dllhost.exe COM Surrogate

Zdravím ľudia, mám taký dosť záludný problém a to, že ak zapnem HDD a začne mi načítavať súbory, spustí sa mi taká sranda menom "dllhost.exe" a začne mi vyťažovať pamäť, ide si tak od nuly a za 5 minút má 90% a stále stúpa pokiaľ mi komp totálne nezblbne a nevie čo má robiť, ak ho vypnem, súbory na HDD mi načíta normálne ale po otvorení priečinku sa kamarát znova objavý, neviem sa ho zbaviť. Skenoval som PC Avastom 3x kompletne, skúsil som Trojan Remover, nejaký Fix od Microsoftu, aj nejaký Malwarebyte, ale on proste sa chce kamarátiť za každú cenu. Sem tam sa mi to isté deje aj s explorer.exe. Tiež mi žerie okolo 90% pamäte. Skúste mi nejako poradiť ako chlapca presvečím aby mi dal pokoj, lebo jediná možnosť vypínať proces cez správcu úloh je dosť neužitočné lebo stále sa objaví.

Stiahni si RSIT z http://images.malwareremoval.com/random/RSIT.exe pre 64 bit verzie http://images.malwareremoval.com/random/RSITx64.exe spusť daj continue chvíľu počkaj dokým sa vygeneruje log keď ho vygeneruje nájdeš ho na C:\rsit\log.txt log vlož sem

Je to na 2x, ma tam toho dosť

Logfile of random's system information tool 1.08 (written by random/random)
Run by Nicollo at 2013-05-04 15:42:47
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 109 GB (73%) free of 150 GB
Total RAM: 4087 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:42:49, on 4. 5. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files (x86)\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\trend micro\Nicollo.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Bonus.SSR.FR11] "C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun
O4 - HKLM\..\Run: [SAOB Monitor] C:\Program Files (x86)\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe
O4 - HKLM\..\Run: [TrueImageMonitor.exe] "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-74649345-4058580152-3856097594-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-74649345-4058580152-3856097594-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Logitech . Registrácia výrobku.lnk = C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe
O4 - Startup: YoWindow.lnk = C:\Program Files (x86)\YoWindow\yowindow.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: ABBYY FineReader 11 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.11.0) - ABBYY - C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe
O23 - Service: Služba Acronis Scheduler2 (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: ArcSoft Exchange Service (ADExchange) - ArcSoft, Inc. - C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Acronis Nonstop Backup Service (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10770 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe" -service
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
"C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-500c9b2d-15e8-4027-8437-53242a1e9d61 -SystemEventPortName:HostProcess-d68fe480-f9f9-45bb-b5c2-40686cb7b377 -IoCancelEventPortName:HostProcess-c2190f61-83bd-40ec-af65-ec00687b55d1 -NonStateChangingEventPortName:HostProcess-99a0aeb1-dd6b-4771-817c-4500f9bda41b -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:c187b6a3-54f0-42cf-8a8b-96d6d96c87ce -DeviceGroupId:WpdFsGroup
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\Logitech\SetPointP\SetPoint.exe" /launchGaming
KHALMNPR.EXE /API
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe"
"C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-74649345-4058580152-3856097594-10012_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-74649345-4058580152-3856097594-10012 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 528 532 540 65536 536
"C:\Users\Nicollo\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\AutoKMS.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-02 247640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-05-03 553376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-04-15 6305912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-05-03 211360]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-02 203320]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-04-15 4529272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-02 247640]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-02 203320]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2011-10-07 1744152]
"Služba Acronis Scheduler2"=C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2010-12-17 391144]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Pro Agent"=C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [2012-10-23 3108480]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2010-05-24 2439072]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
"Bonus.SSR.FR11"=C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [2011-08-30 925960]
"SAOB Monitor"=C:\Program Files (x86)\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe [2011-09-22 2537096]
"TrueImageMonitor.exe"=C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2011-10-13 5574456]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-05-02 4858456]

