14 20:24 - 2013-05-04 07:59 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
2014-12-14 20:24 - 2013-05-04 07:58 - 01332736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2014-12-14 20:24 - 2013-05-04 07:58 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2014-12-14 20:24 - 2013-05-04 07:58 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2014-12-14 20:24 - 2013-05-04 07:58 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2014-12-14 20:24 - 2013-05-04 07:58 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2014-12-14 20:24 - 2013-05-04 07:58 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-12-14 20:24 - 2013-05-04 07:57 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-12-14 20:24 - 2013-05-04 07:57 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-12-14 20:24 - 2013-05-04 07:57 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-12-14 20:24 - 2013-05-04 07:57 - 00501760 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2014-12-14 20:24 - 2013-05-04 07:57 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2014-12-14 20:24 - 2013-05-04 07:57 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-12-14 20:24 - 2013-05-04 07:57 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2014-12-14 20:24 - 2013-05-04 07:57 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\muifontsetup.dll
2014-12-14 20:24 - 2013-05-04 07:56 - 00419840 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2014-12-14 20:24 - 2013-05-04 05:58 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
2014-12-14 20:24 - 2013-05-04 05:57 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2014-12-14 20:24 - 2013-05-04 05:57 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll
2014-12-14 20:24 - 2013-05-04 05:57 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2014-12-14 20:24 - 2013-05-04 05:57 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll
2014-12-14 20:24 - 2013-05-04 05:57 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\muifontsetup.dll
2014-12-14 20:24 - 2013-05-04 05:56 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2014-12-14 20:24 - 2013-05-04 05:56 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-12-14 20:24 - 2013-05-04 05:56 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2014-12-14 20:24 - 2013-05-04 05:56 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
2014-12-14 20:24 - 2013-05-04 05:55 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2014-12-14 20:24 - 2013-05-04 05:51 - 00014848 _____ (Microsoft) C:\WINDOWS\system32\rars.rs
2014-12-14 20:24 - 2013-05-04 05:47 - 00427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2014-12-14 20:24 - 2013-05-04 05:10 - 00014848 _____ (Microsoft) C:\WINDOWS\SysWOW64\rars.rs
2014-12-14 20:24 - 2013-03-02 03:45 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhost.exe
2014-12-14 20:24 - 2013-03-02 03:45 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostex.exe
2014-12-14 20:23 - 2013-05-15 03:25 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2014-12-14 20:23 - 2013-05-15 03:25 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-12-14 20:23 - 2013-05-15 03:24 - 00793088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2014-12-14 20:23 - 2013-05-15 03:24 - 00482816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-12-14 20:22 - 2014-09-25 00:29 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-12-14 20:22 - 2014-09-25 00:29 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-12-14 20:22 - 2014-09-25 00:01 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-12-14 20:22 - 2014-09-25 00:01 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-12-14 20:22 - 2014-08-22 00:56 - 01418752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-12-14 20:22 - 2014-08-22 00:27 - 01845760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-12-14 20:22 - 2013-07-02 02:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-12-14 20:22 - 2013-07-02 02:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2014-12-14 20:22 - 2013-07-01 02:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-12-14 20:22 - 2013-07-01 02:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-12-14 20:22 - 2013-07-01 02:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-12-14 20:22 - 2013-07-01 02:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-12-14 20:22 - 2013-06-29 04:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-12-14 20:22 - 2013-06-29 04:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2014-12-14 20:21 - 2014-10-11 08:44 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-12-14 20:21 - 2014-10-11 06:41 - 00713728 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-12-14 20:21 - 2014-10-11 06:41 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2014-12-14 20:21 - 2014-10-11 06:05 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2014-12-14 20:21 - 2014-10-11 06:04 - 00713728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-12-14 20:21 - 2014-05-03 04:34 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-12-14 20:21 - 2013-04-11 23:30 - 01421312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2014-12-14 20:21 - 2013-04-11 23:22 - 01838080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-12-14 20:20 - 2014-10-23 13:47 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll
2014-12-14 20:20 - 2014-10-23 12:04 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll
2014-12-14 20:20 - 2014-06-20 00:35 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2014-12-14 20:20 - 2014-06-19 23:24 - 00694272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2014-12-14 20:19 - 2014-11-21 09:38 - 02237952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-12-14 20:19 - 2014-11-21 09:38 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-12-14 20:19 - 2014-11-21 09:37 - 01409536 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-12-14 20:19 - 2014-11-21 09:37 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2014-12-14 20:19 - 2014-11-21 09:37 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 15400960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 02655232 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-12-14 20:19 - 2014-11-21 08:17 - 01762816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-12-14 20:19 - 2014-11-21 08:17 - 01181696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-12-14 20:19 - 2014-11-21 08:17 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-12-14 20:19 - 2014-11-21 08:17 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 13758976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 02054656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 01441280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-12-14 20:19 - 2014-11-21 08:16 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-12-14 20:19 - 2014-11-21 08:00 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-12-14 20:19 - 2014-11-21 07:54 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-12-14 20:19 - 2014-11-21 05:30 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2014-12-14 20:19 - 2014-11-08 12:22 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2014-12-14 20:19 - 2014-11-08 12:21 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-12-14 20:19 - 2014-11-08 07:57 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2014-12-14 20:19 - 2014-11-08 07:56 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-12-14 20:19 - 2014-10-11 09:35 - 00171840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-12-14 20:19 - 2014-10-11 08:44 - 00588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2014-12-14 20:19 - 2014-10-11 08:43 - 01281536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-12-14 20:19 - 2014-10-11 06:57 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2014-12-14 20:19 - 2014-05-30 00:02 - 00439808 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2014-12-14 20:19 - 2014-04-12 10:10 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2014-12-14 20:19 - 2014-04-12 10:09 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2014-12-14 20:19 - 2014-04-12 10:09 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2014-12-14 20:19 - 2014-04-12 10:09 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2014-12-14 20:19 - 2014-04-12 10:08 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2014-12-14 20:19 - 2014-04-12 10:07 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2014-12-14 20:19 - 2014-04-12 08:23 - 00961536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2014-12-14 20:19 - 2014-04-12 08:23 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2014-12-14 20:19 - 2014-04-12 08:23 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll
2014-12-14 20:19 - 2014-04-12 08:23 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2014-12-14 20:19 - 2014-04-12 08:22 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2014-12-14 20:19 - 2014-04-12 07:58 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\workerdd.dll
