Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu logu.

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
dopa
Návštěvník
Návštěvník
Příspěvky: 307
Registrován: 12 říj 2006 08:52

Prosím o kontrolu logu.

#1 Příspěvek od dopa »

Zdravím. Poslední dobou se mi počítač začal zpomalovat. Vytížení CPU je na 100% a procesy, které vytěžují se střídají.


zde je log:


Logfile of random's system information tool 1.09 (written by random/random)
Run by Dopa at 2012-04-26 09:45:39
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 7 GB (2%) free of 290 GB
Total RAM: 3838 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:45:44, on 26.4.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Users\Dopa\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Acronis\OnlineBackupStandalone\TrueImageMonitor.exe
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\windows\SysWOW64\RunDll32.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Program Files\trend micro\Dopa.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www1.euro.dell.com/content/defau ... l=cs&s=bsd
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://b2b.fast.eu:666/scripts/wgate/z ... anguage=CS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:80
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: 146.255.27.225 www.inebe.cz
O1 - Hosts: 146.255.27.225 inebe.cz
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [SAOB Monitor] C:\Program Files (x86)\Acronis\OnlineBackupStandalone\TrueImageMonitor.exe
O4 - HKLM\..\Run: [NSU_agent] "C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s
O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [GRemoteServer Pro] C:\Program Files (x86)\GBM\GRemote Pro\GRemoteServer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = Dopa\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files (x86)\ICQ7.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files (x86)\ICQ7.5\ICQ.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted IP range: http://192.168.0.99
O16 - DPF: {41C376E4-3319-47B7-BF3C-9598CC2CD107} (PTCamV Control) - http://192.168.0.99/classes/PTCamV.cab
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} (Java Plug-in 1.6.0_20) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O23 - Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) - ABBYY (BIT Software) - C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
O23 - Service: Služba Acronis Scheduler2 (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: Služba Acronis Nonstop Backup (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: CDMA Device Service - Unknown owner - C:\Program Files (x86)\Samsung\USB Drivers\26_VIA_driver2\amd64\VIAService.exe
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\windows\SYSTEM32\crypserv.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: DW WLAN Tray Service (wltrysvc) - Dell Inc. - C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14714 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\system32\atiesrxx.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
atieclxx
C:\windows\system32\atibtmon.exe Global\Ati_VariBrightMonitorEvent
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE" "C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe"
C:\windows\system32\WLANExt.exe 34482544
\??\C:\windows\system32\conhost.exe "2028976044-901953730393821655407164179-1695064347312112800-885754370-49136066
C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe" -service
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe"
"C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
C:\windows\system32\svchost.exe -k bthsvcs
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Samsung\USB Drivers\26_VIA_driver2\amd64\VIAService.exe"
crypserv.exe
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
C:\windows\System32\svchost.exe -k HPZ12
C:\windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe"
C:\Windows\system32\PrintIsolationHost.exe -Embedding
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
taskeng.exe {D19DC220-FAA4-41DB-9B08-CF4F7F98001E}
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE"
"C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Users\Dopa\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\windows\system32\svchost.exe -k WindowsMobile
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\Acronis\OnlineBackupStandalone\TrueImageMonitor.exe"
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
C:\windows\system32\SearchIndexer.exe /Embedding
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
{E345778B-EF02-45A8-B559-840B89E59CB7}
{D038359B-2551-44A1-B828-7CA66D62E8C3}
C:\windows\system32\wbem\wmiprvse.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
C:\windows\system32\sppsvc.exe
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\windows\system32\wbem\wmiprvse.exe
"C:\windows\system32\wuauclt.exe"
wmiadap.exe /F /T /R
"C:\Users\Dopa\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3634160232-3727038034-2283995071-1001Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3634160232-3727038034-2283995071-1001UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Dopa\AppData\Roaming\Mozilla\Firefox\Profiles\d80jhzfo.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "extensions.enabledItems" - "{B17C1C5A-04B1-11DB-9804-B622A1EF5492}:1.2.1, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, bkmrksync@nokia.com:1.0.0.732, dwnlink@rapidzasms.cz:1.0, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {f701c26a-479a-4724-b4f1-870db12f063c}:1.4.4, {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.4.51, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16"
prefs.js - "keyword.URL" - "http://search.centrum.cz/index.php?tool ... m-1.0.0&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.233 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_233.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.233 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_11_2_202_233.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsILegitCheckPlugin.xpt
nsIQTScriptablePlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
npLegitCheckPlugin.dll
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
Cetrumcz_igeared.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Dopa\AppData\Roaming\Mozilla\Firefox\Profiles\d80jhzfo.default\searchplugins\
icqplugin-1.xml
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-07-22 49440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-03-26 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-02-21 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-05-16 1164680]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-02-21 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{D5D47440-0750-463D-BAEF-A47D02414806}
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-04-15 2095400]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-04-23 10775072]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-08-12 2916584]
"Broadcom Wireless Manager UI"=C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [2011-05-01 5712896]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2012-04-04 3521424]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"KiesHelper"=C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe [2012-04-04 954256]
"KiesPDLR"=C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2012-04-04 21392]
"GRemoteServer Pro"=C:\Program Files (x86)\GBM\GRemote Pro\GRemoteServer.exe [2011-08-16 2818528]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher]
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-02 843712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-03-27 37296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AndroidSync]
C:\Program Files (x86)\Android-Sync\AndroidSync.exe -m []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2011-09-27 59240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell Webcam Central]
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [2009-06-24 409744]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Dopa\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-13 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HDD Regenerator]
C:\Program Files (x86)\HDD Regenerator\HDD Regenerator.exe [2010-10-17 4249872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files (x86)\ICQ7.5\ICQ.exe [2011-08-01 124480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kerio VPN Client]
C:\Program Files (x86)\Kerio\VPN Client\kvpncgui.exe /tray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nikon Message Center 2]
C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2]
C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickSet]
C:\Program Files\Dell\QuickSet\QuickSet.exe [2010-02-26 3177120]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files (x86)\QuickTime\QTTask.exe [2011-10-24 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Služba Acronis Scheduler2]
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2010-09-23 391144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2010-09-23 5502312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vmware-tray]
C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile Device Center]
C:\windows\WindowsMobile\wmdc.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile-based device management]
C:\windows\WindowsMobile\wmdcBase.exe [2007-05-31 660360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^LINKMAGIC.lnk]
C:\PROGRA~2\LINKMA~1\LINKMA~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Outlook Plugin.lnk]
C:\PROGRA~2\PAYPAL~1\OUTLOO~1\OEHook.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Dopa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
C:\Users\Dopa\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-04-12 26950560]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Dopa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk]
C:\PROGRA~2\MAGICD~1\MAGICD~1.EXE [2009-02-23 576000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Dopa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
C:\PROGRA~2\MICROS~1\Office12\ONENOTEM.EXE [2009-02-26 97680]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"NPSStartup"= []
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-09-08 343168]
""= []
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-02 843712]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2012-02-28 1987976]
"SAOB Monitor"=C:\Program Files (x86)\Acronis\OnlineBackupStandalone\TrueImageMonitor.exe [2010-09-02 2536752]
"NSU_agent"=C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe [2012-02-28 190768]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-03-27 37296]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Users\Dopa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Dopa\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=95

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit -
.js - open -
.txt - open -

======List of files/folders created in the last 1 month======

2012-04-26 09:30:37 ----D---- C:\rsit
2012-04-23 21:50:13 ----D---- C:\Users\Dopa\AppData\Roaming\Google Chrome Backup
2012-04-23 21:49:41 ----D---- C:\Program Files (x86)\Google Chrome Backup
2012-04-17 15:07:19 ----D---- C:\Program Files (x86)\VMware
2012-04-14 09:33:10 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2012-04-14 09:33:10 ----A---- C:\windows\system32\mshtmled.dll
2012-04-14 09:33:09 ----A---- C:\windows\SYSWOW64\iertutil.dll
2012-04-14 09:33:09 ----A---- C:\windows\system32\iertutil.dll
2012-04-14 09:33:08 ----A---- C:\windows\SYSWOW64\url.dll
2012-04-14 09:33:08 ----A---- C:\windows\SYSWOW64\ieui.dll
2012-04-14 09:33:08 ----A---- C:\windows\system32\url.dll
2012-04-14 09:33:08 ----A---- C:\windows\system32\jscript9.dll
2012-04-14 09:33:08 ----A---- C:\windows\system32\ieui.dll
2012-04-14 09:33:07 ----A---- C:\windows\SYSWOW64\urlmon.dll
2012-04-14 09:33:07 ----A---- C:\windows\SYSWOW64\jscript9.dll
2012-04-14 09:33:07 ----A---- C:\windows\SYSWOW64\jscript.dll
2012-04-14 09:33:07 ----A---- C:\windows\system32\jscript.dll
2012-04-14 09:33:06 ----A---- C:\windows\system32\urlmon.dll
2012-04-14 09:33:06 ----A---- C:\windows\system32\jsproxy.dll
2012-04-14 09:33:05 ----A---- C:\windows\SYSWOW64\wininet.dll
2012-04-14 09:33:04 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2012-04-14 09:33:04 ----A---- C:\windows\system32\wininet.dll
2012-04-14 09:33:03 ----A---- C:\windows\SYSWOW64\mshtml.dll
2012-04-14 09:33:01 ----A---- C:\windows\system32\mshtml.dll
2012-04-14 09:33:00 ----A---- C:\windows\SYSWOW64\ieframe.dll
2012-04-14 09:32:58 ----A---- C:\windows\system32\ieframe.dll
2012-04-11 08:05:29 ----A---- C:\windows\system32\ntoskrnl.exe
2012-04-11 08:05:26 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2012-04-11 08:05:24 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2012-04-11 07:59:47 ----A---- C:\windows\system32\drivers\fs_rec.sys
2012-04-11 07:59:46 ----A---- C:\windows\SYSWOW64\wmi.dll
2012-04-11 07:59:46 ----A---- C:\windows\SYSWOW64\wintrust.dll
2012-04-11 07:59:46 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2012-04-11 07:59:46 ----A---- C:\windows\system32\wmi.dll
2012-04-11 07:59:46 ----A---- C:\windows\system32\wintrust.dll
2012-04-11 07:59:46 ----A---- C:\windows\system32\imagehlp.dll
2012-04-10 21:42:55 ----D---- C:\Program Files\Nokia
2012-04-10 19:29:11 ----A---- C:\windows\system32\drivers\pccsmcfdx64.sys
2012-04-10 19:29:02 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2012-04-10 18:31:09 ----A---- C:\windows\SYSWOW64\FlashPlayerInstaller.exe
2012-04-10 18:12:24 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2012-04-10 17:54:33 ----D---- C:\Program Files (x86)\COMPlus Applications
2012-04-10 17:25:53 ----D---- C:\Program Files (x86)\ODEON
2012-04-09 20:10:38 ----D---- C:\Program Files (x86)\LooksBuilder
2012-04-01 21:06:21 ----D---- C:\Users\Dopa\AppData\Roaming\PearlMountain
2012-04-01 21:06:21 ----D---- C:\ProgramData\PearlMountain
2012-04-01 21:05:47 ----D---- C:\Program Files (x86)\Picture Collage Maker Pro
2012-03-28 08:49:14 ----D---- C:\Program Files (x86)\DVDVideoSoft