C:\Users\Nicollo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Logitech . Registrácia výrobku.lnk - C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe
YoWindow.lnk - C:\Program Files (x86)\YoWindow\yowindow.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2011-09-27 68376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2013-05-04 14:52:55 ----D---- C:\Program Files (x86)\Google
2013-05-04 14:52:54 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2013-05-04 14:52:53 ----A---- C:\Windows\system32\drivers\aswSP.sys
2013-05-04 14:52:50 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2013-05-04 14:52:48 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2013-05-04 14:52:46 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2013-05-04 14:52:43 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2013-05-04 14:52:40 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2013-05-04 14:52:35 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2013-05-04 14:52:34 ----A---- C:\Windows\system32\aswBoot.exe
2013-05-04 14:52:01 ----D---- C:\Program Files\AVAST Software
2013-05-04 14:46:08 ----D---- C:\ProgramData\AVAST Software
2013-05-04 14:32:46 ----D---- C:\rsit
2013-05-04 14:32:46 ----D---- C:\Program Files\trend micro
2013-05-04 10:45:44 ----A---- C:\Windows\system32\drivers\afcdp.sys
2013-05-04 10:45:41 ----D---- C:\Users\Nicollo\AppData\Roaming\413C8051-60E8-4FD3-95E7-1A7E00BC5A57
2013-05-04 10:45:36 ----A---- C:\Windows\system32\drivers\timntr.sys
2013-05-04 10:35:16 ----A---- C:\Windows\system32\drivers\tdrpm273.sys
2013-05-04 10:34:50 ----A---- C:\Windows\system32\drivers\snapman.sys
2013-05-04 10:20:42 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2013-05-04 10:20:42 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2013-05-04 10:20:42 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2013-05-04 10:20:42 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2013-05-04 10:20:42 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2013-05-04 10:20:42 ----A---- C:\Windows\system32\nvwgf2umx.dll
2013-05-04 10:20:42 ----A---- C:\Windows\system32\nvopencl.dll
2013-05-04 10:20:42 ----A---- C:\Windows\system32\nvoglv64.dll
2013-05-04 10:20:42 ----A---- C:\Windows\system32\nvinitx.dll
2013-05-04 10:20:42 ----A---- C:\Windows\system32\nvhdap64.dll
2013-05-04 10:20:42 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2013-05-04 10:20:42 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2013-05-04 10:20:41 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2013-05-04 10:20:41 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2013-05-04 10:20:41 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2013-05-04 10:20:41 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2013-05-04 10:20:41 ----A---- C:\Windows\system32\nvdispgenco6431422.dll
2013-05-04 10:20:41 ----A---- C:\Windows\system32\nvdispco6431422.dll
2013-05-04 10:20:41 ----A---- C:\Windows\system32\nvd3dumx.dll
2013-05-04 10:20:41 ----A---- C:\Windows\system32\nvcuvid.dll
2013-05-04 10:20:41 ----A---- C:\Windows\system32\nvcuvenc.dll
2013-05-04 10:20:41 ----A---- C:\Windows\system32\nvcuda.dll
2013-05-04 10:20:40 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2013-05-04 10:20:40 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2013-05-04 10:20:40 ----A---- C:\Windows\system32\nvcompiler.dll
2013-05-03 22:40:39 ----D---- C:\Users\Nicollo\AppData\Roaming\Malwarebytes
2013-05-03 22:40:24 ----D---- C:\ProgramData\Malwarebytes
2013-05-03 22:27:34 ----D---- C:\Users\Nicollo\AppData\Roaming\4E0DEA9E-3EB7-4B47-9DDA-70DF7B234443
2013-05-03 22:15:05 ----D---- C:\Program Files (x86)\Acronis
2013-05-03 21:58:30 ----D---- C:\Users\Nicollo\AppData\Roaming\Acronis
2013-05-03 21:58:30 ----D---- C:\ProgramData\Acronis
2013-05-03 21:37:44 ----D---- C:\ProgramData\ArcSoft
2013-05-03 21:37:39 ----D---- C:\Program Files (x86)\ArcSoft
2013-05-03 21:37:32 ----D---- C:\Users\Nicollo\AppData\Roaming\ArcSoft
2013-05-03 21:27:02 ----D---- C:\ProgramData\ABBYY
2013-05-03 21:27:02 ----D---- C:\Program Files (x86)\ABBYY FineReader 11
2013-05-03 21:22:43 ----D---- C:\Users\Nicollo\AppData\Roaming\ABBYY
2013-05-03 21:20:51 ----D---- C:\Program Files\ABBYY FineReader 11
2013-05-03 20:57:23 ----D---- C:\Users\Nicollo\AppData\Roaming\Leadertech
2013-05-03 20:56:49 ----A---- C:\Windows\system32\drivers\LNonPnP.sys
2013-05-03 20:56:24 ----D---- C:\ProgramData\Logishrd
2013-05-03 20:56:21 ----D---- C:\Program Files\Logitech
2013-05-03 20:54:58 ----D---- C:\Users\Nicollo\AppData\Roaming\Logitech
2013-05-03 20:54:57 ----D---- C:\Users\Nicollo\AppData\Roaming\Logishrd
2013-05-03 20:47:04 ----D---- C:\Users\Nicollo\AppData\Roaming\DC++
2013-05-03 20:45:27 ----D---- C:\Program Files (x86)\DC++
2013-05-03 20:37:18 ----A---- C:\Windows\system32\npDeployJava1.dll
2013-05-03 20:37:18 ----A---- C:\Windows\system32\javaws.exe
2013-05-03 20:37:18 ----A---- C:\Windows\system32\deployJava1.dll
2013-05-03 20:37:15 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2013-05-03 20:37:15 ----A---- C:\Windows\system32\javaw.exe
2013-05-03 20:37:15 ----A---- C:\Windows\system32\java.exe
2013-05-03 20:37:05 ----D---- C:\Program Files\Java
2013-05-03 20:31:32 ----D---- C:\Users\Nicollo\AppData\Roaming\NVIDIA
2013-05-03 20:06:53 ----D---- C:\Users\Nicollo\AppData\Roaming\Skype
2013-05-03 20:06:46 ----RD---- C:\Program Files (x86)\Skype
2013-05-03 20:06:44 ----D---- C:\ProgramData\Skype
2013-05-03 19:35:44 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2013-05-03 19:34:23 ----D---- C:\Program Files\Adobe
2013-05-03 19:32:22 ----D---- C:\Program Files (x86)\Adobe
2013-05-03 19:30:15 ----D---- C:\Program Files\Common Files\Adobe
2013-05-03 19:26:17 ----D---- C:\Users\Nicollo\AppData\Roaming\GHISLER
2013-05-03 19:26:17 ----D---- C:\Program Files\Total Commander
2013-05-03 19:22:44 ----HD---- C:\ProgramData\CanonBJ
2013-05-03 19:17:34 ----A---- C:\Windows\AutoKMS.ini
2013-05-03 19:02:30 ----D---- C:\Program Files\Microsoft Silverlight
2013-05-03 19:02:30 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-05-03 18:40:13 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2013-05-03 18:40:11 ----D---- C:\Users\Nicollo\AppData\Roaming\DAEMON Tools Pro
2013-05-03 18:40:05 ----D---- C:\Program Files (x86)\DAEMON Tools Pro
2013-05-03 18:39:40 ----D---- C:\ProgramData\DAEMON Tools Pro
2013-05-03 18:38:11 ----D---- C:\Program Files (x86)\Your Uninstaller! 7
2013-05-03 18:38:00 ----D---- C:\Users\Nicollo\AppData\Roaming\URSoft
2013-05-03 18:38:00 ----AD---- C:\ProgramData\TEMP
2013-05-03 18:35:18 ----A---- C:\Windows\system32\RTNUninst64.dll
2013-05-03 18:34:09 ----A---- C:\Windows\system32\VIASysFx.dll
2013-05-03 18:34:09 ----A---- C:\Windows\system32\VIAPropPageExt.dll
2013-05-03 18:34:09 ----A---- C:\Windows\system32\ViaMicArrayPropPageExt.dll
2013-05-03 18:34:09 ----A---- C:\Windows\system32\ViaMicArrayAPO.dll
2013-05-03 18:34:09 ----A---- C:\Windows\system32\nQPropPageExt.dll
2013-05-03 18:34:09 ----A---- C:\Windows\system32\nQAPO.dll
2013-05-03 18:34:09 ----A---- C:\Windows\system32\Dts2PropPageExt.dll
2013-05-03 18:34:09 ----A---- C:\Windows\system32\drivers\viahduaa.sys
2013-05-03 18:34:08 ----A---- C:\Windows\system32\Dts2APO.dll
2013-05-03 18:33:53 ----N---- C:\Windows\difxapi.dll