2014-12-14 20:19 - 2014-03-04 00:07 - 00570216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-12-14 20:18 - 2014-11-21 09:36 - 19283456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-12-14 20:18 - 2014-11-21 09:36 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-12-14 20:18 - 2014-11-21 09:36 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-12-14 20:18 - 2014-11-21 09:36 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-12-14 20:18 - 2014-11-21 09:35 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-12-14 20:18 - 2014-11-21 08:17 - 14364672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-12-14 20:18 - 2014-11-21 08:17 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-12-14 20:18 - 2014-11-21 08:16 - 02861568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-12-14 20:18 - 2014-11-21 08:16 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-12-14 20:18 - 2014-06-05 18:56 - 00112984 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-12-14 20:18 - 2014-05-29 23:24 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-12-14 20:18 - 2013-11-20 01:15 - 03842560 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2014-12-14 20:18 - 2013-11-20 00:57 - 03288576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2014-12-14 20:18 - 2013-07-19 23:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-12-14 20:18 - 2013-07-19 23:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-12-14 20:18 - 2013-03-06 07:29 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-12-14 20:18 - 2012-11-10 05:22 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDWebAI.dll
2014-12-14 20:18 - 2012-11-10 05:22 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmHostAI.dll
2014-12-14 20:18 - 2012-11-10 05:20 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\appserverai.dll
2014-12-14 20:17 - 2014-11-06 07:50 - 01627648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-12-14 20:17 - 2014-11-06 06:03 - 01339392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2014-12-14 20:17 - 2014-06-06 15:06 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-12-14 20:17 - 2014-06-06 11:17 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-12-14 20:17 - 2013-09-28 04:35 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2014-12-14 20:17 - 2013-07-13 07:18 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-12-14 20:17 - 2013-07-13 07:16 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll
2014-12-14 20:17 - 2013-07-13 07:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2014-12-14 20:17 - 2013-07-13 07:15 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2014-12-14 20:17 - 2013-07-13 05:24 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-12-14 20:17 - 2013-07-13 05:23 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2014-12-14 20:17 - 2013-07-13 05:23 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2014-12-14 20:17 - 2013-05-27 00:17 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2014-12-14 20:17 - 2013-05-26 23:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2014-12-14 20:17 - 2013-05-25 04:15 - 00362496 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2014-12-14 20:17 - 2013-05-25 03:32 - 00300032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2014-12-14 20:17 - 2013-03-02 10:59 - 00411880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-12-14 20:17 - 2012-11-10 05:23 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-12-14 20:16 - 2013-10-10 10:32 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2014-12-14 20:16 - 2013-10-10 10:30 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2014-12-14 20:16 - 2013-10-10 10:30 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2014-12-14 20:16 - 2013-10-10 10:24 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2014-12-14 20:16 - 2013-10-10 10:23 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2014-12-14 20:16 - 2013-10-10 10:22 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2014-12-14 20:16 - 2013-10-10 10:22 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-12-14 20:16 - 2013-04-03 00:37 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdlg.dll
2014-12-14 20:16 - 2013-04-03 00:12 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdlg.dll
2014-12-14 20:16 - 2013-03-15 01:17 - 00861184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2014-12-14 20:15 - 2014-03-11 04:25 - 00100184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2014-12-14 20:15 - 2014-03-11 01:41 - 00559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2014-12-14 20:15 - 2014-03-11 01:41 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dimsroam.dll
2014-12-14 20:15 - 2014-03-11 01:39 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2014-12-14 20:15 - 2014-03-11 01:38 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-12-14 20:15 - 2014-03-11 01:38 - 00684032 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll
2014-12-14 20:15 - 2014-03-11 01:38 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-12-14 20:15 - 2014-03-11 01:38 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2014-12-14 20:15 - 2014-03-11 01:38 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dimsroam.dll
2014-12-14 20:15 - 2014-03-11 01:38 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2014-12-14 20:15 - 2014-03-10 04:05 - 00668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-12-14 20:15 - 2014-03-10 02:27 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2014-12-14 20:15 - 2013-11-01 06:38 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-12-14 20:15 - 2013-11-01 04:49 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-12-14 20:15 - 2013-08-23 08:22 - 02062848 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-12-14 20:15 - 2013-08-23 02:44 - 01711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-12-14 20:14 - 2014-07-16 00:03 - 01300992 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-12-14 20:14 - 2014-07-12 03:36 - 01023488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-12-14 20:14 - 2013-12-05 00:43 - 00583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2014-12-14 20:14 - 2013-12-05 00:37 - 00451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2014-12-14 20:14 - 2013-11-23 07:43 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2014-12-14 20:14 - 2013-11-23 06:05 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2014-12-14 20:14 - 2013-03-02 09:23 - 00375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-12-14 20:14 - 2013-03-02 03:44 - 01011200 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-12-14 20:13 - 2013-03-22 04:49 - 02382336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2014-12-14 20:13 - 2013-03-21 23:47 - 02851840 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2014-12-14 20:05 - 2014-10-30 08:20 - 01890816 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2014-12-14 20:05 - 2014-10-30 06:22 - 01569792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2014-12-14 19:59 - 2014-12-14 19:59 - 00001027 _____ () C:\Users\Public\Desktop\MozBackup.lnk
2014-12-14 19:59 - 2014-12-14 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup
2014-12-14 19:59 - 2014-12-14 19:59 - 00000000 ____D () C:\Program Files (x86)\MozBackup
2014-12-14 19:58 - 2014-12-22 17:43 - 00027136 ___SH () C:\Users\Jiří\Desktop\Thumbs.db
2014-12-14 19:53 - 2014-12-14 19:53 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-12-14 19:51 - 2014-12-14 20:58 - 00002098 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2014-12-14 19:51 - 2014-12-14 19:51 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Thunderbird
2014-12-14 19:51 - 2014-12-14 19:51 - 00000000 ____D () C:\Users\Jiří\AppData\Local\Thunderbird
2014-12-14 19:45 - 2014-12-14 19:45 - 00000247 _____ () C:\WINDOWS\system32\2014-12-14-18-45-49.005-aswFe.exe-1992.log
2014-12-14 19:45 - 2014-12-14 19:45 - 00000197 _____ () C:\WINDOWS\system32\2014-12-14-18-45-47.014-AvastVBoxSVC.exe-5068.log
2014-12-14 19:36 - 2014-12-14 19:37 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Mozilla
2014-12-14 19:36 - 2014-12-14 19:37 - 00000000 ____D () C:\Users\Jiří\AppData\Local\Mozilla
2014-12-14 19:34 - 2014-12-15 16:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-14 19:34 - 2014-12-14 19:34 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-12-14 19:34 - 2014-12-14 19:34 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-12-14 19:34 - 2014-12-14 19:34 - 00000000 ____D () C:\ProgramData\Mozilla
2014-12-14 19:34 - 2014-05-20 00:45 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-12-14 19:34 - 2014-05-20 00:24 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-12-14 19:34 - 2014-05-20 00:24 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-12-14 19:34 - 2013-08-15 23:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-12-14 19:33 - 2014-05-20 03:33 - 00059416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-12-14 19:33 - 2014-05-20 00:45 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-12-14 19:33 - 2014-05-20 00:24 - 03286528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-12-14 19:33 - 2014-05-20 00:24 - 01623040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-12-14 19:33 - 2014-05-20 00:24 - 00773632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-12-14 19:33 - 2014-05-20 00:24 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-12-14 19:33 - 2014-05-14 23:43 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-12-14 19:33 - 2014-05-14 23:43 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-12-14 19:33 - 2014-05-14 23:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-12-14 19:33 - 2014-05-14 23:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-12-14 19:33 - 2013-08-16 06:21 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-12-14 19:33 - 2013-08-16 06:21 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-12-14 19:32 - 2014-12-14 19:33 - 00000000 ____D () C:\WINDOWS\SysWOW64\vbox
2014-12-14 19:32 - 2014-12-14 19:33 - 00000000 ____D () C:\WINDOWS\system32\vbox
2014-12-14 19:32 - 2014-12-14 19:32 - 00001964 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-12-14 19:32 - 2014-12-14 19:32 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\AVAST Software