======List of files/folders modified in the last 1 month======

2012-04-26 09:45:41 ----D---- C:\Program Files\trend micro
2012-04-26 09:45:39 ----D---- C:\windows\Temp
2012-04-26 09:43:09 ----D---- C:\Users\Dopa\AppData\Roaming\Dropbox
2012-04-26 09:31:53 ----D---- C:\windows\system32\config
2012-04-26 09:30:54 ----SHD---- C:\windows\Installer
2012-04-26 09:30:39 ----D---- C:\windows\SysWOW64
2012-04-26 09:30:39 ----A---- C:\windows\SYSWOW64\PerfStringBackup.INI
2012-04-26 09:30:36 ----D---- C:\Users\Dopa\AppData\Roaming\Skype
2012-04-26 09:30:30 ----D---- C:\Users\Dopa\AppData\Roaming\ICQ
2012-04-26 09:30:15 ----D---- C:\windows\inf
2012-04-26 09:30:11 ----D---- C:\windows\System32
2012-04-26 09:30:11 ----A---- C:\windows\system32\PerfStringBackup.INI
2012-04-26 09:29:43 ----RSD---- C:\windows\assembly
2012-04-26 09:14:20 ----SHD---- C:\System Volume Information
2012-04-25 21:48:33 ----D---- C:\Users\Dopa\AppData\Roaming\VMware
2012-04-24 14:50:26 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-04-24 12:57:03 ----D---- C:\windows\Microsoft.NET
2012-04-24 10:50:06 ----D---- C:\windows\system32\DriverStore
2012-04-23 21:49:41 ----RD---- C:\Program Files (x86)
2012-04-23 21:08:28 ----D---- C:\ProgramData\Spybot - Search & Destroy
2012-04-23 20:40:07 ----D---- C:\Windows
2012-04-22 19:09:50 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-04-22 19:09:42 ----D---- C:\windows\system32\drivers
2012-04-22 17:44:14 ----D---- C:\Dopa
2012-04-21 10:14:48 ----D---- C:\windows\Prefetch
2012-04-19 11:45:43 ----D---- C:\windows\debug
2012-04-17 16:55:36 ----D---- C:\_PRACE
2012-04-17 15:08:01 ----D---- C:\ProgramData\VMware
2012-04-16 13:31:46 ----D---- C:\Users\Dopa\AppData\Roaming\Mozilla
2012-04-16 13:30:42 ----D---- C:\windows\system32\NDF
2012-04-16 13:23:04 ----D---- C:\Users\Dopa\AppData\Roaming\Acronis
2012-04-16 13:19:46 ----D---- C:\windows\winsxs
2012-04-16 13:17:16 ----D---- C:\Program Files\Internet Explorer
2012-04-16 13:17:16 ----D---- C:\Program Files (x86)\Internet Explorer
2012-04-16 13:17:15 ----D---- C:\windows\SYSWOW64\migration
2012-04-16 13:17:15 ----D---- C:\windows\system32\migration
2012-04-14 23:24:39 ----D---- C:\windows\system32\Tasks
2012-04-14 09:33:40 ----D---- C:\windows\system32\catroot
2012-04-14 09:33:39 ----D---- C:\windows\system32\catroot2
2012-04-12 07:30:15 ----D---- C:\ProgramData\Microsoft Help
2012-04-11 08:00:10 ----A---- C:\windows\system32\MRT.exe
2012-04-10 21:42:55 ----RD---- C:\Program Files
2012-04-10 21:08:38 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-04-10 21:02:19 ----D---- C:\Program Files (x86)\Nokia
2012-04-10 19:29:11 ----DC---- C:\windows\system32\DRVSTORE
2012-04-10 19:24:21 ----D---- C:\Users\Dopa\AppData\Roaming\Nokia
2012-04-10 19:21:43 ----D---- C:\ProgramData\Installations
2012-04-10 18:12:33 ----D---- C:\windows\Tasks
2012-04-10 18:00:37 ----D---- C:\ProgramData\Nokia
2012-04-10 17:58:51 ----D---- C:\windows\registration
2012-04-10 17:16:39 ----D---- C:\_SOFT
2012-04-10 14:16:34 ----D---- C:\_ZALOHY
2012-04-10 14:15:37 ----D---- C:\windows\system32\drivers\UMDF
2012-04-05 21:04:13 ----A---- C:\windows\ODBC.INI
2012-04-03 13:24:35 ----D---- C:\windows\rescache
2012-04-01 21:06:36 ----D---- C:\Program Files (x86)\Common Files
2012-04-01 21:06:21 ----HD---- C:\ProgramData
2012-03-31 16:52:11 ----D---- C:\Users\Dopa\AppData\Roaming\Vso
2012-03-31 16:52:11 ----D---- C:\Users\Dopa\AppData\Roaming\Media Player Classic
2012-03-31 16:51:44 ----D---- C:\windows\Panther
2012-03-31 16:51:44 ----D---- C:\windows\ModemLogs
2012-03-31 16:51:41 ----D---- C:\windows\Logs
2012-03-31 16:46:46 ----D---- C:\Program Files\CCleaner
2012-03-28 10:00:54 ----SD---- C:\Users\Dopa\AppData\Roaming\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\windows\system32\DRIVERS\AtiPcie.sys [2009-05-05 16440]
R0 BtHidBus;Bluetooth HID Bus Service; C:\windows\System32\Drivers\BtHidBus.sys [2010-04-06 23944]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 snapman;Acronis Snapshots Manager; C:\windows\system32\DRIVERS\snapman.sys [2012-03-07 277088]
R0 speedfan;speedfan; C:\windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 tdrpman273;Acronis Try&Decide and Restore Points filter (build 273); C:\windows\system32\DRIVERS\tdrpm273.sys [2012-03-07 1263200]
R0 timounter;Acronis Backup Archive Explorer; C:\windows\system32\DRIVERS\timntr.sys [2012-03-07 970336]
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2010-07-29 141264]
R1 NetworkX;NetworkX; C:\windows\syswow64\ckldrv.sys [2006-01-10 31846]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 adfs;adfs; C:\windows\system32\drivers\adfs.sys [2008-06-27 88632]
R2 AODDriver4.01;AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2011-06-24 55424]
R2 eamonm;eamonm; C:\windows\system32\DRIVERS\eamonm.sys [2010-07-29 168544]
R2 epfwwfpr;epfwwfpr; C:\windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 126320]
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2009-08-06 11576]
R3 afcdp;afcdp; C:\windows\system32\DRIVERS\afcdp.sys [2012-03-07 279136]
R3 amdiox64;AMD IO Driver; C:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2011-09-08 10203648]
R3 amdkmdap;amdkmdap; C:\windows\system32\DRIVERS\atikmpag.sys [2011-09-08 310784]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\windows\system32\drivers\AtiHdmi.sys [2010-03-09 123408]
R3 BCM42RLY;BCM42RLY; C:\windows\system32\drivers\BCM42RLY.sys [2011-05-01 22592]
R3 BCM43XX;Ovladač pro bezdrátovou síťovou kartu DW WLAN; C:\windows\system32\DRIVERS\bcmwl664.sys [2011-05-01 3060800]
R3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;Bluetooth AMP USB Filter; C:\windows\system32\drivers\btwampfl.sys [2010-04-29 340520]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2010-04-29 102440]
R3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\DRIVERS\btwavdt.sys [2010-04-29 135720]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2010-04-29 39464]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2010-04-29 21544]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\windows\system32\DRIVERS\CtClsFlt.sys [2009-06-15 172704]
R3 GRemoteBus;GRemote virtual joystick Bus Enumerator; C:\windows\system32\DRIVERS\GRemoteBus64.sys [2009-08-05 27336]
R3 GRemoteJoy;GRemote virtual joystick Device Driver; C:\windows\system32\DRIVERS\GRemoteJoy64.sys [2009-08-05 46792]
R3 hamachi;Hamachi Network Interface; C:\windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2010-04-23 2356000]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x64.sys [2009-12-22 74280]
R3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\windows\system32\DRIVERS\mcdbus.sys [2009-02-24 255552]
R3 pcouffin;VSO Software pcouffin; C:\windows\System32\Drivers\pcouffin.sys [2010-11-20 82816]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-04-15 319536]
R3 usbfilter;AMD USB Filter Driver; C:\windows\system32\DRIVERS\usbfilter.sys [2009-06-04 34872]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S2 Aspi32;Aspi32; C:\windows\System32\drivers\aspi32.sys []
S2 DgiVecp;DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys []
S3 Bridge;@%SystemRoot%\system32\bridgeres.dll,-3; C:\windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BT;Bluetooth PAN Network Adapter; C:\windows\system32\DRIVERS\btnetdrv.sys []
S3 BTCOM;Bluetooth Serial port driver; C:\windows\system32\DRIVERS\btcomport.sys []
S3 BTCOMBUS;Bluetooth Serial Port Bus Service; C:\windows\System32\Drivers\btcombus.sys []
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 btnetBUs;Bluetooth PAN Bus Service; C:\windows\System32\Drivers\btnetBus.sys [2010-04-06 30088]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudbus.sys [2011-10-27 95928]
S3 dgderdrv;dgderdrv; C:\windows\System32\drivers\dgderdrv.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\windows\system32\drivers\Dot4Prt.sys [2010-11-20 19968]
S3 Dot4Scan;Scan Class Driver for IEEE-1284.4; C:\windows\system32\DRIVERS\Dot4Scan.sys [2009-07-14 13824]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 IvtBtBUs;IVT Bluetooth Bus Service; C:\windows\System32\Drivers\IvtBtBus.sys [2010-04-06 27016]
S3 kvnet;Kerio Virtual Network Adapter; C:\windows\system32\DRIVERS\kvnet.sys [2010-07-15 30720]
S3 kwflower;Kerio Control - Lower Layer Driver; C:\windows\system32\DRIVERS\kwflower.sys []
S3 netfilter;Netfilter; C:\windows\system32\DRIVERS\netfilter.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\windows\system32\drivers\nmwcdnsucx64.sys [2012-01-09 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\windows\system32\drivers\nmwcdnsux64.sys [2012-01-09 171008]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 QWARQNet;Qwarq Virtual Miniport; C:\windows\system32\DRIVERS\QWARQNet.sys []
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2010-05-07 245792]
S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter; C:\windows\system32\DRIVERS\RTL8192su.sys [2010-11-25 694888]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\windows\system32\DRIVERS\ssadbus.sys [2011-10-27 157672]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\windows\system32\DRIVERS\ssadmdfl.sys [2011-10-27 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\windows\system32\DRIVERS\ssadmdm.sys [2011-10-27 177640]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudmdm.sys [2011-10-27 203320]
S3 TFsExDisk;TFsExDisk; \??\C:\Windows\System32\Drivers\TFsExDisk.sys [2010-04-19 16448]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 upperdev;upperdev; C:\windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 usb_rndisx;Adaptér USB RNDIS; C:\windows\system32\DRIVERS\usb8023x.sys [2009-07-14 19968]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\windows\system32\DRIVERS\usbser.sys [2010-11-20 32768]
S3 UsbserFilt;UsbserFilt; C:\windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\windows\system32\DRIVERS\VBoxNetAdp.sys [2011-10-03 146736]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\windows\system32\DRIVERS\vmnetadapter.sys []
S3 vserial;ELTIMA Virtual Serial Ports Driver; C:\windows\System32\DRIVERS\vserial.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service; C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [2007-12-06 660768]
R2 AcrSch2Svc;Služba Acronis Scheduler2; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2010-09-23 1079376]
R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-17 98208]
R2 afcdpsrv;Služba Acronis Nonstop Backup; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2012-03-07 3975088]
R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2011-09-08 204288]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-09-08 361984]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-04-29 944928]
R2 CDMA Device Service;CDMA Device Service; C:\Program Files (x86)\Samsung\USB Drivers\26_VIA_driver2\amd64\VIAService.exe [2011-08-02 159232]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 Crypkey License;Crypkey License; C:\windows\SYSTEM32\crypserv.exe [2008-05-08 122880]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2010-08-12 810144]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\windows\system32\svchost.exe [2009-07-14 27136]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 TeamViewer7;TeamViewer 7; C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-01-19 3027840]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-01-04 718888]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-12 136176]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-13 253088]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-08-12 42360]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-01-29 1038088]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-11-06 655624]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-12 136176]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-02-08 136120]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2010-11-05 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 TlntSvr;@%SystemRoot%\system32\tlntsvr.exe,-119; C:\windows\System32\tlntsvr.exe [2009-07-14 81920]