2013-05-03 18:32:27 ----A---- C:\Windows\Language_trs.ini
2013-05-03 18:32:26 ----A---- C:\Windows\Ascd_tmp.ini
2013-05-03 18:24:34 ----D---- C:\Users\Nicollo\AppData\Roaming\Winamp
2013-05-03 18:24:34 ----D---- C:\Program Files (x86)\Winamp
2013-05-03 18:22:45 ----D---- C:\Users\Nicollo\AppData\Roaming\Mirillis
2013-05-03 18:22:45 ----D---- C:\ProgramData\Mirillis
2013-05-03 18:22:29 ----D---- C:\Program Files (x86)\Splash PRO EX
2013-05-03 18:19:04 ----D---- C:\ProgramData\WinZip
2013-05-03 18:19:01 ----D---- C:\Program Files (x86)\WinZip
2013-05-03 18:13:41 ----D---- C:\Users\Nicollo\AppData\Roaming\WinRAR
2013-05-03 18:13:32 ----D---- C:\Program Files\WinRAR
2013-05-03 18:06:20 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-05-03 18:06:19 ----D---- C:\Windows\SYSWOW64\Macromed
2013-05-03 18:06:17 ----D---- C:\Windows\system32\Macromed
2013-05-03 18:05:24 ----D---- C:\Users\Nicollo\AppData\Roaming\YoWindow
2013-05-03 18:05:23 ----D---- C:\ProgramData\YoWindow
2013-05-03 18:05:13 ----D---- C:\Program Files (x86)\YoWindow
2013-05-03 18:02:38 ----D---- C:\Program Files\uTorrent
2013-05-03 17:57:49 ----D---- C:\Users\Nicollo\AppData\Roaming\uTorrent
2013-05-03 17:44:02 ----D---- C:\Program Files (x86)\Microsoft Synchronization Services
2013-05-03 17:43:09 ----D---- C:\Windows\PCHEALTH
2013-05-03 17:43:09 ----D---- C:\Program Files (x86)\Microsoft Sync Framework
2013-05-03 17:43:09 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-05-03 17:40:47 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2013-05-03 17:40:06 ----D---- C:\Program Files\Microsoft Office
2013-05-03 17:39:35 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2013-05-03 17:38:56 ----D---- C:\Program Files (x86)\Microsoft Office
2013-05-03 17:38:55 ----D---- C:\ProgramData\Microsoft Help
2013-05-03 17:38:42 ----RHD---- C:\MSOCache
2013-05-03 17:35:45 ----D---- C:\Users\Nicollo\AppData\Roaming\IrfanView
2013-05-03 17:35:44 ----D---- C:\Program Files (x86)\IrfanView
2013-05-03 17:18:24 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-05-03 17:18:24 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-05-03 17:18:24 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-05-03 17:18:23 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys
2013-05-03 17:18:23 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-05-03 17:18:23 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2013-05-03 17:18:22 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2013-05-03 17:18:22 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-05-03 17:18:22 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2013-05-03 17:18:22 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-05-03 17:18:22 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2013-05-03 17:18:22 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-05-03 17:18:22 ----A---- C:\Windows\system32\wksprtPS.dll
2013-05-03 17:18:22 ----A---- C:\Windows\system32\wksprt.exe
2013-05-03 17:18:22 ----A---- C:\Windows\system32\TSWbPrxy.exe
2013-05-03 17:18:22 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-05-03 17:18:22 ----A---- C:\Windows\system32\tsgqec.dll
2013-05-03 17:18:22 ----A---- C:\Windows\system32\rdpudd.dll
2013-05-03 17:18:22 ----A---- C:\Windows\system32\rdpendp_winip.dll
2013-05-03 17:18:22 ----A---- C:\Windows\system32\mstsc.exe
2013-05-03 17:18:22 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2013-05-03 17:18:22 ----A---- C:\Windows\system32\aaclient.dll
2013-05-03 17:18:21 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-05-03 17:18:21 ----A---- C:\Windows\system32\rdpcorets.dll
2013-05-03 17:18:21 ----A---- C:\Windows\system32\mstscax.dll
2013-05-03 17:15:33 ----D---- C:\Windows\SYSWOW64\Wat
2013-05-03 17:15:32 ----D---- C:\Windows\system32\Wat
2013-05-03 17:12:44 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-05-03 17:12:44 ----A---- C:\Windows\system32\qdvd.dll
2013-05-03 16:50:32 ----A---- C:\Windows\system32\MRT.exe
2013-05-03 16:49:22 ----A---- C:\Windows\system32\Wdfres.dll
2013-05-03 16:49:22 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-05-03 16:49:22 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-05-03 16:45:19 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-05-03 16:45:19 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-05-03 16:45:19 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-05-03 16:45:19 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-05-03 16:45:19 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-05-03 16:45:19 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-05-03 16:45:19 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-05-03 16:45:19 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-05-03 16:45:19 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-05-03 16:45:19 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-05-03 16:45:19 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-05-03 16:45:19 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-05-03 16:45:19 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-05-03 16:45:19 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-05-03 16:45:19 ----A---- C:\Windows\system32\elshyph.dll
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-05-03 16:45:18 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-05-03 16:45:17 ----A---- C:\Windows\SYSWOW64\url.dll
2013-05-03 16:45:17 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-05-03 16:45:17 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-05-03 16:45:17 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-05-03 16:45:17 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-05-03 16:45:17 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-05-03 16:45:17 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-05-03 16:45:17 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-05-03 16:45:17 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\wininet.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\webcheck.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\urlmon.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\url.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-05-03 16:45:17 ----A---- C:\Windows\system32\msrating.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\msls31.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\mshtmled.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\licmgr10.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\jsproxy.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\inseng.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\iesetup.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\iertutil.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\iernonce.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\iedkcs32.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\ieapfltr.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\ie4uinit.exe
2013-05-03 16:45:17 ----A---- C:\Windows\system32\icardie.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\dxtrans.dll
2013-05-03 16:45:17 ----A---- C:\Windows\system32\dxtmsft.dll
2013-05-03 16:45:16 ----A---- C:\Windows\system32\wextract.exe
2013-05-03 16:45:16 ----A---- C:\Windows\system32\vbscript.dll
