﻿Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by deii (2016-03-23 15:29:31)
Running from C:\Users\deii\Desktop
Windows 7 Professional Service Pack 1 (X64) (2014-01-17 13:23:11)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2833470715-1743641123-588181605-500 - Administrator - Disabled)
atlbitbucket (S-1-5-21-2833470715-1743641123-588181605-1016 - Limited - Enabled) => C:\Users\atlbitbucket
deii (S-1-5-21-2833470715-1743641123-588181605-1000 - Administrator - Enabled) => C:\Users\deii
Guest (S-1-5-21-2833470715-1743641123-588181605-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Disabled - Out of date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Out of date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
ABRA FlexiBee (HKLM-x32\...\WinStrom 10) (Version:  - FlexiBee Systems s.r.o.)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 15.010.20060 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.241 - Adobe Systems Incorporated)
Adobe Flash Player 10 ActiveX (HKLM-x32\...\{B7B3E9B3-FB14-4927-894B-E9124509AF5A}) (Version: 10.0.32.18 - Adobe Systems, Inc.)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.182 - Adobe Systems Incorporated)
Android Studio (HKLM-x32\...\Android Studio) (Version: 1.0 - Google Inc.)
Apache Directory Studio - (remove only) (HKLM-x32\...\Apache Directory Studio) (Version:  - )
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atlassian Plugin SDK (HKLM-x32\...\9126-5401-3180-7125) (Version: 6.2.4 - Atlassian)
Avast Internet Security (HKLM-x32\...\Avast) (Version: 11.1.2241 - AVAST Software)
Axure RP Pro 7.0 (HKLM-x32\...\Axure RP Pro 7.0) (Version: 7.0.0.3142 - Axure Software Solutions, Inc.)
Axure RP Pro 7.0 (x32 Version: 7.0.0.3142 - Axure Software Solutions, Inc.) Hidden
Bitcoin (HKU\S-1-5-21-2833470715-1743641123-588181605-1000\...\Bitcoin) (Version: 0.8.6 - Bitcoin project)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Cisco Systems VPN Client 5.0.07.0290 (HKLM\...\{467D5E81-8349-4892-9E81-C3674ED8E451}) (Version: 5.0.7 - Cisco Systems, Inc.)
Cisco WebEx Meetings (HKLM-x32\...\ActiveTouchMeetingClient) (Version:  - Cisco WebEx LLC)
Citrix online plug-in (HKLM-x32\...\CitrixOnlinePluginFull) (Version: 12.1.44.1 - Citrix Systems, Inc.)
Create Recovery Media (HKLM-x32\...\{50DC5136-21E8-48BC-97E5-1AD055F6B0B6}) (Version: 1.20.0.00 - Lenovo Group Limited)
CVSNT 2.5.05.3744 (HKLM-x32\...\{76F9F5C5-FF87-4ED8-B63C-2A25A299C4AA}) (Version: 2.5.05.3744 - March Hare Software)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Digsby (HKLM-x32\...\Digsby) (Version:  - dotSyntax, LLC)
Disable AMT Profile Synchronization Pop-up for Windows XP/Vista/7 (HKLM\...\DisableAMTPopup) (Version: 1.00 - )
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)
Erlang OTP 18 (7.2.1) (HKLM-x32\...\Erlang OTP 18 (7.2.1)) (Version:  - )
Evernote v. 5.9.6 (HKLM-x32\...\{A542D366-9877-11E5-B101-005056951CAD}) (Version: 5.9.6.9494 - Evernote Corp.)
foobar2000 v1.3 (HKLM-x32\...\foobar2000) (Version: 1.3 - Peter Pawlowski)
FreeMind (HKLM-x32\...\B991B020-2968-11D8-AF23-444553540000_is1) (Version: 1.0.0 - )
GeekBuddy (HKLM\...\{A09AEC8C-5054-4E92-93DE-EA0B8C73BCF2}) (Version: 4.21.144 - Comodo Security Solutions Inc)
GIGABYTE Sim (HKLM-x32\...\{55BD137D-5AC1-4BC4-9C08-DDCDC88A1B47}) (Version: 1.13.0000 - GIGABYTE)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Git version 2.7.1 (HKLM\...\Git_is1) (Version: 2.7.1 - The Git Development Community)
Google Drive (HKLM-x32\...\{895D0391-459F-4D45-B8DD-13F0DE70C66E}) (Version: 1.28.1549.1322 - Google, Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.87 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.7210.1528 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
GoPro Camera Control version 1.1 (HKLM-x32\...\{250C8EA6-E828-41E7-A9C2-9418AA60B5A1}_is1) (Version: 1.1 - Tequnique.com)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Integrated Camera Driver Installer Package Ver.1.2.1.18 (HKLM-x32\...\{A78800AF-1779-4AE8-8EBE-16E1BE727C71}) (Version: 1.2.1.18 - RICOH)
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 3.6.1.33057.10 - Intel)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 18.7 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.18.10.3359 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel(R) Update Manager (x32 Version: 1.6.3.70 - Intel Corporation) Hidden
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.9.254 - Intel Corporation)
Intel(R) WiDi (HKLM\...\{F949AE30-83D1-41B2-92D2-F44478DD058A}) (Version: 4.2.24.0 - Intel Corporation)
Intel(R) Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version:  - )
Intel® PROSet/Wireless Software (HKLM-x32\...\{9bffdf20-c3a3-4e93-9cbf-61712c6a38be}) (Version: 17.13.2 - Intel Corporation)
IntelliJ IDEA 15.0 (HKLM-x32\...\IntelliJ IDEA 15.0) (Version: 143.381.42 - JetBrains s.r.o.)
IntelliJ IDEA 15.0.2 (HKLM-x32\...\IntelliJ IDEA 15.0.2) (Version: 143.1184.17 - JetBrains s.r.o.)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
iTunes (HKLM\...\{6CF1A7E2-8001-4870-9F18-3C6CDD6FE9E3}) (Version: 12.2.1.16 - Apple Inc.)