2014-12-14 19:32 - 2014-12-14 19:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-12-14 19:31 - 2014-12-21 15:48 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-12-14 19:31 - 2014-12-14 19:32 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2014-12-14 19:31 - 2014-12-14 19:31 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-12-14 19:31 - 2014-12-14 19:31 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-12-14 19:31 - 2014-12-14 19:31 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-12-14 19:31 - 2014-12-14 19:31 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-12-14 19:31 - 2014-12-14 19:31 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-12-14 19:31 - 2014-12-14 19:31 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-12-14 19:31 - 2014-12-14 19:31 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-12-14 19:31 - 2014-12-14 19:31 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-12-14 19:31 - 2014-12-14 19:31 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-12-14 19:29 - 2014-12-14 19:29 - 00000000 ____D () C:\Program Files\AVAST Software
2014-12-14 19:28 - 2014-12-14 19:29 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-12-14 19:26 - 2014-12-14 19:26 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-12-14 19:26 - 2014-12-14 19:26 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Atheros
2014-12-14 19:26 - 2014-12-14 19:26 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-12-14 19:25 - 2014-12-14 19:25 - 00001410 _____ () C:\Users\Jiří\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-12-14 19:25 - 2014-12-14 19:25 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Synaptics
2014-12-14 19:24 - 2014-12-14 19:24 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Macromedia
2014-12-14 19:24 - 2014-12-14 19:24 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Adobe
2014-12-14 19:23 - 2014-12-22 14:19 - 00000000 ____D () C:\Users\Jiří\AppData\Local\VirtualStore
2014-12-14 19:23 - 2014-12-17 10:21 - 00000000 ____D () C:\Users\Jiří\AppData\Local\Packages
2014-12-14 19:21 - 2014-12-14 19:25 - 00000000 ____D () C:\Users\Jiří
2014-12-14 19:21 - 2014-12-14 19:21 - 00000020 ___SH () C:\Users\Jiří\ntuser.ini
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Šablony
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Soubory cookie
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Poslední
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Okolní tiskárny
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Okolní síť
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Nabídka Start
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Dokumenty
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Documents\Obrázky
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Documents\Hudba
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Documents\Filmy
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Data aplikací
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\AppData\Local\Data aplikací
2014-12-14 19:21 - 2013-04-21 10:38 - 00000000 ___RD () C:\Users\Jiří\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-14 19:21 - 2012-07-26 09:13 - 00000000 ___RD () C:\Users\Jiří\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-14 19:21 - 2012-07-26 09:13 - 00000000 ___RD () C:\Users\Jiří\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-12-14 19:21 - 2012-07-26 09:13 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2021-10-21 14:36 - 2013-07-15 16:54 - 00000852 _____ () C:\WINDOWS\system32\Drivers\RTKHDRC.dat
2021-10-04 08:34 - 2013-07-15 16:54 - 00000712 _____ () C:\WINDOWS\system32\Drivers\RTMICEQ0.dat
2014-12-24 01:02 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-12-24 00:51 - 2012-07-26 06:26 - 00000215 _____ () C:\WINDOWS\system.ini
2014-12-24 00:33 - 2013-07-15 16:44 - 01846794 _____ () C:\WINDOWS\WindowsUpdate.log
2014-12-24 00:19 - 2013-05-29 08:02 - 00000000 ____D () C:\ProgramData\McAfee
2014-12-24 00:10 - 2012-07-26 06:37 - 00000000 __RHD () C:\Users\Default
2014-12-23 22:28 - 2012-07-26 08:22 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-12-23 22:27 - 2012-07-26 06:26 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-12-23 22:08 - 2013-05-29 08:02 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-12-23 22:08 - 2013-05-29 08:02 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-12-23 22:01 - 2012-07-26 09:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-12-23 20:33 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-12-23 16:35 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-12-23 11:27 - 2013-07-15 17:26 - 00727488 _____ () C:\WINDOWS\system32\perfh005.dat
2014-12-23 11:27 - 2013-07-15 17:26 - 00148006 _____ () C:\WINDOWS\system32\perfc005.dat
2014-12-23 11:27 - 2012-07-26 08:28 - 01714430 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-12-22 20:44 - 2013-07-15 17:15 - 00002914 _____ () C:\WINDOWS\System32\Tasks\Power Management
2014-12-22 14:09 - 2012-07-26 06:26 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-12-20 10:36 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-12-19 19:12 - 2012-07-26 08:21 - 00787465 _____ () C:\WINDOWS\setupact.log
2014-12-17 19:18 - 2012-07-26 09:13 - 00004323 _____ () C:\WINDOWS\DtcInstall.log
2014-12-17 19:11 - 2014-09-24 21:41 - 00000000 ____D () C:\$Windows.~BT
2014-12-16 18:44 - 2013-07-15 17:24 - 00000000 ____D () C:\ProgramData\CyberLink
2014-12-15 21:01 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\Registration
2014-12-15 16:22 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\WinStore
2014-12-15 16:22 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\SysWOW64\sk-SK
2014-12-15 16:22 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\system32\sk-SK
2014-12-15 16:22 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates
2014-12-15 16:22 - 2012-07-26 06:38 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-12-15 13:24 - 2013-05-29 07:46 - 00000000 ____D () C:\ProgramData\PRICache
2014-12-15 13:20 - 2012-07-26 06:37 - 00000000 ____D () C:\WINDOWS\servicing
2014-12-15 13:13 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-12-15 13:13 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-12-15 13:12 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-12-15 13:12 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-12-15 13:10 - 2012-07-26 09:12 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-12-15 13:10 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-15 13:10 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-15 13:10 - 2012-07-26 09:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-15 13:10 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-12-15 13:10 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-12-15 13:09 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AppCompat
2014-12-15 13:09 - 2012-07-26 08:52 - 00000000 ____D () C:\Program Files\Windows Journal
2014-12-15 13:06 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-12-15 13:06 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-12-15 13:06 - 2012-07-26 06:38 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
2014-12-15 13:06 - 2012-07-26 06:38 - 00000000 ____D () C:\WINDOWS\system32\Dism
2014-12-15 04:15 - 2012-07-26 09:13 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-12-14 19:28 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-12-14 19:26 - 2013-05-29 08:26 - 00000000 ____D () C:\OEM
2014-12-14 19:23 - 2012-07-26 09:12 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-12-14 19:20 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\rescache
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2013-05-29 07:35
==================== End Of Log ============================
2014-12-14 20:55 - 2014-08-09 09:30 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-12-14 20:51 - 2014-12-14 20:51 - 00000000 ____D () C:\Users\Jiří\Desktop\Nová lednice
2014-12-14 20:42 - 2014-12-23 21:56 - 00001106 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-12-14 20:42 - 2014-12-23 21:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-12-14 20:42 - 2014-12-23 21:56 - 00000000 ____D () C:\Program Files (x86)\Revo Uninstaller Pro
2014-12-14 20:42 - 2014-12-14 20:42 - 00000000 ____D () C:\Users\Jiří\AppData\Local\VS Revo Group
2014-12-14 20:42 - 2014-12-14 20:42 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-12-14 20:42 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2014-12-14 20:41 - 2014-12-14 20:41 - 00000000 ____D () C:\ProgramData\FastStone
2014-12-14 20:40 - 2014-12-14 20:40 - 00001075 _____ () C:\Users\Public\Desktop\FastStone Capture.lnk
2014-12-14 20:40 - 2014-12-14 20:40 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\FastStone
2014-12-14 20:40 - 2014-12-14 20:40 - 00000000 ____D () C:\Users\Jiří\AppData\Local\FastStone
2014-12-14 20:40 - 2014-12-14 20:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture
2014-12-14 20:40 - 2014-12-14 20:40 - 00000000 ____D () C:\Program Files (x86)\FastStone Capture
2014-12-14 20:39 - 2014-12-14 20:42 - 00000247 _____ () C:\WINDOWS\system32\2014-12-14-19-39-35.038-aswFe.exe-2932.log
2014-12-14 20:38 - 2014-12-14 20:38 - 00001246 _____ () C:\Users\Jiří\Desktop\Auslogics Disk Defrag.lnk
2014-12-14 20:38 - 2014-12-14 20:38 - 00000197 _____ () C:\WINDOWS\system32\2014-12-14-19-38-54.071-AvastVBoxSVC.exe-3600.log
2014-12-14 20:38 - 2014-12-14 20:38 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Auslogics
2014-12-14 20:38 - 2014-12-14 20:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2014-12-14 20:38 - 2014-12-14 20:38 - 00000000 ____D () C:\Program Files (x86)\Auslogics