2013-05-03 16:45:16 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-05-03 16:45:16 ----A---- C:\Windows\system32\pngfilt.dll
2013-05-03 16:45:16 ----A---- C:\Windows\system32\occache.dll
2013-05-03 16:45:16 ----A---- C:\Windows\system32\mshtmler.dll
2013-05-03 16:45:16 ----A---- C:\Windows\system32\mshtml.dll
2013-05-03 16:45:16 ----A---- C:\Windows\system32\mshta.exe
2013-05-03 16:45:16 ----A---- C:\Windows\system32\msfeedssync.exe
2013-05-03 16:45:16 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-05-03 16:45:16 ----A---- C:\Windows\system32\msfeeds.dll
2013-05-03 16:45:16 ----A---- C:\Windows\system32\jscript9.dll
2013-05-03 16:45:16 ----A---- C:\Windows\system32\jscript.dll
2013-05-03 16:45:16 ----A---- C:\Windows\system32\imgutil.dll
2013-05-03 16:45:16 ----A---- C:\Windows\system32\iexpress.exe
2013-05-03 16:45:16 ----A---- C:\Windows\system32\ieUnatt.exe
2013-05-03 16:45:16 ----A---- C:\Windows\system32\ieui.dll
2013-05-03 16:45:16 ----A---- C:\Windows\system32\iesysprep.dll
2013-05-03 16:45:16 ----A---- C:\Windows\system32\iepeers.dll
2013-05-03 16:45:16 ----A---- C:\Windows\system32\ieframe.dll
2013-05-03 16:45:16 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-03 16:44:12 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-03 16:44:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-05-03 16:44:11 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\XpsPrint.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\WMPhoto.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\UIAnimation.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\FntCache.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\dxgi.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\DWrite.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\d3d11.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\d3d10warp.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\d3d10level9.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\d3d10core.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\d3d10_1.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\d3d10.dll
2013-05-03 16:44:11 ----A---- C:\Windows\system32\d2d1.dll
2013-05-03 16:40:43 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2013-05-03 16:40:43 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2013-05-03 16:40:43 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2013-05-03 16:40:14 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-05-03 16:40:10 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-05-03 16:40:10 ----A---- C:\Windows\system32\tzres.dll
2013-05-03 16:40:00 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2013-05-03 16:40:00 ----A---- C:\Windows\system32\ntshrui.dll
2013-05-03 16:39:59 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2013-05-03 16:39:59 ----A---- C:\Windows\system32\CPFilters.dll
2013-05-03 16:39:58 ----A---- C:\Windows\SYSWOW64\sbe.dll
2013-05-03 16:39:58 ----A---- C:\Windows\system32\sbe.dll
2013-05-03 16:39:56 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2013-05-03 16:39:56 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2013-05-03 16:39:56 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2013-05-03 16:39:56 ----A---- C:\Windows\system32\odbctrac.dll
2013-05-03 16:39:56 ----A---- C:\Windows\system32\odbccu32.dll
2013-05-03 16:39:56 ----A---- C:\Windows\system32\odbccr32.dll
2013-05-03 16:39:56 ----A---- C:\Windows\system32\odbccp32.dll
2013-05-03 16:39:55 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2013-05-03 16:39:55 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2013-05-03 16:39:54 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2013-05-03 16:39:54 ----A---- C:\Windows\system32\xmllite.dll
2013-05-03 16:39:53 ----A---- C:\Windows\SYSWOW64\webio.dll
2013-05-03 16:39:53 ----A---- C:\Windows\system32\webio.dll
2013-05-03 16:39:49 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2013-05-03 16:39:49 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2013-05-03 16:39:49 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2013-05-03 16:39:49 ----A---- C:\Windows\system32\dhcpcore6.dll
2013-05-03 16:39:47 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-05-03 16:39:47 ----A---- C:\Windows\system32\win32spl.dll
2013-05-03 16:39:45 ----A---- C:\Windows\explorer.exe
2013-05-03 16:39:44 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-05-03 16:39:43 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2013-05-03 16:39:43 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2013-05-03 16:39:43 ----A---- C:\Windows\system32\mfc42u.dll
2013-05-03 16:39:43 ----A---- C:\Windows\system32\mfc42.dll
2013-05-03 16:39:41 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2013-05-03 16:39:41 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-05-03 16:38:04 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2013-05-03 16:38:04 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-05-03 16:38:04 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-05-03 16:38:04 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-05-03 16:38:04 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-05-03 16:38:04 ----A---- C:\Windows\system32\drivers\usbd.sys
2013-05-03 16:38:04 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-05-03 16:37:54 ----A---- C:\Windows\SYSWOW64\esent.dll
2013-05-03 16:37:54 ----A---- C:\Windows\system32\fsutil.exe
2013-05-03 16:37:54 ----A---- C:\Windows\system32\esent.dll
2013-05-03 16:37:54 ----A---- C:\Windows\system32\drivers\amdxata.sys
2013-05-03 16:37:53 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2013-05-03 16:37:53 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2013-05-03 16:37:53 ----A---- C:\Windows\system32\drivers\storport.sys
2013-05-03 16:37:53 ----A---- C:\Windows\system32\drivers\nvstor.sys
2013-05-03 16:37:53 ----A---- C:\Windows\system32\drivers\nvraid.sys
2013-05-03 16:37:53 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2013-05-03 16:37:53 ----A---- C:\Windows\system32\drivers\amdsata.sys
2013-05-03 16:32:53 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-05-03 16:15:37 ----A---- C:\Windows\system32\win32k.sys
2013-05-03 06:54:18 ----D---- C:\ProgramData\Adobe
2013-05-03 06:53:42 ----D---- C:\Program Files\CCleaner
2013-05-02 23:12:30 ----A---- C:\Windows\system32\nvvsvc.exe
2013-05-02 23:12:30 ----A---- C:\Windows\system32\nvsvcr.dll
2013-05-02 23:12:30 ----A---- C:\Windows\system32\nvsvc64.dll
2013-05-02 23:12:30 ----A---- C:\Windows\system32\nvshext.dll
2013-05-02 23:12:30 ----A---- C:\Windows\system32\nvmctray.dll
2013-05-02 23:12:30 ----A---- C:\Windows\system32\nvcpl.dll
2013-05-02 23:12:14 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2013-05-02 23:12:14 ----A---- C:\Windows\system32\OpenCL.dll
2013-05-02 23:09:43 ----D---- C:\Program Files\Common Files\logishrd
2013-05-02 23:09:22 ----HD---- C:\Windows\system32\CanonIJ Uninstaller Information
2013-05-02 23:09:10 ----A---- C:\Windows\system32\CNQ9601O.DLL
2013-05-02 23:09:10 ----A---- C:\Windows\system32\CNQ9601L.DLL
2013-05-02 23:09:10 ----A---- C:\Windows\system32\CNQ9601I.DLL
2013-05-02 23:09:10 ----A---- C:\Windows\system32\CNQ9601C.DLL
2013-05-02 23:09:10 ----A---- C:\Windows\system32\CNHMCA6.DLL
2013-05-02 23:04:11 ----A---- C:\Windows\system32\browserchoice.exe