Janetter 4.2.3.0 (HKLM-x32\...\Janetter2_is1) (Version:  - Jane, Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.670 - Oracle)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Java SE Development Kit 7 Update 51 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170510}) (Version: 1.7.0.510 - Oracle)
Java SE Development Kit 7 Update 71 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0170710}) (Version: 1.7.0.710 - Oracle)
Java SE Development Kit 7 Update 80 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170800}) (Version: 1.7.0.800 - Oracle)
Java SE Development Kit 8 Update 20 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180200}) (Version: 8.0.200.26 - Oracle Corporation)
Java(TM) 6 Update 37 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416037FF}) (Version: 6.0.370 - Oracle)
Java(TM) SE Development Kit 6 Update 37 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0160370}) (Version: 1.6.0.370 - Oracle)
Java(TM) SE Development Kit 6 Update 45 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0160450}) (Version: 1.6.0.450 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
KeePass Password Safe 1.26 (HKLM-x32\...\KeePass Password Safe_is1) (Version: 1.26 - Dominik Reichl)
Last.fm Scrobbler 2.1.37 (HKLM-x32\...\LastFM_is1) (Version:  - Last.fm)
Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 2.15 - Lenovo)
Lenovo Communications Utility (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 3.1.17.0 - Lenovo)
Lenovo On Screen Display (HKLM\...\OnScreenDisplay) (Version: 8.72.10 - Lenovo)
Lenovo Patch Utility (HKLM-x32\...\{6E6E7725-C7BC-4C39-8B3F-14B67331A120}) (Version: 1.3.0.9 - Lenovo Group Limited)
Lenovo Patch Utility (x32 Version: 1.4.0.4 - Lenovo Group Limited) Hidden
Lenovo Patch Utility 64 bit (HKLM\...\{0369F866-2CE0-4EB9-B426-88FA122C6E82}) (Version: 1.3.0.9 - Lenovo Group Limited)
Lenovo Patch Utility 64 bit (Version: 1.4.0.4 - Lenovo Group Limited) Hidden
Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.10.15 - Lenovo)
Lenovo Registration (HKLM-x32\...\{6707C034-ED6B-4B6A-B21F-969B3606FBDE}) (Version: 1.0.4 - Lenovo Inc.)
Lenovo SimpleTap (HKLM\...\{BF601122-9F0A-41A9-BA06-3158D9FB4B80}) (Version: 3.2.0004.00 - Lenovo Group Limited)
Lenovo Solution Center (HKLM\...\{49277B39-D2E8-4342-9CE8-FC080C3FA344}) (Version: 2.8.007.00 - Lenovo Group Limited)
Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.07.0022 - Lenovo)
Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0009.00 - Lenovo Group Limited)
Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0005.00 - Lenovo)
Lenovo Welcome (HKLM-x32\...\{2DC26D10-CC6A-494F-BEA3-B5BC21126D5E}) (Version: 3.1.0020.00 - Lenovo Group Limited)
LibreOffice 4.1.4.2 (HKLM-x32\...\{94E11973-ED58-47A0-907C-ABF6D95C5DD8}) (Version: 4.1.4.2 - The Document Foundation)
LibreOffice 4.4 Help Pack (Czech) (HKLM-x32\...\{680F9EF4-F1B8-4F1A-8D81-A867677C63C2}) (Version: 4.4.3.2 - The Document Foundation)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Message Center Plus (HKLM\...\{C2C2DB64-1BCE-4FA7-962D-457795ECCEC0}) (Version: 3.3.0004.00 - Lenovo Group Limited)
MetaTrader 5 (HKLM\...\MetaTrader 5) (Version: 5.00 - MetaQuotes Software Corp.)
Metric Collection SDK (x32 Version: 1.1.0005.00 - Lenovo Group Limited) Hidden
Metric Collection SDK 35 (x32 Version: 1.2.0001.00 - Lenovo Group Limited) Hidden
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
mIRC (HKLM-x32\...\mIRC) (Version: 7.43 - mIRC Co. Ltd.)
MOOS Project Viewer (HKLM-x32\...\MOOS Project Viewer) (Version: 2.6.2 - Stand By Soft)
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version:  - Pavel Cvrcek)
Mozilla Firefox 45.0.1 (x86 cs) (HKLM-x32\...\Mozilla Firefox 45.0.1 (x86 cs)) (Version: 45.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.0.1.5918 - Mozilla)
Mozilla Thunderbird 24.1.1 (x86 cs) (HKLM-x32\...\Mozilla Thunderbird 24.1.1 (x86 cs)) (Version: 24.1.1 - Mozilla)
Mozilla XULRunner (1.9.0.4) (HKLM-x32\...\Mozilla XULRunner (1.9.0.4)) (Version: 1.9.0.4 (en-US) - Mozilla)
Mp3tag v2.58 (HKLM-x32\...\Mp3tag) (Version: v2.58 - Florian Heidenreich)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Mumble 1.2.4 (HKLM-x32\...\{FD8F9644-A572-44AD-84B0-21CA46CB7DC6}) (Version: 1.2.4 - Thorvald Natvig)
MusicBrainz Picard (HKLM-x32\...\MusicBrainz Picard) (Version: 1.3.2 - MusicBrainz)
NetBeans IDE 8.0.1 (HKLM\...\nbi-nb-base-8.0.1.0.201408251540) (Version: 8.0.1 - NetBeans.org)
Opera Stable 18.0.1284.68 (HKLM-x32\...\Opera 18.0.1284.68) (Version: 18.0.1284.68 - Opera Software ASA)
Oracle VM VirtualBox 5.0.10 (HKLM\...\{F6E922CF-068D-4AFC-8DBF-4636B84AF0A5}) (Version: 5.0.10 - Oracle Corporation)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM-x32\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation)
PL/SQL Developer 9.0.6.1665 (HKLM-x32\...\PL/SQL Developer [092082C9]) (Version: 9.0.6.1665 - Allround Automations)
Podpora aplikací Apple (32bitová) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
Podpora aplikací Apple (64bitová) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Power Manager (HKLM-x32\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 6.67.5 - Lenovo Group Limited)
PSPad editor (HKLM-x32\...\PSPad editor_is1) (Version: 4.5.7.2450 - Jan Fiala)
Python 3.5.1 (32-bit) (HKU\S-1-5-21-2833470715-1743641123-588181605-1000\...\{c39d559b-aa83-4476-ba20-988a35a1199a}) (Version: 3.5.1150.0 - Python Software Foundation)
Python 3.5.1 Add to Path (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Core Interpreter (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Development Libraries (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Documentation (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Executables (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Launcher (32-bit) (HKLM-x32\...\{17778F7B-FB5A-4A93-9719-D75BAF673498}) (Version: 3.5.150.0 - Python Software Foundation)
Python 3.5.1 pip Bootstrap (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Standard Library (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Tcl/Tk Support (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Test Suite (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Utility Scripts (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)
RabbitMQ Server 3.6.0 (HKLM-x32\...\RabbitMQ) (Version: 3.6.0 - Pivotal Software, Inc.)
RapidBoot HDD Accelerator (HKLM-x32\...\Fastboot) (Version: 1.00.0802 - Lenovo)
RapidBoot Shield (HKLM\...\{5E2652DF-743F-482B-A593-C95F431A5769}) (Version: 1.23 - Lenovo)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7040 - Realtek Semiconductor Corp.)
Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (HKLM\...\EnablePS) (Version: 1.00 - )
RICOH_Media_Driver_v2.14.18.01 (HKLM-x32\...\{FE041B02-234C-4AAA-9511-80DF6482A458}) (Version: 2.14.18.01 - RICOH)
SafeZone Stable 1.46.1990.55 (x32 Version: 1.46.1990.55 - Avast Software) Hidden
Samsung Data Migration (HKLM-x32\...\{D4DE3DB4-7734-47E5-8D92-B80146311406}) (Version: 2.6 - Samsung)
Scala Programming Language Distribution (HKLM-x32\...\{7606E6DA-E168-42B5-8345-B08BF774CB30}) (Version: 2.11.7.400 - LAMP/EPFL and Typesafe, Inc. <scala-internals@googlegroups.com>)
Seesmic Desktop (HKLM-x32\...\com.seesmic.desktop.client.D89F32799270693BEF34AAA36E9B2632B59240FA.1) (Version: 0.7 - Seesmic, Inc,)
Seesmic Desktop (x32 Version: 0.7 - Seesmic, Inc,) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SHAREit (HKLM-x32\...\SHAREit_is1) (Version: 3.2.0.543 - Lenovo)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SoapUI 5.2.1 5.2.1 (HKLM\...\5517-2803-0637-4585) (Version: 5.2.1 - SmartBear Software)
Software602 Form Filler (HKLM-x32\...\{DE3B6562-0A58-49E0-836F-B895F3985958}) (Version: 4.52 - Software602 a.s.)
SourceTree (HKLM-x32\...\SourceTree 1.8.2.3) (Version: 1.8.2.3 - Atlassian)
SourceTree (x32 Version: 1.8.2.3 - Atlassian) Hidden
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.61.90905 - SugarSync, Inc.)
Synology Cloud Station (HKLM-x32\...\{6C4C0BD2-4D29-4372-9035-3EDDABC78659}) (Version: 3.2.3497 - Synology)
ThinkPad Bluetooth with Enhanced Data Rate Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.4500 - Broadcom Corporation)
ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.19.14 - )
ThinkVantage Access Connections (HKLM-x32\...\{8E537894-A559-4D60-B3CB-F4485E3D24E3}) (Version: 6.25.65 - Lenovo)
ThinkVantage Active Protection System (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.80.08.00 - Lenovo)
ThinkVantage Fingerprint Software (HKLM\...\{F58DA859-016E-492D-A588-317D9BB28002}) (Version: 5.9.9.7282 - Authentec Inc.)
TortoiseCVS 1.12.5 (HKLM\...\TortoiseCVS_is1) (Version: 1.12.5 - )
TortoiseGit 1.8.16.0 (64 bit) (HKLM\...\{A329FEBC-4132-4B07-8085-88E03A8C0C9B}) (Version: 1.8.16.0 - TortoiseGit)
TortoiseHg 2.10.2 (x64) (HKLM\...\{30C04FA2-B745-4318-B0D1-D35C7F2A096D}) (Version: 2.10.2 - Steve Borho and others)
TortoiseOverlays (HKLM\...\{9CFA7A85-AEB6-487B-9C8E-C3C9432AA8F7}) (Version: 1.0.17375 - TortoiseSVN)
TortoiseOverlays (HKLM-x32\...\{C9DCF4E9-A41B-40E7-B028-2255E36D2A1C}) (Version: 1.0.17375 - TortoiseSVN)
TortoiseSVN 1.9.2.26806 (64 bit) (HKLM\...\{8A5AA5D6-F797-4ED3-AE08-35EF5433409E}) (Version: 1.9.26806 - TortoiseSVN)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 - Ghisler Software GmbH)
Vagrant (HKLM-x32\...\{40886BCB-FC93-4ED9-AE73-22568B8972D7}) (Version: 1.7.4 - HashiCorp)
VC9RunTime (HKLM-x32\...\{5A37B181-B8D0-48C3-B4A4-5DC1ED104CED}) (Version: 1.0.0 - Default Company Name)
VC9RunTimeX64 (HKLM-x32\...\{2460EA85-D9D1-4D44-915E-6019271AFB1D}) (Version: 1.0.0 - Default Company Name)
VIP Access (HKLM-x32\...\{E8D46836-CD55-453C-A107-A59EC51CB8DC}) (Version: 2.0.5.13 - VeriSign)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WinDirStat 1.1.2 (HKU\S-1-5-21-2833470715-1743641123-588181605-1000\...\WinDirStat) (Version:  - )
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices  (03/07/2012 ) (HKLM\...\0B624A43DD66DBF5CF3EDFA9741A364E688062A4) (Version: 03/07/2012  - GoPro)
Windows Driver Package - Intel (e1cexpress) Net  (01/11/2012 11.15.16.0) (HKLM\...\EC2A0F2B229770EC589265FCF2B4839A0C221993) (Version: 01/11/2012 11.15.16.0 - Intel)
Windows Driver Package - Intel System  (01/11/2012 9.3.0.1020) (HKLM\...\09839A9B5EDA69DA2DCC34637B5140AAF8A53B44) (Version: 01/11/2012 9.3.0.1020 - Intel)
Windows Driver Package - Intel System  (08/26/2011 9.3.0.1011) (HKLM\...\9D7CD466F7FC8B18FF1B84943B7BB8648D17FCE8) (Version: 08/26/2011 9.3.0.1011 - Intel)
Windows Driver Package - Intel System  (08/26/2011 9.3.0.1011) (HKLM\...\D8EF6CACF49BD33CC1FACD124C8CC2B1A8E8AE35) (Version: 08/26/2011 9.3.0.1011 - Intel)
Windows Driver Package - Intel USB  (08/26/2011 9.3.0.1011) (HKLM\...\97EE1802A0385A37DE6323FA39EC76BEB2D73E41) (Version: 08/26/2011 9.3.0.1011 - Intel)
Windows Driver Package - Lenovo 1.65.05.20 (02/29/2012 1.65.05.20) (HKLM\...\E3535F123E7F666D573665142F90D3E5004DC326) (Version: 02/29/2012 1.65.05.20 - Lenovo)
Windows Driver Package - Synaptics (SynTP) Mouse  (04/06/2012 16.1.1.0) (HKLM\...\64B3C27E4CF7B6AD920184EFFF6C488C55EF2892) (Version: 04/06/2012 16.1.1.0 - Synaptics)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinSCP 5.5.1 (HKLM-x32\...\winscp3_is1) (Version: 5.5.1 - Martin Prikryl)
Wireshark 1.10.5 (64-bit) (HKLM-x32\...\Wireshark) (Version: 1.10.5 - The Wireshark developer community, hxxp://www.wireshark.org)
XChat 2 (remove only) (HKLM-x32\...\xchat) (Version:  - )
Xming 6.9.0.31 (HKLM-x32\...\Xming_is1) (Version: 6.9.0.31 - Colin Harrison)
YourKit Java Profiler 2015.12-b4 EAP (HKLM-x32\...\YourKit Java Profiler 2015.12-b4 EAP) (Version:  - )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2833470715-1743641123-588181605-1000_Classes\CLSID\{2C4A5D61-009C-4561-9A33-6AFD542FD237}\InprocServer32 -> C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\icon-overlay\13\x64\ContextMenu.dll ()
CustomCLSID: HKU\S-1-5-21-2833470715-1743641123-588181605-1000_Classes\CLSID\{472CE1AD-5D53-4BCF-A1FB-3982A5F55138}\InprocServer32 -> C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\icon-overlay\13\x64\iconOverlay.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-2833470715-1743641123-588181605-1000_Classes\CLSID\{48AB5ADA-36B1-4137-99C9-2BD97F8788AB}\InprocServer32 -> C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\icon-overlay\13\x64\iconOverlay.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-2833470715-1743641123-588181605-1000_Classes\CLSID\{A433C3E0-8B24-40EB-93C3-4B10D9959F58}\InprocServer32 -> C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\icon-overlay\13\x64\iconOverlay.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-2833470715-1743641123-588181605-1000_Classes\CLSID\{AEB16659-2125-4ADA-A4AB-45EE21E86469}\InprocServer32 -> C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\icon-overlay\13\x64\iconOverlay.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-2833470715-1743641123-588181605-1000_Classes\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}\InprocServer32 -> C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
CustomCLSID: HKU\S-1-5-21-2833470715-1743641123-588181605-1000_Classes\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}\InprocServer32 -> C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
CustomCLSID: HKU\S-1-5-21-2833470715-1743641123-588181605-1000_Classes\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}\InprocServer32 -> C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
CustomCLSID: HKU\S-1-5-21-2833470715-1743641123-588181605-1000_Classes\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}\InprocServer32 -> C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
CustomCLSID: HKU\S-1-5-21-2833470715-1743641123-588181605-1000_Classes\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}\InprocServer32 -> C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
CustomCLSID: HKU\S-1-5-21-2833470715-1743641123-588181605-1000_Classes\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}\InprocServer32 -> C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
CustomCLSID: HKU\S-1-5-21-2833470715-1743641123-588181605-1000_Classes\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}\InprocServer32 -> C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
CustomCLSID: HKU\S-1-5-21-2833470715-1743641123-588181605-1000_Classes\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}\InprocServer32 -> C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
CustomCLSID: HKU\S-1-5-21-2833470715-1743641123-588181605-1000_Classes\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}\InprocServer32 -> C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