-----------------EOF-----------------

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu.

#2 Příspěvek od vyosek »

Zdravim a pekny vecer preji :)

:arrow: Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
  • Ukoncete vsechny programy
  • Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
  • Pockejte na dokonceni PreScanu
  • Zvolte moznost Prohledat (scan)
  • Po dokonceni skenu kliknete na Zpráva (Report)- otevre se log, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

dopa
Návštěvník
Návštěvník
Příspěvky: 307
Registrován: 12 říj 2006 08:52

Re: Prosím o kontrolu logu.

#3 Příspěvek od dopa »

zde je log:


RogueKiller V7.3.3 [04/22/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Podpora: http://www.geekstogo.com/forum/files/fi ... guekiller/
Operační systém: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v: Normální režim
Uživatel: Dopa [Práva správce]
Mód: Kontrola -- Datum: 04/27/2012 08:52:19

¤¤¤ Škodlivé procesy: 0 ¤¤¤

¤¤¤ Záznamy Registrů: 5 ¤¤¤
[PROXY IE] HKCU\[...]\Internet Settings : ProxyServer (127.0.0.1:80) -> FOUND
[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> FOUND
[HJ] HKLM\[...]\System : EnableLUA (0) -> FOUND
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač: [NENAHRÁNO] ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
146.255.27.225 www.inebe.cz
146.255.27.225 inebe.cz


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST9320423AS ATA Device +++++
--- User ---
[MBR] b091b00a77c78202a2592856caf82400
[BSP] 821c04d84790a00de212b9def440f452 : Windows Vista MBR Code
Partition table:
0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 39 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 81920 | Size: 15000 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 30801920 | Size: 290204 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[1].txt >>
RKreport[1].txt

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu.

#4 Příspěvek od vyosek »

:arrow: Spustte znovu RogueKiller
  • Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
  • Zvolte moznost Prohledat a pote Smazat a nasledne Zprava - otevre se log, ten sem vlozte
  • Pak kliknete na Oprava Host a Zprava - otevre se log, ten sem vlozte
:arrow: Stahnete MBRScan http://eric71.geekstogo.com/tools/MbrScan.exe
  • Ulozte nejlepe na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na MBRScan pravym a dejte Run As Administrator ci Spustit jako spravce
  • Kliknete na Report
  • Po chvilce se objevi log do souboru MBRScan.txt, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

dopa
Návštěvník
Návštěvník
Příspěvky: 307
Registrován: 12 říj 2006 08:52

Re: Prosím o kontrolu logu.

#5 Příspěvek od dopa »

děkuji... HOSTS jsem měl upraven schválně kvůli testování jednoho webu

zde jsou logy...

1. http://pastebin.com/vXZBU1AT
2. http://pastebin.com/6z4U3n2p
3. http://pastebin.com/cE1B38fD

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu.

#6 Příspěvek od vyosek »

:arrow: Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222
  • Provedte aktualizaci
  • Provedte uplny sken - nic nemazte :!:
  • MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

dopa
Návštěvník
Návštěvník
Příspěvky: 307
Registrován: 12 říj 2006 08:52

Re: Prosím o kontrolu logu.

#7 Příspěvek od dopa »

to se přiznám, že jsem pouštěl.. nenašel vůbec nic...

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu.

#8 Příspěvek od vyosek »

Super, tak mrknem jeste jinak :)

:arrow: Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
  • Zaskrtnete okenko Pro vsechny uzivatele
  • Zaskrtnete okenko Kontrola na havet "LOP"
  • Zaskrtnete okenko Kontrola na havet "Purity"
  • Stari souboru zmente z 30 dnu na 7 dnu
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize
  • Kód: Vybrat vše

    CREATERESTOREPOINT
    
    netsvcs
    drivers32
    savembr:0
    
    /md5start
    atapi.sys
    autochk.exe
    cdrom.sys
    explorer.exe
    hal.dll
    scecli.dll
    svchost.exe
    tcpip.sys
    userinit.exe
    winlogon.exe
    /md5stop
    
    %systemroot%*.* /U /s
    %SYSTEMDRIVE%\*.exe
    %ALLUSERSPROFILE%\Application Data\*.
    %ALLUSERSPROFILE%\Application Data\*.exe /s
    %APPDATA%\*.
    %APPDATA%\*.exe /s
    %systemroot%\*. /mp /s
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\System32\config\*.sav
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\system32\drivers\*.sys /3
    %systemroot%\system32\*.* /3
    %SYSTEMDRIVE%\*.exe
    
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
    
    %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
    %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
    %PROGRAMFILES%\Opera\opera.exe /md5
    %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
    
    %SystemDrive%\PhysicalMBR.bin /md5 
    
    *crack* /s
    *keygen* /s
    *loader* /s
  • Kliknete na tlacitko Prohledat
  • Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

dopa
Návštěvník
Návštěvník
Příspěvky: 307
Registrován: 12 říj 2006 08:52

Re: Prosím o kontrolu logu.