2013-05-02 23:00:08 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2013-05-02 23:00:08 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-05-02 23:00:08 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-05-02 23:00:08 ----A---- C:\Windows\system32\fontsub.dll
2013-05-02 23:00:08 ----A---- C:\Windows\system32\atmlib.dll
2013-05-02 23:00:08 ----A---- C:\Windows\system32\atmfd.dll
2013-05-02 22:59:42 ----A---- C:\Windows\system32\WUDFx.dll
2013-05-02 22:59:42 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-05-02 22:59:42 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-05-02 22:59:42 ----A---- C:\Windows\system32\WUDFHost.exe
2013-05-02 22:59:42 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-05-02 22:59:42 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-05-02 22:59:42 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-05-02 22:58:11 ----A---- C:\Windows\SYSWOW64\wmi.dll
2013-05-02 22:58:11 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-05-02 22:58:11 ----A---- C:\Windows\system32\wmi.dll
2013-05-02 22:58:11 ----A---- C:\Windows\system32\imagehlp.dll
2013-05-02 22:58:11 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2013-05-02 22:55:41 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-05-02 22:55:25 ----A---- C:\Windows\SYSWOW64\tquery.dll
2013-05-02 22:55:25 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2013-05-02 22:55:25 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2013-05-02 22:55:25 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2013-05-02 22:55:25 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2013-05-02 22:55:25 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2013-05-02 22:55:25 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2013-05-02 22:55:25 ----A---- C:\Windows\SYSWOW64\mssph.dll
2013-05-02 22:55:25 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2013-05-02 22:55:25 ----A---- C:\Windows\system32\tquery.dll
2013-05-02 22:55:25 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-05-02 22:55:25 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-05-02 22:55:25 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-05-02 22:55:25 ----A---- C:\Windows\system32\mssvp.dll
2013-05-02 22:55:25 ----A---- C:\Windows\system32\mssrch.dll
2013-05-02 22:55:25 ----A---- C:\Windows\system32\mssphtb.dll
2013-05-02 22:55:25 ----A---- C:\Windows\system32\mssph.dll
2013-05-02 22:55:25 ----A---- C:\Windows\system32\msscntrs.dll
2013-05-02 22:55:21 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2013-05-02 22:55:17 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2013-05-02 22:55:17 ----A---- C:\Windows\system32\psisdecd.dll
2013-05-02 22:55:12 ----A---- C:\Windows\system32\shell32.dll
2013-05-02 22:55:11 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-05-02 22:55:09 ----A---- C:\Windows\system32\quartz.dll
2013-05-02 22:55:08 ----A---- C:\Windows\SYSWOW64\quartz.dll
2013-05-02 22:55:07 ----A---- C:\Windows\system32\profsvc.dll
2013-05-02 22:55:06 ----A---- C:\Windows\system32\rdrmemptylst.exe
2013-05-02 22:55:06 ----A---- C:\Windows\system32\rdpwsx.dll
2013-05-02 22:55:06 ----A---- C:\Windows\system32\rdpcorekmts.dll
2013-05-02 22:55:06 ----A---- C:\Windows\system32\drivers\srvnet.sys
2013-05-02 22:55:06 ----A---- C:\Windows\system32\drivers\srv2.sys
2013-05-02 22:55:06 ----A---- C:\Windows\system32\drivers\srv.sys
2013-05-02 22:55:05 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-05-02 22:55:03 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2013-05-02 22:55:03 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2013-05-02 22:55:03 ----A---- C:\Windows\system32\dnsrslvr.dll
2013-05-02 22:55:03 ----A---- C:\Windows\system32\dnscacheugc.exe
2013-05-02 22:55:03 ----A---- C:\Windows\system32\dnsapi.dll
2013-05-02 22:54:47 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-05-02 22:54:47 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-05-02 22:54:47 ----A---- C:\Windows\system32\Wpc.dll
2013-05-02 22:54:47 ----A---- C:\Windows\system32\gameux.dll
2013-05-02 22:54:41 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-05-02 22:54:41 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-05-02 22:54:41 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-05-02 22:54:41 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-05-02 22:54:41 ----A---- C:\Windows\system32\winsrv.dll
2013-05-02 22:54:40 ----A---- C:\Windows\SYSWOW64\user.exe
2013-05-02 22:54:26 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2013-05-02 22:54:26 ----A---- C:\Windows\system32\cdosys.dll
2013-05-02 22:54:23 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-05-02 22:54:23 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2013-05-02 22:54:23 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-05-02 22:54:23 ----A---- C:\Windows\system32\msxml6.dll
2013-05-02 22:54:23 ----A---- C:\Windows\system32\msxml3r.dll
2013-05-02 22:54:23 ----A---- C:\Windows\system32\msxml3.dll
2013-05-02 22:54:22 ----A---- C:\Windows\system32\sspisrv.dll
2013-05-02 22:54:22 ----A---- C:\Windows\system32\sspicli.dll
2013-05-02 22:54:22 ----A---- C:\Windows\system32\secur32.dll
2013-05-02 22:54:22 ----A---- C:\Windows\system32\lsass.exe
2013-05-02 22:54:22 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-05-02 22:54:17 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-05-02 22:54:17 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-05-02 22:54:17 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-05-02 22:54:17 ----A---- C:\Windows\system32\wow64win.dll
2013-05-02 22:54:17 ----A---- C:\Windows\system32\wow64cpu.dll
2013-05-02 22:54:17 ----A---- C:\Windows\system32\wow64.dll
2013-05-02 22:54:17 ----A---- C:\Windows\system32\ntvdm64.dll
2013-05-02 22:54:17 ----A---- C:\Windows\system32\KernelBase.dll
2013-05-02 22:54:17 ----A---- C:\Windows\system32\kernel32.dll
2013-05-02 22:54:17 ----A---- C:\Windows\system32\conhost.exe
2013-05-02 22:54:11 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-05-02 22:54:11 ----A---- C:\Windows\SYSWOW64\netevent.dll
2013-05-02 22:54:11 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2013-05-02 22:54:11 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-05-02 22:54:11 ----A---- C:\Windows\system32\nlasvc.dll
2013-05-02 22:54:11 ----A---- C:\Windows\system32\nlaapi.dll
2013-05-02 22:54:11 ----A---- C:\Windows\system32\netevent.dll
2013-05-02 22:54:11 ----A---- C:\Windows\system32\netcorehc.dll
2013-05-02 22:54:11 ----A---- C:\Windows\system32\ncsi.dll
2013-05-02 22:54:11 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-05-02 22:54:11 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-05-02 22:54:04 ----A---- C:\Windows\system32\drivers\partmgr.sys
2013-05-02 22:54:03 ----A---- C:\Windows\system32\drivers\bowser.sys
2013-05-02 22:54:01 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-05-02 22:54:01 ----A---- C:\Windows\system32\schannel.dll
2013-05-02 22:54:01 ----A---- C:\Windows\system32\drivers\cng.sys
2013-05-02 22:54:00 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-05-02 22:54:00 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-05-02 22:54:00 ----A---- C:\Windows\system32\lsasrv.dll
2013-05-02 22:54:00 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-05-02 22:53:39 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-05-02 22:53:39 ----A---- C:\Windows\system32\drivers\netio.sys