2014-12-14 20:34 - 2014-12-14 20:34 - 833840843 _____ () C:\WINDOWS\MEMORY.DMP
2014-12-14 20:34 - 2014-12-14 20:34 - 00285528 _____ () C:\WINDOWS\Minidump\121414-28171-01.dmp
2014-12-14 20:34 - 2014-12-14 20:34 - 00000000 ____D () C:\WINDOWS\Minidump
2014-12-14 20:32 - 2014-07-07 06:51 - 05982208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-12-14 20:32 - 2014-07-07 05:00 - 05095424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-12-14 20:31 - 2014-12-14 20:31 - 00000000 ____D () C:\Users\Jiří\AppData\Local\Macromedia
2014-12-14 20:31 - 2014-07-07 06:53 - 01125376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2014-12-14 20:31 - 2014-07-07 06:52 - 00724992 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2014-12-14 20:31 - 2014-07-07 06:52 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsta.dll
2014-12-14 20:31 - 2014-07-07 05:01 - 01049600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2014-12-14 20:31 - 2014-07-07 05:01 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsta.dll
2014-12-14 20:31 - 2014-07-07 04:59 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aaclient.dll
2014-12-14 20:31 - 2014-06-02 23:33 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2014-12-14 20:30 - 2014-10-18 09:44 - 00778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-12-14 20:30 - 2014-10-18 08:05 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-12-14 20:30 - 2014-07-24 04:33 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2014-12-14 20:30 - 2014-07-24 04:33 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2014-12-14 20:29 - 2014-12-05 02:41 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2014-12-14 20:29 - 2014-12-05 02:41 - 00740864 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2014-12-14 20:29 - 2014-12-05 02:41 - 00396288 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-12-14 20:29 - 2014-12-05 02:40 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-12-14 20:29 - 2014-12-03 02:48 - 01083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-12-14 20:29 - 2014-12-03 02:48 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2014-12-14 20:29 - 2014-12-03 02:48 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-12-14 20:29 - 2014-10-02 00:05 - 04068864 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-12-14 20:28 - 2014-12-24 00:49 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-12-14 20:28 - 2014-12-14 20:28 - 00003802 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-12-14 20:28 - 2014-10-11 08:45 - 10115072 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-12-14 20:28 - 2014-10-11 08:44 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-12-14 20:28 - 2014-10-11 08:44 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-12-14 20:28 - 2014-10-11 08:43 - 02307072 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-12-14 20:28 - 2014-10-11 06:58 - 08858624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-12-14 20:28 - 2014-10-11 06:57 - 02416640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-12-14 20:28 - 2014-10-11 06:57 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-12-14 20:28 - 2014-10-11 06:56 - 02037760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-12-14 20:28 - 2014-06-13 00:34 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-12-14 20:28 - 2014-06-13 00:29 - 02146304 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-12-14 20:28 - 2013-04-24 00:13 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2014-12-14 20:28 - 2013-04-24 00:12 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptnet.dll
2014-12-14 20:28 - 2013-04-23 23:56 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2014-12-14 20:28 - 2013-04-23 23:55 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptnet.dll
2014-12-14 20:25 - 2013-04-09 06:33 - 00489576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-12-14 20:25 - 2013-04-09 06:33 - 00446792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-12-14 20:25 - 2013-04-09 06:33 - 00253544 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-12-14 20:25 - 2013-04-09 06:20 - 00306952 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_10ec.dll
2014-12-14 20:25 - 2013-04-09 06:20 - 00086280 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2014-12-14 20:25 - 2013-04-09 06:18 - 00077960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdvm.dll
2014-12-14 20:25 - 2013-04-09 05:52 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2014-12-14 20:25 - 2013-04-09 05:52 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2014-12-14 20:25 - 2013-04-09 05:52 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2014-12-14 20:25 - 2013-04-09 05:52 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2014-12-14 20:25 - 2013-04-09 05:51 - 14267904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2014-12-14 20:25 - 2013-04-09 05:51 - 03552768 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2014-12-14 20:25 - 2013-04-09 05:51 - 00595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2014-12-14 20:25 - 2013-04-09 05:51 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-12-14 20:25 - 2013-04-09 05:51 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2014-12-14 20:25 - 2013-04-09 05:51 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-12-14 20:25 - 2013-04-09 05:50 - 02107904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2014-12-14 20:25 - 2013-04-09 05:50 - 00745984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2014-12-14 20:25 - 2013-04-09 05:50 - 00435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2014-12-14 20:25 - 2013-04-09 05:50 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenuineCenter.dll
2014-12-14 20:25 - 2013-04-09 05:50 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2014-12-14 20:25 - 2013-04-09 05:50 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2014-12-14 20:25 - 2013-04-09 05:50 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msshooks.dll
2014-12-14 20:25 - 2013-04-09 05:49 - 01444864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2014-12-14 20:25 - 2013-04-09 05:49 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-12-14 20:25 - 2013-04-09 05:49 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-12-14 20:25 - 2013-04-09 05:49 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhengine.dll
2014-12-14 20:25 - 2013-04-09 05:49 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2014-12-14 20:25 - 2013-04-09 05:49 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll
2014-12-14 20:25 - 2013-04-09 05:49 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2014-12-14 20:25 - 2013-04-09 05:49 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmifs.dll
2014-12-14 20:25 - 2013-04-09 03:34 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2014-12-14 20:25 - 2013-04-09 03:33 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2014-12-14 20:25 - 2013-04-09 03:32 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys
2014-12-14 20:25 - 2013-04-09 03:31 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2014-12-14 20:25 - 2013-04-09 00:44 - 00123880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2014-12-14 20:25 - 2013-04-09 00:37 - 00426024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-12-14 20:25 - 2013-04-09 00:37 - 00324368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-12-14 20:25 - 2013-04-08 22:52 - 11878912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2014-12-14 20:25 - 2013-04-08 22:52 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2014-12-14 20:25 - 2013-04-08 22:52 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2014-12-14 20:25 - 2013-04-08 22:52 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2014-12-14 20:25 - 2013-04-08 22:51 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 01593344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 01113600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00659456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00361984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssphtb.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fmifs.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2014-12-14 20:25 - 2013-04-08 22:51 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msshooks.dll
2014-12-14 20:25 - 2013-04-05 00:30 - 00503080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2014-12-14 20:25 - 2013-03-15 23:05 - 00298456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-12-14 20:25 - 2013-03-15 23:05 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-12-14 20:25 - 2013-03-02 11:39 - 00069864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-12-14 20:24 - 2013-05-04 08:58 - 00120736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2014-12-14 20:24 - 2013-05-04 07:59 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
2014-12-14 20:24 - 2013-05-04 07:58 - 01332736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2014-12-14 20:24 - 2013-05-04 07:58 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2014-12-14 20:24 - 2013-05-04 07:58 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2014-12-14 20:24 - 2013-05-04 07:58 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2014-12-14 20:24 - 2013-05-04 07:58 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2014-12-14 20:24 - 2013-05-04 07:58 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-12-14 20:24 - 2013-05-04 07:57 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-12-14 20:24 - 2013-05-04 07:57 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-12-14 20:24 - 2013-05-04 07:57 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-12-14 20:24 - 2013-05-04 07:57 - 00501760 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2014-12-14 20:24 - 2013-05-04 07:57 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2014-12-14 20:24 - 2013-05-04 07:57 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-12-14 20:24 - 2013-05-04 07:57 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2014-12-14 20:24 - 2013-05-04 07:57 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\muifontsetup.dll