#9 Příspěvek od dopa »

trochu se to seklo u "Scanning Firefox Settings"

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu.

#10 Příspěvek od vyosek »

OTL se obcas mirne zakousne, ale pokud to nebude na dyl jak 10 min, tak jej nechte, zase se "odkousne" :)
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

dopa
Návštěvník
Návštěvník
Příspěvky: 307
Registrován: 12 říj 2006 08:52

Re: Prosím o kontrolu logu.

#11 Příspěvek od dopa »

ono už to běží tak 35 minut, ale počkám :)

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu.

#12 Příspěvek od vyosek »

Pokud skenuje, tak jej nechte...ono zalezi i na rychlosti PC a poctem souboru kterymi se musim probrat
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

dopa
Návštěvník
Návštěvník
Příspěvky: 307
Registrován: 12 říj 2006 08:52

Re: Prosím o kontrolu logu.

#13 Příspěvek od dopa »

zde jsou logy:

1. extras. - http://pastebin.com/Y9VL7FT6
2. otl - http://pastebin.com/MM00e0UP

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu.

#14 Příspěvek od vyosek »

logy mi dejte sem prosim, pripadne rozdelte do vice prispevku
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

dopa
Návštěvník
Návštěvník
Příspěvky: 307
Registrován: 12 říj 2006 08:52

Re: Prosím o kontrolu logu.

#15 Příspěvek od dopa »

