Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Preventivní kontrola

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
FJakub
Návštěvník
Návštěvník
Příspěvky: 72
Registrován: 04 zář 2008 19:33

Preventivní kontrola

#1 Příspěvek od FJakub »

Prosím o preventivní kontrolu, zdá se mi že mám něco v NTB, ale nejsem si jistý!
Děkuji moc

Logfile of random's system information tool 1.08 (written by random/random)
Run by Jakub at 2013-01-20 12:56:06
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 20 GB (18%) free of 114 GB
Total RAM: 7786 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:56:15, on 20.1.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE
C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
C:\Users\Jakub\AppData\Local\Akamai\netsession_win.exe
C:\Users\Jakub\AppData\Local\Akamai\netsession_win.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
C:\Program Files\Lenovo Fingerprint Reader\x86\BioMonitor.exe
C:\Users\Jakub\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jakub\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jakub\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jakub\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jakub\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Jakub.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://klientskazona.cpost.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: MathPlayer BHO - {32F66A28-7614-11D4-BD11-00104BD3F987} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [PWMTRV] rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Jakub\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [HP Officejet Pro 8600 (NET)] "C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe" -deviceID "CN29PBXH3X05KC:NW" -scfn "HP Officejet Pro 8600 (NET)" -AutoStart 1
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3752770136-2494076584-3171830822-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3752770136-2494076584-3171830822-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Sledovat výstrahy inkoustu - HP Officejet Pro 8600 (Síť).lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~4\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {F680B28A-3AEE-4C88-93ED-45AE9215C128} (CryptSignX Control) - https://adisepo.mfcr.cz/adistc/adis/idp ... tsignx.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{03E9C21A-DFE9-C8BC-ECE3-5614C4AF73B1}: NameServer = 93.153.117.1 93.153.117.33
O17 - HKLM\System\CCS\Services\Tcpip\..\{689A7833-2BB6-423C-A25B-C00FA2605F55}: NameServer = 192.168.140.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{03E9C21A-DFE9-C8BC-ECE3-5614C4AF73B1}: NameServer = 93.153.117.1 93.153.117.33
O17 - HKLM\System\CS2\Services\Tcpip\..\{03E9C21A-DFE9-C8BC-ECE3-5614C4AF73B1}: NameServer = 93.153.117.1 93.153.117.33
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: AcPrfMgrSvc - Lenovo - C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
O23 - Service: AcSvc - Lenovo - C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Web'n'walk Manager mobile equipment installation service (ameisvc) - Gemfor s.r.o. - C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Connectify - Unknown owner - C:\Program Files (x86)\Connectify\ConnectifyService.exe
O23 - Service: SW Distributed TS Coordinator Service (CoordinatorServiceHost) - Dassault Systemes SolidWorks Corp. - C:\Program Files\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @C:\Windows\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\Windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: TrueSuiteService (FPLService) - AuthenTec, Inc - C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
O23 - Service: Sierra Wireless QDL Service (GobiQDLService) - Sierra Wireless, Inc. - C:\Program Files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe
O23 - Service: Lenovo PM Service (IBMPMSVC) - Unknown owner - C:\Windows\system32\ibmpmsvc.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo Camera Mute (LENOVO.CAMMUTE) - Lenovo Group Limited - C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: Lenovo Keyboard Noise Reduction (LENOVO.TPKNRSVC) - Lenovo Group Limited - C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
O23 - Service: ThinkVantage Virtual Camera Controller (LENOVO.TVTVCAM) - Lenovo Group Limited - C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
O23 - Service: Lenovo Auto Scroll (Lenovo.VIRTSCRLSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: Power Manager DBC Service - Lenovo - C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cisco EnergyWise Enabler (PwmEWSvc) - Lenovo Group Limited - C:\Program Files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Remote Solver for Flow Simulation 2012 - Mentor Graphics Corporation - C:\Program Files\SolidWorks Corp\SolidWorks Flow Simulation\binCFW\StandAloneSlv.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Conexant SmartAudio service (SAService) - Conexant Systems, Inc. - C:\Windows\system32\SAsrv.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Unknown owner - C:\Windows\System32\TPHDEXLG64.exe (file missing)
O23 - Service: Lenovo Hotkey Client Loader (TPHKLOAD) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
O23 - Service: On Screen Display (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Mobile Broadband Service (WMCoreService) - Ericsson AB - C:\Program Files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 16355 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe"
C:\Windows\system32\ibmpmsvc.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
winlogon.exe
C:\Windows\system32\svchost.exe -k LocalService
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-b561158e-ac10-454e-94bc-4816fab65852 -SystemEventPortName:HostProcess-eec945bc-954b-4e2f-8676-af556eefaa36 -IoCancelEventPortName:HostProcess-111dedfe-b9f9-4ff0-9b46-a339f481abdf -NonStateChangingEventPortName:HostProcess-d375169a-7680-48c8-b044-c6f02d94225f -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:5dd939ac-80d8-4212-9da1-e1dfbf026962 -DeviceGroupId:
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 4162352
\??\C:\Windows\system32\conhost.exe "694494464-1009118741553383017-15067335111940602227602589961607187594-1346204912
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\Connectify\ConnectifyService.exe"
"ConnectifyD.exe"
\??\C:\Windows\system32\conhost.exe "400809740209648342428265533-12882625702096942062-567889037-702944495-827640476
C:\Windows\system32\CxAudMsg64.exe
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe"
"C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe"
"C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe"
"C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe"
"C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sAUTODESKVAULT
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\SysWOW64\SAsrv.exe
"C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe"
C:\PROGRA~1\LENOVO\HOTKEY\tpnumlk.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe" servicemode
C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\PROGRA~1\LENOVO\HOTKEY\tpnumlkd.exe
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe"
"taskhost.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe"
"C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe"
C:\Windows\system32\rundll32.exe "C:\Program Files\LENOVO\HOTKEY\hotkey.dll",InstallAudioHotkeyHook
"C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe"
C:\PROGRA~1\Lenovo\HOTKEY\MKRMSG.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.MediaKey
C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.OnScreenDisplay
C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.ShortcutKey
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\igfxext.exe -Embedding
C:\Windows\system32\igfxsrvc.exe -Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe"
"C:\Windows\System32\TpShocks.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Program Files\CONEXANT\ForteConfig\fmapp.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\StikyNot.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Users\Jakub\AppData\Local\Akamai\netsession_win.exe"
"C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe" -deviceID "CN29PBXH3X05KC:NW" -scfn "HP Officejet Pro 8600 (NET)" -AutoStart 1
"C:\Windows\system32\RunDll32.exe" "C:\Program Files\HP\HP Officejet Pro 8600\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN29PBXH3X05KC;CONNECTION=NW;MONITOR=1;
"C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
"C:/Users/Jakub/AppData/Local/Akamai/netsession_win.exe" --client
"C:\Windows\System32\rundll32.exe" C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Windows\System32\rundll32.exe" C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\Program Files\HP\HP Officejet Pro 8600\bin\HPNetworkCommunicator.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe"
C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"ConnectifyNetServices.exe" -v -i C:\ProgramData\Connectify\cache\ConnectifyNetServices.ini -s C:\ProgramData\Connectify\cache\ConnectifyNetServices.state -l C:\ProgramData\Connectify\logs
\??\C:\Windows\system32\conhost.exe "270914627187390917194584980-1943420184621675982-1577400259988739862-562277430
"C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe" /IpNotifyInstance
"C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe"
"C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Lenovo Fingerprint Reader\x86\BioMonitor.exe" -Embedding
"C:\Users\Jakub\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Jakub\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=EnableStage3D/enabled/ForceCompositingMode/enabled/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/7/OneClickSignIn/Standard/Prerender/PrerenderEnabled/SBInterstitial/V2/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_67/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/last_accessed_socket/ --extension-process --renderer-print-preview --channel="3732.1.1215726516\333065820" /prefetch:3
"C:\Users\Jakub\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3732.2.833574110\631096238" --supports-dual-gpus=false --skip-gpu-full-info-collection --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2639 --ignored=" --type=renderer " /prefetch:12
"C:\Users\Jakub\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3732.7.476553464\171212330" --lang=cs --ignored=" --type=renderer " /prefetch:13
"C:\Users\Jakub\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=CacheSensitivityAnalysis/No/EnableStage3D/enabled/ForceCompositingMode/enabled/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/7/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SBInterstitial/V2/SpdyCwnd/cwndDynamic/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_67/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/last_accessed_socket/ --renderer-print-preview --channel="3732.21.531234546\2042845248" /prefetch:3
"D:\Users\Jakub\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3752770136-2494076584-3171830822-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3752770136-2494076584-3171830822-1000UA.job
C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~4\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8590886E-EC8C-43C1-A32C-E4C2B0B6395B}]
TrueSuite Browser Helper Object - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL [2012-06-06 1930088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{32F66A28-7614-11D4-BD11-00104BD3F987}]
MathPlayer BrowserHelperObject Class

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-10-06 449512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8590886E-EC8C-43C1-A32C-E4C2B0B6395B}]
TrueSuite Browser Helper Object - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll [2012-06-06 1772904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-10-06 157672]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"LENOVO.TPKNRRES"=C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [2012-06-01 290160]
"TpShocks"=C:\Windows\system32\TpShocks.exe [2012-08-24 222720]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2012-09-12 1289704]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2012-06-14 887968]
"ForteConfig"=C:\Program Files\Conexant\ForteConfig\fmapp.exe [2010-10-26 49056]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-04-02 2899216]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-02-09 440600]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-02-09 398616]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 427520]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]
"Akamai NetSession Interface"=C:\Users\Jakub\AppData\Local\Akamai\netsession_win.exe [2012-10-09 4441920]
"HP Officejet Pro 8600 (NET)"=C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2011-09-09 2676584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcWin7Hlpr]
C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [2012-09-07 63376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Autodesk Sync]
C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2012-02-05 415680]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 112512]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Connectify]
C:\Program Files (x86)\Connectify\Connectify.exe [2012-08-09 3985768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dolby Advanced Audio v2]
C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2012-04-23 508256]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Jakub\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-06 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2011-03-24 49208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon]
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HTC Sync Loader]
C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe -startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Download Assistant]
C:\Windows\System32\LogiLDA.dll [2012-09-20 1832760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ProgLauncher]
C:\Program Files\ProgDVB\ProgLauncher.exe [2012-12-05 568768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RotateImage]
C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [2008-10-30 55808]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-11-09 17877168]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\T-Mobile Communication Centre]
C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe [2012-08-22 1368768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:\PROGRA~2\HP\DIGITA~1\bin\hpqtra08.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SolidWorks Nástroj pro stahování na pozadí.lnk]
C:\PROGRA~2\COMMON~1\MANAER~1\BACKGR~1\SLDBGD~1.EXE [2011-09-27 1855560]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PWMTRV"=rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor []
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-01-05 291608]
"IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2011-12-23 133400]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-03-24 49208]
""= []
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]

C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Sledovat výstrahy inkoustu - HP Officejet Pro 8600 (Síť).lnk - C:\Windows\system32\RunDll32.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-02-02 430080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~4\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
ACGina

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
""=

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2013-01-20 12:56:06 ----D---- C:\rsit
2013-01-20 12:56:06 ----D---- C:\Program Files\trend micro
2013-01-18 11:31:16 ----D---- C:\Program Files (x86)\Design Science
2013-01-13 20:28:42 ----D---- C:\Users\Jakub\AppData\Roaming\dvdcss
2013-01-10 20:32:19 ----A---- C:\Windows\SYSWOW64\iSED.dll
2013-01-10 20:32:18 ----A---- C:\Windows\SYSWOW64\Vb6stkit.dll
2013-01-09 12:39:43 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-01-09 12:39:43 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-01-09 12:39:43 ----A---- C:\Windows\system32\win32spl.dll
2013-01-09 12:39:43 ----A---- C:\Windows\system32\ncrypt.dll
2013-01-09 12:39:42 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-01-09 12:39:42 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-01-09 12:39:42 ----A---- C:\Windows\system32\msxml6.dll
2013-01-09 12:39:42 ----A---- C:\Windows\system32\msxml3.dll
2013-01-09 12:39:34 ----A---- C:\Windows\system32\taskhost.exe
2013-01-09 12:39:33 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-01-09 12:39:33 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-01-09 12:39:33 ----A---- C:\Windows\system32\Wpc.dll
2013-01-09 12:39:33 ----A---- C:\Windows\system32\gameux.dll
2013-01-09 12:39:30 ----A---- C:\Windows\system32\win32k.sys
2013-01-09 12:39:28 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-01-09 12:39:28 ----A---- C:\Windows\system32\KernelBase.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-01-09 12:39:27 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-01-09 12:39:27 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-01-09 12:39:27 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-01-09 12:39:27 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-01-09 12:39:27 ----A---- C:\Windows\system32\wow64win.dll
2013-01-09 12:39:27 ----A---- C:\Windows\system32\wow64cpu.dll
2013-01-09 12:39:27 ----A---- C:\Windows\system32\wow64.dll
2013-01-09 12:39:27 ----A---- C:\Windows\system32\winsrv.dll
2013-01-09 12:39:27 ----A---- C:\Windows\system32\ntvdm64.dll
2013-01-09 12:39:27 ----A---- C:\Windows\system32\kernel32.dll
2013-01-09 12:39:27 ----A---- C:\Windows\system32\conhost.exe
2013-01-09 12:39:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-01-09 12:39:26 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-01-09 12:39:26 ----A---- C:\Windows\SYSWOW64\user.exe
2013-01-09 12:39:26 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-01-09 12:39:26 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-01-09 12:39:22 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-01-09 12:39:22 ----A---- C:\Windows\system32\usp10.dll
2013-01-08 20:36:20 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2013-01-06 11:39:24 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2013-01-06 11:38:30 ----D---- C:\Upload
2013-01-06 11:02:44 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2013-01-06 11:02:44 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2013-01-06 11:02:44 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2013-01-06 11:02:44 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2013-01-06 11:02:44 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2013-01-06 11:02:44 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2013-01-06 11:02:44 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2013-01-06 11:02:44 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2013-01-06 11:02:44 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2013-01-06 11:02:44 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2013-01-06 11:02:44 ----A---- C:\Windows\system32\nvwgf2umx.dll
2013-01-06 11:02:44 ----A---- C:\Windows\system32\nvopencl.dll
2013-01-06 11:02:44 ----A---- C:\Windows\system32\nvoglv64.dll
2013-01-06 11:02:44 ----A---- C:\Windows\system32\nvd3dumx.dll
2013-01-06 11:02:44 ----A---- C:\Windows\system32\nvcuvid.dll
2013-01-06 11:02:44 ----A---- C:\Windows\system32\nvcuvenc.dll
2013-01-06 11:02:44 ----A---- C:\Windows\system32\nvcuda.dll
2013-01-06 11:02:44 ----A---- C:\Windows\system32\nvcompiler.dll
2013-01-06 11:02:44 ----A---- C:\Windows\system32\drivers\nvpciflt.sys
2013-01-06 11:02:44 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2013-01-02 18:53:49 ----D---- C:\Users\Jakub\AppData\Roaming\Opera
2013-01-02 18:53:46 ----D---- C:\Program Files (x86)\Opera
2012-12-28 15:01:08 ----D---- C:\Users\Jakub\AppData\Roaming\HpUpdate
2012-12-28 15:01:07 ----N---- C:\Windows\system32\HPDiscoPM5912.dll
2012-12-28 14:59:23 ----D---- C:\Program Files\HP
2012-12-28 14:59:16 ----A---- C:\ProgramData\Ament.ini
2012-12-21 08:18:32 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-12-21 08:18:31 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-12-21 08:18:31 ----A---- C:\Windows\system32\atmlib.dll
2012-12-21 08:18:31 ----A---- C:\Windows\system32\atmfd.dll