CustomCLSID: HKU\S-1-5-21-2833470715-1743641123-588181605-1000_Classes\CLSID\{C701AD67-3DF0-47C9-89CB-DFA6207BE229}\InprocServer32 -> C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\icon-overlay\13\x64\iconOverlay.dll (TODO: <Company name>)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {039121BF-4BBF-4D6C-B019-87D18E94B7B3} - System32\Tasks\Synaptics TouchPad Enhancements => Program Files\Synaptics\SynTP\SynTPEnh.exe
Task: {06F404E7-5C88-4211-9797-D92F84199A9F} - System32\Tasks\Lenovo\Message Center Plus Launcher => C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe [2014-09-13] (Lenovo)
Task: {114329A2-C612-4B25-B1E0-37DF79341D1B} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-11-23] (AVAST Software)
Task: {16898B03-F946-4B18-8405-9B1BFBE39C79} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {2BE35FF9-B32F-4582-B971-3B18B391AFBB} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-02-17] (AVAST Software)
Task: {41CD9D71-840E-4236-97DA-89D890A676D6} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PwmIdTsv.exe [2015-07-13] (Lenovo Group Limited)
Task: {434EB4B3-4476-4161-8B27-888828DC1E93} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-01-13] (Adobe Systems Incorporated)
Task: {439026E5-AA70-493A-AA2F-5C498E86CD1B} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2016-01-13] ()
Task: {48394F15-A762-4040-9575-9E436A0ACFF2} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2016-01-08] ()
Task: {60C99D11-4B20-4AE2-A632-CB4A273E805A} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2016-01-08] (Lenovo)
Task: {676CA826-4CF6-43E7-8CE6-372A9D82B90E} - System32\Tasks\Lenovo\LSC\LSCTaskService => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCTaskService.exe [2016-01-08] (Lenovo)
Task: {6B2A19FA-8FC0-4B7C-A69E-3A216E3C6ACC} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-09-25] (Lenovo)
Task: {7F0ED67F-64E7-44FD-96DC-07F60724ED31} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\Bootstrap.exe [2014-12-22] (Intel Corporation)
Task: {80DBB472-D0D4-42AB-B8CF-ED871486D714} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\Bootstrap.exe [2014-12-22] (Intel Corporation)
Task: {813C1E98-AD62-4346-9DC4-E4106FCD347D} - System32\Tasks\Lenovo\SimpleTap\Start SimpleTap for deii-x230.deii => C:\Program Files\Lenovo\SimpleTap\SimpleTap.exe [2012-05-16] (Lenovo)
Task: {8EDABD99-B57E-45E9-BC5E-4CF85E0A90FB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-21] (Adobe Systems Incorporated)
Task: {9A448FA6-F393-4B66-ADF6-B7754B739819} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2016-01-08] ()
Task: {B3C5F61F-3AB1-4E81-9092-DDCA6F64B003} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-12-22] (Microsoft Corporation)
Task: {C32F4DD1-C8A8-4E06-8E9E-DE70BD186DC8} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2015-10-18] (Lenovo)
Task: {D19AC40B-7E13-4D08-BF8E-4E1EF198E85B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {D8599B5B-0D81-43AB-A4E6-3807B6A0F881} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {DCDC37C1-E508-4BB5-9111-7725268C5409} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2016-01-08] (Lenovo)
Task: {E058E83B-FC77-40A6-BE15-78C9BB010C3C} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-12-22] (Microsoft Corporation)
Task: {EADC2B3D-5706-48D9-85A2-FDB38C4CC793} - System32\Tasks\SafeZone scheduled Autoupdate 1449222755 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2015-10-30] (Avast Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\deii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SQuirreL SQL Client\SQuirreL SQL Client.lnk -> C:\dev\squirrel\squirrel-sql-3.7\squirrel-sql.bat ()
Shortcut: C:\Users\deii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bitbucket\Start Bitbucket Service [7990].lnk -> C:\dev\Atlassian\Bitbucket\4.1.0\start_service.bat ()
Shortcut: C:\Users\deii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bitbucket\Stop Bitbucket Service [7990].lnk -> C:\dev\Atlassian\Bitbucket\4.1.0\stop_service.bat ()
Shortcut: C:\Users\deii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\jboss-prod.lnk -> C:\dev\tm\svn\servers\jboss-6.2.0\bin\standalone-prod.bat ()
Shortcut: C:\Users\deii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\jboss-test1.lnk -> C:\dev\tm\svn\servers\jboss-6.2.0\bin\standalone-test1.bat ()
Shortcut: C:\Users\deii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\jboss-test2.lnk -> C:\dev\tm\svn\servers\jboss-6.2.0\bin\standalone-test2.bat ()
Shortcut: C:\Users\deii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\olp - debug.lnk -> C:\dev\tm\server\apache-tomcat-7.0.59-32b\bin\debug.bat ()
Shortcut: C:\Users\deii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\tmcz-prod.lnk -> C:\dev\tm\svn\servers\portal-tmcz-my\bin\debug-prod.bat ()
Shortcut: C:\Users\deii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\tomcat test 2.lnk -> C:\dev\tm\server\apache-tomcat-7.0.42-bonpari\bin\debug-test-2.bat ()
Shortcut: C:\Users\deii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\tomcat test-1.lnk -> C:\dev\tm\server\apache-tomcat-7.0.42-bonpari\bin\debug-test-1.bat ()
Shortcut: C:\Users\deii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\tomcat wh.lnk -> C:\dev\tm\server\apache-tomcat-7.0.42-bonpari\bin\debug.bat ()
Shortcut: C:\Users\deii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\tomcat-prod-local.lnk -> C:\dev\tm\server\apache-tomcat-7.0.42-bonpari\bin\debug-prod-local.bat ()
Shortcut: C:\Users\deii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\tomcat-prod.lnk -> C:\dev\tm\server\apache-tomcat-7.0.42-bonpari\bin\debug-prod.bat ()
Shortcut: C:\Users\deii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\tomcat-test-1-local.lnk -> C:\dev\tm\server\apache-tomcat-7.0.42-bonpari\bin\debug-test-1-local.bat ()
Shortcut: C:\Users\deii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\tomcat-test-2-local.lnk -> C:\dev\tm\server\apache-tomcat-7.0.42-bonpari\bin\debug-test-2-local.bat ()
Shortcut: C:\Users\deii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\tomcat.lnk -> C:\dev\tm\server\apache-tomcat-test\bin\startup.bat ()

ShortcutWithArgument: C:\Users\deii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\AdminTool - GreenField.lnk -> C:\dev\java\jdk1.7.0_51\bin\javaws.exe (Oracle Corporation) -> hxxp://rdmdvp04.rdm.cz/eclipse/vccng_admin/redkew-greenfield/launch-dev.jnlp

==================== Loaded Modules (Whitelisted) ==============

2014-03-13 13:10 - 2012-04-08 08:49 - 00015360 _____ () C:\Windows\System32\KOAZCJ_L.DLL
2014-03-13 13:10 - 2012-04-08 08:49 - 03011072 _____ () C:\Windows\System32\SAFEQVS64.DLL
2014-03-13 13:10 - 2012-04-08 08:49 - 00519168 _____ () C:\Windows\System32\SafeQCairoLib64.dll
2015-05-15 15:26 - 2015-05-15 15:26 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-05-15 15:26 - 2015-05-15 15:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-09-22 20:32 - 2015-09-22 20:32 - 00093568 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll
2015-11-01 21:45 - 2015-11-01 21:45 - 00934328 _____ () C:\Program Files\TortoiseGit\bin\libgit2_tgit.dll
2015-11-01 21:46 - 2015-11-01 21:46 - 00087480 _____ () C:\Program Files\TortoiseGit\bin\zlib1_tgit.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 01047552 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\icon-overlay\13\x64\ContextMenu.dll
2015-10-02 08:22 - 2015-10-02 08:22 - 13067264 _____ () c:\dev\mysql\mysql-5.6.27-winx64\bin\mysqld.exe
2015-12-17 23:23 - 2016-01-11 09:55 - 00226304 _____ () C:\Program Files\erl7.2.1\erts-7.2.1\bin\erlsrv.exe
2015-12-17 23:23 - 2016-01-11 09:55 - 00120320 _____ () C:\Program Files\erl7.2.1\erts-7.2.1\bin\erl.exe
2015-12-17 23:23 - 2015-12-17 23:23 - 00161280 _____ () C:\Program Files\erl7.2.1\erts-7.2.1\bin\erlexec.dll
2015-12-17 23:23 - 2015-12-17 23:23 - 02946560 _____ () C:\Program Files\erl7.2.1\erts-7.2.1\bin\beam.smp.dll
2015-12-17 23:23 - 2016-01-11 09:55 - 00044544 _____ () C:\Program Files\erl7.2.1\erts-7.2.1\bin\epmd.exe
2013-08-11 15:11 - 2012-03-19 07:09 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-01-15 00:13 - 2014-01-15 00:13 - 00100616 _____ () C:\Program Files\TortoiseHg\TortoiseHgOverlayServer.exe
2012-10-27 08:28 - 2012-10-27 08:28 - 00128512 _____ () C:\Program Files\TortoiseHg\win32api.pyd
2012-10-27 08:27 - 2012-10-27 08:27 - 00137728 _____ () C:\Program Files\TortoiseHg\pywintypes27.dll