log: Extras

OTL Extras logfile created on: 27.4.2012 21:06:20 - Run 1
OTL by OldTimer - Version 3.2.42.1 Folder = C:\Users\Dopa\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,75 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 53,35% Memory free
7,49 Gb Paging File | 4,70 Gb Available in Paging File | 62,71% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 283,40 Gb Total Space | 6,19 Gb Free Space | 2,18% Space Free | Partition Type: NTFS
Drive D: | 1,33 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: DOPA-DELL | User Name: Dopa | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\windows\SysWow64\control.exe (Microsoft Corporation)
.js [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found
.txt [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Browse with &IrfanView] -- "C:\Program Files (x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Browse with &IrfanView] -- "C:\Program Files (x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0A8DDC91-40AD-431C-9CDF-11B9A2AD186C}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{0AC4E96E-3160-4825-AF38-A4131E53B767}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{11334186-A4FF-4509-BD84-1728C181988B}" = lport=5656 | protocol=17 | dir=in | name=gremoteserver udp port |
"{16D5F5CC-5867-4834-9721-5024410602E3}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{263FB1DB-BEAC-4718-B732-D9BC8BF8A675}" = rport=138 | protocol=17 | dir=out | app=system |
"{29EBFC50-1281-4489-B677-0417189E6C6B}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{2B8C5A79-8033-405D-90AD-AD827E020CDC}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 |
"{38E222B0-F5D3-4057-8B17-AC1CADA6F383}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{392B55BF-DD99-4F34-88D3-A55FA5BBAEA7}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{3ACFDC5C-2F33-4155-A7B8-15487C7BFC61}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{40BE5F45-ECA7-4FE4-B3B3-8EC3F4B14202}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{528D4987-3FB1-42CA-A6A5-57B91B8894C1}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 |
"{52C30027-235B-41FB-AA1E-E891B6294720}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 |
"{5C25BFE8-5C70-4670-968D-0475D31446C5}" = rport=10243 | protocol=6 | dir=out | app=system |
"{5EF41039-0B66-46D4-BB7B-4B2374AB2857}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{60C5BD40-0BCC-4C89-85FE-19B7CDD576EE}" = lport=138 | protocol=17 | dir=in | app=system |
"{63B357E7-3825-45F1-8DF1-4A9D283A3013}" = lport=2869 | protocol=6 | dir=in | app=system |
"{68229206-DEB6-4494-8C73-B208CFCB60C8}" = rport=445 | protocol=6 | dir=out | app=system |
"{6F1672AF-B56C-4CBD-8826-144F19093906}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{7140A954-A516-40CE-9BE9-000529F0BFB9}" = lport=137 | protocol=17 | dir=in | app=system |
"{7664FE08-C4FE-4532-97AE-3615F8F1365B}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{82FE1E85-5E8A-4F3B-8120-DFB9940B1304}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{884C6575-FB19-4CDC-92EE-217624B54839}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{8B006133-238B-4032-974C-46BCBAA1E88C}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{9CCF5EA6-E555-4B55-8DBA-A852BC8A5F02}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{9CFA3DC8-821F-494E-97C9-9B649F6C9A79}" = rport=139 | protocol=6 | dir=out | app=system |
"{A9629EB6-8134-4357-B9A6-4BD008A4C4DA}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{BC56DD04-2A0F-4D33-8EE9-A7323FFFAD12}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{BDC9239A-9CDD-4160-9FD2-6B61B0C0F90D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{BF468911-960D-4CB1-BA0E-FE3787C67285}" = rport=137 | protocol=17 | dir=out | app=system |
"{C667D342-080F-4EC3-B055-52808D919506}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 |
"{E70BCB21-8AA1-45F5-9F9C-05E4B0572EF2}" = lport=445 | protocol=6 | dir=in | app=system |
"{E7256D35-F537-4876-A390-5A09963DF402}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{E9BDFACE-24D0-4EA3-B627-521A63C4E5FA}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{E9F2DBE9-83C9-47A6-A55D-61AEE029F46C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{EBC46D42-1720-4C58-AE12-79181FE3282D}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 |
"{F77AAE51-4FAB-4604-B6B4-B21A003E3CED}" = lport=139 | protocol=6 | dir=in | app=system |
"{F998D827-F6B7-4F79-93A0-7867A3379F7B}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{FFD0D25F-2D0A-4029-8738-8F4D62BEE986}" = lport=10243 | protocol=6 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0019ADFB-ABF0-45A2-8314-1D6F971FE6ED}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{00EA6C9E-5296-4120-AB3F-07BEA3123B92}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{0156718E-C89A-438C-B595-EE51A668177B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{01AAEB04-F89D-4158-BC20-44C4BB268F82}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{01DD1F72-37D1-427A-AB17-651582C3C56E}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{01EADE74-282C-4102-B9AF-CB1EB7592CEC}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{021215C6-8508-4B81-AD59-E8F34157AA34}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{0529D008-2902-4862-B78B-8C22539A7D1A}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{07061D0A-ED47-4563-9EDA-C8ED2A6F57EE}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{0732C930-CCD4-477C-B0EC-F2CD092AB380}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{07D55D1E-8D1C-4AE8-86D7-A68F6BD499BF}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{08DDF119-DD6B-4248-9BAF-6D1D4A276E4C}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{0A958465-E76E-47CE-BBE1-86C62781AB09}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.5\icq.exe |
"{0AA2AFD5-B320-4618-BC61-3C1DD71228C6}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{0C036C92-A94C-49E9-AD11-83DAE7A5485B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{0D26FC6B-504B-4D6E-84CA-E64F55E7C849}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{0D4E2EE6-F768-4802-8FDA-BC008CBA7ED0}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{0D873F72-8539-4324-AD81-50EF265D41F3}" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\samsung universal scan driver\usdagent.exe |
"{0E54EA0D-BDA2-43B8-BACD-D273D04440F2}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{1101ACDE-131A-42AC-B744-143A40E9C8DD}" = protocol=6 | dir=in | app=c:\users\dopa\appdata\roaming\dropbox\bin\dropbox.exe |
"{119C6BF9-4D42-4D2B-8DCE-63D75002ED91}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.5\icq.exe |
"{11ACE10F-04F7-40D1-A96C-E26C37DF875E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{13E5B840-ABD9-491E-8AAB-F3718FDA44EF}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{14914961-0FD5-4F32-AE5E-1F16779B39FD}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{15227919-49C0-4BC8-A992-F927B98A3FE1}" = protocol=17 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{15ABB793-BFFB-4B90-BE6F-941C64C2A77F}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{175CD05C-69C5-4770-A81A-45C0382D686D}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{17EDEDCA-8F40-4836-ADE1-4B3D6673B7DA}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{1885E1C0-7FBF-4116-AB57-BCCCD11568FD}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{1895C2A7-B15D-4DFF-AD96-D1D87475B048}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{18B815F0-0A00-410B-B314-9D5E9B135ED5}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{18D605B2-F45B-4E56-8697-2AC188BB04C8}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{18DD378D-4A1E-4321-B72D-909C3102F823}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{1910704A-6A40-4AC7-8100-6D7FE327C05F}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{1C5069E6-9D0B-4D30-B86C-7FCAA8E94F4D}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{1CEF401B-82FC-4B7F-A47D-5397D2DF8F6E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{1E9EAC1B-3B1E-48D1-83D1-A53C9CB9BA8A}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{1EAE11EB-AB62-4DB8-B3CA-F74B6720CDAF}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{215D84E5-E20B-41CB-861A-CEF892A22D71}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{2206C12E-0768-407B-B342-DD42C38F604C}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{223CAD22-EC48-4AD1-8528-1EB96C6B3FA2}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{22467F58-00EE-4D2B-91EB-14554E05A869}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{23E2832C-9093-411A-85C9-5B9A66D44E1B}" = protocol=6 | dir=in | app=c:\users\dopa\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{253F6FBE-59E1-4B57-A5D7-E60661971C0D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{27C0940D-B1E3-4C26-9CF4-909989390EB3}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{29B2E3AA-687F-4D83-B379-0832D6F6324B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{2C7FF6B7-9930-4BA4-836A-FCBE4050FA7C}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{2D5C21AD-8923-4B03-9E2F-4C638B033241}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{2D9629A3-DB88-4729-ACA8-21476E39B098}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{2EAC5A0D-D50E-4551-89AA-5A44D56A9E5B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{31D34E97-4EFC-4123-810D-CD7FEB5C95AA}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{31E21556-256B-4BF0-83B5-EEE908DE2B06}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{33DE72B1-1723-49B0-A02A-3183A1B8E166}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{343498A3-F9D6-4C11-8C23-5AC306E643B9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{343A1F4F-7A48-41F1-8482-AC8CF7D49D79}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{35961BCC-53F3-46B1-9A60-0A7E3EFAF3BA}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{3668EE09-3662-4AF5-8C00-2524800A0703}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{37898440-9DC1-40B8-B757-2C5526938A6B}" = protocol=6 | dir=in | app=c:\install\tv\app\teamviewer\teamviewer.exe |
"{382E4DE9-B1FA-4498-9849-406987AF9413}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{38386BBE-EFC2-401A-BF19-5626A722762D}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{38F19D5B-661D-49DF-AEAD-E9A39A51DC13}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{38FA030E-BFD1-417A-BE67-7B719CB3650A}" = protocol=6 | dir=out | app=system |
"{3B185499-28BE-43FF-BA27-4F652CAB55CD}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{3B38FA14-CD65-4E99-81F6-8792888859FF}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{3B7FF0CB-33CF-4A4A-9926-A5C4A1FCA6E6}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{3BC88A43-4559-441C-81FF-F3FDCDA51B87}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3BCAC30A-DFF3-47FA-910E-0BB76811AC68}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{3C9FE3FC-A500-4DD1-9CBC-A8234AF080F4}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{3CBE32E1-F8CD-47B5-84F4-B91C52FEF306}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{3D088DCE-E2F2-4A07-809E-BCC8949D236E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{3F8AD944-76CE-4245-8C8D-ED76967BF6B9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{409F6C8C-B85A-43CC-95EA-5B3624892E1F}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{41110946-B0CF-427F-9E44-31326318FCE9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{42AA0838-704F-448A-A783-F4017425E78B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{43177319-6BAD-4537-998F-AE39452E1683}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{431B465A-4AAE-469B-BA8C-FDA3F7543323}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{43EC65A6-5957-4D81-9C42-60A20390548D}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{44B226BD-147B-4A3D-B1F2-B8BED541B933}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{458BD75A-CD5C-431F-B069-78FFEAA3107E}" = protocol=17 | dir=in | app=c:\program files\ultravnc\vncviewer.exe |
"{467AB43C-71C1-4E21-8959-0166DE39308A}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{4789FFD7-2B33-40CF-A8F8-2501D26BFF3A}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{47ABAA70-5932-47A2-9D37-288304E2FFDC}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{49ACE567-E7BE-4497-AF48-4DDC91D342AE}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe |
"{4A546BA3-38AC-410A-92C3-E7F5F9CA24C4}" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\samsung universal scan driver\iccupdater.exe |
"{4C571B57-159C-433A-AD0D-880E250A7549}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{4C6AC1F1-2359-4AE0-8626-F5C6B6620D67}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{4D48150B-18D6-4981-934E-05C5002A11E6}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{4E3F973E-6811-434A-A91F-1CEBD406A798}" = protocol=17 | dir=in | app=c:\program files (x86)\gbm\gremote pro\gremoteserver.exe |