======List of files/folders modified in the last 1 months======

2013-01-20 12:56:06 ----RD---- C:\Program Files
2013-01-20 12:55:20 ----D---- C:\Windows\Temp
2013-01-20 12:18:37 ----D---- C:\Users\Jakub\AppData\Roaming\Skype
2013-01-20 10:19:17 ----D---- C:\Windows\system32\config
2013-01-20 10:13:17 ----D---- C:\Windows\System32
2013-01-20 10:13:17 ----D---- C:\Windows\inf
2013-01-20 10:13:17 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-01-20 10:11:05 ----A---- C:\Windows\SYSWOW64\log.txt
2013-01-18 11:33:50 ----SHD---- C:\Windows\Installer
2013-01-18 11:33:50 ----HD---- C:\Config.Msi
2013-01-18 11:33:46 ----SHD---- C:\System Volume Information
2013-01-18 11:31:16 ----RSD---- C:\Windows\Fonts
2013-01-18 11:31:16 ----RD---- C:\Program Files (x86)
2013-01-17 15:43:26 ----D---- C:\Users\Jakub\AppData\Roaming\vlc
2013-01-17 14:12:42 ----D---- C:\Windows\system32\wdi
2013-01-16 21:06:33 ----D---- C:\Windows\system32\NDF
2013-01-13 15:04:31 ----D---- C:\Program Files\Common Files
2013-01-13 15:04:22 ----D---- C:\ProgramData\Logishrd
2013-01-13 15:04:20 ----D---- C:\ProgramData\Logitech
2013-01-13 15:04:11 ----D---- C:\Windows\system32\DriverStore
2013-01-13 15:04:11 ----D---- C:\Windows\system32\catroot
2013-01-12 21:23:49 ----D---- C:\ProgramData\WebDataLoader
2013-01-12 21:18:42 ----D---- C:\Program Files (x86)\WebDataLoader
2013-01-12 17:48:50 ----D---- C:\Windows
2013-01-12 17:47:38 ----D---- C:\Windows\system32\catroot2
2013-01-12 17:47:18 ----D---- C:\Windows\Minidump
2013-01-11 14:40:20 ----D---- C:\Windows\SysWOW64
2013-01-09 13:20:43 ----D---- C:\Windows\rescache
2013-01-09 13:18:04 ----RSD---- C:\Windows\assembly
2013-01-09 13:18:04 ----D---- C:\Windows\Microsoft.NET
2013-01-09 13:06:39 ----D---- C:\Windows\winsxs
2013-01-09 12:53:05 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-01-09 12:52:44 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-01-09 12:52:44 ----D---- C:\Windows\system32\cs-CZ
2013-01-09 12:52:44 ----D---- C:\Windows\AppPatch
2013-01-09 12:46:33 ----D---- C:\ProgramData\Microsoft Help
2013-01-09 12:46:14 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-01-09 12:42:07 ----A---- C:\Windows\system32\MRT.exe
2013-01-08 22:20:35 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-01-08 10:58:06 ----D---- C:\Users\Jakub\AppData\Roaming\abgx360
2013-01-08 10:30:52 ----D---- C:\Users\Jakub\AppData\Roaming\Vso
2013-01-07 00:19:53 ----D---- C:\Windows\SYSWOW64\NV
2013-01-07 00:19:53 ----D---- C:\Windows\system32\NV
2013-01-07 00:19:53 ----D---- C:\ProgramData\NVIDIA
2013-01-06 12:36:44 ----D---- C:\Program Files\SAMSUNG
2013-01-06 11:04:24 ----D---- C:\Windows\system32\drivers
2013-01-06 00:03:44 ----D---- C:\ldiag
2013-01-03 20:41:42 ----D---- C:\Program Files (x86)\ProFact 3.0
2013-01-01 16:02:23 ----D---- C:\Windows\debug
2012-12-30 00:24:18 ----D---- C:\Windows\system32\Tasks
2012-12-30 00:23:05 ----D---- C:\Program Files (x86)\SEO PowerSuite
2012-12-30 00:19:40 ----D---- C:\Program Files (x86)\EasyPHP-12.1
2012-12-29 11:34:47 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2012-12-29 11:34:47 ----A---- C:\Windows\system32\nvumdshimx.dll
2012-12-29 11:34:47 ----A---- C:\Windows\system32\nvinitx.dll
2012-12-29 11:34:47 ----A---- C:\Windows\system32\nvdispgenco64.dll
2012-12-29 11:34:47 ----A---- C:\Windows\system32\nvdispco64.dll
2012-12-29 11:34:47 ----A---- C:\Windows\system32\nvapi64.dll
2012-12-29 09:40:27 ----A---- C:\Windows\system32\nvsvc64.dll
2012-12-29 09:40:27 ----A---- C:\Windows\system32\nvcpl.dll
2012-12-29 09:40:10 ----A---- C:\Windows\SYSWOW64\oemdspif.dll
2012-12-29 09:40:09 ----A---- C:\Windows\system32\nvvsvc.exe
2012-12-29 09:40:09 ----A---- C:\Windows\system32\nvsvcr.dll
2012-12-29 09:40:09 ----A---- C:\Windows\system32\nvshext.dll
2012-12-29 09:40:09 ----A---- C:\Windows\system32\nvmctray.dll
2012-12-29 09:40:09 ----A---- C:\Windows\system32\nv3dappshextr.dll
2012-12-29 09:40:09 ----A---- C:\Windows\system32\nv3dappshext.dll
2012-12-28 15:01:12 ----D---- C:\Program Files (x86)\HP
2012-12-28 15:00:39 ----D---- C:\ProgramData\HP
2012-12-28 15:00:31 ----D---- C:\Windows\twain_32
2012-12-28 14:59:16 ----HD---- C:\ProgramData
2012-12-28 14:55:00 ----D---- C:\Program Files (x86)\Common Files
2012-12-27 21:52:10 ----AD---- C:\ProgramData\TEMP
2012-12-22 16:49:09 ----D---- C:\Program Files (x86)\HTC
2012-12-22 16:47:23 ----D---- C:\Program Files\Autodesk
2012-12-22 16:47:10 ----D---- C:\Program Files\Common Files\Autodesk Shared
2012-12-21 12:06:44 ----A---- C:\Windows\OutLog.txt
2012-12-21 12:03:42 ----D---- C:\Windows\Acronis

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-12-23 568600]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-01-05 16152]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-08-30 228768]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2012-12-29 30648]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 Shockprf;Shockprf; C:\Windows\System32\DRIVERS\Apsx64.sys [2012-07-23 148328]
R0 TPDIGIMN;TPDIGIMN; C:\Windows\System32\DRIVERS\ApsHM64.sys [2012-08-12 25448]
R1 cnnctfy2;Connectify LightWeight Filter; C:\Windows\system32\DRIVERS\cnnctfy2.sys [2012-10-11 31344]
R1 TPPWRIF;TPPWRIF; C:\Windows\System32\drivers\Tppwr64v.sys [2012-05-16 19784]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
R3 5U877;5U877; C:\Windows\system32\DRIVERS\5U877.sys [2012-03-28 216704]
R3 AMPPAL;Virtuální adaptér Intel® Centrino® Wireless Bluetooth® + High Speed; C:\Windows\system32\DRIVERS\AMPPAL.sys [2012-01-09 195584]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT64.sys [2012-06-14 1608352]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-12-02 283200]
R3 IBMPMDRV;IBMPMDRV; C:\Windows\system32\DRIVERS\ibmpmdrv.sys [2012-04-11 42280]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-02-02 14659808]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2011-12-06 331264]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-01-05 355096]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-01-05 786200]
R3 iwdbus;IWD Bus Enumerator; C:\Windows\system32\DRIVERS\iwdbus.sys [2011-12-20 25496]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-07-17 62784]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\Netwsw00.sys [2012-02-20 11471872]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2012-11-12 82816]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\Windows\system32\DRIVERS\psadd.sys [2011-12-27 40248]
R3 RSP2STOR;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2011-10-27 259688]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-08-23 565352]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2012-04-02 428304]
R3 tvtvcamd;ThinkVantage Virtual Camera; C:\Windows\system32\DRIVERS\tvtvcamd.sys [2011-12-07 27432]
S2 CXIR;Conexant Polaris IR Transceiver; C:\Windows\system32\drivers\cxcir64.sys [2011-05-03 44032]
S3 AMPPALP;Protokol Intel® Centrino® Wireless Bluetooth® + High Speed; C:\Windows\system32\DRIVERS\amppal.sys [2012-01-09 195584]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 CXPOLARIS;Conexant Polaris Video Capture; C:\Windows\system32\drivers\cxpolar64.sys [2011-05-03 447872]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 HTCAND64;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2010-06-25 36928]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\Windows\system32\DRIVERS\ewdcsc.sys [2009-12-15 29696]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2009-12-15 117248]
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\Windows\system32\DRIVERS\ewusbdev.sys [2009-12-15 114304]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2011-12-20 34200]
S3 IT9135BDA;IT9135 BDA Devices; C:\Windows\System32\Drivers\IT9135BDA.sys [2012-10-26 164736]
S3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter; C:\Windows\system32\DRIVERS\LEqdUsb.Sys [2012-09-18 78648]
S3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter; C:\Windows\system32\DRIVERS\LHidEqd.Sys [2012-09-18 15160]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2012-09-18 75064]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2012-09-18 61240]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcPrfMgrSvc;AcPrfMgrSvc; C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe [2012-09-07 133008]
R2 AcSvc;AcSvc; C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe [2012-09-07 272272]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 ameisvc;Web'n'walk Manager mobile equipment installation service; C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe [2012-08-22 123320]
R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2012-01-09 659968]
R2 Autodesk Content Service;Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2012-01-31 19232]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-01-17 135952]
R2 Connectify;Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [2012-08-09 65536]
R2 CxAudMsg;@C:\Windows\system32\CxAudMsg64.exe,-100; C:\Windows\system32\CxAudMsg64.exe [2012-06-08 201376]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2012-02-26 626960]
R2 FPLService;TrueSuiteService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2012-06-06 328552]
R2 GobiQDLService;Sierra Wireless QDL Service; C:\Program Files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe [2011-11-25 312688]
R2 IBMPMSVC;Lenovo PM Service; C:\Windows\system32\ibmpmsvc.exe [2012-04-11 47440]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2011-12-08 607456]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2011-12-23 128280]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2011-12-23 161560]
R2 LENOVO.CAMMUTE;Lenovo Camera Mute; C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe [2012-06-01 58224]
R2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2012-08-24 127072]
R2 LENOVO.TPKNRSVC;Lenovo Keyboard Noise Reduction; C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe [2012-06-01 61296]
R2 LENOVO.TVTVCAM;ThinkVantage Virtual Camera Controller; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [2012-06-01 179568]
R2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [2011-07-12 133992]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-12-23 277784]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-09-12 22072]
R2 MSSQL$AUTODESKVAULT;SQL Server (AUTODESKVAULT); C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2010-12-10 29293408]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-12-29 884152]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-29 1260472]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2012-04-13 88576]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2012-02-26 148752]
R2 SAService;Conexant SmartAudio service; C:\Windows\system32\SAsrv.exe []
R2 SQLBrowser;SQL Server Browser; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-12-10 238944]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-12-10 153440]
R2 TPHKLOAD;Lenovo Hotkey Client Loader; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [2012-05-29 147040]
R2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2012-04-20 144448]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-12-23 363800]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 Power Manager DBC Service;Power Manager DBC Service; C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE [2012-05-16 1662560]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-08 251400]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2012-10-06 79360]
S3 CoordinatorServiceHost;SW Distributed TS Coordinator Service; C:\Program Files\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe [2011-09-27 89160]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-02-09 276248]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-10-09 1432400]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2012-10-09 1044816]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 50899608]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-01-08 115760]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2012-02-26 273168]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 PwmEWSvc;Cisco EnergyWise Enabler; C:\Program Files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE [2012-05-16 1665120]
S3 Remote Solver for Flow Simulation 2012;Remote Solver for Flow Simulation 2012; C:\Program Files\SolidWorks Corp\SolidWorks Flow Simulation\binCFW\StandAloneSlv.exe [2011-08-17 109624]
S3 SolidWorks Licensing Service;SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [2012-10-09 79360]
S3 SUService;System Update; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [2012-11-23 21416]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\Windows\System32\TPHDEXLG64.exe [2012-08-12 46984]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2010-12-10 44384]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Preventivní kontrola

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
  • Zaskrtnete okenko Pro vsechny uzivatele
  • Zaskrtnete okenko Kontrola na havet "LOP"
  • Zaskrtnete okenko Kontrola na havet "Purity"
  • Stari souboru zmente z 30 dnu na 7 dnu
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize
  • Kód: Vybrat vše

    CREATERESTOREPOINT
    
    netsvcs
    drivers32
    savembr:0
    
    /md5start
    atapi.sys
    autochk.exe
    cdrom.sys
    explorer.exe
    hal.dll
    scecli.dll
    services.exe
    svchost.exe
    tcpip.sys
    userinit.exe
    winlogon.exe
    /md5stop
    
    %systemroot%*.* /U /s
    %SYSTEMDRIVE%\*.exe
    %ALLUSERSPROFILE%\Application Data\*.
    %ALLUSERSPROFILE%\Application Data\*.exe /s
    %APPDATA%\*.
    %APPDATA%\*.exe /s
    %systemroot%\*. /mp /s
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\System32\config\*.sav
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\system32\drivers\*.sys /3
    %systemroot%\system32\*.* /3
    %SYSTEMDRIVE%\*.exe
    
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
    
    %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
    %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
    %PROGRAMFILES%\Opera\opera.exe /md5
    %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
    
    %SystemDrive%\PhysicalMBR.bin /md5 
    
    *crack* /s
    *keygen* /s
    *loader* /s
  • Kliknete na tlacitko Prohledat
  • Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
  • Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

FJakub
Návštěvník
Návštěvník
Příspěvky: 72
Registrován: 04 zář 2008 19:33

Re: Preventivní kontrola

#3 Příspěvek od FJakub »

OTL logfile created on: 20.1.2013 17:25:58 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Jakub\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

7,60 Gb Total Physical Memory | 5,42 Gb Available Physical Memory | 71,22% Memory free
15,21 Gb Paging File | 12,99 Gb Available in Paging File | 85,46% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 111,79 Gb Total Space | 19,57 Gb Free Space | 17,50% Space Free | Partition Type: NTFS
Drive D: | 465,66 Gb Total Space | 215,74 Gb Free Space | 46,33% Space Free | Partition Type: NTFS