2012-10-27 08:28 - 2012-10-27 08:28 - 00223232 _____ () C:\Program Files\TortoiseHg\win32gui.pyd
2012-10-27 08:27 - 2012-10-27 08:27 - 00027648 _____ () C:\Program Files\TortoiseHg\win32pipe.pyd
2012-10-27 08:27 - 2012-10-27 08:27 - 00023040 _____ () C:\Program Files\TortoiseHg\win32event.pyd
2012-10-27 08:27 - 2012-10-27 08:27 - 00149504 _____ () C:\Program Files\TortoiseHg\win32file.pyd
2012-10-27 08:28 - 2012-10-27 08:28 - 00136192 _____ () C:\Program Files\TortoiseHg\win32security.pyd
2013-11-10 19:24 - 2013-11-10 19:24 - 00111616 _____ () C:\Program Files\TortoiseHg\_ctypes.pyd
2014-01-15 00:11 - 2014-01-15 00:11 - 00010752 _____ () C:\Program Files\TortoiseHg\mercurial.osutil.pyd
2012-10-27 08:27 - 2012-10-27 08:27 - 00044032 _____ () C:\Program Files\TortoiseHg\win32process.pyd
2012-10-27 08:29 - 2012-10-27 08:29 - 00503808 _____ () C:\Program Files\TortoiseHg\pythoncom27.dll
2012-10-27 08:31 - 2012-10-27 08:31 - 00438784 _____ () C:\Program Files\TortoiseHg\win32com.shell.shell.pyd
2013-08-11 15:13 - 2015-07-13 13:47 - 00105472 _____ () C:\Program Files (x86)\ThinkPad\Utilities\US\PWMRT64V.DLL
2013-08-11 15:10 - 2012-03-21 03:05 - 00051776 _____ () C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
2013-10-14 09:41 - 2013-10-14 09:41 - 01304576 _____ () C:\Users\deii\Documents\GIGABYTE\GIGABYTE Sim\Mouse.exe
2014-03-13 13:10 - 2012-04-08 08:49 - 00249856 _____ () C:\Program Files (x86)\Y Soft\SafeQ Client\Client\SafeQ Client.exe
2015-11-23 13:39 - 2015-11-23 13:39 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-11-23 13:39 - 2015-11-23 13:39 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-03-16 09:17 - 2016-03-16 09:17 - 02840576 _____ () C:\Program Files\AVAST Software\Avast\defs\16031501\algo.dll
2015-11-23 13:39 - 2015-11-23 13:39 - 00466448 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2010-03-23 13:26 - 2010-03-23 13:26 - 00201512 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll
2013-08-11 15:16 - 2012-01-17 07:29 - 00030512 ____N () C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBServiceps.dll
2013-08-11 15:14 - 2015-07-13 13:48 - 02201088 _____ () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll
2013-08-11 15:14 - 2015-07-13 13:48 - 02085888 _____ () C:\Program Files\Lenovo\Communications Utility\cv210.dll
2015-12-01 15:37 - 2015-12-01 15:37 - 00439504 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2015-12-01 15:37 - 2015-12-01 15:37 - 00321232 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2013-08-11 15:17 - 2012-07-12 13:59 - 00891392 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
2013-08-11 15:17 - 2012-07-12 13:59 - 02281984 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
2013-08-11 15:17 - 2012-07-12 13:59 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2013-08-11 15:17 - 2012-07-12 13:59 - 00339456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
2013-08-11 15:17 - 2012-07-12 13:59 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2013-08-11 15:17 - 2012-07-12 13:59 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2013-08-11 15:17 - 2012-07-12 13:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2013-08-11 15:17 - 2012-07-12 13:59 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2013-08-11 15:17 - 2012-07-12 13:59 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2013-08-11 15:17 - 2012-07-12 13:59 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2013-08-11 15:17 - 2012-07-12 13:59 - 00019456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2013-08-11 15:17 - 2012-07-12 13:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 00123918 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\bin\libgcc_s_dw2-1.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 00524460 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\bin\libcurl-4.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 00115214 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\bin\zlib1.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 01026062 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\bin\libstdc++-6.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 03095505 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\bin\icuin53.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 01798570 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\bin\icuuc53.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 21565192 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\bin\icudt53.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 02874155 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\bin\libsqlite3-0.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 00712704 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\bin\platforms\qwindows.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 00031744 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\bin\imageformats\qgif.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 00046080 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\bin\imageformats\qicns.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 00032768 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\bin\imageformats\qico.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 00516608 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\bin\imageformats\qjp2.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 00243200 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\bin\imageformats\qjpeg.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 00431616 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\bin\imageformats\qtiff.dll
2015-11-23 13:39 - 2015-11-23 13:39 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-03-13 14:45 - 2016-03-13 14:45 - 00115214 _____ () C:\Users\deii\AppData\Local\CloudStation\CloudStation.app\bin\ZLIB1.dll
2015-11-01 21:43 - 2015-11-01 21:43 - 00694720 _____ () C:\Program Files\TortoiseGit\bin\libgit232_tgit.dll
2015-11-01 21:43 - 2015-11-01 21:43 - 00076728 _____ () C:\Program Files\TortoiseGit\bin\zlib132_tgit.dll
2016-03-15 01:54 - 2016-03-08 03:48 - 01676440 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.87\libglesv2.dll
2016-03-15 01:54 - 2016-03-08 03:48 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.87\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Windows\avastSS.scr:$CmdTcID [64]
AlternateDataStreams: C:\Windows\PWMBTHLV.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\RtlExUpd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AERTAC64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\audiodg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AUDIOKSE.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\blackbox.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cewmdm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\clfsw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\coin95ip.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\coin95itp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\COLORCNV.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\comctl32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CONEQMSAPOGUILibrary.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\crypt32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptnet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DDPA64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DDPD64A.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DDPO64A.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DDPP64A.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devenum.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\diskperf.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drmmgrtn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drmv2clt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EncDump.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\FMAPO64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\GEARAspi64.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\ibmpmctl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ibmpmsvc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ksproxy.ax:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\ksuser.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\logman.