2013-05-02 22:53:39 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-05-02 22:53:37 ----A---- C:\Windows\system32\OxpsConverter.exe
2013-05-02 22:53:35 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-05-02 22:53:35 ----A---- C:\Windows\system32\ncrypt.dll
2013-05-02 22:53:34 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2013-05-02 22:53:34 ----A---- C:\Windows\system32\dpnet.dll
2013-05-02 22:53:33 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2013-05-02 22:53:33 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-05-02 22:53:33 ----A---- C:\Windows\system32\wintrust.dll
2013-05-02 22:53:33 ----A---- C:\Windows\system32\usp10.dll
2013-05-02 22:53:31 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-05-02 22:53:31 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-05-02 22:53:30 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-05-02 22:53:30 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2013-05-02 22:53:30 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-05-02 22:53:30 ----A---- C:\Windows\system32\smss.exe
2013-05-02 22:53:30 ----A---- C:\Windows\system32\kerberos.dll
2013-05-02 22:53:30 ----A---- C:\Windows\system32\csrsrv.dll
2013-05-02 22:53:27 ----A---- C:\Windows\SYSWOW64\synceng.dll
2013-05-02 22:53:27 ----A---- C:\Windows\SYSWOW64\srclient.dll
2013-05-02 22:53:27 ----A---- C:\Windows\system32\taskhost.exe
2013-05-02 22:53:27 ----A---- C:\Windows\system32\synceng.dll
2013-05-02 22:53:27 ----A---- C:\Windows\system32\srcore.dll
2013-05-02 22:53:26 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2013-05-02 22:53:26 ----A---- C:\Windows\SYSWOW64\browcli.dll
2013-05-02 22:53:26 ----A---- C:\Windows\system32\netapi32.dll
2013-05-02 22:53:26 ----A---- C:\Windows\system32\browser.dll
2013-05-02 22:53:26 ----A---- C:\Windows\system32\browcli.dll
2013-05-02 22:53:25 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-05-02 22:53:24 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2013-05-02 22:53:24 ----A---- C:\Windows\system32\poqexec.exe
2013-05-02 22:53:17 ----A---- C:\Windows\SYSWOW64\msi.dll
2013-05-02 22:53:17 ----A---- C:\Windows\system32\msi.dll
2013-05-02 22:53:16 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2013-05-02 22:53:16 ----A---- C:\Windows\system32\rdpcore.dll
2013-05-02 22:53:15 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2013-05-02 22:53:15 ----A---- C:\Windows\system32\drivers\afd.sys
2013-05-02 22:53:14 ----A---- C:\Windows\system32\winresume.exe
2013-05-02 22:53:14 ----A---- C:\Windows\system32\winload.exe
2013-05-02 22:53:14 ----A---- C:\Windows\system32\kdusb.dll
2013-05-02 22:53:14 ----A---- C:\Windows\system32\kdcom.dll
2013-05-02 22:53:14 ----A---- C:\Windows\system32\kd1394.dll
2013-05-02 22:53:13 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2013-05-02 22:53:13 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2013-05-02 22:53:13 ----A---- C:\Windows\system32\oleaut32.dll
2013-05-02 22:53:13 ----A---- C:\Windows\system32\oleacc.dll
2013-05-02 22:53:10 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2013-05-02 22:53:10 ----A---- C:\Windows\system32\EncDec.dll
2013-05-02 22:53:09 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2013-05-02 22:53:09 ----A---- C:\Windows\system32\prevhost.exe
2013-05-02 22:53:08 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2013-05-02 22:53:08 ----A---- C:\Windows\system32\inetcomm.dll
2013-05-02 22:53:08 ----A---- C:\Windows\system32\FXSCOVER.exe
2013-05-02 22:53:07 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2013-05-02 22:53:07 ----A---- C:\Windows\system32\msvcrt.dll
2013-05-02 22:53:07 ----A---- C:\Windows\system32\localspl.dll
2013-05-02 22:53:05 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2013-05-02 22:53:05 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2013-05-02 22:53:05 ----A---- C:\Windows\SYSWOW64\devobj.dll
2013-05-02 22:53:05 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2013-05-02 22:53:05 ----A---- C:\Windows\system32\umpnpmgr.dll
2013-05-02 22:53:01 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-05-02 22:53:01 ----A---- C:\Windows\system32\ntdll.dll
2013-05-02 22:42:36 ----A---- C:\Windows\system32\spoolsv.exe
2013-05-02 22:42:36 ----A---- C:\Windows\splwow64.exe
2013-05-02 22:42:30 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-05-02 22:42:30 ----A---- C:\Windows\system32\crypt32.dll
2013-05-02 22:42:29 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-05-02 22:42:29 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-05-02 22:42:29 ----A---- C:\Windows\system32\cryptsvc.dll
2013-05-02 22:42:29 ----A---- C:\Windows\system32\cryptnet.dll
2013-05-02 22:42:18 ----A---- C:\Windows\SYSWOW64\packager.dll
2013-05-02 22:42:18 ----A---- C:\Windows\system32\packager.dll
2013-05-02 22:39:55 ----A---- C:\Windows\system32\wups2.dll
2013-05-02 22:39:55 ----A---- C:\Windows\system32\wucltux.dll
2013-05-02 22:39:55 ----A---- C:\Windows\system32\wuaueng.dll
2013-05-02 22:39:55 ----A---- C:\Windows\system32\wuauclt.exe
2013-05-02 22:39:40 ----A---- C:\Windows\system32\wups.dll
2013-05-02 22:39:40 ----A---- C:\Windows\system32\wudriver.dll
2013-05-02 22:39:40 ----A---- C:\Windows\system32\wuapi.dll
2013-05-02 22:39:33 ----A---- C:\Windows\system32\wuwebv.dll
2013-05-02 22:39:33 ----A---- C:\Windows\system32\wuapp.exe
2013-05-02 22:25:35 ----D---- C:\Program Files (x86)\Realtek
2013-05-02 22:25:00 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-05-02 22:23:44 ----D---- C:\Program Files (x86)\VIA
2013-05-02 22:22:38 ----D---- C:\Program Files (x86)\Intel
2013-05-02 22:22:20 ----D---- C:\Intel
2013-05-02 22:18:35 ----D---- C:\Users\Nicollo\AppData\Roaming\Genie-Soft
2013-05-02 21:47:15 ----D---- C:\Users\Nicollo\AppData\Roaming\Macromedia
2013-05-02 21:27:40 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-05-02 21:18:14 ----D---- C:\Users\Nicollo\AppData\Roaming\Maxthon3
2013-05-02 21:18:12 ----D---- C:\Program Files (x86)\Maxthon
2013-05-02 21:16:25 ----D---- C:\Users\Nicollo\AppData\Roaming\Opera
2013-05-02 21:16:19 ----D---- C:\Program Files (x86)\Opera
2013-05-02 21:07:35 ----D---- C:\Program Files (x86)\AGEIA Technologies
2013-05-02 21:07:31 ----SHD---- C:\Windows\Installer
2013-05-02 21:04:28 ----D---- C:\NVIDIA
2013-05-02 20:56:30 ----D---- C:\Users\Nicollo\AppData\Roaming\Adobe
2013-05-02 20:37:25 ----D---- C:\Windows\Panther
2013-05-02 20:24:28 ----D---- C:\ProgramData\NVIDIA
2013-05-02 20:23:39 ----D---- C:\ProgramData\NVIDIA Corporation
2013-05-02 20:23:37 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-05-02 20:07:21 ----D---- C:\Program Files\NVIDIA Corporation
2013-05-02 19:46:37 ----D---- C:\Users\Nicollo\AppData\Roaming\Identities
2013-05-02 19:46:24 ----SD---- C:\Users\Nicollo\AppData\Roaming\Microsoft
2013-05-02 19:46:24 ----D---- C:\Users\Nicollo\AppData\Roaming\Media Center Programs
2013-05-02 19:46:13 ----SHD---- C:\Recovery
2013-05-02 19:41:32 ----D---- C:\Windows\SoftwareDistribution
2013-05-02 19:39:26 ----D---- C:\Windows\Prefetch
2013-05-02 19:38:50 ----ASH---- C:\pagefile.sys
2013-05-02 19:38:49 ----SHD---- C:\System Volume Information
2013-05-02 19:38:49 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 months======