Computer Name: JAKUB-NTB | User Name: Jakub | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2013.01.20 17:23:28 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jakub\Desktop\OTL.exe
PRC - [2012.12.29 11:34:47 | 001,260,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2012.12.18 15:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.10.09 10:53:36 | 004,441,920 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\Jakub\AppData\Local\Akamai\netsession_win.exe
PRC - [2012.09.07 08:09:02 | 000,366,480 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
PRC - [2012.09.07 08:08:50 | 000,272,272 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
PRC - [2012.09.07 08:08:48 | 000,133,008 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
PRC - [2012.08.24 18:33:24 | 000,127,072 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\micmute.exe
PRC - [2012.08.24 18:33:22 | 000,567,392 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
PRC - [2012.08.22 15:59:57 | 000,123,320 | ---- | M] (Gemfor s.r.o.) -- C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe
PRC - [2012.08.09 20:30:20 | 000,353,640 | ---- | M] () -- C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
PRC - [2012.08.09 20:30:20 | 000,287,080 | ---- | M] (Connectify) -- C:\Program Files (x86)\Connectify\Connectifyd.exe
PRC - [2012.08.09 20:30:04 | 000,065,536 | ---- | M] () -- C:\Program Files (x86)\Connectify\ConnectifyService.exe
PRC - [2012.06.06 23:04:22 | 000,145,256 | ---- | M] (AuthenTec Inc.) -- C:\Program Files\Lenovo Fingerprint Reader\x86\BioMonitor.exe
PRC - [2012.06.01 19:49:06 | 000,179,568 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
PRC - [2012.06.01 19:49:00 | 000,290,160 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
PRC - [2012.06.01 19:48:58 | 000,061,296 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
PRC - [2012.06.01 19:48:38 | 000,058,224 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\Communications Utility\CamMute.exe
PRC - [2012.05.16 05:32:00 | 001,662,560 | ---- | M] (Lenovo) -- C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe
PRC - [2012.05.16 05:32:00 | 000,128,608 | ---- | M] (Lenovo Group Limited) -- C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
PRC - [2012.04.20 11:30:14 | 000,144,448 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
PRC - [2012.04.13 10:12:00 | 000,088,576 | ---- | M] () -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
PRC - [2012.01.31 09:46:56 | 000,019,232 | ---- | M] (Autodesk, Inc.) -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
PRC - [2012.01.05 02:59:50 | 000,291,608 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
PRC - [2011.12.23 16:13:46 | 000,363,800 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2011.12.23 16:13:32 | 000,277,784 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2011.12.23 16:13:16 | 000,128,280 | ---- | M] () -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
PRC - [2011.12.23 16:13:04 | 000,161,560 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
PRC - [2011.11.25 23:22:44 | 000,312,688 | ---- | M] (Sierra Wireless, Inc.) -- C:\Program Files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe
PRC - [2011.11.18 13:43:58 | 000,655,912 | R--- | M] (Ericsson AB) -- C:\Program Files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe
PRC - [2011.01.07 11:28:42 | 000,446,592 | ---- | M] (Conexant Systems, Inc.) -- C:\Windows\SysWOW64\SASrv.exe


========== Modules (No Company Name) ==========


========== Services (SafeList) ==========

SRV:64bit: - [2012.10.09 21:08:10 | 001,432,400 | ---- | M] (Flexera Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:64bit: - [2012.09.12 20:21:48 | 000,368,896 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2012.09.12 20:21:48 | 000,022,072 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2012.08.24 18:33:24 | 000,127,072 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\micmute.exe -- (LENOVO.MICMUTE)
SRV:64bit: - [2012.08.12 16:59:52 | 000,046,984 | ---- | M] (Lenovo.) [On_Demand | Stopped] -- C:\Windows\SysNative\TPHDEXLG64.exe -- (TPHDEXLGSVC)
SRV:64bit: - [2012.06.08 16:07:16 | 000,201,376 | ---- | M] (Conexant Systems Inc.) [Auto | Running] -- C:\Windows\SysNative\CxAudMsg64.exe -- (CxAudMsg)
SRV:64bit: - [2012.06.06 23:04:04 | 000,328,552 | ---- | M] (AuthenTec, Inc) [Auto | Running] -- C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe -- (FPLService)
SRV:64bit: - [2012.06.01 19:49:06 | 000,179,568 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe -- (LENOVO.TVTVCAM)
SRV:64bit: - [2012.06.01 19:48:58 | 000,061,296 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe -- (LENOVO.TPKNRSVC)
SRV:64bit: - [2012.06.01 19:48:38 | 000,058,224 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\Communications Utility\CamMute.exe -- (LENOVO.CAMMUTE)
SRV:64bit: - [2012.05.29 15:30:16 | 000,147,040 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\tphkload.exe -- (TPHKLOAD)
SRV:64bit: - [2012.04.20 11:30:14 | 000,144,448 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe -- (TPHKSVC)
SRV:64bit: - [2012.04.11 15:27:06 | 000,047,440 | ---- | M] (Lenovo.) [Auto | Running] -- C:\Windows\SysNative\ibmpmsvc.exe -- (IBMPMSVC)
SRV:64bit: - [2012.02.26 04:07:52 | 002,669,840 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- (ZeroConfigService)
SRV:64bit: - [2012.02.26 04:07:42 | 000,273,168 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV:64bit: - [2012.02.26 04:07:32 | 000,626,960 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV:64bit: - [2012.02.26 04:07:26 | 000,148,752 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV:64bit: - [2012.01.17 15:12:28 | 000,135,952 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr)
SRV:64bit: - [2012.01.09 11:39:44 | 000,659,968 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
SRV:64bit: - [2011.12.08 15:38:24 | 000,607,456 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
SRV:64bit: - [2011.09.27 03:00:24 | 000,089,160 | ---- | M] (Dassault Systèmes SolidWorks Corp.) [On_Demand | Stopped] -- C:\Program Files\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe -- (CoordinatorServiceHost)
SRV:64bit: - [2011.08.17 19:04:36 | 000,109,624 | ---- | M] (Mentor Graphics Corporation) [On_Demand | Stopped] -- C:\Program Files\SolidWorks Corp\SolidWorks Flow Simulation\binCFW\StandAloneSlv.exe -- (Remote Solver for Flow Simulation 2012)
SRV:64bit: - [2011.07.12 15:53:58 | 000,133,992 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe -- (Lenovo.VIRTSCRLSVC)
SRV:64bit: - [2009.07.14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2013.01.08 22:20:35 | 000,251,400 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.01.08 20:37:22 | 000,115,760 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.12.29 11:34:47 | 001,260,472 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012.12.18 15:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.11.23 15:20:54 | 000,021,416 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Lenovo\System Update\SUService.exe -- (SUService)
SRV - [2012.11.09 11:21:24 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.10.09 21:19:27 | 000,079,360 | ---- | M] (SolidWorks) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe -- (SolidWorks Licensing Service)
SRV - [2012.10.09 21:19:26 | 001,044,816 | ---- | M] (Flexera Software, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2012.10.06 13:19:12 | 000,079,360 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2012.09.07 08:08:50 | 000,272,272 | ---- | M] (Lenovo) [Auto | Running] -- C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe -- (AcSvc)
SRV - [2012.09.07 08:08:48 | 000,133,008 | ---- | M] (Lenovo) [Auto | Running] -- C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe -- (AcPrfMgrSvc)
SRV - [2012.08.22 15:59:57 | 000,123,320 | ---- | M] (Gemfor s.r.o.) [Auto | Running] -- C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe -- (ameisvc)
SRV - [2012.08.09 20:30:04 | 000,065,536 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Connectify\ConnectifyService.exe -- (Connectify)
SRV - [2012.05.16 05:32:00 | 001,665,120 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files (x86)\ThinkPad\Utilities\PWMEWSVC.exe -- (PwmEWSvc)
SRV - [2012.05.16 05:32:00 | 001,662,560 | ---- | M] (Lenovo) [On_Demand | Running] -- C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe -- (Power Manager DBC Service)
SRV - [2012.04.13 10:12:00 | 000,088,576 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2012.02.09 14:10:32 | 000,276,248 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
SRV - [2012.01.31 09:46:56 | 000,019,232 | ---- | M] (Autodesk, Inc.) [Auto | Running] -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe -- (Autodesk Content Service)
SRV - [2011.12.23 16:13:46 | 000,363,800 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2011.12.23 16:13:32 | 000,277,784 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2011.12.23 16:13:16 | 000,128,280 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe -- (Intel(R)
SRV - [2011.12.23 16:13:04 | 000,161,560 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)
SRV - [2011.11.25 23:22:44 | 000,312,688 | ---- | M] (Sierra Wireless, Inc.) [Auto | Running] -- C:\Program Files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe -- (GobiQDLService)
SRV - [2011.11.18 13:43:58 | 000,655,912 | R--- | M] (Ericsson AB) [Auto | Running] -- C:\Program Files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe -- (WMCoreService)
SRV - [2011.01.07 11:28:42 | 000,446,592 | ---- | M] (Conexant Systems, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\SASrv.exe -- (SAService)
SRV - [2010.03.18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.02.19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012.12.29 11:34:47 | 000,030,648 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:64bit: - [2012.12.02 16:43:40 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2012.11.12 11:21:10 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin)
DRV:64bit: - [2012.10.26 16:48:57 | 000,164,736 | ---- | M] (ITE ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IT9135BDA.sys -- (IT9135BDA)
DRV:64bit: - [2012.10.11 13:14:12 | 000,031,344 | ---- | M] (Connectify) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cnnctfy2.sys -- (cnnctfy2)
DRV:64bit: - [2012.09.18 10:32:32 | 000,078,648 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LEqdUsb.sys -- (LEqdUsb)
DRV:64bit: - [2012.09.18 10:32:32 | 000,075,064 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
DRV:64bit: - [2012.09.18 10:32:32 | 000,061,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
DRV:64bit: - [2012.09.18 10:32:32 | 000,015,160 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidEqd.sys -- (LHidEqd)
DRV:64bit: - [2012.08.30 21:03:48 | 000,128,456 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2012.08.23 15:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.23 15:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012.08.12 16:59:52 | 000,025,448 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ApsHM64.sys -- (TPDIGIMN)
DRV:64bit: - [2012.07.23 21:48:02 | 000,148,328 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ApsX64.sys -- (Shockprf)
DRV:64bit: - [2012.07.17 18:12:08 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2012.06.14 16:25:26 | 001,608,352 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
DRV:64bit: - [2012.05.16 05:32:00 | 000,019,784 | ---- | M] (Lenovo Group Limited) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\TPPWR64V.SYS -- (TPPWRIF)
DRV:64bit: - [2012.04.11 15:27:04 | 000,042,280 | ---- | M] (Lenovo.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ibmpmdrv.sys -- (IBMPMDRV)
DRV:64bit: - [2012.04.02 11:40:50 | 000,428,304 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2012.03.28 12:16:48 | 000,216,704 | ---- | M] (Ricoh co.,Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\5U877.sys -- (5U877)
DRV:64bit: - [2012.03.01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.02.20 11:36:58 | 011,471,872 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Netwsw00.sys -- (NETwNs64)
DRV:64bit: - [2012.02.02 03:52:02 | 014,659,808 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2012.01.09 11:32:40 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP)
DRV:64bit: - [2012.01.09 11:32:40 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL)
DRV:64bit: - [2012.01.05 02:58:50 | 000,786,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
DRV:64bit: - [2012.01.05 02:58:50 | 000,355,096 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
DRV:64bit: - [2012.01.05 02:58:50 | 000,016,152 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
DRV:64bit: - [2011.12.27 02:10:44 | 000,040,248 | ---- | M] (Lenovo Information Product(ShenZhen China) Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\psadd.sys -- (psadd)
DRV:64bit: - [2011.12.23 19:37:12 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2011.12.20 16:38:36 | 000,034,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
DRV:64bit: - [2011.12.20 16:38:36 | 000,025,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:64bit: - [2011.12.07 17:59:52 | 000,027,432 | ---- | M] (ThinkVantage Communications Utility) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tvtvcamd.sys -- (tvtvcamd)
DRV:64bit: - [2011.12.06 18:23:10 | 000,331,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:64bit: - [2011.10.27 09:27:52 | 000,259,688 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsP2Stor.sys -- (RSP2STOR)
DRV:64bit: - [2011.08.23 20:57:24 | 000,565,352 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.05.03 01:06:12 | 000,447,872 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cxpolar64.sys -- (CXPOLARIS)
DRV:64bit: - [2011.05.03 01:06:12 | 000,044,032 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\cxcir64.sys -- (CXIR)
DRV:64bit: - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.06.25 16:08:10 | 000,036,928 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\htcnprot.sys -- (htcnprot)
DRV:64bit: - [2009.12.15 13:05:42 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard)
DRV:64bit: - [2009.12.15 13:05:42 | 000,114,304 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbdev.sys -- (hwusbdev)
DRV:64bit: - [2009.12.15 13:05:42 | 000,029,696 | ---- | M] (Huawei Tech. Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewdcsc.sys -- (Huawei)
DRV:64bit: - [2009.11.02 18:16:50 | 000,033,736 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 01:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-3752770136-2494076584-3171830822-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://klientskazona.cpost.cz/
IE - HKU\S-1-5-21-3752770136-2494076584-3171830822-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3752770136-2494076584-3171830822-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-3752770136-2494076584-3171830822-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3752770136-2494076584-3171830822-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>



========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.3: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Jakub\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Jakub\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.10.06 09:35:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013.01.08 20:36:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013.01.08 20:36:20 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins

[2012.10.06 10:06:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jakub\AppData\Roaming\Mozilla\Extensions
[2012.10.25 17:39:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\2no0m5di.Nepojmenovaný\extensions
[2012.10.06 09:35:54 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012.09.06 02:26:03 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.09.06 05:25:45 | 000,002,208 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\heureka-cz.xml
[2012.09.06 05:25:45 | 000,000,638 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\jyxo-cz.xml
[2012.09.06 05:25:45 | 000,001,367 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\seznam-cz.xml
[2012.09.06 05:25:45 | 000,000,654 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.09.06 05:25:45 | 000,001,179 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - homepage: http://www.seznam.cz/
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.seznam.cz/
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Jakub\AppData\Local\Google\Chrome\Application\24.0.1312.52\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Jakub\AppData\Local\Google\Chrome\Application\24.0.1312.52\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Disabled) = C:\Users\Jakub\AppData\Local\Google\Chrome\Application\24.0.1312.52\pdf.dll
CHR - plugin: Screen Capture Plugin (Enabled) = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\alelhddbbhepgpmgidjdcjakblofbmce\3.3.7_0\plugins/screen_capture.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
CHR - plugin: Java(TM) Platform SE 7 U7 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 7.0.70.11 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Jakub\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - Extension: Awesome Screenshot: Capture & Annotate = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\alelhddbbhepgpmgidjdcjakblofbmce\3.4.4_0\
CHR - Extension: YouTube = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Google Reader = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjjhlfkghdhmijklfnahfkpgmhcmfgcm\4.4_0\
CHR - Extension: Gmail = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (TrueSuite Browser Helper Object) - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.dll (AuthenTec Inc.)
O2 - BHO: (no name) - {32F66A28-7614-11D4-BD11-00104BD3F987} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (TrueSuite Browser Helper Object) - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4:64bit: - HKLM..\Run: [] File not found
O4:64bit: - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (Conexant Systems, Inc.)
O4:64bit: - HKLM..\Run: [ForteConfig] C:\Program Files\CONEXANT\ForteConfig\fmapp.exe ()
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [LENOVO.TPKNRRES] C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe (Lenovo Group Limited)
O4:64bit: - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SACpl.exe (Conexant Systems, Inc.)
O4:64bit: - HKLM..\Run: [TpShocks] C:\Windows\SysNative\TpShocks.exe (Lenovo.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [IMSS] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe (Intel Corporation)
O4 - HKLM..\Run: [PWMTRV] C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL (Lenovo Group Limited)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3752770136-2494076584-3171830822-1000..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-21-3752770136-2494076584-3171830822-1000..\Run: [Akamai NetSession Interface] C:\Users\Jakub\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
O4 - HKU\S-1-5-21-3752770136-2494076584-3171830822-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-3752770136-2494076584-3171830822-1000..\Run: [HP Officejet Pro 8600 (NET)] C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe (Hewlett-Packard Co.)
O4 - HKU\S-1-5-21-3752770136-2494076584-3171830822-1000..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe File not found
O4 - HKU\S-1-5-21-3752770136-2494076584-3171830822-1003..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-3752770136-2494076584-3171830822-1003..\RunOnce: [Lenovo.ShowBand] C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe (Lenovo)
O4 - HKU\S-1-5-21-3752770136-2494076584-3171830822-1003..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-3752770136-2494076584-3171830822-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: =
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-3752770136-2494076584-3171830822-1000\..Trusted Domains: mfcr.cz ([adisepo] https in Důvěryhodné servery)
O15 - HKU\S-1-5-21-3752770136-2494076584-3171830822-1000\..Trusted Domains: postsignum.cz ([www] https in Důvěryhodné servery)
O16 - DPF: {F680B28A-3AEE-4C88-93ED-45AE9215C128} https://adisepo.mfcr.cz/adistc/adis/idp ... tsignx.cab (CryptSignX Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.222
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{03E9C21A-DFE9-C8BC-ECE3-5614C4AF73B1}: NameServer = 93.153.117.1 93.153.117.33
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{689A7833-2BB6-423C-A25B-C00FA2605F55}: NameServer = 192.168.140.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{726D6A6E-E50E-47DC-B6D9-BFE605A43D74}: DhcpNameServer = 192.168.2.222
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{98CA78AC-1E85-49F9-8FD9-1F1262820BA0}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{840375f7-113e-11e2-9aa9-685d4342d898}\Shell - "" = AutoRun
O33 - MountPoints2\{840375f7-113e-11e2-9aa9-685d4342d898}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point


Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2013.01.20 17:23:23 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Jakub\Desktop\OTL.exe
[2013.01.20 12:56:06 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2013.01.20 12:56:06 | 000,000,000 | ---D | C] -- C:\rsit
[2013.01.18 13:07:37 | 000,000,000 | ---D | C] -- C:\Users\Jakub\Desktop\školni vylet
[2013.01.18 11:33:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Math3D
[2013.01.18 11:31:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Design Science
[2013.01.15 19:19:40 | 000,000,000 | ---D | C] -- C:\Users\Jakub\Desktop\cashondeliverycesky
[2013.01.15 14:14:18 | 000,000,000 | ---D | C] -- C:\Users\Jakub\Desktop\Kominy
[2013.01.13 20:28:42 | 000,000,000 | ---D | C] -- C:\Users\Jakub\AppData\Roaming\dvdcss
[2013.01.13 19:20:19 | 000,000,000 | ---D | C] -- C:\Users\Jakub\Desktop\detweb
[2012.11.12 11:21:10 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Jakub\AppData\Roaming\pcouffin.sys
[2012.10.27 17:25:01 | 000,695,296 | ---- | C] (AnjoCaido) -- C:\Users\Jakub\AppData\Roaming\MinecraftSP.exe

========== Files - Modified Within 7 Days ==========

[2013.01.20 17:29:14 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013.01.20 17:23:28 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jakub\Desktop\OTL.exe
[2013.01.20 17:20:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.01.20 16:44:00 | 000,000,962 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3752770136-2494076584-3171830822-1000UA.job
[2013.01.20 10:44:00 | 000,000,910 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3752770136-2494076584-3171830822-1000Core.job
[2013.01.20 10:16:08 | 000,014,816 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.01.20 10:16:08 | 000,014,816 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.01.20 10:13:17 | 001,709,266 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.01.20 10:13:17 | 000,713,380 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2013.01.20 10:13:17 | 000,699,084 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.01.20 10:13:17 | 000,158,158 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2013.01.20 10:13:17 | 000,139,130 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.01.20 10:09:09 | 000,001,988 | ---- | M] () -- C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sledovat výstrahy inkoustu - HP Officejet Pro 8600 (Síť).lnk
[2013.01.20 10:09:05 | 000,000,828 | ---- | M] () -- C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
[2013.01.20 10:08:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.01.20 10:08:51 | 1828,130,815 | -HS- | M] () -- C:\hiberfil.sys
[2013.01.19 19:29:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
[2013.01.19 00:51:07 | 005,199,216 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.01.18 11:33:50 | 000,002,563 | ---- | M] () -- C:\Users\Public\Desktop\Math3D.lnk
[2013.01.13 21:05:46 | 000,000,779 | ---- | M] () -- C:\Users\Jakub\Desktop\.htaccess
[2013.01.13 20:46:46 | 000,002,369 | ---- | M] () -- C:\Users\Jakub\Desktop\Google Chrome.lnk
[2013.01.13 19:52:31 | 058,946,287 | ---- | M] () -- C:\Users\Jakub\Desktop\PSD-dětský-web.zip

========== Files Created - No Company Name ==========

[2013.01.20 17:29:14 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013.01.18 11:33:50 | 000,002,563 | ---- | C] () -- C:\Users\Public\Desktop\Math3D.lnk
[2013.01.13 21:05:46 | 000,000,779 | ---- | C] () -- C:\Users\Jakub\Desktop\.htaccess
[2013.01.13 19:49:14 | 058,946,287 | ---- | C] () -- C:\Users\Jakub\Desktop\PSD-dětský-web.zip
[2012.12.28 14:59:16 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
[2012.12.11 22:00:42 | 001,148,416 | ---- | C] () -- C:\Windows\SysWow64\QtNetwork4.dll
[2012.12.11 22:00:42 | 000,398,336 | ---- | C] () -- C:\Windows\SysWow64\QtXml4.dll
[2012.12.11 22:00:42 | 000,021,584 | ---- | C] () -- C:\Windows\SysWow64\wkll.exe
[2012.12.11 22:00:40 | 009,565,184 | ---- | C] () -- C:\Windows\SysWow64\QtGui4.dll
[2012.12.11 22:00:40 | 002,417,664 | ---- | C] () -- C:\Windows\SysWow64\QtCore4.dll
[2012.12.11 22:00:40 | 000,004,065 | ---- | C] () -- C:\Windows\SysWow64\pol.dll
[2012.12.11 22:00:39 | 003,550,834 | ---- | C] () -- C:\Windows\SysWow64\msidentmn.exe
[2012.12.11 22:00:39 | 000,181,248 | ---- | C] () -- C:\Windows\SysWow64\initpentp.exe
[2012.12.11 22:00:39 | 000,076,800 | ---- | C] () -- C:\Windows\SysWow64\libgnurx-0.dll
[2012.12.11 22:00:39 | 000,043,008 | ---- | C] () -- C:\Windows\SysWow64\libgcc_s_dw2-1.dll
[2012.12.11 22:00:39 | 000,024,110 | ---- | C] () -- C:\Windows\SysWow64\mingwm10.dll
[2012.12.11 21:47:48 | 000,004,608 | ---- | C] () -- C:\Users\Jakub\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.11.12 11:21:10 | 000,099,384 | ---- | C] () -- C:\Users\Jakub\AppData\Roaming\inst.exe
[2012.11.12 11:21:10 | 000,007,859 | ---- | C] () -- C:\Users\Jakub\AppData\Roaming\pcouffin.cat
[2012.11.12 11:21:10 | 000,001,167 | ---- | C] () -- C:\Users\Jakub\AppData\Roaming\pcouffin.inf
[2012.11.12 11:16:24 | 000,001,057 | ---- | C] () -- C:\Users\Jakub\AppData\Roaming\vso_ts_preview.xml
[2012.10.22 19:14:56 | 000,000,132 | ---- | C] () -- C:\Users\Jakub\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
[2012.10.21 11:04:35 | 000,427,999 | ---- | C] () -- C:\Users\Jakub\.websiteauditor.properties
[2012.10.21 10:42:23 | 000,182,845 | ---- | C] () -- C:\Users\Jakub\.spyglass.properties
[2012.10.20 21:15:00 | 000,126,974 | ---- | C] () -- C:\Users\Jakub\.ranktracker.properties
[2012.10.09 21:26:36 | 000,000,000 | ---- | C] () -- C:\Windows\eDrawingOfficeAutomator.INI
[2012.10.06 15:44:55 | 000,210,032 | ---- | C] () -- C:\Windows\SysWow64\DBCLIENT.DLL
[2012.10.06 13:26:27 | 001,688,488 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012.10.06 08:52:38 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
[2012.10.06 08:51:07 | 000,735,796 | ---- | C] () -- C:\Windows\SysWow64\igkrng700.bin
[2012.10.06 08:51:05 | 000,561,508 | ---- | C] () -- C:\Windows\SysWow64\igfcg700m.bin
[2012.10.06 08:51:02 | 000,058,880 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2012.10.06 08:50:59 | 013,007,360 | ---- | C] () -- C:\Windows\SysWow64\ig7icd32.dll
[2012.10.05 14:57:14 | 000,035,404 | R--- | C] () -- C:\Windows\ConnectionProfiles.dat
[2012.01.03 08:28:06 | 002,570,286 | ---- | C] () -- C:\Windows\SysWow64\abgx360.exe
[2011.12.08 15:14:58 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll

========== ZeroAccess Check ==========

[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012.08.21 14:11:31 | 000,857,088 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2012.08.21 14:37:44 | 000,636,928 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012.08.21 14:08:38 | 000,453,120 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2012.11.17 19:04:41 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\.minecraft
[2012.11.17 19:04:08 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\.minecraft[VCHbackup]
[2013.01.08 10:58:06 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\abgx360
[2012.10.06 13:36:39 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Ansys
[2012.12.01 20:22:13 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Ashampoo
[2012.12.08 13:53:21 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Autodesk
[2012.12.16 12:55:33 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\DAEMON Tools Lite
[2012.10.09 21:25:43 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\DassaultSystemes
[2012.11.03 09:49:54 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\EDrawings
[2012.10.06 10:37:22 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\GHISLER
[2012.12.02 16:28:49 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\ImgBurn
[2012.10.06 13:09:43 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Leadertech
[2012.10.05 15:16:19 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\LSC
[2012.11.19 19:08:46 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\MOBILedit
[2013.01.02 18:53:49 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Opera
[2012.11.04 11:20:06 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Outlook
[2012.10.06 15:50:06 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\ProgeCAD
[2012.10.05 15:15:38 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\PwrMgr
[2012.10.05 14:56:37 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Sierra Wireless
[2012.10.18 14:41:18 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\systweak
[2012.10.06 17:44:31 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\TeamViewer
[2012.10.06 10:10:39 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Thunderbird
[2012.12.19 21:21:49 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\TransMemory_Secure
[2012.10.06 11:06:29 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\VitySoft
[2013.01.08 10:30:52 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Vso
[2012.10.09 16:19:33 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Zoner

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009.07.14 06:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009.07.14 06:08:49 | 000,032,538 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012.10.06 08:50:52 | 000,000,828 | ---- | C] () -- C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
[2012.10.06 08:50:52 | 000,000,830 | ---- | C] () -- C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
[2012.10.06 09:34:38 | 000,000,910 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3752770136-2494076584-3171830822-1000Core.job
[2012.10.06 09:34:38 | 000,000,962 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3752770136-2494076584-3171830822-1000UA.job
[2012.10.06 10:10:08 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job

< >

< MD5 for: ATAPI.SYS >
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 14:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.20 14:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2010.11.20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2010.11.20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009.08.03 07:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009.10.31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2010.11.20 14:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009.10.31 07:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2011.02.26 07:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009.08.03 07:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2010.11.20 14:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.20 14:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: SCECLI.DLL >
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.07.14 02:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009.07.14 02:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2012.10.03 18:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\SysNative\drivers\tcpip.sys
[2012.10.03 18:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
[2010.11.20 14:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2012.08.22 19:06:13 | 001,901,936 | ---- | M] (Microsoft Corporation) MD5=7880A26B7D3B96FDA8EFD9F985036B1D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22097_none_117a13de9661c145\tcpip.sys
[2012.03.30 11:26:36 | 001,901,424 | ---- | M] (Microsoft Corporation) MD5=885B202006EE17AE99B9FBCEC9AF88C9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21954_none_11a27a8e9643d23a\tcpip.sys
[2012.03.30 12:35:47 | 001,918,320 | ---- | M] (Microsoft Corporation) MD5=ACB82BDA8F46C84F465C1AFA517DC4B9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17802_none_114ceccb7cff740d\tcpip.sys
[2012.10.03 18:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys
[2012.08.22 19:12:50 | 001,913,200 | ---- | M] (Microsoft Corporation) MD5=F782CAD3CEDBB3F9FFE3BF2775D92DDC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17939_none_113380f37d117668\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe

< >

< %systemroot%*.* /U /s >
[7 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[13 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[36 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[6 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012.11.17 19:04:41 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\.minecraft
[2012.11.17 19:04:08 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\.minecraft[VCHbackup]
[2013.01.08 10:58:06 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\abgx360
[2012.12.11 21:47:47 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Adobe
[2012.10.06 13:36:39 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Ansys
[2012.12.01 20:22:13 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Ashampoo
[2012.12.08 13:53:21 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Autodesk
[2012.12.16 12:55:33 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\DAEMON Tools Lite
[2012.10.09 21:25:43 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\DassaultSystemes
[2013.01.13 20:28:42 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\dvdcss
[2012.11.03 09:49:54 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\EDrawings
[2012.10.06 10:37:22 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\GHISLER
[2012.10.14 09:25:43 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Google Chrome Backup
[2012.10.09 21:26:34 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\help_images_otherUI
[2012.10.09 16:08:16 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\HP
[2013.01.04 15:46:35 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\HpUpdate
[2012.10.05 14:53:46 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Identities
[2012.12.02 16:28:49 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\ImgBurn
[2012.10.05 14:58:06 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\InstallShield
[2012.10.05 15:02:30 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Intel
[2012.10.06 13:09:43 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Leadertech
[2012.10.06 13:10:20 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Logishrd
[2012.10.06 13:09:45 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Logitech
[2012.10.05 15:16:19 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\LSC
[2012.10.05 15:16:11 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Macromedia
[2012.10.10 17:53:28 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Mathematica
[2009.07.14 16:36:31 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Media Center Programs
[2012.12.04 17:41:33 | 000,000,000 | --SD | M] -- C:\Users\Jakub\AppData\Roaming\Microsoft
[2012.11.19 19:08:46 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\MOBILedit
[2012.10.06 10:06:18 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Mozilla
[2012.10.06 11:09:57 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\NVIDIA
[2013.01.02 18:53:49 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Opera
[2012.11.04 11:20:06 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Outlook
[2012.10.06 15:50:06 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\ProgeCAD
[2012.10.08 15:55:17 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\PSpad
[2012.10.05 15:15:38 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\PwrMgr
[2012.10.05 14:56:37 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Sierra Wireless
[2013.01.20 17:19:21 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Skype
[2012.11.28 14:10:23 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\SolidWorks
[2012.10.18 14:41:18 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\systweak
[2012.10.06 17:44:31 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\TeamViewer
[2012.10.06 10:10:39 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Thunderbird
[2012.12.19 21:21:49 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\TransMemory_Secure
[2012.10.06 11:06:29 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\VitySoft
[2013.01.17 15:43:26 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\vlc
[2013.01.08 10:30:52 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Vso
[2012.10.06 11:01:05 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\WinRAR
[2012.10.09 16:19:33 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Zoner