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mcmde.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\mf.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\mferror.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\mfpmp.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\mfps.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\mfvdsp.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\MFWMAAEC.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\MP3DMOD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\MP43DECD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\MP4SDECD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\MPG4DECD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msiexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msihnd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msimsg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msmpeg2adec.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\MSMPEG2ENC.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msmpeg2vdec.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msnetobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MsRdpWebAccess.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msscp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mstsc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcadm.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\pcaevts.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcalua.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcasvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcawrk.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\poqexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PWMCP64V.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qasf.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\quartz.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\RCoInstII64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\relog.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RESAMPLEDMO.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\rrinstaller.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\RtkApi64.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\RtkAPO64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RtPgEx64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\scesrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sechost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SFSS_APO.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\SynCOM.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SynTPAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SynTPCo14.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SysFxUI.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\TPHDEXLG64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tpinspm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TpShCTL.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TpShEvUI.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TpShocks.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TpShUI.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tracerpt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TsUsbGDCoInstaller.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\typeperf.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\usbaaplrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VIDRESZR.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\WavesGUILib64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WdfCoInstaller01011.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WindowsCodecs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winload.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winresume.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wintrust.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wksprtPS.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMADMOD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\WMADMOE.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\WMALFXGFXDSP.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\wmdrmsdk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmpmde.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\WMSPDMOD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\WMSPDMOE.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\WMVDECOD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\WMVENCOD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\WMVSDECD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\WMVSENCD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\WMVXENCD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\wpdshext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AudioEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AUDIOKSE.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\blackbox.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cewmdm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\clfsw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\COLORCNV.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\comctl32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\crypt32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptnet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\devenum.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\diskperf.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drmmgrtn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drmv2clt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\els.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerInstaller.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\gdi32.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\GEARAspi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ksproxy.ax:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\ksuser.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\logman.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mf.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\mferror.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\mfpmp.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\mfps.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\mfvdsp.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\MFWMAAEC.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\MP3DMOD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\MP43DECD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\MP4SDECD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\MPG4DECD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\msi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msiexec.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\msihnd.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\msimsg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2adec.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\MSMPEG2ENC.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2vdec.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\msnetobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MsRdpWebAccess.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msscp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mstsc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\poqexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qasf.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\qedit.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\quartz.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\relog.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RESAMPLEDMO.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\rrinstaller.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\scesrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sechost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SynCOM.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SynTPCOM.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tracerpt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\typeperf.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\VIDRESZR.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\WindowsCodecs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wintrust.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\wksprtPS.