2014-12-14 20:24 - 2013-05-04 07:56 - 00419840 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2014-12-14 20:24 - 2013-05-04 05:58 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
2014-12-14 20:24 - 2013-05-04 05:57 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2014-12-14 20:24 - 2013-05-04 05:57 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll
2014-12-14 20:24 - 2013-05-04 05:57 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2014-12-14 20:24 - 2013-05-04 05:57 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll
2014-12-14 20:24 - 2013-05-04 05:57 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\muifontsetup.dll
2014-12-14 20:24 - 2013-05-04 05:56 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2014-12-14 20:24 - 2013-05-04 05:56 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-12-14 20:24 - 2013-05-04 05:56 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2014-12-14 20:24 - 2013-05-04 05:56 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
2014-12-14 20:24 - 2013-05-04 05:55 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2014-12-14 20:24 - 2013-05-04 05:51 - 00014848 _____ (Microsoft) C:\WINDOWS\system32\rars.rs
2014-12-14 20:24 - 2013-05-04 05:47 - 00427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2014-12-14 20:24 - 2013-05-04 05:10 - 00014848 _____ (Microsoft) C:\WINDOWS\SysWOW64\rars.rs
2014-12-14 20:24 - 2013-03-02 03:45 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhost.exe
2014-12-14 20:24 - 2013-03-02 03:45 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostex.exe
2014-12-14 20:23 - 2013-05-15 03:25 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2014-12-14 20:23 - 2013-05-15 03:25 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-12-14 20:23 - 2013-05-15 03:24 - 00793088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2014-12-14 20:23 - 2013-05-15 03:24 - 00482816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-12-14 20:22 - 2014-09-25 00:29 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-12-14 20:22 - 2014-09-25 00:29 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-12-14 20:22 - 2014-09-25 00:01 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-12-14 20:22 - 2014-09-25 00:01 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-12-14 20:22 - 2014-08-22 00:56 - 01418752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-12-14 20:22 - 2014-08-22 00:27 - 01845760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-12-14 20:22 - 2013-07-02 02:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-12-14 20:22 - 2013-07-02 02:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2014-12-14 20:22 - 2013-07-01 02:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-12-14 20:22 - 2013-07-01 02:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-12-14 20:22 - 2013-07-01 02:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-12-14 20:22 - 2013-07-01 02:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-12-14 20:22 - 2013-06-29 04:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-12-14 20:22 - 2013-06-29 04:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2014-12-14 20:21 - 2014-10-11 08:44 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-12-14 20:21 - 2014-10-11 06:41 - 00713728 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-12-14 20:21 - 2014-10-11 06:41 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2014-12-14 20:21 - 2014-10-11 06:05 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2014-12-14 20:21 - 2014-10-11 06:04 - 00713728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-12-14 20:21 - 2014-05-03 04:34 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-12-14 20:21 - 2013-04-11 23:30 - 01421312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2014-12-14 20:21 - 2013-04-11 23:22 - 01838080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-12-14 20:20 - 2014-10-23 13:47 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll
2014-12-14 20:20 - 2014-10-23 12:04 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll
2014-12-14 20:20 - 2014-06-20 00:35 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2014-12-14 20:20 - 2014-06-19 23:24 - 00694272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2014-12-14 20:19 - 2014-11-21 09:38 - 02237952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-12-14 20:19 - 2014-11-21 09:38 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-12-14 20:19 - 2014-11-21 09:37 - 01409536 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-12-14 20:19 - 2014-11-21 09:37 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2014-12-14 20:19 - 2014-11-21 09:37 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 15400960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 02655232 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-12-14 20:19 - 2014-11-21 09:36 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-12-14 20:19 - 2014-11-21 08:17 - 01762816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-12-14 20:19 - 2014-11-21 08:17 - 01181696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-12-14 20:19 - 2014-11-21 08:17 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-12-14 20:19 - 2014-11-21 08:17 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 13758976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 02054656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 01441280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-12-14 20:19 - 2014-11-21 08:16 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-12-14 20:19 - 2014-11-21 08:16 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-12-14 20:19 - 2014-11-21 08:00 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-12-14 20:19 - 2014-11-21 07:54 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-12-14 20:19 - 2014-11-21 05:30 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2014-12-14 20:19 - 2014-11-08 12:22 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2014-12-14 20:19 - 2014-11-08 12:21 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-12-14 20:19 - 2014-11-08 07:57 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2014-12-14 20:19 - 2014-11-08 07:56 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-12-14 20:19 - 2014-10-11 09:35 - 00171840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-12-14 20:19 - 2014-10-11 08:44 - 00588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2014-12-14 20:19 - 2014-10-11 08:43 - 01281536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-12-14 20:19 - 2014-10-11 06:57 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2014-12-14 20:19 - 2014-05-30 00:02 - 00439808 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2014-12-14 20:19 - 2014-04-12 10:10 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2014-12-14 20:19 - 2014-04-12 10:09 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2014-12-14 20:19 - 2014-04-12 10:09 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2014-12-14 20:19 - 2014-04-12 10:09 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2014-12-14 20:19 - 2014-04-12 10:08 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2014-12-14 20:19 - 2014-04-12 10:07 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2014-12-14 20:19 - 2014-04-12 08:23 - 00961536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2014-12-14 20:19 - 2014-04-12 08:23 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2014-12-14 20:19 - 2014-04-12 08:23 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll
2014-12-14 20:19 - 2014-04-12 08:23 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2014-12-14 20:19 - 2014-04-12 08:22 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2014-12-14 20:19 - 2014-04-12 07:58 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\workerdd.dll
2014-12-14 20:19 - 2014-03-04 00:07 - 00570216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-12-14 20:18 - 2014-11-21 09:36 - 19283456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-12-14 20:18 - 2014-11-21 09:36 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-12-14 20:18 - 2014-11-21 09:36 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-12-14 20:18 - 2014-11-21 09:36 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-12-14 20:18 - 2014-11-21 09:35 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-12-14 20:18 - 2014-11-21 08:17 - 14364672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-12-14 20:18 - 2014-11-21 08:17 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-12-14 20:18 - 2014-11-21 08:16 - 02861568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-12-14 20:18 - 2014-11-21 08:16 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-12-14 20:18 - 2014-06-05 18:56 - 00112984 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-12-14 20:18 - 2014-05-29 23:24 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-12-14 20:18 - 2013-11-20 01:15 - 03842560 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2014-12-14 20:18 - 2013-11-20 00:57 - 03288576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2014-12-14 20:18 - 2013-07-19 23:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-12-14 20:18 - 2013-07-19 23:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-12-14 20:18 - 2013-03-06 07:29 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-12-14 20:18 - 2012-11-10 05:22 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDWebAI.dll