< %APPDATA%\*.exe /s >
[2012.11.12 11:21:10 | 000,099,384 | ---- | M] () -- C:\Users\Jakub\AppData\Roaming\inst.exe
[2012.03.08 10:12:53 | 000,695,296 | ---- | M] (AnjoCaido) -- C:\Users\Jakub\AppData\Roaming\MinecraftSP.exe
[2012.10.21 18:59:39 | 000,053,664 | ---- | M] (Adobe Systems Inc.) -- C:\Users\Jakub\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2012.10.05 15:12:49 | 000,010,134 | R--- | M] () -- C:\Users\Jakub\AppData\Roaming\Microsoft\Installer\{1C83CB66-D345-4D6C-95A2-63A03269ADA0}\ARPPRODUCTICON.exe
[2012.12.16 11:06:03 | 000,053,248 | R--- | M] (Acresso Software Inc.) -- C:\Users\Jakub\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
[2012.12.03 10:59:41 | 000,010,134 | R--- | M] () -- C:\Users\Jakub\AppData\Roaming\Microsoft\Installer\{4BE91685-1632-47FC-B563-A8A542C6664C}\_386998012CE765DB51A217.exe
[2012.12.03 10:59:41 | 000,010,134 | R--- | M] () -- C:\Users\Jakub\AppData\Roaming\Microsoft\Installer\{4BE91685-1632-47FC-B563-A8A542C6664C}\_54ADCD11F3CF522B57A4A6.exe
[2012.10.05 15:12:49 | 000,010,134 | R--- | M] () -- C:\Users\Jakub\AppData\Roaming\Microsoft\Installer\{A7BB9BBD-DFE4-4276-820A-7CD141FC09E6}\ARPPRODUCTICON.exe
[2012.11.05 12:25:00 | 000,053,248 | R--- | M] (Acresso Software Inc.) -- C:\Users\Jakub\AppData\Roaming\Microsoft\Installer\{ABE4638D-D208-4061-9F26-E3E11E3A1E0C}\ARPPRODUCTICON.exe
[2012.11.05 12:24:58 | 000,053,248 | R--- | M] (Acresso Software Inc.) -- C:\Users\Jakub\AppData\Roaming\Microsoft\Installer\{AD32F5E9-6BDD-480A-8B7B-95571D04691C}\ARPPRODUCTICON.exe
[2012.10.13 17:31:31 | 000,119,808 | R--- | M] () -- C:\Users\Jakub\AppData\Roaming\Microsoft\Installer\{CCF298AF-9CE1-4B26-B251-486E98A34789}\icons.exe
[2012.10.06 13:14:23 | 000,010,134 | R--- | M] () -- C:\Users\Jakub\AppData\Roaming\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
[2010.02.01 17:45:56 | 001,687,552 | ---- | M] () -- C:\Users\Jakub\AppData\Roaming\TransMemory_Secure\TransMemory_Secure3.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2013.01.20 17:20:00 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2013.01.20 10:44:00 | 000,000,910 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3752770136-2494076584-3171830822-1000Core.job
[2013.01.20 16:44:00 | 000,000,962 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3752770136-2494076584-3171830822-1000UA.job
[2013.01.20 10:09:05 | 000,000,828 | ---- | M] () -- C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
[2013.01.19 19:29:00 | 000,000,830 | ---- | M] () -- C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2013.01.20 10:11:07 | 000,000,044 | ---- | M] () -- C:\Windows\system32\log.txt

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"AdobeBridge" =
"RESTART_STICKY_NOTES" = C:\Windows\System32\StikyNot.exe
"DAEMON Tools Lite" = "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun -- [2012.11.06 11:46:46 | 003,673,728 | ---- | M] (DT Soft Ltd)
"Akamai NetSession Interface" = "C:\Users\Jakub\AppData\Local\Akamai\netsession_win.exe" -- [2012.10.09 10:53:36 | 004,441,920 | ---- | M] (Akamai Technologies, Inc.)
"HP Officejet Pro 8600 (NET)" = "C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe" -deviceID "CN29PBXH3X05KC:NW" -scfn "HP Officejet Pro 8600 (NET)" -AutoStart 1 -- [2011.09.09 16:27:42 | 002,676,584 | ---- | M] (Hewlett-Packard Co.)

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2012.09.06 02:24:58 | 000,917,984 | ---- | M] (Mozilla Corporation) MD5=9C376F42BDE37F18D0A39AF7415D9BE6 -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2012.11.14 03:56:04 | 000,757,296 | ---- | M] (Microsoft Corporation) MD5=0D286C0FE561D1A7EB30E83A0FF305B2 -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >
[2013.01.02 18:53:46 | 000,879,080 | ---- | M] (Opera Software) MD5=3A783497492D685E5F8D61FE06F4FE5A -- C:\Program Files (x86)\Opera\opera.exe

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2013.01.20 17:29:14 | 000,000,512 | ---- | M] () MD5=F7E9B7504E80BA7A77BE1EC1DF3F505A -- C:\PhysicalMBR.bin

FJakub
Návštěvník
Návštěvník
Příspěvky: 72
Registrován: 04 zář 2008 19:33

Re: Preventivní kontrola

#4 Příspěvek od FJakub »

< >

< *crack* /s >
[2001.08.14 18:31:08 | 000,030,054 | ---- | M] () -- \Program Files\Autodesk\AutoCAD 2013\Inventor Server\Textures\surfaces\Cracks.bmp
[2012.11.03 11:32:48 | 000,005,369 | ---- | M] () -- \Users\Jakub\AppData\Roaming\VitySoft\FRD\plugins\crackle.frp
[2012.10.10 12:52:55 | 000,030,054 | ---- | M] () -- \Users\Public\Documents\Autodesk\Inventor 2013\Textures\surfaces\Cracks.bmp
[2001.08.14 22:31:08 | 000,030,054 | ---- | M] () -- \Users\Public\Documents\Autodesk\Inventor View 2013\Textures\surfaces\Cracks.bmp