"{4F2263E7-CD5F-402F-874F-01858A3CE732}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{4F3282D9-97B4-40CC-8A0E-42B3C310B914}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{50DB3656-EE8D-4E14-A663-D4BB78A9585D}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{50DFF4B8-E3FF-4209-A0FE-9F9F7DF3236E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{51BD959A-1E0B-41D6-9673-1689ECB7D8BD}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{51CA5C70-00C2-4EB9-9887-3B50C51308B3}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{520DD07F-71A9-4C84-BA09-DB81E1E86CB8}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{526163A4-5D04-4CB0-8D14-073A93A2626C}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{53C8721B-CE8B-48B5-91C9-86494C642B89}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{56ACB98C-5FA0-47D8-9840-F2E2BCD9E7A9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{56EFF0D2-0EF7-4208-A221-99F5CCC01CB1}" = protocol=6 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{57904862-81A9-4989-830F-7A932AEC5486}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{5841BCF8-5A94-49F1-931E-1BC07841DA30}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{58623216-2C4B-4C8A-93DA-E5AA81C51AB1}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{5A0356B6-65AF-4508-8589-92D86831A2C8}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{5A5C06F0-A884-4D57-90D7-6F90D99CADB5}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{5B75D09B-69E7-4853-8BFA-7BB012216EDF}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{5B918DEB-03E9-4A5E-BB2C-151CB1FA299B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{5EE9A9CE-9D08-4302-AD04-D49A5F060E3B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{5FE62398-76F2-4810-99CE-9C1FA2DF3857}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{602B7D5D-DCF7-43A9-B513-347F7F96EE58}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{625578BF-2913-436E-B93F-0E62677445BB}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{641BC1EA-91B4-4B84-BF36-6A665F477E14}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{64A5F497-24C9-4F3D-8117-8D4FE50AE9B6}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{656B3773-435E-4FBA-9452-702B1CBEB517}" = protocol=6 | dir=in | app=c:\program files\ultravnc\vncviewer.exe |
"{6716302E-D2A6-4026-B6CF-DDC0D669D029}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{67643A80-1FC5-48D0-A233-B27A683BFFC9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{67ED3FE6-E695-4712-9778-585F07D716A3}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{68780C17-3FB1-41CC-AF28-BBAE7175C69B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{6A893B86-38FA-4BA6-8AD3-90E64E872433}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{6B8E7EC1-FC91-4A88-8E7D-813E97FAFB6B}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{6C5E0CA6-4556-4383-9222-283B310DE844}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe |
"{6D577A17-A78B-4BC5-A45E-9F871F332174}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{6DB87F87-F506-4F54-8F99-FD43F40057BA}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{6FBF3F88-CA81-4EB5-9CFA-341C92CACC64}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{700012C2-6C70-40AB-A13D-753235270769}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{702B1CBC-F0AA-4666-94BA-326184A2EC01}" = protocol=17 | dir=in | app=c:\users\dopa\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{71094F1C-5EF9-41D2-BB33-E79D5DCEB23D}" = protocol=6 | dir=in | app=c:\program files (x86)\jeyo\jmc_windowsmobile\jmc_wm.exe |
"{719A62DF-1888-4718-9734-455E8CD986FF}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{75515016-5061-423D-B075-D05F638C7318}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.5\icq.exe |
"{7561123B-A90F-4095-9482-1B750FE71E34}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{75680AC2-23A8-4AB2-9F2A-1061EDC0A70B}" = protocol=17 | dir=in | app=c:\program files (x86)\jeyo\jmc_windowsmobile\jmc_wm.exe |
"{77694099-C8AB-4D2B-A7E2-4106C9C32692}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{7866BDF3-E4B4-4125-BEC0-763880BE169B}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{789AF979-52A6-4C49-AFC3-DEB3779D5402}" = protocol=17 | dir=in | app=c:\users\dopa\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{7C2D38DB-64AF-4478-9952-F336F24231D9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{7C99813A-4D96-440E-8977-AE28B0050AA9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{7D50EE73-C47F-4CCB-B76B-D48F1F7AB304}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{7D6DFFE6-A7A8-4A64-9B00-737296033F46}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{7E0BF672-D144-4313-9A4A-38E7D9BFFCC1}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{7E98EEDB-AD70-4972-81B0-83452727212F}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{7EA08EBF-F720-4CC2-9256-CA2894E60A25}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{7F382A08-1796-41DA-8C0B-27BFC05DF2A1}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{806C62C5-F9E7-4E22-BC0D-DF81CF49BBD6}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{8222CED4-A78D-4CC2-BC7C-66A6AC760213}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{82C396E4-18B1-4802-901D-00769DFF9C8A}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{833C486C-843B-46E6-9DFD-F3938B85CBDE}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{854FC444-4875-4E79-B002-DFF673FEE3CD}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.5\icq.exe |
"{86B6D45A-B883-4E42-BDBB-453928AB1450}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{8A39913F-18AF-4D74-9F16-2B7C33455604}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{8BC9FBBD-8B5B-49F1-8514-DAE50FB47277}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{8BCBE9ED-F50F-42A7-8259-FC5397952EF1}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{8D46B8C6-F8A7-4872-8371-5D13D3079973}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{8E890B1B-C7C9-4824-87CD-EBA1EF670901}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{9004B38D-3A7A-4BE3-BBD0-D0A20D4ED2C6}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{9185565F-74AA-40C2-9E12-B9B873AB00AC}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{91AF3C6E-8040-45D7-B8D3-7F6420F970D3}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{9481FAB6-CAA7-48EF-BFE0-073C1E56A750}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{94FD2A39-2BCC-41D8-BE22-418673F2EB31}" = protocol=6 | dir=in | app=c:\users\dopa\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{974590D8-4CB5-43D5-8BB5-1D85650A32CC}" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\samsung universal scan driver\usdagent.exe |
"{975E9C15-2AC9-4643-8C37-383E1B56C185}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{9794754E-2CEA-44B8-AF18-26948A53319D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{985DA7B1-9196-4572-A5FA-E7C7FB6D86A9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{98DFC982-8737-4C7C-BA4B-636C01B40CB0}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{9A7541C9-044C-4768-B552-EC23C6C43154}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{9B43EAD8-CA20-46F4-B852-B70923B35607}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{9B69BA27-D6A7-4926-9D8D-1931459E408A}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{9CE861BF-FF6B-4E24-8FD6-ABEDF48A5066}" = protocol=6 | dir=in | app=c:\program files (x86)\gbm\gremote pro\gremoteserver.exe |
"{9D94EDD8-21D2-4376-BE03-5100126141F6}" = protocol=17 | dir=in | app=c:\users\dopa\appdata\roaming\dropbox\bin\dropbox.exe |
"{9E42CAC3-EE41-4076-95F9-FB497F5061DC}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{9F4DE01A-AEFB-4CB9-9369-5D6955799F93}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{9FA6139C-8D67-4B6F-B69B-B397BEBF5AB4}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{A0EAE013-AF3C-46A7-A499-BEFEE33825F6}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{A188465B-EA6A-4370-9D1A-757E5B35009B}" = protocol=17 | dir=in | app=c:\users\dopa\appdata\roaming\dropbox\bin\dropbox.exe |
"{A1DBDEE5-5633-40D1-8F5F-3A6B5B01B28B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{A300DB8C-FC8E-4049-AF02-7D34934A0F22}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{A3CE9576-78F6-4023-917F-70210DA9F5A2}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{A47F803A-89B0-4541-9DBE-EA065408E187}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{A61C7136-8231-4C1E-97FA-66446A9B9D46}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{A7171AF3-616B-4AA8-BDDC-E281BF6425EC}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{A760EBC4-D8C1-4922-9F59-E9B446933C75}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{A97E1F9F-05B2-4325-BDFE-C881F5823DD9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{AA773134-D2B2-4C39-B813-33F626430231}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{AAAE15D4-D2E9-4319-90EB-8A87E9BF8C43}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{AAD7781B-AD74-4F60-B69B-6396C3B5E51F}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.5\icq.exe |
"{AD4F6FF3-1C08-4E22-AEC2-545C8971D656}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{AD5C4BD2-6C65-42D7-9885-F158C9D13192}" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\samsung universal scan driver\iccupdater.exe |
"{AD9372A5-AEB0-44C7-B24D-0DA13AEE7763}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{AE80DAA6-2F8A-44F6-A3F6-A2C341B0D331}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{AEBD2057-53E7-44B2-9CF2-ABBC12232036}" = protocol=17 | dir=in | app=c:\program files\windows sidebar\sidebar.exe |
"{B0468F52-05F0-4FA5-A537-9D9147FB4C8A}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{B08AB814-1DDB-4C0D-BB34-78FCB1558AF4}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{B130A284-37F6-49E3-996E-63A67E69C6A3}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe |
"{B3014E28-61AA-4BA4-A751-31F9AAF32A10}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{B386F21D-BA2A-4105-B633-24423526D1FA}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{B45D4642-142C-4B1A-AE35-CB078B042787}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{B4A534A0-1FC2-49CE-96D7-EA362B710B14}" = protocol=6 | dir=in | app=c:\users\dopa\appdata\roaming\dropbox\bin\dropbox.exe |
"{B6A67733-8BC9-4F05-BF97-BB97C1215E09}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{B6FDFDCA-6D74-45A9-BC66-573A4CAEA9F3}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{B943789F-FD27-4E78-8F30-72A2556BCA85}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{B9B4EAC7-2713-4BEC-89E7-9E990B99B5CD}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{BAB388A9-5C2C-4392-81D1-E419DB34B11A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{BAF4183D-F96F-4EEE-A77B-CB1886FA8752}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{BB60E40F-49EA-4EEF-AB65-3CF75D910E44}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{BB68A933-18FD-4AEB-8E5C-864726DF1DB6}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{BD7164ED-B452-4EDE-94BA-E225FEB5D2B0}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{BD97130E-F1C7-4A9A-9BCE-6ED76E27B3C4}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{BDF5DA9B-B556-4B3E-A569-107ACB22D2F0}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{BDFB356F-28FE-42CD-ACB5-1BE93BFDA52B}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe |
"{BE314A64-C646-4AA7-BFF1-C437124CF027}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{BE80CEDD-DAD9-490C-8639-A82FF69F1F0D}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{C16A3C14-E0B0-4264-8590-516DE9F70C38}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{C19D49DB-824D-4E44-B9E9-6A0F03CEEC7E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{C22A0742-4E19-409D-8EE0-5822EC580870}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{C2742145-3332-4DC6-B057-3827F09F082C}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{C2B4B461-A35B-4050-BAF2-FB9A4BEF7A60}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{C3D83069-3A6C-48D5-A777-6D45A3E5087C}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{C5007F20-2446-4861-8D0F-D2DF6C986078}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{C66DDBAE-CE3E-4B21-ACAE-DDF0661B2703}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{C6EE1A59-7426-4C58-B3E6-D1B9C914AC22}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{C7047783-1309-49AF-AA40-DA5BE8C805D9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{C8A67C39-8D5C-441A-B5E4-0F7CB78B3206}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{C947152A-E064-4F40-BBA5-699AD9195762}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{C9792A14-2E7E-49AD-9E00-FEA7595E74CF}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{CAED9B6B-2806-4C0A-AD0A-5BD59F96415E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{CBCFCF88-ACCD-46B1-B9A9-4126822E6B36}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{CBF2A0F8-5CD7-4C88-86FB-0776D6E95287}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{CC8C51CA-D3BB-49C3-B943-4CADE89F5CD8}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{CF258EA9-6E8E-494D-9259-D088D7871CB8}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe |
"{D2C6A49A-B65D-4504-B448-2C9455F07D87}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{D354CD91-DC14-4841-BC25-DF00ACD0F9E9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{D3B44D57-EC88-4152-B762-FEE416A74694}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{D4448633-6E91-49D0-B817-10602DB42641}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{D4D6043A-9171-4E67-961D-A5429A210746}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{D4E8449C-16D2-4F92-98A5-38B4F95CA1F6}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{D52F624E-D3AC-4C6E-8988-CE43E33A8A70}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{D5FC4FE5-C89A-4C6A-AE95-E6B9F407CD41}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{D6295C58-B46E-4CD6-97DE-9E18EDE308AE}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{D63D0FB8-30C9-446B-9E6C-027CB74046C1}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{D679CA18-9DA5-4D3F-BE4E-777965607BE1}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{D8B324B6-4629-4A16-A282-DC3FA742D283}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{D8B726FC-3551-4DCB-9884-B7E4FC64B0D7}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{DD72A23C-C1FA-4412-BEE5-6FCE088E02B7}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{DE074B0C-9664-4045-B923-B58724B1BDBC}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{DED18F22-A098-4A56-BA63-EF48B39D0089}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{E08012A3-7366-4F48-89AE-3D52BC3B4BF2}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{E129E366-226A-4188-99E6-F3DB2B81E2E3}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{E338E607-1BED-4098-9FB6-AD3BB48E0B45}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{E34975B3-0CC2-4782-9E18-D619D4F1FB05}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{E3FF39C6-03C3-4EA3-8230-89C1FC42DA15}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{E5303821-AF69-46B1-A809-AF86E96755F9}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{E62364B3-FAE7-4634-8894-4650D8FCDE97}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{E73DDC2E-2162-4351-9CA9-31ECC4B164DA}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{E91E2C55-80CF-4B2C-AA70-4DBC7F0BC988}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{EA38310B-514C-4CEA-8691-002D97A90EB7}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{EB54C463-C9CE-4ACE-A5A3-CA22DEF7B63E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{EBB75EE7-0ACA-4C8B-9CC9-707954EB0DAC}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{ED4116D0-07B3-4AC4-B4A5-86D7B15AB9D5}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe |
"{ED73752E-A47D-4E7B-951F-50058EE24C03}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{EE8162E7-180D-43A2-A96D-E5BAAC9E5191}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{EEAE4D69-43C6-422D-962C-0944A7C4761D}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{EFA506F4-37C7-40AF-9B8D-A30D1468CA21}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{EFCE4D81-9C95-4909-88EB-1EAE2AF68448}" = protocol=6 | dir=in | app=c:\program files\windows sidebar\sidebar.exe |
"{F0DF6263-E50F-4413-BEEA-B234530FAAA7}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{F2371E00-437F-4893-A4BE-8F7DF4DA56B5}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{F300BA5F-7787-4713-A909-5BAB0D0D547B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{F3D024B6-D5DD-42C9-9B8C-764AE25E1D95}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{F4165818-14DE-4BF7-9DE1-2B7EA5C48ABF}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{F59BAB21-EEC6-499B-9EF0-5EE30C8A6E08}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{F66EA0DE-BAE5-4743-A6B0-9801AD39E650}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{F742DD99-6FEA-44A9-8AAA-FF86E0996778}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{F985A9F4-406D-48C2-AC06-3D03C1CF07AC}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{F99A5D9D-45D2-44A7-837F-47E51D376C3B}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{FA2AC824-872C-4E99-9990-A8B7C6E785E7}" = protocol=17 | dir=in | app=c:\install\tv\app\teamviewer\teamviewer.exe |
"{FA6C7BDC-3611-4F99-8E3E-C747A0FA19B0}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{FB3A26CF-B2E0-4251-9A06-BE211BE0B67E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{FC1EC064-CBB5-4E45-B09A-ED496713E1DB}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.5\icq.exe |
"{FE3A314A-F794-4457-A4A6-0A317FD63A8F}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{FE42E167-67D9-4D4A-935A-8F9B8F2CDC48}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{FFA7F713-CF28-4A06-A3C5-1A387FBA381D}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"TCP Query User{07084145-97EA-4144-B9EE-0759B46355FF}C:\program files (x86)\gbm\gremote pro\gremoteserver.exe" = protocol=6 | dir=in | app=c:\program files (x86)\gbm\gremote pro\gremoteserver.exe |
"TCP Query User{390FEE53-6E02-41E1-ACB3-938DC46FFA19}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"TCP Query User{3E1339CE-64FA-4255-9046-DFE241A176DC}C:\program files\ultravnc\winvnc.exe" = protocol=6 | dir=in | app=c:\program files\ultravnc\winvnc.exe |
"TCP Query User{49AB6EEE-D995-47FC-9CB0-B1B1FD225275}C:\program files\adobe\adobe photoshop cs4 (64 bit)\photoshop.exe" = protocol=6 | dir=in | app=c:\program files\adobe\adobe photoshop cs4 (64 bit)\photoshop.exe |
"TCP Query User{67564B6E-3407-4177-BDFF-C5261B8FBC8D}C:\program files (x86)\common files\nokia\fuse\fuseservice.exe" = protocol=6 | dir=in | app=c:\program files (x86)\common files\nokia\fuse\fuseservice.exe |
"TCP Query User{6AAEB4E4-2717-4672-A230-6368D48BB62C}C:\install\tv\app\teamviewer\teamviewer.exe" = protocol=6 | dir=in | app=c:\install\tv\app\teamviewer\teamviewer.exe |
"TCP Query User{6B71F58D-723F-45CF-A306-27A4CD255DF9}C:\program files (x86)\odeon\jaf\jcop.exe" = protocol=6 | dir=in | app=c:\program files (x86)\odeon\jaf\jcop.exe |
"TCP Query User{7A1E10F9-79D1-44E5-A81B-042C08B670F7}C:\program files (x86)\tmnationsforever\tmforever.exe" = protocol=6 | dir=in | app=c:\program files (x86)\tmnationsforever\tmforever.exe |
"TCP Query User{7AB03E83-5B0A-473B-A33E-153BB89D1BB8}C:\program files (x86)\common files\nokia\fuse\fuse.exe" = protocol=6 | dir=in | app=c:\program files (x86)\common files\nokia\fuse\fuse.exe |
"TCP Query User{919AC190-2473-40FA-8859-3F5C0ADE2516}C:\program files (x86)\valve\hl.exe" = protocol=6 | dir=in | app=c:\program files (x86)\valve\hl.exe |
"TCP Query User{9D9BF96A-B819-4B0C-9332-5E5EAC69FC9A}C:\program files (x86)\windows sidebar\sidebar.exe" = protocol=6 | dir=in | app=c:\program files (x86)\windows sidebar\sidebar.exe |
"TCP Query User{BAF68D1B-F475-491C-A75E-448D79439C3B}C:\program files (x86)\realvnc\vnc4\winvnc4.exe" = protocol=6 | dir=in | app=c:\program files (x86)\realvnc\vnc4\winvnc4.exe |
"TCP Query User{C0D1760D-1756-418D-9278-DC93FCF6E96B}C:\program files\windows sidebar\sidebar.exe" = protocol=6 | dir=in | app=c:\program files\windows sidebar\sidebar.exe |
"TCP Query User{C3C0FDF5-9204-44BD-995F-3B08D33C6B76}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe |
"TCP Query User{D1EF99DC-8DD4-4B76-B6C4-17F8EA871D7A}C:\program files (x86)\jeyo\jmc_windowsmobile\jmc_wm.exe" = protocol=6 | dir=in | app=c:\program files (x86)\jeyo\jmc_windowsmobile\jmc_wm.exe |
"TCP Query User{E4D4E601-6924-4DE9-90ED-F284D0AAAD47}C:\program files (x86)\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe |
"TCP Query User{FC479593-3C99-4A86-95CB-0A6338E44BA6}C:\program files (x86)\nokia\phoenix\phoenix.exe" = protocol=6 | dir=in | app=c:\program files (x86)\nokia\phoenix\phoenix.exe |
"UDP Query User{004C8948-A6C0-4797-B2F7-D5332B20CD30}C:\program files (x86)\gbm\gremote pro\gremoteserver.exe" = protocol=17 | dir=in | app=c:\program files (x86)\gbm\gremote pro\gremoteserver.exe |
"UDP Query User{02D1B0FF-4F57-48F7-ACBC-231E891155E0}C:\program files (x86)\windows sidebar\sidebar.exe" = protocol=17 | dir=in | app=c:\program files (x86)\windows sidebar\sidebar.exe |
"UDP Query User{087F736A-3CFC-427D-927F-82F93D8FC83D}C:\program files (x86)\odeon\jaf\jcop.exe" = protocol=17 | dir=in | app=c:\program files (x86)\odeon\jaf\jcop.exe |
"UDP Query User{0ACDA661-78C2-4108-ACDA-EE48897407A9}C:\program files (x86)\valve\hl.exe" = protocol=17 | dir=in | app=c:\program files (x86)\valve\hl.exe |
"UDP Query User{198E7BD8-78AF-4CBB-B159-FE8AFBDA471F}C:\program files\ultravnc\winvnc.exe" = protocol=17 | dir=in | app=c:\program files\ultravnc\winvnc.exe |
"UDP Query User{2E234A2F-AA26-45DE-971D-2DB852F3F55A}C:\program files\windows sidebar\sidebar.exe" = protocol=17 | dir=in | app=c:\program files\windows sidebar\sidebar.exe |
"UDP Query User{4F897209-A818-4C58-90F5-7F90E656AFB6}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"UDP Query User{649F9B2C-5B76-4CF9-AF3A-4C932E2A4284}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe |
"UDP Query User{691039DC-E3DF-4E2F-BCAB-67FDCC375CDF}C:\program files\adobe\adobe photoshop cs4 (64 bit)\photoshop.exe" = protocol=17 | dir=in | app=c:\program files\adobe\adobe photoshop cs4 (64 bit)\photoshop.exe |
"UDP Query User{73582557-A19F-4318-B143-A97A2215C458}C:\program files (x86)\jeyo\jmc_windowsmobile\jmc_wm.exe" = protocol=17 | dir=in | app=c:\program files (x86)\jeyo\jmc_windowsmobile\jmc_wm.exe |
"UDP Query User{7726CE45-9CE2-4977-86BC-24000A96BDAA}C:\program files (x86)\tmnationsforever\tmforever.exe" = protocol=17 | dir=in | app=c:\program files (x86)\tmnationsforever\tmforever.exe |
"UDP Query User{780125DE-105A-45C5-B4F1-4EFFDF31704F}C:\program files (x86)\common files\nokia\fuse\fuseservice.exe" = protocol=17 | dir=in | app=c:\program files (x86)\common files\nokia\fuse\fuseservice.exe |
"UDP Query User{85FED7E9-368A-4ACD-B72C-19C546E13FDA}C:\install\tv\app\teamviewer\teamviewer.exe" = protocol=17 | dir=in | app=c:\install\tv\app\teamviewer\teamviewer.exe |
"UDP Query User{C3780C92-62FB-4374-9802-5B2FF3340EBA}C:\program files (x86)\nokia\phoenix\phoenix.exe" = protocol=17 | dir=in | app=c:\program files (x86)\nokia\phoenix\phoenix.exe |
"UDP Query User{D1FC772C-CD0C-4059-96E9-397A495F2CE5}C:\program files (x86)\realvnc\vnc4\winvnc4.exe" = protocol=17 | dir=in | app=c:\program files (x86)\realvnc\vnc4\winvnc4.exe |
"UDP Query User{EFAA3A6B-0769-4698-A75B-9210C82B3724}C:\program files (x86)\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe |
"UDP Query User{FB01CF6E-9579-48C1-A097-D0DB0837EB19}C:\program files (x86)\common files\nokia\fuse\fuse.exe" = protocol=17 | dir=in | app=c:\program files (x86)\common files\nokia\fuse\fuse.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{26A24AE4-039D-4CA4-87B4-2F86416026FF}" = Java(TM) 6 Update 26 (64-bit)
"{295CFB7C-A57E-4313-93E7-68E7CE1D0332}" = Adobe WinSoft Linguistics Plugin x64
"{2D74E972-5A85-44DC-9193-8A302BA8C181}" = Photoshop Camera Raw_x64
"{3D42871F-4A1E-82E5-9494-3012BA3084F2}" = AMD Catalyst Install Manager
"{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}" = WIDCOMM Bluetooth Software
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4D668D4F-FAA2-4726-834C-31F4614F312E}" = MSVC80_x64_v2
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5737101A-27C4-408A-8A57-D1DC78DF84B4}" = 64 Bit HP CIO Components Installer
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{64A3A4F4-B792-11D6-A78A-00B0D0160260}" = Java(TM) SE Development Kit 6 Update 26 (64-bit)
"{6631325A-9B1B-4EE7-8E64-8CC4A6F10643}" = Adobe Fonts All x64
"{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{6FCA487B-89F0-4378-E1BC-91B81BCD8C98}" = ccc-utility64
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{7B397980-84A8-40F2-8E88-DFA50E516E8E}" = Magic Bullet PhotoLooks for Photoshop 64 bit
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64
"{8875A1C0-6308-4790-8CF6-D34E89880052}" = Adobe Linguistics CS4 x64
"{887797BF-37A5-4199-B0C9-0D38D6196E9A}" = Adobe Anchor Service x64 CS4
"{8C8D673B-20FB-43E6-BCB7-9B3F78F2E762}" = Adobe Type Support x64 CS4
"{8DAA31EB-6830-4006-A99F-4DF8AB24714F}" = Adobe CSI CS4 x64
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0405-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Czech) 2007
"{90BA8112-80B3-4617-A3C1-BD2771B60F74}" = Adobe CMaps x64 CS4
"{A324DC11-FF02-3CE8-9D6F-67EBC006D970}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{A3454894-144A-4D80-B605-C128FE0D7329}" = Adobe Drive CS4 x64
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{C1AC1FED-9E75-42A5-B3EA-CCEC92E75D61}" = Raw Therapee V4.0.6.4 x64
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D207019F-D0A5-11DF-A282-0013D3D69929}" = Vegas Pro 10.0 (64-bit)
"{D40172D6-CE2D-4B72-BF5F-26A04A900B7B}" = Adobe Photoshop CS4 (64 Bit)
"{D81C035E-D0A5-11DF-9450-0013D3D69929}" = MSVCRT Redists
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
"{DDF61711-75A1-4EED-9C4B-789D3932A4A7}" = ESET NOD32 Antivirus
"{DFFABE78-8173-4E97-9C5C-22FB26192FC5}" = Adobe PDF Library Files x64 CS4
"{E249010E-76D3-EABE-2B77-2D65533E69E1}" = AMD Fuel
"{ED96A4F2-C990-0C70-33FA-AE213E8697C0}" = AMD Media Foundation Decoders
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"34EA302E7F4CBD17A19E33BBCB72363234956D7E" = Balíček ovladače systému Windows - Nokia Modem (06/09/2010 4.5)
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"CCleaner" = CCleaner
"DW WLAN Card Utility" = DW WLAN Card Utility
"EEEE705096F837B7907659F100C9FE6DA001970F" = Balíček ovladače systému Windows - Nokia Modem (06/09/2010 7.01.0.7)
"FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D" = Balíček ovladače systému Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"Recuva" = Recuva
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Ultravnc2_is1" = UltraVnc
"WinRAR archiver" = WinRAR