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMADMOD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\WMADMOE.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\wmdrmsdk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMPhoto.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmpmde.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOE.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\WMVDECOD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\WMVENCOD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\WMVSDECD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\WMVSENCD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\WMVXENCD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\wpdshext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\dc3d.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\drmk.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\drmkaud.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\DZHDD64.SYS:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\e1c62x64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\GEARAspiWDM.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ibmpmdrv.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\intelaud.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\iusb3hcs.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\iusb3hub.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\iusb3xhc.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\iwdbus.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ndis.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\NETwsw00.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\PEAuth.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\point64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\portcls.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\RTKVHD64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\Smb_driver_Intel.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\SynTP.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\TPPWR64V.SYS:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\TsUsbFlt.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\usb3Hub.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\USB3Ver.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\usbaapl64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\VBoxDrv.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\VBoxNetAdp6.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\VBoxNetLwf.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\VBoxUSBMon.sys:$CmdTcID [64]
AlternateDataStreams: C:\ProgramData\TEMP:054203E4 [130]
AlternateDataStreams: C:\Users\deii\SoapUI-x64-5.2.1.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Desktop\05.svg:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Desktop\mraky.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Desktop\new-horizons__2.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Desktop\nh-pluto-moonlight.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Desktop\OV5642DS.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Desktop\pitko.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Desktop\P_LORRI_FULLFRAME_BW.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Desktop\zemeplocha.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Desktop\[CZE]X14DVBEUH-1.113-0626.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\207-celomasiv-irena_web.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\207-celomasiv-irena_web.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\A150303_ZUK_001_DANE_2014.XLS:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\A150303_ZUK_001_DANE_2014.XLS:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\alfresco_34.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\alfresco_34.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\archetype-models-2.5-SNAPSHOT.pom:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\archetype-models-2.5-SNAPSHOT.pom:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\atlassian-bitbucket-4.1.0-x64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\atlassian-bitbucket-4.1.0-x64.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\burpsuite_free_v1.6.jar:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\burpsuite_free_v1.6.jar:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\ClientWithResponseHandler.java:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\ClientWithResponseHandler.java:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\ConEmuSetup.151202.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\ConEmuSetup.151202.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\Developer Guide.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\Developer Guide.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\Dieta purinová.doc:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\eCare Cockpit Report.rtf:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\eCare Cockpit Report.rtf:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\eng.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\eng.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\for_Avast.doc:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\for_Avast.doc:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\GE00331 - SDP API Specification.doc:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\GE00331 - SDP API Specification.doc:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\Git-2.7.1-64-bit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\Git-2.7.1-64-bit.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\gpg4win-2.2.4.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\gpg4win-2.2.4.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\HIST_249491730_201503072024.slk:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\HIST_249491730_201503072024.slk:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\ideaIU-15.0.2.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\ideaIU-15.0.2.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\IVR_vo_backendlog_FupLimit_2015-06-24.xls:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\jacoco-0.7.6-20151002.081900-29.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\jacoco-0.7.6-20151002.081900-29.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\jacoco-maven-plugin-0.7.5.201505241946-sources.jar:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\jacoco-maven-plugin-0.7.5.201505241946-sources.jar:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\jacoco.exec:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\jacoco.exec:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\Jinja2-2.8.tar.gz:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\kids_fest_map.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\krok_1_uvod_pohyblivost.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\learning_puppet_vm.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\learning_puppet_vm.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\MarcoPolo.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\MarcoPolo.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\maven.xml:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\maven.xml:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\Messaging architecture.png:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\Messaging architecture.png:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\Messaging architecture.xml:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\Messaging architecture.xml:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\ntlmaps-setup-0.9.9.6.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\ntlmaps-setup-0.9.9.6.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\otp_win64_18.2.1.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\otp_win64_18.2.1.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\output_LL3lhW.gif:$CmdTcID [130]