< *keygen* /s >

< *loader* /s >
[2012.02.22 22:11:56 | 000,078,336 | ---- | M] () -- \Program Files (x86)\Common Files\Adobe\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_BinaryLoader_4.4.3.dll
[2012.02.22 22:11:56 | 000,155,136 | ---- | M] () -- \Program Files (x86)\Common Files\Adobe\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_XSDLoader2_4.4.3.dll
[2012.02.22 22:11:56 | 000,117,248 | ---- | M] () -- \Program Files (x86)\Common Files\Adobe\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_XSDLoader_4.4.3.dll
[2011.09.27 04:53:06 | 001,723,976 | ---- | M] () -- \Program Files (x86)\Common Files\Manažer instalací SolidWorks\20.0\sldimdownloader.exe
[2005.09.23 03:24:22 | 000,061,440 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7Debug\coloader80.dll
[2005.09.22 22:23:44 | 000,004,608 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7Debug\coloader80.tlb
[2010.10.07 03:36:40 | 000,265,552 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll
[2010.10.07 03:36:40 | 000,018,264 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll
[2009.10.06 06:08:30 | 000,145,082 | ---- | M] () -- \Program Files (x86)\HP\HP Officejet Pro 8600\bin\HelpViewer\Resources\Loader.gif
[2008.01.22 08:14:52 | 000,017,624 | ---- | M] () -- \Program Files (x86)\Microsoft SQL Server\90\Tools\Binn\SqlResourceLoader.dll
[2008.01.22 08:14:58 | 000,017,624 | ---- | M] () -- \Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SqlResourceLoader.dll
[2012.11.01 09:32:14 | 000,057,224 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2012.11.01 09:32:44 | 000,065,416 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader64.dll
[2012.09.04 23:34:12 | 000,083,848 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader.dll
[2012.09.04 23:34:12 | 000,088,968 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader64.dll
[2013.01.04 09:09:34 | 002,496,952 | ---- | M] () -- \Program Files (x86)\WebDataLoader\WebDataLoader.exe
[2012.12.11 22:02:24 | 000,000,105 | ---- | M] () -- \Program Files (x86)\WebDataLoader\WebDataLoader.ini
[2011.01.12 22:53:42 | 000,000,082 | ---- | M] () -- \Program Files (x86)\WebDataLoader\WebDataLoader.pI6
[2013.01.12 21:18:42 | 000,000,053 | ---- | M] () -- \Program Files (x86)\WebDataLoader\WebDataLoader.url
[2012.03.13 11:10:54 | 003,297,128 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\Photodownloader.exe
[2012.03.13 09:42:26 | 000,011,161 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2012.03.13 09:42:28 | 000,011,161 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\combined_bitmaps\main_window\C_LoadError.png
[2012.03.13 09:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\da_dk\Photodownloader.ini
[2012.03.13 09:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\de_de\Photodownloader.ini
[2012.03.13 09:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\en_us\Photodownloader.ini
[2012.03.13 09:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\es_es\Photodownloader.ini
[2012.03.13 09:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\fi_fi\Photodownloader.ini
[2012.03.13 09:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\fr_fr\Photodownloader.ini
[2012.03.13 09:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\it_it\Photodownloader.ini
[2012.03.13 09:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\ja_jp\Photodownloader.ini
[2012.03.13 09:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\ko_kr\Photodownloader.ini
[2012.03.13 09:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\nl_nl\Photodownloader.ini
[2012.03.13 09:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\no_no\Photodownloader.ini
[2012.03.13 09:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\pt_br\Photodownloader.ini
[2012.03.13 09:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\sv_se\Photodownloader.ini
[2012.03.13 09:42:30 | 000,000,324 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\zh_cn\Photodownloader.ini
[2012.03.13 09:42:30 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\zh_tw\Photodownloader.ini
[2012.02.07 04:39:48 | 000,193,960 | ---- | M] () -- \Program Files\Autodesk\AutoCAD 2013\AcAutoLoader.arx
[2012.02.07 04:38:06 | 002,342,312 | ---- | M] () -- \Program Files\Autodesk\AutoCAD 2013\AdDownloaderCore.dll
[2012.01.25 13:10:54 | 000,026,024 | ---- | M] () -- \Program Files\Autodesk\AutoCAD 2013\AecLoader.arx
[2012.12.03 11:56:36 | 000,008,349 | ---- | M] () -- \Program Files\Autodesk\AutoCAD 2013\Acadm\Setup\cs-CZ\Setup\cs-CZ\Docs\acadm_sysreq\scripts\beehive\core\FileLoader.js
[2012.12.03 11:56:37 | 000,007,404 | ---- | M] () -- \Program Files\Autodesk\AutoCAD 2013\Acadm\Setup\cs-CZ\Setup\cs-CZ\Docs\acadm_sysreq\scripts\beehive\ui\StylesheetLoader.js
[2012.12.03 11:56:37 | 000,003,208 | ---- | M] () -- \Program Files\Autodesk\AutoCAD 2013\Acadm\Setup\cs-CZ\Setup\cs-CZ\Docs\acadm_sysreq\scripts\beehiveSearch\styles\images\loader.gif
[2012.03.13 08:47:55 | 000,012,912 | ---- | M] () -- \Program Files\Autodesk\AutoCAD 2013\cs-CZ\AcAutoLoaderRes.dll
[2012.01.14 00:22:20 | 000,063,648 | ---- | M] () -- \Program Files\Autodesk\AutoCAD 2013\Inventor Server\Bin\ClrAddinLoader.dll
[2012.10.10 12:41:05 | 000,026,024 | ---- | M] () -- \Program Files\Autodesk\DWG TrueView 2013\AecLoader.arx
[2012.10.10 12:45:31 | 000,063,648 | ---- | M] () -- \Program Files\Autodesk\Inventor 2013\Bin\ClrAddinLoader.dll
[2012.02.14 03:01:26 | 004,888,416 | ---- | M] () -- \Program Files\Autodesk\Vault Basic 2013\Autoloader\Explorer\Autoloader.exe
[2011.06.12 14:25:30 | 000,010,163 | ---- | M] () -- \Program Files\Autodesk\Vault Basic 2013\Autoloader\Explorer\Autoloader.exe.config
[2010.04.19 12:40:24 | 000,005,644 | ---- | M] () -- \Program Files\Autodesk\Vault Basic 2013\Autoloader\Explorer\Autoloader Templates\Autoloader_ArchiveReport.xsl
[2010.04.19 12:40:24 | 000,011,500 | ---- | M] () -- \Program Files\Autodesk\Vault Basic 2013\Autoloader\Explorer\Autoloader Templates\Autoloader_ScanReport.xsl
[2010.04.19 12:40:24 | 000,019,316 | ---- | M] () -- \Program Files\Autodesk\Vault Basic 2013\Autoloader\Explorer\Autoloader Templates\Autoloader_UploadReport.xsl
[2009.06.12 17:03:00 | 000,000,000 | ---- | M] () -- \Program Files\Autodesk\Vault Basic 2013\Autoloader\Explorer\Loc\Autoloader.resources.dll
[2010.10.07 03:36:40 | 000,387,408 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll
[2010.10.07 03:36:40 | 000,018,264 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll
[2011.09.26 18:16:46 | 007,951,872 | ---- | M] () -- \Program Files\SolidWorks Corp\SolidWorks\photoview\swkloader64_libFNP.dll
[2011.09.26 18:16:46 | 003,242,496 | ---- | M] () -- \Program Files\SolidWorks Corp\SolidWorks\photoview\extra\swkloader64.lx
[2011.04.29 05:34:02 | 000,014,398 | ---- | M] () -- \Program Files\SolidWorks Corp\SolidWorks\photoview\extra\scripts\pv_envloader.py
[2011.09.26 23:48:16 | 000,163,840 | ---- | M] () -- \Program Files\SolidWorks Corp\SolidWorks\sld3DViaUploader\sld3dViaUploader.exe
[2011.09.27 04:18:16 | 000,632,392 | ---- | M] () -- \Program Files\SolidWorks Corp\SolidWorks\sldutils\SwLoaderSw.dll
[2011.09.27 04:19:04 | 000,136,776 | ---- | M] () -- \Program Files\SolidWorks Corp\SolidWorks\sldutils\lang\czech\SwLoaderSwResu.dll
[2011.09.27 04:19:20 | 000,136,264 | ---- | M] () -- \Program Files\SolidWorks Corp\SolidWorks\sldutils\lang\English\SwLoaderSwResu.dll
[2012.06.09 18:19:38 | 000,055,296 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
[2011.03.08 16:10:08 | 000,670,208 | ---- | M] () -- \Program Files\Zoner\Photo Studio 14\Plugins\Facebook\ZPSFacebookUploader.exe
[2010.04.29 13:12:40 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 14\Plugins\Facebook\ZPSPluginLoader.exe
[2011.05.31 08:46:24 | 000,685,568 | ---- | M] () -- \Program Files\Zoner\Photo Studio 14\Plugins\Flickr\ZPSFlickrUploader.exe
[2010.04.29 13:12:42 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 14\Plugins\Flickr\ZPSPluginLoader.exe
[2011.03.08 16:09:04 | 000,194,048 | ---- | M] () -- \Program Files\Zoner\Photo Studio 14\Plugins\Picasa\ZPSPicasaUploader.exe
[2010.04.29 13:12:40 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 14\Plugins\Picasa\ZPSPluginLoader.exe
[2011.11.01 15:47:10 | 000,102,792 | ---- | M] () -- \Program Files\Zoner\Photo Studio 14\Program32\8bfLoader.exe
[2011.11.01 15:47:22 | 000,016,776 | ---- | M] () -- \Program Files\Zoner\Photo Studio 14\Program32\WICLoader.exe
[2011.11.01 15:47:56 | 000,019,336 | ---- | M] () -- \Program Files\Zoner\Photo Studio 14\Program64\WICLoader.exe
[2012.12.03 10:34:24 | 000,001,380 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk\Autodesk Data Management\Tools\Autodesk Autoloader 2013 for Vault.lnk
[2013.01.12 21:18:42 | 000,001,089 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\WebDataLoader\Aplikace WebDataLoader na internetu.lnk
[2013.01.12 21:18:42 | 000,001,064 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\WebDataLoader\Odinstalovat aplikaci WebDataLoader.lnk
[2013.01.12 21:18:42 | 000,001,089 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\WebDataLoader\WebDataLoader.lnk
[2012.11.08 15:16:50 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2012.11.08 15:16:50 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2012.11.08 15:16:50 | 000,009,772 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\retina\loader@2x.png
[2013.01.12 21:23:49 | 000,000,277 | ---- | M] () -- \ProgramData\WebDataLoader\WebDataLoader.ini
[2012.12.03 10:34:24 | 000,001,380 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\Autodesk\Autodesk Data Management\Tools\Autodesk Autoloader 2013 for Vault.lnk
[2013.01.12 21:18:42 | 000,001,089 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\WebDataLoader\Aplikace WebDataLoader na internetu.lnk
[2013.01.12 21:18:42 | 000,001,064 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\WebDataLoader\Odinstalovat aplikaci WebDataLoader.lnk
[2013.01.12 21:18:42 | 000,001,089 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\WebDataLoader\WebDataLoader.lnk
[2012.11.08 15:16:50 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2012.11.08 15:16:50 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2012.11.08 15:16:50 | 000,009,772 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\retina\loader@2x.png
[2013.01.12 21:23:49 | 000,000,277 | ---- | M] () -- \Users\All Users\WebDataLoader\WebDataLoader.ini
[2012.11.29 20:24:05 | 000,000,723 | ---- | M] () -- \Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\alelhddbbhepgpmgidjdcjakblofbmce\3.4.4_0\images\loader.gif
[2013.01.20 17:19:09 | 000,105,903 | ---- | M] () -- \Users\Jakub\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\52TCX5Q3\AdLoader-427d9fd2a91e2f2c023aefe9f69a01d0.min[1].js
[2013.01.20 17:19:09 | 000,000,753 | ---- | M] () -- \Users\Jakub\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CXT7CCMT\AdLoader[1].htm
[2012.12.28 12:52:31 | 000,008,787 | ---- | M] () -- \Users\Jakub\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6NQBSFNH\loader[1].gif
[2012.11.19 12:20:10 | 000,000,673 | ---- | M] () -- \Users\Jakub\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GK4J46M9\loader.white[1].gif
[2013.01.16 13:49:44 | 000,008,787 | ---- | M] () -- \Users\Jakub\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HQEKZ82J\loader[1].gif
[2012.10.20 16:09:52 | 000,002,756 | ---- | M] () -- \Users\Jakub\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\U9YIG181\RmsLoader[1].js
[2013.01.11 15:29:45 | 000,000,673 | ---- | M] () -- \Users\Jakub\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\Y8B1Z2S2\loader[1].gif
[2012.10.13 15:41:10 | 000,000,673 | ---- | M] () -- \Users\Jakub\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\YRTXOSSU\loader.white[1].gif
[2012.04.25 17:32:22 | 000,000,508 | ---- | M] () -- \Users\Jakub\AppData\Roaming\.minecraft[VCHbackup]\ModLoader.txt
[2012.04.25 15:22:11 | 000,000,508 | ---- | M] () -- \Users\Jakub\AppData\Roaming\.minecraft[VCHbackup]\ModLoader.txt.1
[2012.04.25 17:32:21 | 000,000,099 | ---- | M] () -- \Users\Jakub\AppData\Roaming\.minecraft[VCHbackup]\config\ModLoader.cfg
[2012.04.25 17:32:22 | 000,000,508 | ---- | M] () -- \Users\Jakub\AppData\Roaming\.minecraft\ModLoader.txt
[2012.04.25 15:22:11 | 000,000,508 | ---- | M] () -- \Users\Jakub\AppData\Roaming\.minecraft\ModLoader.txt.1
[2012.04.25 17:32:21 | 000,000,099 | ---- | M] () -- \Users\Jakub\AppData\Roaming\.minecraft\config\ModLoader.cfg
[2012.10.09 21:18:47 | 000,001,100 | ---- | M] () -- \Users\Jakub\AppData\Roaming\SolidWorks\Installation Logs\2012 SP0\Other Logs\IMDownloaderVersion.xml
[2012.10.09 21:18:51 | 000,001,614 | ---- | M] () -- \Users\Jakub\AppData\Roaming\SolidWorks\Installation Logs\Misc Logs\sldIMDownloaderLog_00001.txt
[2013.01.12 21:18:42 | 000,001,071 | ---- | M] () -- \Users\Jakub\Desktop\WebDataLoader.lnk
[2012.12.30 09:54:18 | 000,011,314 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\adminek\themes\default\img\ajax-loader.gif
[2012.12.30 09:54:23 | 000,000,109 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\adminek\themes\default\img\bg_loaderSpace.png
[2012.12.30 09:57:13 | 000,008,344 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\classes\FileUploader.php
[2012.12.30 09:58:13 | 000,000,109 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\img\bg_loader.png
[2012.12.30 09:58:14 | 000,003,719 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\img\loader.gif
[2012.12.30 09:58:19 | 000,011,314 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\img\admin\ajax-loader-big.gif
[2012.12.30 09:58:20 | 000,009,427 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\img\admin\ajax-loader-yellow.gif
[2012.12.30 09:58:20 | 000,000,673 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\img\admin\ajax-loader.gif
[2012.12.30 09:58:32 | 000,000,723 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\img\admin\field-loader.gif
[2012.12.30 09:58:54 | 000,000,847 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\img\admin\jquery-treeview\ajax-loader.gif
[2012.12.30 11:55:32 | 000,035,777 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\js\fileuploader.js
[2012.12.30 11:55:35 | 000,001,720 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\js\cropper\loader.js
[2012.12.30 11:56:05 | 000,000,847 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\js\jquery\plugins\treeview-categories\images\ajax-loader.gif
[2012.12.30 12:02:28 | 000,003,719 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\modules\carriercompare\loader.gif
[2012.12.30 12:06:30 | 000,001,849 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\modules\shopimporter\img\ajax-loader.gif
[2012.12.30 13:04:46 | 000,003,208 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\themes\prodite\img\ajax-loader.gif
[2012.12.30 13:05:29 | 000,007,825 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\themes\prodite\mobile\img\ajax-loader.gif
[2012.12.30 13:05:30 | 000,000,340 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\themes\prodite\mobile\img\ajax-loader.png
[2012.12.30 13:06:13 | 000,000,910 | ---- | M] () -- \Users\Jakub\Desktop\dite.webove-studio.eu\tools\swift\Swift\ClassLoader.php
[2013.01.04 16:58:24 | 000,000,723 | ---- | M] () -- \Users\Jakub\Desktop\HFL\wp-content\plugins\Booking System PRO (WordPress Plugin)\dopbsp\assets\gui\images\loader.gif
[2013.01.04 17:00:11 | 000,000,723 | ---- | M] () -- \Users\Jakub\Desktop\HFL\wp-content\plugins\dopbsp\assets\gui\images\loader.gif
[2013.01.04 17:02:23 | 000,000,673 | ---- | M] () -- \Users\Jakub\Desktop\HFL\wp-content\plugins\nextgen-gallery\images\ajax-loader.gif
[2013.01.04 17:02:23 | 000,006,820 | ---- | M] () -- \Users\Jakub\Desktop\HFL\wp-content\plugins\nextgen-gallery\images\loader.gif
[2013.01.04 17:02:44 | 000,002,248 | ---- | M] () -- \Users\Jakub\Desktop\HFL\wp-content\plugins\nextgen-scrollgallery\scrollGallery\ajax-loader.gif
[2013.01.04 17:05:36 | 000,000,673 | ---- | M] () -- \Users\Jakub\Desktop\HFL\wp-content\plugins\sitepress-multilingual-cms\res\img\ajax-loader.gif
[2013.01.04 17:08:43 | 000,037,740 | ---- | M] () -- \Users\Jakub\Desktop\HFL\wp-includes\script-loader.php
[2013.01.04 17:08:44 | 000,001,889 | ---- | M] () -- \Users\Jakub\Desktop\HFL\wp-includes\template-loader.php
[2013.01.04 17:09:20 | 000,004,066 | ---- | M] () -- \Users\Jakub\Desktop\HFL\wp-includes\js\customize-loader.dev.js
[2013.01.04 17:09:21 | 000,002,609 | ---- | M] () -- \Users\Jakub\Desktop\HFL\wp-includes\js\customize-loader.js
[2012.12.27 12:57:56 | 000,000,673 | ---- | M] () -- \Users\Jakub\Desktop\MŠ Okružní\FTP\wp-content\plugins\nextgen-gallery\images\ajax-loader.gif
[2012.12.27 12:57:56 | 000,006,820 | ---- | M] () -- \Users\Jakub\Desktop\MŠ Okružní\FTP\wp-content\plugins\nextgen-gallery\images\loader.gif
[2012.12.27 12:59:52 | 000,037,740 | ---- | M] () -- \Users\Jakub\Desktop\MŠ Okružní\FTP\wp-includes\script-loader.php
[2012.12.27 12:59:53 | 000,001,889 | ---- | M] () -- \Users\Jakub\Desktop\MŠ Okružní\FTP\wp-includes\template-loader.php
[2012.12.27 13:00:31 | 000,004,066 | ---- | M] () -- \Users\Jakub\Desktop\MŠ Okružní\FTP\wp-includes\js\customize-loader.dev.js
[2012.12.27 13:00:32 | 000,002,609 | ---- | M] () -- \Users\Jakub\Desktop\MŠ Okružní\FTP\wp-includes\js\customize-loader.js
[2010.12.30 12:32:56 | 000,000,673 | ---- | M] () -- \Users\Jakub\Desktop\prestashop 1.5 moduly\m4pdf\m4pdf\ajax-loader.gif
[2012.12.07 14:36:27 | 000,003,719 | ---- | M] () -- \Users\Jakub\Desktop\prodite.com\FTP\FTP\img\loader.gif
[2012.12.07 14:36:30 | 000,000,673 | ---- | M] () -- \Users\Jakub\Desktop\prodite.com\FTP\FTP\img\admin\ajax-loader.gif
[2012.12.07 15:48:41 | 000,001,720 | ---- | M] () -- \Users\Jakub\Desktop\prodite.com\FTP\FTP\js\cropper\loader.js
[2012.12.07 15:49:07 | 000,008,427 | ---- | M] () -- \Users\Jakub\Desktop\prodite.com\FTP\FTP\js\tinymce\jscripts\tiny_mce\classes\dom\ScriptLoader.js
[2012.12.07 16:02:03 | 000,000,910 | ---- | M] () -- \Users\Jakub\Desktop\prodite.com\FTP\FTP\tools\swift\Swift\ClassLoader.php
[2012.12.29 11:15:40 | 000,003,719 | ---- | M] () -- \Users\Jakub\Desktop\prodite-13\img\loader.gif
[2012.12.29 11:15:46 | 000,000,673 | ---- | M] () -- \Users\Jakub\Desktop\prodite-13\img\admin\ajax-loader.gif
[2012.12.29 12:39:49 | 000,001,720 | ---- | M] () -- \Users\Jakub\Desktop\prodite-13\js\cropper\loader.js
[2012.12.29 12:40:21 | 000,008,427 | ---- | M] () -- \Users\Jakub\Desktop\prodite-13\js\tinymce\jscripts\tiny_mce\classes\dom\ScriptLoader.js
[2012.12.29 13:00:07 | 000,000,910 | ---- | M] () -- \Users\Jakub\Desktop\prodite-13\tools\swift\Swift\ClassLoader.php
[2012.10.23 18:23:56 | 000,011,314 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\adminek\themes\default\img\ajax-loader.gif
[2012.10.23 18:23:56 | 000,000,109 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\adminek\themes\default\img\bg_loaderSpace.png
[2012.10.23 18:23:56 | 000,008,471 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\classes\FileUploader.php
[2012.10.23 18:23:56 | 000,000,109 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\img\bg_loader.png
[2012.10.23 18:23:56 | 000,003,719 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\img\loader.gif
[2012.10.23 18:23:56 | 000,011,314 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\img\admin\ajax-loader-big.gif
[2012.10.23 18:23:56 | 000,009,427 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\img\admin\ajax-loader-yellow.gif
[2012.10.23 18:23:56 | 000,000,673 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\img\admin\ajax-loader.gif
[2012.10.23 18:23:56 | 000,000,723 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\img\admin\field-loader.gif
[2012.12.07 14:36:27 | 000,003,719 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\imgupload\loader.gif
[2012.12.07 14:36:30 | 000,000,673 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\imgupload\admin\ajax-loader.gif