2013-05-04 15:42:48 ----D---- C:\Windows\Temp
2013-05-04 15:42:23 ----D---- C:\Windows
2013-05-04 15:39:29 ----D---- C:\Windows\System32
2013-05-04 15:39:29 ----D---- C:\Windows\inf
2013-05-04 15:39:29 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-05-04 15:37:41 ----RSD---- C:\Windows\assembly
2013-05-04 15:37:41 ----D---- C:\Windows\Microsoft.NET
2013-05-04 15:35:02 ----D---- C:\Windows\winsxs
2013-05-04 15:34:28 ----D---- C:\Windows\system32\config
2013-05-04 15:28:42 ----D---- C:\Windows\SysWOW64
2013-05-04 15:14:12 ----D---- C:\Windows\system32\Tasks
2013-05-04 14:54:37 ----RD---- C:\Program Files (x86)
2013-05-04 14:53:01 ----D---- C:\Windows\Tasks
2013-05-04 14:52:54 ----D---- C:\Windows\system32\drivers
2013-05-04 14:52:01 ----RD---- C:\Program Files
2013-05-04 14:50:56 ----D---- C:\Windows\debug
2013-05-04 14:46:08 ----HD---- C:\ProgramData
2013-05-04 14:41:40 ----D---- C:\Windows\system32\wfp
2013-05-04 14:41:38 ----D---- C:\Windows\system32\wbem
2013-05-04 14:40:32 ----D---- C:\Windows\SYSWOW64\wbem
2013-05-04 14:40:32 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-05-04 14:40:32 ----D---- C:\Windows\SYSWOW64\en-US
2013-05-04 14:40:32 ----D---- C:\Windows\system32\sk-SK
2013-05-04 14:40:32 ----D---- C:\Windows\system32\en-US
2013-05-04 14:40:32 ----D---- C:\Windows\system32\DriverStore
2013-05-04 14:40:32 ----D---- C:\Windows\system32\drivers\etc
2013-05-04 14:40:32 ----D---- C:\Windows\system32\drivers\en-US
2013-05-04 14:40:32 ----D---- C:\Windows\system32\catroot2
2013-05-04 14:40:32 ----D---- C:\Windows\PolicyDefinitions
2013-05-04 14:40:08 ----D---- C:\Windows\registration
2013-05-04 14:39:57 ----D---- C:\Windows\system32\catroot
2013-05-04 10:26:17 ----A---- C:\Windows\win.ini
2013-05-04 10:10:06 ----D---- C:\Windows\system32\drivers\UMDF
2013-05-04 10:10:05 ----RSD---- C:\Windows\Fonts
2013-05-04 10:08:45 ----D---- C:\Windows\system32\CodeIntegrity
2013-05-04 10:08:45 ----D---- C:\Windows\security
2013-05-04 10:08:43 ----D---- C:\Windows\Help
2013-05-04 10:08:39 ----D---- C:\Windows\AppCompat
2013-05-04 10:08:36 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-05-04 10:08:31 ----D---- C:\Program Files (x86)\Common Files
2013-05-04 10:05:36 ----SD---- C:\ProgramData\Microsoft
2013-05-04 10:05:03 ----D---- C:\Program Files\Common Files
2013-05-03 22:58:20 ----D---- C:\Windows\Logs
2013-05-03 18:32:26 ----D---- C:\Windows\SYSWOW64\drivers
2013-05-03 17:45:00 ----D---- C:\Windows\ShellNew
2013-05-03 17:44:51 ----D---- C:\Program Files (x86)\MSBuild
2013-05-03 16:59:11 ----D---- C:\Program Files\Common Files\System
2013-05-03 16:59:09 ----D---- C:\Windows\SYSWOW64\migration
2013-05-03 16:59:09 ----D---- C:\Windows\system32\migration
2013-05-03 16:59:09 ----D---- C:\Program Files\Internet Explorer
2013-05-03 16:59:09 ----D---- C:\Program Files (x86)\Internet Explorer
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\it-IT
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\es-ES
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\el-GR
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\de-DE
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\da-DK
2013-05-03 16:59:08 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-05-03 16:59:08 ----D---- C:\Windows\system32\zh-TW
2013-05-03 16:59:08 ----D---- C:\Windows\system32\zh-HK
2013-05-03 16:59:08 ----D---- C:\Windows\system32\tr-TR
2013-05-03 16:59:08 ----D---- C:\Windows\system32\sv-SE
2013-05-03 16:59:08 ----D---- C:\Windows\system32\pt-PT
2013-05-03 16:59:08 ----D---- C:\Windows\system32\pt-BR
2013-05-03 16:59:08 ----D---- C:\Windows\system32\pl-PL
2013-05-03 16:59:08 ----D---- C:\Windows\system32\nl-NL
2013-05-03 16:59:08 ----D---- C:\Windows\system32\ko-KR
2013-05-03 16:59:08 ----D---- C:\Windows\system32\it-IT
2013-05-03 16:59:08 ----D---- C:\Windows\system32\hu-HU
2013-05-03 16:59:08 ----D---- C:\Windows\system32\fr-FR
2013-05-03 16:59:08 ----D---- C:\Windows\system32\fi-FI
2013-05-03 16:59:08 ----D---- C:\Windows\system32\es-ES
2013-05-03 16:59:08 ----D---- C:\Windows\system32\el-GR
2013-05-03 16:59:08 ----D---- C:\Windows\system32\de-DE
2013-05-03 16:59:08 ----D---- C:\Windows\system32\cs-CZ
2013-05-03 16:59:07 ----D---- C:\Windows\system32\zh-CN
2013-05-03 16:59:07 ----D---- C:\Windows\system32\ru-RU
2013-05-03 16:59:07 ----D---- C:\Windows\system32\nb-NO
2013-05-03 16:59:07 ----D---- C:\Windows\system32\ja-JP
2013-05-03 16:59:07 ----D---- C:\Windows\system32\da-DK
2013-05-03 16:10:57 ----RSD---- C:\Windows\Media
2013-05-03 16:10:57 ----D---- C:\Windows\Offline Web Pages
2013-05-03 16:10:57 ----D---- C:\Windows\Downloaded Program Files
2013-05-03 16:10:53 ----D---- C:\Windows\servicing
2013-05-03 16:09:32 ----D---- C:\Windows\system32\wdi
2013-05-02 23:19:12 ----D---- C:\Windows\ehome
2013-05-02 23:19:08 ----D---- C:\Windows\AppPatch
2013-05-02 23:19:06 ----D---- C:\Windows\system32\Boot
2013-05-02 23:19:05 ----D---- C:\Program Files\Windows Journal
2013-05-02 23:12:43 ----RD---- C:\Users
2013-05-02 23:09:16 ----D---- C:\Windows\twain_32
2013-05-02 22:33:39 ----D---- C:\Program Files\Windows Mail
2013-05-02 22:33:38 ----D---- C:\Program Files (x86)\Windows Media Player
2013-05-02 22:33:38 ----D---- C:\Program Files (x86)\Windows Mail
2013-05-02 20:12:06 ----D---- C:\Windows\system32\LogFiles
2013-05-02 19:46:34 ----SHD---- C:\$Recycle.Bin
2013-05-02 19:46:33 ----D---- C:\Windows\system32\restore
2013-05-02 19:46:13 ----D---- C:\Windows\system32\Recovery
2013-05-02 19:44:53 ----D---- C:\Windows\rescache
2013-05-02 19:43:03 ----D---- C:\Windows\system32\sysprep
2013-05-02 17:29:56 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2013-05-02 65336]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2013-05-02 189936]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2013-05-04 277088]
R0 tdrpman273;Acronis Try&Decide and Restore Points filter (build 273); C:\Windows\system32\DRIVERS\tdrpm273.sys [2013-05-04 1263200]
R0 timounter;Acronis Backup Archive Explorer; C:\Windows\system32\DRIVERS\timntr.sys [2013-05-04 970336]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2013-05-02 72016]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2013-05-02 1025808]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2013-05-02 378432]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2013-05-02 64288]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-05-03 283200]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2013-05-02 33400]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-05-02 80816]
R3 afcdp;afcdp; C:\Windows\system32\DRIVERS\afcdp.sys [2013-05-04 285280]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2011-09-02 66840]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2011-09-02 60696]
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2011-09-02 42776]
R3 LVRS64;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs64.sys [2008-07-26 790424]
R3 LVUSBS64;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBS64.sys [2008-07-26 50072]
R3 LVUVC64;Logitech QuickCam E3500(UVC); C:\Windows\system32\DRIVERS\lvuvc64.sys [2008-07-26 5068056]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-16 15416]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-12-19 194488]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2010-05-15 1327520]
R3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-04-08 68992]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 xnacc;XBOX 360 Controller For Windows Driver Service; C:\Windows\system32\DRIVERS\xnacc.sys [2009-07-14 679936]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Professional.11.0;ABBYY FineReader 11 PE Licensing Service; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [2011-08-18 819976]
R2 AcrSch2Svc;Služba Acronis Scheduler2; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2010-12-17 1112664]
R2 ADExchange;ArcSoft Exchange Service; C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe [2012-08-14 43624]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 afcdpsrv;Acronis Nonstop Backup Service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2013-05-04 3246040]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-05-02 46808]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-09 104912]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-08 123856]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-03-15 877856]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-03-15 1266464]
R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-04-15 3289208]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-03-14 383264]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-04 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-03 256904]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-04 116648]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2011-09-27 359192]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 30785672]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-05-03 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-08 51648]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]