2014-12-14 20:18 - 2012-11-10 05:22 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmHostAI.dll
2014-12-14 20:18 - 2012-11-10 05:20 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\appserverai.dll
2014-12-14 20:17 - 2014-11-06 07:50 - 01627648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-12-14 20:17 - 2014-11-06 06:03 - 01339392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2014-12-14 20:17 - 2014-06-06 15:06 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-12-14 20:17 - 2014-06-06 11:17 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-12-14 20:17 - 2013-09-28 04:35 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2014-12-14 20:17 - 2013-07-13 07:18 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-12-14 20:17 - 2013-07-13 07:16 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll
2014-12-14 20:17 - 2013-07-13 07:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2014-12-14 20:17 - 2013-07-13 07:15 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2014-12-14 20:17 - 2013-07-13 05:24 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-12-14 20:17 - 2013-07-13 05:23 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2014-12-14 20:17 - 2013-07-13 05:23 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2014-12-14 20:17 - 2013-05-27 00:17 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2014-12-14 20:17 - 2013-05-26 23:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2014-12-14 20:17 - 2013-05-25 04:15 - 00362496 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2014-12-14 20:17 - 2013-05-25 03:32 - 00300032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2014-12-14 20:17 - 2013-03-02 10:59 - 00411880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-12-14 20:17 - 2012-11-10 05:23 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-12-14 20:16 - 2013-10-10 10:32 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2014-12-14 20:16 - 2013-10-10 10:30 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2014-12-14 20:16 - 2013-10-10 10:30 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2014-12-14 20:16 - 2013-10-10 10:24 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2014-12-14 20:16 - 2013-10-10 10:23 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2014-12-14 20:16 - 2013-10-10 10:22 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2014-12-14 20:16 - 2013-10-10 10:22 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-12-14 20:16 - 2013-04-03 00:37 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdlg.dll
2014-12-14 20:16 - 2013-04-03 00:12 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdlg.dll
2014-12-14 20:16 - 2013-03-15 01:17 - 00861184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2014-12-14 20:15 - 2014-03-11 04:25 - 00100184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2014-12-14 20:15 - 2014-03-11 01:41 - 00559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2014-12-14 20:15 - 2014-03-11 01:41 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dimsroam.dll
2014-12-14 20:15 - 2014-03-11 01:39 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2014-12-14 20:15 - 2014-03-11 01:38 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-12-14 20:15 - 2014-03-11 01:38 - 00684032 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll
2014-12-14 20:15 - 2014-03-11 01:38 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-12-14 20:15 - 2014-03-11 01:38 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2014-12-14 20:15 - 2014-03-11 01:38 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dimsroam.dll
2014-12-14 20:15 - 2014-03-11 01:38 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2014-12-14 20:15 - 2014-03-10 04:05 - 00668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-12-14 20:15 - 2014-03-10 02:27 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2014-12-14 20:15 - 2013-11-01 06:38 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-12-14 20:15 - 2013-11-01 04:49 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-12-14 20:15 - 2013-08-23 08:22 - 02062848 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-12-14 20:15 - 2013-08-23 02:44 - 01711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-12-14 20:14 - 2014-07-16 00:03 - 01300992 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-12-14 20:14 - 2014-07-12 03:36 - 01023488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-12-14 20:14 - 2013-12-05 00:43 - 00583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2014-12-14 20:14 - 2013-12-05 00:37 - 00451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2014-12-14 20:14 - 2013-11-23 07:43 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2014-12-14 20:14 - 2013-11-23 06:05 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2014-12-14 20:14 - 2013-03-02 09:23 - 00375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-12-14 20:14 - 2013-03-02 03:44 - 01011200 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-12-14 20:13 - 2013-03-22 04:49 - 02382336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2014-12-14 20:13 - 2013-03-21 23:47 - 02851840 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2014-12-14 20:05 - 2014-10-30 08:20 - 01890816 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2014-12-14 20:05 - 2014-10-30 06:22 - 01569792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2014-12-14 19:59 - 2014-12-14 19:59 - 00001027 _____ () C:\Users\Public\Desktop\MozBackup.lnk
2014-12-14 19:59 - 2014-12-14 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup
2014-12-14 19:59 - 2014-12-14 19:59 - 00000000 ____D () C:\Program Files (x86)\MozBackup
2014-12-14 19:58 - 2014-12-22 17:43 - 00027136 ___SH () C:\Users\Jiří\Desktop\Thumbs.db
2014-12-14 19:53 - 2014-12-14 19:53 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-12-14 19:51 - 2014-12-14 20:58 - 00002098 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2014-12-14 19:51 - 2014-12-14 19:51 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Thunderbird
2014-12-14 19:51 - 2014-12-14 19:51 - 00000000 ____D () C:\Users\Jiří\AppData\Local\Thunderbird
2014-12-14 19:45 - 2014-12-14 19:45 - 00000247 _____ () C:\WINDOWS\system32\2014-12-14-18-45-49.005-aswFe.exe-1992.log
2014-12-14 19:45 - 2014-12-14 19:45 - 00000197 _____ () C:\WINDOWS\system32\2014-12-14-18-45-47.014-AvastVBoxSVC.exe-5068.log
2014-12-14 19:36 - 2014-12-14 19:37 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Mozilla
2014-12-14 19:36 - 2014-12-14 19:37 - 00000000 ____D () C:\Users\Jiří\AppData\Local\Mozilla
2014-12-14 19:34 - 2014-12-15 16:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-14 19:34 - 2014-12-14 19:34 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-12-14 19:34 - 2014-12-14 19:34 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-12-14 19:34 - 2014-12-14 19:34 - 00000000 ____D () C:\ProgramData\Mozilla
2014-12-14 19:34 - 2014-05-20 00:45 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-12-14 19:34 - 2014-05-20 00:24 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-12-14 19:34 - 2014-05-20 00:24 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-12-14 19:34 - 2013-08-15 23:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-12-14 19:33 - 2014-05-20 03:33 - 00059416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-12-14 19:33 - 2014-05-20 00:45 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-12-14 19:33 - 2014-05-20 00:24 - 03286528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-12-14 19:33 - 2014-05-20 00:24 - 01623040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-12-14 19:33 - 2014-05-20 00:24 - 00773632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-12-14 19:33 - 2014-05-20 00:24 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-12-14 19:33 - 2014-05-14 23:43 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-12-14 19:33 - 2014-05-14 23:43 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-12-14 19:33 - 2014-05-14 23:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-12-14 19:33 - 2014-05-14 23:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-12-14 19:33 - 2013-08-16 06:21 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-12-14 19:33 - 2013-08-16 06:21 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-12-14 19:32 - 2014-12-14 19:33 - 00000000 ____D () C:\WINDOWS\SysWOW64\vbox
2014-12-14 19:32 - 2014-12-14 19:33 - 00000000 ____D () C:\WINDOWS\system32\vbox
2014-12-14 19:32 - 2014-12-14 19:32 - 00001964 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-12-14 19:32 - 2014-12-14 19:32 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\AVAST Software
2014-12-14 19:32 - 2014-12-14 19:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-12-14 19:31 - 2014-12-21 15:48 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-12-14 19:31 - 2014-12-14 19:32 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2014-12-14 19:31 - 2014-12-14 19:31 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-12-14 19:31 - 2014-12-14 19:31 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-12-14 19:31 - 2014-12-14 19:31 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-12-14 19:31 - 2014-12-14 19:31 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-12-14 19:31 - 2014-12-14 19:31 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-12-14 19:31 - 2014-12-14 19:31 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-12-14 19:31 - 2014-12-14 19:31 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-12-14 19:31 - 2014-12-14 19:31 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-12-14 19:31 - 2014-12-14 19:31 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-12-14 19:29 - 2014-12-14 19:29 - 00000000 ____D () C:\Program Files\AVAST Software