[2012.10.23 18:23:56 | 000,002,863 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\installek\classes\sqlLoader.php
[2012.10.23 18:23:56 | 000,036,983 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\installek\classes\xmlLoader.php
[2012.10.23 18:23:58 | 000,009,427 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\installek\theme\img\ajax-loader-small.gif
[2012.10.23 18:23:58 | 000,011,314 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\installek\theme\img\ajax-loader.gif
[2012.10.23 18:23:58 | 000,000,109 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\installek\theme\img\bg_loaderSpace.png
[2012.10.23 18:23:58 | 000,035,817 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\js\fileuploader.js
[2012.10.23 18:23:58 | 000,001,720 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\js\cropper\loader.js
[2012.10.23 18:23:58 | 000,000,847 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\js\jquery\plugins\treeview-categories\images\ajax-loader.gif
[2012.10.23 18:23:58 | 000,003,719 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\modules\carriercompare\loader.gif
[2012.10.23 18:23:58 | 000,001,849 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\modules\shopimporter\img\ajax-loader.gif
[2012.10.23 18:23:58 | 000,000,057 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\override\classes\FileUploader.php
[2012.10.23 18:23:58 | 000,003,208 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\themes\default\img\ajax-loader.gif
[2012.10.23 18:24:00 | 000,007,825 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\themes\default\mobile\img\ajax-loader.gif
[2012.10.23 18:24:00 | 000,000,340 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\themes\default\mobile\img\ajax-loader.png
[2012.10.23 18:24:00 | 000,000,910 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152\prodite-15\prodite\tools\swift\Swift\ClassLoader.php
[2012.12.26 08:23:53 | 000,003,719 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_thrmr\modules\carriercompare\loader.gif
[2012.12.26 08:26:15 | 000,001,849 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_thrmr\modules\shopimporter\img\ajax-loader.gif
[2012.12.29 23:44:25 | 000,003,208 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_thrmr\prodite\img\ajax-loader.gif
[2012.12.29 23:44:57 | 000,007,825 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_thrmr\prodite\mobile\img\ajax-loader.gif
[2012.12.29 23:44:57 | 000,000,340 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_thrmr\prodite\mobile\img\ajax-loader.png
[2012.12.25 21:49:27 | 000,011,314 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\adminek\themes\default\img\ajax-loader.gif
[2012.12.25 21:49:28 | 000,000,109 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\adminek\themes\default\img\bg_loaderSpace.png
[2012.12.25 21:52:00 | 000,008,471 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\classes\FileUploader.php
[2012.12.25 21:52:56 | 000,003,719 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\imgupload\loader.gif
[2012.12.25 21:52:59 | 000,000,673 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\imgupload\admin\ajax-loader.gif
[2012.12.25 22:11:21 | 000,002,863 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\installek\classes\sqlLoader.php
[2012.12.25 22:11:21 | 000,036,983 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\installek\classes\xmlLoader.php
[2012.12.25 22:13:24 | 000,009,427 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\installek\theme\img\ajax-loader-small.gif
[2012.12.25 22:13:24 | 000,011,314 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\installek\theme\img\ajax-loader.gif
[2012.12.25 22:13:27 | 000,000,109 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\installek\theme\img\bg_loaderSpace.png
[2012.12.25 22:14:08 | 000,035,817 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\js\fileuploader.js
[2012.12.25 22:14:11 | 000,001,720 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\js\cropper\loader.js
[2012.12.25 22:14:37 | 000,000,847 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\js\jquery\plugins\treeview-categories\images\ajax-loader.gif
[2012.12.25 22:22:08 | 000,003,719 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\modules\carriercompare\loader.gif
[2012.12.25 22:24:40 | 000,001,849 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\modules\shopimporter\img\ajax-loader.gif
[2012.12.25 22:25:49 | 000,000,057 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\override\classes\FileUploader.php
[2012.12.25 22:27:11 | 000,003,208 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\themes\default\img\ajax-loader.gif
[2012.12.25 22:27:49 | 000,007,825 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\themes\default\mobile\img\ajax-loader.gif
[2012.12.25 22:27:49 | 000,000,340 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\themes\default\mobile\img\ajax-loader.png
[2012.12.25 22:28:36 | 000,000,910 | ---- | M] () -- \Users\Jakub\Desktop\prodite-152_zaloha server\tools\swift\Swift\ClassLoader.php
[2012.12.20 20:41:22 | 000,000,847 | ---- | M] () -- \Users\Jakub\Desktop\server-minecraft\wp-content\plugins\contact-form-7\images\ajax-loader.gif
[2012.12.20 20:43:40 | 000,037,740 | ---- | M] () -- \Users\Jakub\Desktop\server-minecraft\wp-includes\script-loader.php
[2012.12.20 20:43:41 | 000,001,889 | ---- | M] () -- \Users\Jakub\Desktop\server-minecraft\wp-includes\template-loader.php
[2012.12.20 20:44:00 | 000,004,066 | ---- | M] () -- \Users\Jakub\Desktop\server-minecraft\wp-includes\js\customize-loader.dev.js
[2012.12.20 20:44:01 | 000,002,609 | ---- | M] () -- \Users\Jakub\Desktop\server-minecraft\wp-includes\js\customize-loader.js
[2013.01.11 22:23:13 | 000,003,208 | ---- | M] () -- \Users\Jakub\Desktop\shiptopay_101_17122012\prodite\img\ajax-loader.gif
[2013.01.11 22:24:00 | 000,007,825 | ---- | M] () -- \Users\Jakub\Desktop\shiptopay_101_17122012\prodite\mobile\img\ajax-loader.gif
[2013.01.11 22:24:00 | 000,000,340 | ---- | M] () -- \Users\Jakub\Desktop\shiptopay_101_17122012\prodite\mobile\img\ajax-loader.png
[2012.10.31 18:39:30 | 000,003,208 | ---- | M] () -- \Users\Jakub\Desktop\shop.1000pohadek.cz\default\img\ajax-loader.gif
[2012.10.31 18:40:14 | 000,007,825 | ---- | M] () -- \Users\Jakub\Desktop\shop.1000pohadek.cz\default\mobile\img\ajax-loader.gif
[2012.10.31 18:40:14 | 000,000,340 | ---- | M] () -- \Users\Jakub\Desktop\shop.1000pohadek.cz\default\mobile\img\ajax-loader.png
[2012.10.25 02:53:24 | 000,003,208 | ---- | M] () -- \Users\Jakub\Desktop\shop.1000pohadek.cz\theme\Prestashop Files\themes\PRS040097\img\ajax-loader.gif
[2012.10.25 02:57:14 | 000,007,825 | ---- | M] () -- \Users\Jakub\Desktop\shop.1000pohadek.cz\theme\Prestashop Files\themes\PRS040097\mobile\img\ajax-loader.gif
[2012.10.25 02:57:14 | 000,000,340 | ---- | M] () -- \Users\Jakub\Desktop\shop.1000pohadek.cz\theme\Prestashop Files\themes\PRS040097\mobile\img\ajax-loader.png
[2012.10.23 17:45:25 | 000,000,212 | ---- | M] () -- \Users\Jakub\Desktop\spectrum praha\new\application\library\tiny-mce\plugins\jbimages\ci\application\config\uploader_settings.php
[2012.10.23 17:45:33 | 000,027,479 | ---- | M] () -- \Users\Jakub\Desktop\spectrum praha\new\application\library\tiny-mce\plugins\jbimages\ci\system\core\Loader.php
[2012.10.23 17:48:49 | 000,002,545 | ---- | M] () -- \Users\Jakub\Desktop\spectrum praha\new\view\default\images\prettyPhoto\dark_rounded\loader.gif
[2012.10.23 17:48:50 | 000,002,545 | ---- | M] () -- \Users\Jakub\Desktop\spectrum praha\new\view\default\images\prettyPhoto\dark_square\loader.gif
[2012.10.23 17:48:51 | 000,002,545 | ---- | M] () -- \Users\Jakub\Desktop\spectrum praha\new\view\default\images\prettyPhoto\facebook\loader.gif
[2012.10.23 17:48:59 | 000,002,545 | ---- | M] () -- \Users\Jakub\Desktop\spectrum praha\new\view\default\images\prettyPhoto\light_rounded\loader.gif
[2012.10.23 17:49:00 | 000,002,545 | ---- | M] () -- \Users\Jakub\Desktop\spectrum praha\new\view\default\images\prettyPhoto\light_square\loader.gif
[2012.11.16 20:31:11 | 000,001,358 | ---- | M] () -- \Users\Jakub\Desktop\spectrum praha\spectrum starý\admin\core\css\loader.css
[2012.11.16 20:31:16 | 000,002,090 | ---- | M] () -- \Users\Jakub\Desktop\spectrum praha\spectrum starý\admin\core\js\loader.js
[2012.11.16 20:34:52 | 000,001,151 | ---- | M] () -- \Users\Jakub\Desktop\spectrum praha\spectrum starý\admin\core\skin\default\loader.css
[2013.01.19 14:03:22 | 000,784,212 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\ioncube\ioncube_loader_lin_5.1.so
[2013.01.19 14:03:17 | 000,827,092 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\ioncube\ioncube_loader_lin_5.1_ts.so
[2013.01.19 14:03:13 | 000,781,492 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\ioncube\ioncube_loader_lin_5.2.so
[2013.01.19 14:03:18 | 000,824,180 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\ioncube\ioncube_loader_lin_5.2_ts.so
[2013.01.19 14:03:15 | 000,810,280 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\ioncube\ioncube_loader_lin_5.3.so
[2013.01.19 14:03:20 | 000,866,472 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\ioncube\ioncube_loader_lin_5.3_ts.so
[2013.01.19 14:03:13 | 000,154,499 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\ioncube\loader-wizard.php
[2013.01.19 14:03:11 | 000,944,184 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\ioncube-64\ioncube_loader_lin_5.1.so
[2013.01.19 14:03:06 | 000,989,752 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\ioncube-64\ioncube_loader_lin_5.1_ts.so
[2013.01.19 14:03:01 | 000,948,568 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\ioncube-64\ioncube_loader_lin_5.2.so
[2013.01.19 14:03:07 | 001,039,032 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\ioncube-64\ioncube_loader_lin_5.2_ts.so
[2013.01.19 14:03:04 | 001,012,392 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\ioncube-64\ioncube_loader_lin_5.3.so
[2013.01.19 14:03:09 | 001,063,944 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\ioncube-64\ioncube_loader_lin_5.3_ts.so
[2013.01.19 14:03:02 | 000,154,499 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\ioncube-64\loader-wizard.php
[2013.01.19 14:08:00 | 000,009,427 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\lib\img\ajax-loader.gif
[2013.01.19 14:07:49 | 000,000,673 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\lib\img\ajax-loader16.gif
[2013.01.19 14:05:11 | 000,000,056 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\lib\js\imgs\imageloaderror.gif
[2013.01.19 14:06:29 | 000,000,401 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\admin1\SC\lib\js\imgs\dhxmenu_dhx_skyblue\dhtmlxmenu_loader.gif
[2013.01.19 14:11:00 | 000,003,719 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\img\loader.gif
[2013.01.19 14:48:26 | 000,011,314 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\img\admin\ajax-loader-big.gif
[2013.01.19 14:48:29 | 000,000,673 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\img\admin\ajax-loader.gif
[2013.01.19 14:48:32 | 000,000,847 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\img\admin\jquery-treeview\ajax-loader.gif
[2013.01.19 14:48:58 | 000,001,720 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\js\cropper\loader.js
[2013.01.19 14:55:40 | 000,003,719 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\modules\carriercompare\loader.gif
[2013.01.19 14:53:26 | 000,001,018 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\modules\jirafe\vendor\jirafe-php-client\src\Jirafe\Autoloader.php
[2013.01.19 14:56:40 | 000,000,847 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\modules\mondialrelay\images\loader.gif
[2013.01.19 14:58:44 | 000,001,849 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\modules\shopimporter\img\ajax-loader.gif
[2013.01.19 15:00:35 | 000,003,208 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\themes\prestashop\img\ajax-loader.gif
[2013.01.19 15:02:10 | 000,000,910 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi gajda\19.1\tools\swift\Swift\ClassLoader.php
[2012.12.31 15:30:32 | 000,784,212 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\ioncube\ioncube_loader_lin_5.1.so
[2012.12.31 15:30:33 | 000,827,092 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\ioncube\ioncube_loader_lin_5.1_ts.so
[2012.12.31 15:30:34 | 000,781,492 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\ioncube\ioncube_loader_lin_5.2.so
[2012.12.31 15:30:35 | 000,824,180 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\ioncube\ioncube_loader_lin_5.2_ts.so
[2012.12.31 15:30:36 | 000,810,280 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\ioncube\ioncube_loader_lin_5.3.so
[2012.12.31 15:30:37 | 000,866,472 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\ioncube\ioncube_loader_lin_5.3_ts.so
[2012.12.31 15:30:37 | 000,154,499 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\ioncube\loader-wizard.php
[2012.12.31 15:30:39 | 000,944,184 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\ioncube-64\ioncube_loader_lin_5.1.so
[2012.12.31 15:30:39 | 000,989,752 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\ioncube-64\ioncube_loader_lin_5.1_ts.so
[2012.12.31 15:30:40 | 000,948,568 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\ioncube-64\ioncube_loader_lin_5.2.so
[2012.12.31 15:30:41 | 001,039,032 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\ioncube-64\ioncube_loader_lin_5.2_ts.so
[2012.12.31 15:30:42 | 001,012,392 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\ioncube-64\ioncube_loader_lin_5.3.so
[2012.12.31 15:30:44 | 001,063,944 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\ioncube-64\ioncube_loader_lin_5.3_ts.so
[2012.12.31 15:30:44 | 000,154,499 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\ioncube-64\loader-wizard.php
[2012.12.31 15:30:48 | 000,009,427 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\lib\img\ajax-loader.gif
[2012.12.31 15:30:48 | 000,000,673 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\lib\img\ajax-loader16.gif
[2012.12.31 15:32:10 | 000,000,056 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\lib\js\imgs\imageloaderror.gif
[2012.12.31 15:33:41 | 000,000,401 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\admin1\SC\lib\js\imgs\dhxmenu_dhx_skyblue\dhtmlxmenu_loader.gif
[2012.12.31 15:39:00 | 000,003,719 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\img\loader.gif
[2012.12.31 15:39:05 | 000,011,314 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\img\admin\ajax-loader-big.gif
[2012.12.31 15:39:05 | 000,000,673 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\img\admin\ajax-loader.gif
[2012.12.31 15:39:31 | 000,000,847 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\img\admin\jquery-treeview\ajax-loader.gif
[2012.12.31 15:44:13 | 000,001,720 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\js\cropper\loader.js
[2012.12.31 15:50:31 | 000,003,719 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\modules\carriercompare\loader.gif
[2012.12.31 15:52:38 | 000,001,018 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\modules\jirafe\vendor\jirafe-php-client\src\Jirafe\Autoloader.php
[2012.12.31 15:53:32 | 000,000,847 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\modules\mondialrelay\images\loader.gif
[2012.12.31 15:55:16 | 000,001,849 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\modules\shopimporter\img\ajax-loader.gif
[2012.12.31 15:57:13 | 000,004,176 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\modules\twenga\ajax-loader.gif
[2012.12.31 15:58:12 | 000,003,208 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\themes\prestashop\img\ajax-loader.gif
[2012.12.31 16:00:06 | 000,000,910 | ---- | M] () -- \Users\Jakub\Desktop\zlatnictvi\tools\swift\Swift\ClassLoader.php
[2012.12.03 10:34:24 | 000,001,758 | ---- | M] () -- \Users\Jakub\Documents\Inventor\Autoloader.ipj.lnk
[2012.02.07 00:21:32 | 000,005,202 | ---- | M] () -- \Users\Public\Documents\Autodesk\Vault Basic 2013\Samples\Autoloader\Inventor 2013\Padlock\Autoloader.ipj
[2010.03.24 19:35:48 | 000,018,264 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004119110000000100000000F01FEC\14.0.4763\FL_VSTOLoaderUI_dll_amd64_ln.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2010.03.24 19:12:34 | 000,018,264 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004119110000000100000000F01FEC\14.0.4763\FL_VSTOLoaderUI_dll_x86_ln.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2010.03.24 19:35:48 | 000,370,512 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004119110000000100000000F01FEC\14.0.4763\VSTOLoader_dll_amd64.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2010.03.24 19:12:34 | 000,249,680 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004119110000000100000000F01FEC\14.0.4763\VSTOLoader_dll_x86.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2010.08.30 09:07:04 | 000,072,544 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\670F66C4BA3D8C94584DAB6A8DF2AC2E\20.100.5022\PhysXLoader64.dll.72AC20DB_37D3_1016_B346_A7FD958F5C39
[2012.11.30 05:45:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2012.10.04 09:12:02 | 000,012,532 | ---- | M] () -- \Windows\System32\Adobe\Shockwave 11\shockwave_Projector_Loader.dcr
[2012.11.30 05:45:15 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2012.10.04 09:12:02 | 000,012,532 | ---- | M] () -- \Windows\SysWOW64\Adobe\Shockwave 11\shockwave_Projector_Loader.dcr
[2009.07.14 02:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 02:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:21:03 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_68a9b6bd92929e63\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.08.20 19:38:32 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_68c05c919281774d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:38:48 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:38:44 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:12:44 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_691eb3faabbf8f66\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.08.20 19:09:47 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_6907efc6abd0db81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 16:17:49 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 16:17:49 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2009.07.14 16:17:49 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2009.07.14 16:17:49 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2009.07.14 16:17:49 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2012.10.06 08:10:19 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2012.10.06 08:10:19 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2012.10.06 08:10:19 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2012.10.06 08:10:19 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2012.10.06 08:10:19 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009.07.14 03:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 03:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2009.07.14 16:15:51 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2010.11.20 05:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011.02.05 18:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011.02.05 14:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009.07.14 03:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.08.20 18:32:13 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_0ca1c10dda240617\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 17:40:37 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 05:45:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.08.20 18:23:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_0ce95442f3736a4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 17:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 05:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:A1EDB939