-----------------EOF-----------------

Stiahni si AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
ulož ho na plochu Spusť program stlač tlačidlo search
Po skene sa objaví log budeš ho mať na systémovom disku ako AdwCleaner[R?].txt cely obsah vlož sem

Hmmmm, počuj, Tú chybu som mal len na Roote externeho hardisku a vôbec neviem čo ju spôsobovalo, mám tam 5 priečinkov. Jeden mal žltý zámok, stiahol som unlocker, a odstanil priečinok, druhý patril Hard Disku, bol tam manual a nejaký soft k tomu. Po vyhodení tohoto mi DLLHOST nenabehuje! A to sa veľmi divím!

Čo sa týka toho AdwCleaneru, mám PC preskenovať aj tak ? skúšal som Reštartovať PC, vypnuť zapnuť HDD a zatiaľ to vyzerá že beži normálne (pevne dúfam že to tak aj ostane)

Preskenuj aj tak adwcleanerom

# AdwCleaner v2.300 - Log vytvorený 04/05/2013 o 18:45:05
# Aktualizované 28/04/2013 Xplode
# Operaený systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživateľ : Nicollo - NICOLLO-PC
# Spustený systém : Normálny
# Spustené z : C:\Users\Nicollo\AppData\Local\Opera\Opera\temporary_downloads\adwcleaner.exe
# Voľba [Prehľada?]


***** [Služby] *****


***** [Súbory / Adresáre] *****


***** [Registre] *****

Kľúe Nájdené : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

***** [Internetové prehliadaee] *****

-\\ Internet Explorer v10.0.9200.16537

[OK] Registre sú eisté.

-\\ Google Chrome v26.0.1410.64

Súbor : C:\Users\Nicollo\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Súbor je eistý.

-\\ Opera v12.15.1748.0

Súbor : C:\Users\Nicollo\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] Súbor je eistý.

*************************

AdwCleaner[R1].txt - [943 octets] - [04/05/2013 18:45:05]

########## EOF - C:\AdwCleaner[R1].txt - [1002 octets] ##########

Spusť adwcleaner stlač tlačidlo delete pre odsúhlasenie stlač OK počítač sa reštartuje
log budeš ho mať na systémovom disku ako AdwCleaner[S?].txt cely obsah vlož sem
odinštaluj ak si tak ešte neurobil trojan remover

# AdwCleaner v2.300 - Log vytvorený 04/05/2013 o 18:50:53
# Aktualizované 28/04/2013 Xplode
# Operaený systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživateľ : Nicollo - NICOLLO-PC
# Spustený systém : Normálny
# Spustené z : C:\Users\Nicollo\Desktop\adwcleaner.exe
# Voľba [Vymaza?]


***** [Služby] *****


***** [Súbory / Adresáre] *****


***** [Registre] *****

Kľúe Vymazané : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

***** [Internetové prehliadaee] *****

-\\ Internet Explorer v10.0.9200.16537

[OK] Registre sú eisté.

-\\ Google Chrome v26.0.1410.64

Súbor : C:\Users\Nicollo\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Súbor je eistý.

-\\ Opera v12.15.1748.0

Súbor : C:\Users\Nicollo\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] Súbor je eistý.

*************************

AdwCleaner[R1].txt - [1071 octets] - [04/05/2013 18:45:05]
AdwCleaner[R2].txt - [1093 octets] - [04/05/2013 18:47:29]
AdwCleaner[S1].txt - [1024 octets] - [04/05/2013 18:50:53]

########## EOF - C:\AdwCleaner[S1].txt - [1084 octets] ##########

Trojan Remover som odinštaloval,
Čo sa udialo tým že som to vymazal ? Bola niekde chyba ?

všetko je v poriadku
Spusť adwcleaner stlač tlačidlo uninstall

Vďaka za tvoj čas !