2014-12-14 19:28 - 2014-12-14 19:29 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-12-14 19:26 - 2014-12-14 19:26 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-12-14 19:26 - 2014-12-14 19:26 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Atheros
2014-12-14 19:26 - 2014-12-14 19:26 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-12-14 19:25 - 2014-12-14 19:25 - 00001410 _____ () C:\Users\Jiří\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-12-14 19:25 - 2014-12-14 19:25 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Synaptics
2014-12-14 19:24 - 2014-12-14 19:24 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Macromedia
2014-12-14 19:24 - 2014-12-14 19:24 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Adobe
2014-12-14 19:23 - 2014-12-22 14:19 - 00000000 ____D () C:\Users\Jiří\AppData\Local\VirtualStore
2014-12-14 19:23 - 2014-12-17 10:21 - 00000000 ____D () C:\Users\Jiří\AppData\Local\Packages
2014-12-14 19:21 - 2014-12-14 19:25 - 00000000 ____D () C:\Users\Jiří
2014-12-14 19:21 - 2014-12-14 19:21 - 00000020 ___SH () C:\Users\Jiří\ntuser.ini
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Šablony
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Soubory cookie
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Poslední
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Okolní tiskárny
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Okolní síť
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Nabídka Start
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Dokumenty
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Documents\Obrázky
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Documents\Hudba
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Documents\Filmy
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\Data aplikací
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-12-14 19:21 - 2014-12-14 19:21 - 00000000 _SHDL () C:\Users\Jiří\AppData\Local\Data aplikací
2014-12-14 19:21 - 2013-04-21 10:38 - 00000000 ___RD () C:\Users\Jiří\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-14 19:21 - 2012-07-26 09:13 - 00000000 ___RD () C:\Users\Jiří\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-14 19:21 - 2012-07-26 09:13 - 00000000 ___RD () C:\Users\Jiří\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-12-14 19:21 - 2012-07-26 09:13 - 00000000 ____D () C:\Users\Jiří\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2021-10-21 14:36 - 2013-07-15 16:54 - 00000852 _____ () C:\WINDOWS\system32\Drivers\RTKHDRC.dat
2021-10-04 08:34 - 2013-07-15 16:54 - 00000712 _____ () C:\WINDOWS\system32\Drivers\RTMICEQ0.dat
2014-12-24 01:02 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-12-24 00:51 - 2012-07-26 06:26 - 00000215 _____ () C:\WINDOWS\system.ini
2014-12-24 00:33 - 2013-07-15 16:44 - 01846794 _____ () C:\WINDOWS\WindowsUpdate.log
2014-12-24 00:19 - 2013-05-29 08:02 - 00000000 ____D () C:\ProgramData\McAfee
2014-12-24 00:10 - 2012-07-26 06:37 - 00000000 __RHD () C:\Users\Default
2014-12-23 22:28 - 2012-07-26 08:22 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-12-23 22:27 - 2012-07-26 06:26 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-12-23 22:08 - 2013-05-29 08:02 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-12-23 22:08 - 2013-05-29 08:02 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-12-23 22:01 - 2012-07-26 09:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-12-23 20:33 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-12-23 16:35 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-12-23 11:27 - 2013-07-15 17:26 - 00727488 _____ () C:\WINDOWS\system32\perfh005.dat
2014-12-23 11:27 - 2013-07-15 17:26 - 00148006 _____ () C:\WINDOWS\system32\perfc005.dat
2014-12-23 11:27 - 2012-07-26 08:28 - 01714430 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-12-22 20:44 - 2013-07-15 17:15 - 00002914 _____ () C:\WINDOWS\System32\Tasks\Power Management
2014-12-22 14:09 - 2012-07-26 06:26 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-12-20 10:36 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-12-19 19:12 - 2012-07-26 08:21 - 00787465 _____ () C:\WINDOWS\setupact.log
2014-12-17 19:18 - 2012-07-26 09:13 - 00004323 _____ () C:\WINDOWS\DtcInstall.log
2014-12-17 19:11 - 2014-09-24 21:41 - 00000000 ____D () C:\$Windows.~BT
2014-12-16 18:44 - 2013-07-15 17:24 - 00000000 ____D () C:\ProgramData\CyberLink
2014-12-15 21:01 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\Registration
2014-12-15 16:22 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\WinStore
2014-12-15 16:22 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\SysWOW64\sk-SK
2014-12-15 16:22 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\system32\sk-SK
2014-12-15 16:22 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates
2014-12-15 16:22 - 2012-07-26 06:38 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-12-15 13:24 - 2013-05-29 07:46 - 00000000 ____D () C:\ProgramData\PRICache
2014-12-15 13:20 - 2012-07-26 06:37 - 00000000 ____D () C:\WINDOWS\servicing
2014-12-15 13:13 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-12-15 13:13 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-12-15 13:12 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-12-15 13:12 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-12-15 13:10 - 2012-07-26 09:12 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-12-15 13:10 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-15 13:10 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-15 13:10 - 2012-07-26 09:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-15 13:10 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-12-15 13:10 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-12-15 13:09 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AppCompat
2014-12-15 13:09 - 2012-07-26 08:52 - 00000000 ____D () C:\Program Files\Windows Journal
2014-12-15 13:06 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-12-15 13:06 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-12-15 13:06 - 2012-07-26 06:38 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
2014-12-15 13:06 - 2012-07-26 06:38 - 00000000 ____D () C:\WINDOWS\system32\Dism
2014-12-15 04:15 - 2012-07-26 09:13 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-12-14 19:28 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-12-14 19:26 - 2013-05-29 08:26 - 00000000 ____D () C:\OEM
2014-12-14 19:23 - 2012-07-26 09:12 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-12-14 19:20 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\rescache
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2013-05-29 07:35
==================== End Of Log ============================
Re: Prosím o kontrolu
omlouvám se...je toho už na mě moc...
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43298
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: Prosím o kontrolu
mople71: Ty máš souhlas , abys tu radil? Něco mi uniklo?
olinka123:
V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému
Toto otestuj na Virustotal
c:\windows\system32\AutoUpdate.exe
c:\windows\system32\WinSetupUI.dll
c:\windows\system32\uxtA1CD.tmp
Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.
Nebo na:
http://www.virscan.org/
Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.
olinka123:
V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému
Toto otestuj na Virustotal
c:\windows\system32\AutoUpdate.exe
c:\windows\system32\WinSetupUI.dll
c:\windows\system32\uxtA1CD.tmp
Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.
Nebo na:
http://www.virscan.org/
Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: Prosím o kontrolu
Na to musi byt souhlas? Tak to se omlouvam, chtel jsem pomoct. 
Ale kdyz uz tady je FRST, tak by se sluselo na nej udelat fixlist...
Ale kdyz uz tady je FRST, tak by se sluselo na nej udelat fixlist...Re: Prosím o kontrolu
Pokud zadám na Virustotal...soubor nenalezen 
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43298
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: Prosím o kontrolu
mople7: je to v pravidlech:
viewtopic.php?f=70&t=29204
jestli se chceš přihlásit , a máš znalosti z nějakého jiného fora tak napiš některému moderátorovi či rádci z security teamu.
Ty soubory najdeš? Pokud ano , zkopíruj si je na plochu a odtud je dej na virustotal.
viewtopic.php?f=70&t=29204
jestli se chceš přihlásit , a máš znalosti z nějakého jiného fora tak napiš některému moderátorovi či rádci z security teamu.
Ty soubory najdeš? Pokud ano , zkopíruj si je na plochu a odtud je dej na virustotal.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: Prosím o kontrolu
...asi jsem blbej,ale vůbec nechápu co mám dělat.Udělal jsem si na ploše TXT a tam dal c:\windows\system32\AutoUpdate.exe...c:\windows\system32\WinSetupUI.dll...c:\windows\system32\uxtA1CD.tmp...a dál nevím
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43298
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: Prosím o kontrolu
Prosím, postupuj následujícím způsobem:
Otevřít poznámkový blok (Start => Všechny programy => Příslušenství => Poznámkový blok).