AlternateDataStreams: C:\Users\deii\Downloads\output_LL3lhW.gif:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\puttygen.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\puttygen.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\PyYAML-3.11.tar.gz:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\PyYAML-3.11.tar.gz:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\rabbitmq-server-3.6.0.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\rabbitmq-server-3.6.0.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\Reference Check Template VFMM(1).docx:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\Reference Check Template VFMM(1).docx:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\Reference Check Template VFMM.docx:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\Reference Check Template VFMM.docx:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\RESTful-Java-Client-ApacheHttpClient-Example.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\RESTful-Java-Client-ApacheHttpClient-Example.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\SDPDesign-2983521-110116-1558-7.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\SDPDesign-2983521-110116-1558-7.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\setup-x86_64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\setup-x86_64.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\SIEMENS SE 25267.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\SIEMENS SE 25267.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\Sorry leden 2015.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\Sorry leden 2015.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\SourceTreeSetup_1.7.0.32509.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\SourceTreeSetup_1.7.0.32509.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\ticketdirect776445589.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\ticketdirect776445589.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Downloads\vccbs-ear-1411.34.ear:$CmdTcID [64]
AlternateDataStreams: C:\Users\deii\Downloads\vccbs-ear-1411.34.ear:$CmdZnID [26]
AlternateDataStreams: C:\Users\deii\Documents\7091888.pdf:$CmdZnID [26]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2016-01-25 10:38 - 00002817 ____A C:\Windows\system32\Drivers\etc\hosts

10.254.119.95  svn vdsdpsvn svn.tmdev 
10.245.24.17   tmperf  tmperf.tmdev outbound-proxy1
10.245.24.18   prgen1   prgen1.tmdev
10.245.24.2    prgen2   prgen2.tmdev   sdp.prgen2.tmdev   enabling.prgen2.tmdev   android.prgen2.tmdev   api.sdp.prgen2.tmdev   sdp.prgen2 
10.254.119.80  prgen11  vdsdpsrv3  prgen11.tmdev  sdp.prgen11.tmdev  enabling.prgen11.tmdev  android.prgen11.tmdev  api.sdp.prgen11.tmdev
10.254.119.81  prgen12  vdsdpsrv4  prgen12.tmdev  sdp.prgen12.tmdev  enabling.prgen12.tmdev  android.prgen12.tmdev  api.sdp.prgen12.tmdev
10.254.119.87  prgen13  vtsdpsrv1  prgen13.tmdev  sdp.prgen13.tmdev  enabling.prgen13.tmdev  android.prgen13.tmdev  api.sdp.prgen13.tmdev  prgen13-at.tmdev  prgen13-de.tmdev  prgen13-uk.tmdev
10.254.119.89  prgen14  vtsdpsrv2  prgen14.tmdev  sdp.prgen14.tmdev  enabling.prgen14.tmdev  android.prgen14.tmdev  api.sdp.prgen14.tmdev  prgen14-cz.tmdev.t-motion.co.uk
10.254.119.90  prgen15  vtsdpsrv3  prgen15.tmdev  sdp.prgen15.tmdev  enabling.prgen15.tmdev  android.prgen15.tmdev  api.sdp.prgen15.tmdev
10.254.119.91  prgen16  vtsdpsrv4  prgen16.tmdev  sdp.prgen16.tmdev  enabling.prgen16.tmdev  android.prgen16.tmdev  api.sdp.prgen16.tmdev  prgen16-nl.tmdev fss.prgen16.tmdev  www.prgen16-hr.tmdev  www.prgen16-de.tmdev  www.prgen16-gr.tmdev www.prgen16-gr10.245.24.3    autotest.prgen3.tmdev  autotest-prgen3.tmdev
10.245.24.19   autotest.prgen4.tmdev  autotest-prgen4.tmdev
10.254.119.78  autotest.tmdev  autotest  vdsdpsrv1
127.0.0.1      localhost-de.tmdev localhost-cz.tmdev localhost-hu.tmdev
127.0.0.1      internal-vip
127.0.0.1      deii-x230 deii-x230.tmdev
10.254.119.77  build   vdsdpbuild
10.254.119.79  prgmsc  vdsdpsrv2
10.254.86.7    vxprx01  vxprx01
10.254.119.95  artifactory artifactory.tmdev

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2833470715-1743641123-588181605-1000\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 10.254.0.63 - 10.254.119.95
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{74AAD8A4-D145-493C-9AE5-4A3B86297B22}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{94FEEB48-F1A9-4E2B-96CB-C5E861775C72}] => (Allow) LPort=2869
FirewallRules: [{7C2FF642-4DB5-4457-9A8E-521F431A7588}] => (Allow) LPort=1900
FirewallRules: [{8F5CC91B-A047-4CFC-B7CF-D33E5A35F860}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{CD170690-62E6-41EB-A753-9D738505EDA9}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [TCP Query User{6FA069D9-18B5-4367-8007-3258DDC8EC81}C:\program files (x86)\intel\intelappstore\bin\ismagent.exe] => (Allow) C:\program files (x86)\intel\intelappstore\bin\ismagent.exe
FirewallRules: [UDP Query User{C639B99E-7250-40CD-AE14-F6F2E41BD1E3}C:\program files (x86)\intel\intelappstore\bin\ismagent.exe] => (Allow) C:\program files (x86)\intel\intelappstore\bin\ismagent.exe
FirewallRules: [{47FDC9B4-3D1A-444D-9F06-CCBD633F9937}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B76FED69-4318-4FAA-8DFE-C0E3B0716608}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A9B6282A-0B55-442A-860D-A72AFAD17270}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{A1DF7EF0-8F32-4457-AF09-2D9357CF6394}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{DA74F4F5-2E37-4CC2-9372-EFC74BAE3CCB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{AE810411-23BA-405D-93C8-D5FB85076D25}] => (Allow) C:\Program Files (x86)\Common Files\soft602\langserv.exe
FirewallRules: [{7502279D-A52C-4356-8920-10554100E3C8}] => (Allow) C:\Program Files (x86)\Common Files\soft602\langserv.exe
FirewallRules: [{E288F2F5-BCF6-4516-BCA7-C08BA4FD67F0}] => (Allow) C:\Program Files (x86)\Janetter2\bin\JanetterSrv.exe
FirewallRules: [{E71794C1-08A0-4BE8-B8A3-A83B9C61C58B}] => (Allow) C:\Program Files\MetaTrader 5\metatester64.exe
FirewallRules: [{1A1A3443-7155-4B0B-9608-EB836FF78181}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe
FirewallRules: [{512E3EB6-B4C7-4DB6-84F5-415F64F5976F}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{865A7887-6E6A-4DAE-AE3D-DE89ADC20189}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{23ED937F-69DB-4D6D-9777-4943D46753A7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{EEC4C797-CE06-4905-B418-1439D35B1F79}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{194C18A2-73F6-41ED-986A-466F6C95CCB2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{223129A9-7DC9-4DE6-8B86-755E4F0993BC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CC867FD8-C8AF-4B15-A1D7-5E1581A7D41C}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe
FirewallRules: [{AA92751A-57BC-4A7C-B43E-A8A544AE0362}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe
FirewallRules: [{E151DB85-95EF-4662-8907-FF372E6D0698}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe
FirewallRules: [{ADF5F2C7-7917-456E-A557-87775DD6E19E}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe
FirewallRules: [{6A65C3F9-C863-4024-ABBD-FAC997808AA3}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\xchat\xchat.exe] => Enabled:XChat IRC Client

==================== Restore Points =========================

13-03-2016 16:19:13 Windows Update
14-03-2016 12:35:47 Python 3.5.1 (32-bit)
21-03-2016 08:59:47 Installed Lenovo Solution Center.

==================== Faulty Device Manager Devices =============

Name: Cisco Systems VPN Adapter for 64-bit Windows
Description: Cisco Systems VPN Adapter for 64-bit Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/23/2016 02:49:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/23/2016 02:37:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/23/2016 02:27:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1014

Error: (03/23/2016 02:27:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1014

Error: (03/23/2016 02:27:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (03/21/2016 04:14:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/14/2016 03:17:27 PM) (Source: SafeQPort) (EventID: 1) (User: )
Description: Job owner identification failed, using original user name from job

Error: (03/14/2016 03:13:08 PM) (Source: SafeQPort) (EventID: 1) (User: )
Description: Job owner identification failed, using original user name from job