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{04A3A6B0-8E19-49BB-82FF-65C5A55F917D}" = Acronis True Image Home 2011
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4
"{0B247BF7-D393-1855-C8B3-66DED90DCCB6}" = AMD VISION Engine Control Center
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}" = Adobe Setup
"{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4
"{0E33EC53-22CE-426C-A88B-2AAC231BAC85}" = Catalyst Control Center - Branding
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{0FD23E02-2BFB-4BEC-8823-FE984F83F161}" = VMware Server Console
"{13B792AA-C078-43A4-8A3A-8B12D629940D}" = Counter-Strike 1.6
"{15219EE8-4DCC-C6C5-CB04-351D4DD72ACF}" = Catalyst Control Center InstallProxy
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}" = Adobe AIR
"{1ECEC1F7-EEDB-4DAA-8019-FA1EEEC347A2}_is1" = SysTools OST Recovery 3.1
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}" = Nokia PC Suite
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}" = Google Earth Plug-in
"{2A0A6470-FD0F-4F45-9B11-85F3167DB943}" = Nokia Flashing Cable Driver
"{2E2E7A4E-9FA7-4E9D-A875-53B9F943F14E}" = Office Regenerator
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{442CB906-7844-E2F5-A2EB-90D44C0BF2DF}" = Catalyst Control Center Localization All
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module
"{52291FC0-33D3-4A18-9587-5115225545D8}_is1" = Google Chrome Backup 1.8.0.141
"{56582EEA-3AEF-4D84-8B9D-C87A3CD9250F}" = GetDataBack for NTFS
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5DBC79DA-87D2-376D-A65D-B14097C06C71}" = Google Talk Plugin
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module
"{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}" = Live! Cam Avatar Creator
"{67D30650-3501-66ED-265A-20870A20A689}" = CCC Help English
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6A53C42D-DCCD-46B7-9143-51071726A6F6}_is1" = Outlook4Gmail 2.6
"{6CF08AD2-00C5-4A63-B74B-2EFFFAFEBE1A}" = Microsoft Outlook Web Access S/MIME
"{6D308A90-6C14-4A02-9B04-CB0EF17894A9}_is1" = Picture Collage Maker Pro 3.2.4
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7130468A-F53F-4698-8C09-A339EA3B05E6}" = Nokia Software Updater
"{71ED4CA9-9AC5-48D9-A2AC-B1E4DFA84F62}" = ASUS Wireless Router WL-520GC Utilities
"{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}" = ICQ7.5
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79A51BF7-6FEC-4BB9-9739-8F415BFE7E32}" = Phoenix Service Software
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8CD2E489-03F4-4AC0-8B68-D8C7DFE731DD}" = Stereoscopic Player
"{8D5F85B2-A7B9-4D5C-938E-15E45FB06684}" = Recovery for Outlook
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0405-1000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{97A39919-9FEA-48B7-AB2B-4F99212D1E98}" = HDD Regenerator
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A2AA4204-C05A-4013-888A-AD153139297F}" = PC Connectivity Solution
"{A57025CC-5F2E-4D01-B387-06DB10500D43}" = Nokia Connectivity Cable Driver
"{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC5019DA-5DC2-44E6-808A-1A68F3CCA79D}" = Caricature Studio Green 3.6
"{AC76BA86-1029-4770-7760-000000000004}" = Adobe Acrobat 9 Pro - Czech, Hungarian, Polish, Slovak
"{AC76BA86-1029-4770-7760-000000000004}{AC76BA86-1029-4770-7760-000000000004}" = Adobe Acrobat 9 Pro - Czech, Hungarian, Polish, Slovak
"{AC76BA86-7AD7-1029-7B44-A95000000001}" = Adobe Reader 9.5.1 - Czech
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C9EAEE6B-741F-421D-B9CE-9FA300DA92AD}_is1" = Super Mario Bros. X version 1.3
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1" = ConvertXtoDVD 4.0.9.322
"{E2494AD8-314D-44F8-B39C-4358A60DC184}" = LogMeIn Hamachi
"{E4848436-0345-47E2-B648-8B522FCDA623}" = Adobe Photoshop CS4
"{EBE030DD-D404-4D92-85E9-8C3624820808}_is1" = Light Image Resizer 4.0.4.3
"{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial
"{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.8
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F9000000-0001-0000-0000-074957833700}" = ABBYY FineReader 9.0 Professional Edition
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FB8BEF4C-E2B8-725E-F84A-AF6D1E4C8960}" = Catalyst Control Center Graphics Previews Common
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"abgx360" = abgx360 v1.0.5
"Adobe AIR" = Adobe AIR
"Adobe_faf656ef605427ee2f42989c3ad31b8" = Adobe Photoshop CS4
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"Dell Webcam Central" = Dell Webcam Central
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Fast AVI to GIF Converter" = Fast AVI to GIF Converter
"Foxit PDF Editor" = Foxit PDF Editor
"Free YouTube Download_is1" = Free YouTube Download 1.2
"GRemoteServer" = GRemoteServer Pro(remove only)
"HD Tune Pro_is1" = HD Tune Pro 4.60
"icapkitool" = I.CA icapki v 8.8.6.0
"icaroot" = Kořenové certifikáty I.CA
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"InstallShield_{7B397980-84A8-40F2-8E88-DFA50E516E8E}" = Magic Bullet PhotoLooks for Photoshop 64 bit
"InstallShield_{EB8490D5-4EF4-4586-A9FE-590DCF5A4411}" = PTCam Software
"IrfanView" = IrfanView (remove only)
"Jeyo Mobile Companion 2.1_is1" = Jeyo Mobile Companion 2.1
"KLiteCodecPack_is1" = K-Lite Codec Pack 7.0.0 (Full)
"LogMeIn Hamachi" = LogMeIn Hamachi
"Magic ISO Maker v5.5 (build 0281)" = Magic ISO Maker v5.5 (build 0281)
"MagicDisc 2.7.106" = MagicDisc 2.7.106
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware verze 1.61.0.1400
"Mozilla Firefox 8.0.1 (x86 cs)" = Mozilla Firefox 8.0.1 (x86 cs)
"Network Stumbler" = Network Stumbler 0.4.0 (remove only)
"Nokia PC Suite" = Nokia PC Suite
"Nucleus Kernel Exchange OST Recovery_is1" = Nucleus Kernel Exchange OST Recovery ver 4.04.03
"OST2PST v2.1" = OST2PST v2.1
"Pandora's Box 1.0" = Microsoft Pandora's Box
"PDAmill GameBox Solitaire 640x480" = PDAmill GameBox Solitaire 640x480
"PDF Image Extraction Wizard_is1" = PDF Image Extraction Wizard 5.1
"Phoenix Service Software 2011.14.004.45945_is1" = Phoenix Service Software 2011.14.004.45945
"Phoenix Service Software 2012.04.003.47798_is1" = Phoenix Service Software 2012.04.003.47798
"Picasa 3" = Picasa 3
"PoiEdit" = PoiEdit
"RealVNC_is1" = VNC Free Edition 4.1.3
"Revo Uninstaller" = Revo Uninstaller 1.93
"Samsung Universal Scan Driver" = Samsung Universal Scan Driver
"ShapeCollage" = Shape Collage
"SpeedFan" = SpeedFan (remove only)
"TeamViewer 7" = TeamViewer 7
"TmNationsForever_is1" = TmNationsForever
"Totalcmd" = Total Commander (Remove or Repair)
"Video Converter 3" = Video Converter 3
"VisualLightBox" = VisualLightBox
"VLC media player" = VLC media player 1.1.5
"winscp3_is1" = WinSCP 4.2.9

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"DMGExtractor" = DMGExtractor
"Dropbox" = Dropbox
"f031ef6ac137efc5" = Dell Driver Download Manager
"Google Chrome" = Google Chrome
"PhotoFiltre" = PhotoFiltre

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >

Odpovědět