Prosím, zkopíruj do něj celý obsah níže.
(Můžeš použít funkci „vybrat vše“, klepni pravým tlačítkem myši na levé horní políčko v otevřeném poznámkovém bloku a zvol „ Vložit“).
Ulož jej na na plochu jako fixlist.txt
Spusťt FRST a stiskni tlačítko „Fix“ (Opravit) jen jednou a čekej.
Nástroj vypracuje log na ploše (Fixlog.txt), prosím zkopíruj sem celý jeho obsah.
V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému
Toto otestuj na Virustotal
c:\windows\system32\AutoUpdate.exe
c:\windows\system32\WinSetupUI.dll
c:\windows\system32\uxtA1CD.tmp
Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.
Nebo na:
http://www.virscan.org/
V možnostech složky si zakaž zobrazování skrytých souborů a složek+ dej zatržítko skrýt chráněné soubory operačního systému
označené soubory zkopíruj na plochu a potom dej na virustotal.
Otevřít poznámkový blok (Start => Všechny programy => Příslušenství => Poznámkový blok).
Prosím, zkopíruj do něj celý obsah níže.
Kód: Vybrat vše
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-409746375-2400753399-3449076528-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-409746375-2400753399-3449076528-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-409746375-2400753399-3449076528-1001 -> {1408DE8B-446B-4168-910F-8D43FC32837F} URL = http://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
S2 0210721419376804mcinstcleanup; C:\Users\JI10BB~1\AppData\Local\Temp\021072~1.EXE -cleanup -nolog [X]
U3 catchme; \??\C:\ComboFix\catchme.sys [X]
R4 ccSet_NARA; \SystemRoot\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [X]
C:\Program Files\McAfee
C:\Qoobox
C:\WINDOWS\system32\uxtA1CD.tmp
C:\Users\Jiří\AppData\Roaming\AVG
C:\ProgramData\AVG
C:\ProgramData\McAfee
C:\Program Files\Common Files\mcafee
C:\Program Files (x86)\McAfee(Můžeš použít funkci „vybrat vše“, klepni pravým tlačítkem myši na levé horní políčko v otevřeném poznámkovém bloku a zvol „ Vložit“).
Ulož jej na na plochu jako fixlist.txt
Spusťt FRST a stiskni tlačítko „Fix“ (Opravit) jen jednou a čekej.
Nástroj vypracuje log na ploše (Fixlog.txt), prosím zkopíruj sem celý jeho obsah.
V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému
Toto otestuj na Virustotal
c:\windows\system32\AutoUpdate.exe
c:\windows\system32\WinSetupUI.dll
c:\windows\system32\uxtA1CD.tmp
Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.
Nebo na:
http://www.virscan.org/
V možnostech složky si zakaž zobrazování skrytých souborů a složek+ dej zatržítko skrýt chráněné soubory operačního systému
označené soubory zkopíruj na plochu a potom dej na virustotal.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: Prosím o kontrolu
tak jsem to udělal...
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43298
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: Prosím o kontrolu
A kde máš log?
Ty soubory na VT jsou kde?
Ty soubory na VT jsou kde?
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: Prosím o kontrolu
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 23-12-2014
Ran by Jiří at 2014-12-25 11:58:17 Run:1
Running from C:\Users\Jiří\Desktop
Loaded Profile: Jiří (Available profiles: Jiří)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-409746375-2400753399-3449076528-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-409746375-2400753399-3449076528-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-409746375-2400753399-3449076528-1001 -> {1408DE8B-446B-4168-910F-8D43FC32837F} URL = http://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
S2 0210721419376804mcinstcleanup; C:\Users\JI10BB~1\AppData\Local\Temp\021072~1.EXE -cleanup -nolog [X]
U3 catchme; \??\C:\ComboFix\catchme.sys [X]
R4 ccSet_NARA; \SystemRoot\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [X]
C:\Program Files\McAfee
C:\Qoobox
C:\WINDOWS\system32\uxtA1CD.tmp
C:\Users\Jiří\AppData\Roaming\AVG
C:\ProgramData\AVG
C:\ProgramData\McAfee
C:\Program Files\Common Files\mcafee
C:\Program Files (x86)\McAfee
*****************
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-409746375-2400753399-3449076528-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-409746375-2400753399-3449076528-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}" => Key deleted successfully.
HKCR\CLSID\{012E1000-F331-11DB-8314-0800200C9A66} => Key not found.
"HKU\S-1-5-21-409746375-2400753399-3449076528-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1408DE8B-446B-4168-910F-8D43FC32837F}" => Key deleted successfully.
HKCR\CLSID\{1408DE8B-446B-4168-910F-8D43FC32837F} => Key not found.
0210721419376804mcinstcleanup => Service not found.
catchme => Service deleted successfully.
ccSet_NARA => Service not found.
C:\Program Files\McAfee => Moved successfully.
C:\Qoobox => Moved successfully.
"C:\WINDOWS\system32\uxtA1CD.tmp" => File/Directory not found.
C:\Users\Jiří\AppData\Roaming\AVG => Moved successfully.
C:\ProgramData\AVG => Moved successfully.
C:\ProgramData\McAfee => Moved successfully.
C:\Program Files\Common Files\mcafee => Moved successfully.
C:\Program Files (x86)\McAfee => Moved successfully.
==== End of Fixlog 11:58:18 ====
Ran by Jiří at 2014-12-25 11:58:17 Run:1
Running from C:\Users\Jiří\Desktop
Loaded Profile: Jiří (Available profiles: Jiří)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-409746375-2400753399-3449076528-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-409746375-2400753399-3449076528-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-409746375-2400753399-3449076528-1001 -> {1408DE8B-446B-4168-910F-8D43FC32837F} URL = http://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
S2 0210721419376804mcinstcleanup; C:\Users\JI10BB~1\AppData\Local\Temp\021072~1.EXE -cleanup -nolog [X]
U3 catchme; \??\C:\ComboFix\catchme.sys [X]
R4 ccSet_NARA; \SystemRoot\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [X]
C:\Program Files\McAfee
C:\Qoobox
C:\WINDOWS\system32\uxtA1CD.tmp
C:\Users\Jiří\AppData\Roaming\AVG
C:\ProgramData\AVG
C:\ProgramData\McAfee
C:\Program Files\Common Files\mcafee
C:\Program Files (x86)\McAfee
*****************
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-409746375-2400753399-3449076528-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-409746375-2400753399-3449076528-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}" => Key deleted successfully.
HKCR\CLSID\{012E1000-F331-11DB-8314-0800200C9A66} => Key not found.
"HKU\S-1-5-21-409746375-2400753399-3449076528-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1408DE8B-446B-4168-910F-8D43FC32837F}" => Key deleted successfully.
HKCR\CLSID\{1408DE8B-446B-4168-910F-8D43FC32837F} => Key not found.
0210721419376804mcinstcleanup => Service not found.
catchme => Service deleted successfully.
ccSet_NARA => Service not found.
C:\Program Files\McAfee => Moved successfully.
C:\Qoobox => Moved successfully.
"C:\WINDOWS\system32\uxtA1CD.tmp" => File/Directory not found.
C:\Users\Jiří\AppData\Roaming\AVG => Moved successfully.
C:\ProgramData\AVG => Moved successfully.
C:\ProgramData\McAfee => Moved successfully.
C:\Program Files\Common Files\mcafee => Moved successfully.
C:\Program Files (x86)\McAfee => Moved successfully.
==== End of Fixlog 11:58:18 ====
Kdo je online
Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 112 hostů