< End of report >

FJakub
Návštěvník
Návštěvník
Příspěvky: 72
Registrován: 04 zář 2008 19:33

Re: Preventivní kontrola

#5 Příspěvek od FJakub »

OTL Extras logfile created on: 20.1.2013 17:25:58 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Jakub\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

7,60 Gb Total Physical Memory | 5,42 Gb Available Physical Memory | 71,22% Memory free
15,21 Gb Paging File | 12,99 Gb Available in Paging File | 85,46% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 111,79 Gb Total Space | 19,57 Gb Free Space | 17,50% Space Free | Partition Type: NTFS
Drive D: | 465,66 Gb Total Space | 215,74 Gb Free Space | 46,33% Space Free | Partition Type: NTFS

Computer Name: JAKUB-NTB | User Name: Jakub | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{038A9D44-64DB-4585-98A8-B53984D15F90}" = lport=1317 | protocol=17 | dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{055CF7E6-0C84-441E-9C0D-846C8F2B8D08}" = lport=3074 | protocol=6 | dir=out | app=c:\windows\system32\svchost.exe |
"{0A3CE6A0-30B7-477A-A5A7-70212C707013}" = lport=547 | protocol=17 | dir=in | app=c:\windows\system32\svchost.exe |
"{0FFD32E4-913B-4473-8545-57506D8D6D7D}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{15083474-F734-423A-8896-64D86AF0DA1D}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe |
"{197F33A1-C444-4F31-939E-E5B8677DE2E6}" = lport=137 | protocol=17 | dir=in | app=system |
"{19C71A7A-D0B0-4470-9203-FD80AAA74AC3}" = lport=88 | protocol=17 | dir=in | app=c:\windows\system32\svchost.exe |
"{1E08D843-CCAE-4BE4-AF04-4DB803732177}" = lport=59278 | protocol=6 | dir=out | app=c:\windows\system32\svchost.exe |
"{1F756BCA-F771-4F60-9518-CFDCA4F60189}" = lport=138 | protocol=17 | dir=in | app=system |
"{26811508-A5A8-4BB9-8B16-AF2233B23077}" = lport=1900 | protocol=17 | dir=in | app=c:\windows\system32\svchost.exe |
"{26F005A6-69CC-4437-9FD2-D2042629D3E8}" = lport=139 | protocol=6 | dir=in | app=system |
"{2725B5A2-73C8-47D6-B3C5-48C1E2F1DA81}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{29D93789-738D-4AF1-AB18-0FA2C4117C1D}" = lport=7676 | protocol=6 | dir=in | name=allshareframeworkdms service tcp port1 |
"{2F5E4A3D-003B-459A-949C-88137FD4EABE}" = lport=88 | protocol=17 | dir=out | app=c:\windows\system32\svchost.exe |
"{31BF42EE-59A2-4C96-A182-94431316C25B}" = lport=24234 | protocol=6 | dir=in | name=allshareframework dms service udp port1 |
"{3B3B94C5-F464-4B7F-9B71-093F37881306}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{4190EF32-4520-40B1-BDB9-8B707AF5469C}" = rport=137 | protocol=17 | dir=out | app=system |
"{4242F404-955D-41A6-967E-77CA92FE3CE0}" = lport=7900 | protocol=6 | dir=in | name=allshareframework dms service udp port2 |
"{459C9521-B2D1-4E72-B814-CDED6541DEA9}" = lport=2987 | protocol=6 | dir=in | app=c:\program files (x86)\connectify\connectify.exe |
"{53784281-2B2B-4BE1-AAA5-9B0C48040EBB}" = lport=3478 | protocol=17 | dir=out | app=c:\windows\system32\svchost.exe |
"{59BE7925-E992-4042-9249-CE81936B5453}" = rport=445 | protocol=6 | dir=out | app=system |
"{5B899F17-ABB7-4428-A3BE-FEEA5ADE3ADB}" = lport=3478 | protocol=17 | dir=in | app=c:\windows\system32\svchost.exe |
"{5BF26B15-4116-4E72-9D0D-09BF1464ADAE}" = lport=67 | protocol=17 | dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{5D155C6D-002A-4D9C-A95E-7A2285EAE598}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{63CCD916-7E52-4FC2-957C-2E99F2404D32}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{6A0D5473-917F-4DFC-987F-BF30955FC8EE}" = lport=3658 | protocol=17 | dir=out | app=c:\windows\system32\svchost.exe |
"{6F19DD82-F8FC-4B3D-8FB3-FA27C2C5A7A7}" = lport=5223 | protocol=6 | dir=in | app=c:\windows\system32\svchost.exe |
"{707605BE-116F-47D3-94E4-7B54908BEB88}" = lport=59278 | protocol=6 | dir=in | app=c:\windows\system32\svchost.exe |
"{71364D32-0DF0-40EB-8F93-D374068A7C16}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{756DB3FE-958F-46FC-A2AA-5BE81279221C}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{764ED5FC-A293-442B-8F27-8148E1007634}" = rport=10243 | protocol=6 | dir=out | app=system |
"{7743A1E6-ADB9-4D56-9656-AA611E09ED75}" = lport=2869 | protocol=6 | dir=in | app=system |
"{779E10C1-3EAE-4759-8785-7DFBC562CB16}" = lport=5000 | protocol=17 | dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{7A2A2583-8DEE-4E5B-876C-C95E273FF17D}" = lport=3074 | protocol=17 | dir=out | app=c:\windows\system32\svchost.exe |
"{7C32E054-BC0D-4D12-8950-B2E0FC2C32CE}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{8B225B13-664E-423F-A94B-2996069F0F24}" = lport=1303 | protocol=17 | dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{8D42382F-CA85-4FB5-9844-008B0781F55B}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{8D9AEC15-F9B1-48A2-B8FC-6E15ADA20F94}" = lport=68 | protocol=17 | dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{8E539CE4-6DB0-4361-B56E-9815F8514837}" = lport=7679 | protocol=6 | dir=in | name=allshareframeworkdms service tcp port2 |
"{98E94FD7-18A7-4635-85E7-0CF0215B7092}" = lport=53 | protocol=17 | dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{9A40BD5B-EB2A-43CF-BF66-5D9417102861}" = lport=3479 | protocol=17 | dir=out | app=c:\windows\system32\svchost.exe |
"{9E77BBBA-9A9D-4020-8A28-05A305D661E8}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{A592C8A3-E188-4CEA-9CD6-F4B2A73E4A26}" = lport=50248 | protocol=6 | dir=in | name=autodesk content service |
"{A789987D-D3C7-4600-BC96-E14A7A1FF183}" = lport=3658 | protocol=17 | dir=in | app=c:\windows\system32\svchost.exe |
"{B34CD640-5EA7-4BF5-92CA-AA37BAC05445}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C06F99D6-4887-40C0-9C15-97C10EE2DFE0}" = rport=2869 | protocol=6 | dir=out | app=system |
"{C1477D48-68A3-4EC4-B17F-21FCDBEF0C70}" = lport=445 | protocol=6 | dir=in | app=system |
"{CE27E37A-DB45-4B4D-AC38-9C0752CBCDB6}" = lport=8743 | protocol=6 | dir=in | name=allshareframeworkdms action tcp port |
"{D0F610E0-27A2-4FCE-8EF1-1B38AF392AA2}" = lport=3074 | protocol=17 | dir=in | app=c:\windows\system32\svchost.exe |
"{D1649F58-B7D0-4684-9F67-054BB0179DC8}" = lport=5223 | protocol=6 | dir=out | app=c:\windows\system32\svchost.exe |
"{D1E01AC1-2E2D-42B2-8AED-1C8553E4D90D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{D3D57560-9DC8-44CB-AA2D-50D0299739D4}" = lport=8643 | protocol=6 | dir=in | name=allshareframeworkdms event tcp port |
"{E0F491B1-98CD-488C-BD42-4A86F942A439}" = lport=1900 | protocol=6 | dir=in | name=upnp multicast port |
"{E115817A-FE16-43D4-91D0-00B1A72D8355}" = lport=10243 | protocol=6 | dir=in | app=system |
"{E1BD28D8-9106-4535-AB6B-D920EA9C0EAB}" = rport=138 | protocol=17 | dir=out | app=system |
"{E65DBECE-0251-48B1-AA0C-2C62907ED098}" = lport=2869 | protocol=6 | dir=in | app=system |
"{E7EBCFDD-FD74-4731-B570-10DADA6B0A81}" = lport=1900 | protocol=17 | dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{EB5C6D90-EE45-4206-B5F8-BF33A3A820CB}" = lport=3074 | protocol=6 | dir=in | app=c:\windows\system32\svchost.exe |
"{F5C912E9-8704-4EA1-A721-C9B8312ACAF5}" = rport=139 | protocol=6 | dir=out | app=system |
"{F8A77685-B14C-44CE-9AEA-12B3F279C6EB}" = lport=5000 | protocol=6 | dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{F8AB7780-9A1C-4636-8EC7-C4A3B064BBFA}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{FAA668B0-5BAD-4AD4-BC01-A1C68990FED8}" = lport=3479 | protocol=17 | dir=in | app=c:\windows\system32\svchost.exe |
"{FB5F9E1E-1D2B-4A4A-8536-64853CA193DE}" = rport=1900 | protocol=17 | dir=out | app=c:\windows\system32\svchost.exe |
"{FEE1AF5B-48BE-4B58-A828-38771BB2088D}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00BB715D-B32D-4D09-8A1C-15BA56ACC77D}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{0280AC34-64C6-4963-A1A6-3C5309F59E9E}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{03D7C7A5-F007-4A64-B6CE-FA2630E8BB13}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgm.exe |
"{04415680-53B2-4285-BD61-CB3AF59F8535}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{045C7E3B-3165-4A55-B738-2951DB2C5D3D}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{0520157A-1983-493A-8AFE-36723858D191}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{06A822BA-5E89-43BB-AE0A-4F31D8ABC7F3}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{099E3E5A-2517-41A4-AF2C-EF49AECABD47}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{0A7EBD97-72B0-41B3-BF7B-F3B035B2720F}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{0AEF9DF9-5964-4E31-81DA-FF27671A868D}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposfx08.exe |
"{0E7A3CC1-5897-46CA-BCCF-9AE6A348F09D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{0F95715A-2D60-4378-A4D5-767A0957DDFC}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{12A4AF2B-5E1F-445C-ABAF-CC437FA09B5E}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqtra08.exe |
"{172C1343-35C7-4C83-9108-901AD1AD6345}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{1ABF5632-2DDA-461E-A6E8-C04E99A2C646}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{1D20C448-F42C-4D9F-A910-EEE2B23BA177}" = protocol=58 | dir=in | name=internet connection sharing (router solicitation-in) |
"{1EE3B85C-0234-4924-BFBB-1555681230B6}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{1F149EBB-6BFB-4742-A331-E33BA62CFC9D}" = protocol=6 | dir=out | app=c:\windows\system32\svchost.exe |
"{280C78DE-9B8D-4668-90C2-4F44FB671C30}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqpse.exe |
"{2A0EF56C-BBDE-4630-B553-A9FC755F9B2D}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxm08.exe |
"{2AA4C21D-0E51-4A0A-964E-1515CE3A98AA}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{2D2CF11E-EFE7-4DF1-81C1-40BA75EA5B34}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{2DD6656D-0C94-4BE9-A744-ED4234E00F68}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{31001532-83E5-4CFE-B58F-D99B813FB450}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{332CEE96-7F8E-4E76-8A1A-B964FCB4A69B}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{34434D22-6243-461A-A06E-E01845C6B32A}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqfxt08.exe |
"{34665812-20E5-4331-A6D8-F4B04786516E}" = dir=in | app=c:\program files (x86)\hp\digital imaging\smart web printing\smartwebprintexe.exe |
"{346E21CB-B3CB-4546-9E11-79EEF5C9DAC8}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{35087F9A-27FC-4130-9612-BC1A459AE666}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{3871542A-7A80-4047-A8B8-E9DF7F2DD4BA}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{392B6664-FB09-4E53-911A-200428027DCD}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{3A9B3FB9-3DB0-4066-B0C1-2431456DA7C8}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{3EDD4FC4-1F66-4822-A6E3-B4A2C3442E8C}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{404AEE03-DFEF-4E2C-B0EF-806BC3E97D94}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{41CB4135-EF87-464E-8A55-F624129BE817}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqste08.exe |
"{4202B5A0-6C4B-441F-84BF-11AF7010A388}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{420AADBD-75BE-48F5-A53D-E92580F4A913}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{424455A3-554E-4AF4-9CB0-72858A0C4A03}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{4248BA47-72BA-4498-8CF5-77F2D073A490}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{4499A3CC-CCD7-4E36-949B-5EC772062203}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{47A0F228-7BA2-442B-B4F7-DB7EC026C44F}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{485C24B7-D020-4A42-A891-986E6F5D37C4}" = protocol=6 | dir=in | app=c:\program files\solidworks corp\solidworks\swscheduler\dtscoordinatorservice.exe |
"{4B4CF6AF-D74B-48F5-AE35-98654400D2C4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{4C669618-E41E-40E3-AD42-6FF2784D7B37}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{51687E73-03E9-486B-9A0B-DBDBEEB03942}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{534B6E43-FF21-4C81-B434-82CA4E8DAB8B}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{5417757F-3594-41FB-9407-0C2C376D827F}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{55F53822-E8C9-4D55-9909-621736A91705}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{5625ECC1-6C42-4E15-A29C-722FBB2287A2}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{578542F4-5323-4769-AEAA-76B36F525919}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{57A52811-012C-4765-BD48-925B22BDE524}" = protocol=17 | dir=in | app=c:\program files\samsung\allshare framework dms\1.3.06\allshareframeworkdms.exe |
"{597AFDDF-7B9E-43BC-A202-1BF14C763C85}" = dir=in | app=c:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe |
"{59D3A7A1-B8A9-4BE3-AEC3-1780A7557B95}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqpsapp.exe |
"{5A1BE63F-4C9F-41FE-B209-F7A1BC468C6B}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe |
"{5BBD2048-8C0E-4DDD-A47F-FB2650230EAD}" = protocol=17 | dir=in | app=c:\program files (x86)\lenovo\system update\uncserver.exe |
"{5C2614B7-0FD0-4F56-A5F0-216DDF9BF92E}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{5E881782-E349-40AD-900E-F0BCEC45191C}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{60712FDF-A4B9-47BC-946F-284AB735DDA3}" = protocol=6 | dir=in | app=c:\program files\solidworks corp\solidworks\photoview\photoview360_cl.exe |
"{60A4B31E-129B-42D7-93E8-452978291E88}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{61364CAB-F76D-4D58-994C-6A491A2F9378}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqnrs08.exe |
"{617C4FDF-16D6-4595-9161-5D9D5CE82847}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{61AB5C12-B824-4733-A482-476A270B2CF2}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgpc01.exe |
"{626BE052-77F3-4DFB-898E-294E5F039C73}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{6290F91A-1346-4DA0-AB4C-F7E120D8860F}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{65A18E87-BA27-4853-A964-A9F3E8117F07}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{67704325-7A39-47FA-8905-71719E397B25}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{6A1F2B7B-9717-4405-80E8-3887415E1ACF}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{6B2486EE-5B8C-4129-ADF7-679C42BE8E96}" = protocol=17 | dir=in | app=c:\program files\solidworks corp\solidworks\swscheduler\dtscoordinatorservice.exe |
"{6D53EDB5-700D-42F9-AE1C-519F333E2EA7}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{6E3ACD52-9D74-472D-96DA-C0879E17C5DB}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{6FB54483-C540-4333-A37D-164EB4A13160}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{70B6A6F3-12D6-40D4-9904-1ED726DAEF0E}" = dir=in | app=c:\program files (x86)\intel corporation\intel widi\widiapp.exe |
"{70D23784-807F-430E-B65C-51A7F79D0929}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{72A5D0BF-F3B0-421C-B586-73080007F44C}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{73B52DBA-EAC0-47A0-80AA-DCF8F3A747C7}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{757025E1-FB90-4128-B259-F3A62A3411A3}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpfccopy.exe |
"{75C3033B-628B-4EAC-B0B5-B6EC7D0377B9}" = protocol=1 | dir=in | name=icmp - in |
"{76A14A14-10EB-4DFC-BFF3-E9AF564FE204}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{7887A850-331A-4C68-8BDB-7BB3D3FA45FB}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{7A51B6E8-C862-4A0D-94B4-C15ACCB16C0A}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{7A51CDF4-6E27-43D6-A649-EAB6D75F2BC6}" = protocol=6 | dir=in | app=c:\program files\solidworks corp\solidworks\photoview\photoview360.exe |
"{7B0D6DFA-C51A-48CD-A663-E735862331FF}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposid01.exe |
"{7D095C7F-4457-43CE-A112-BF1D0904D0F6}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpzwiz01.exe |
"{7E3FB66D-8AC2-4B1E-BDCF-EAB38368CD66}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{80CFB30C-B746-47C6-B37B-36AA7566D26C}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{81A16BD6-C866-41FC-9A2A-2D5010838E8A}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{84C961D6-BF74-4B20-908D-D738345415EA}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{87005754-93BC-48EA-8787-27F30C14CEAE}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxs08.exe |
"{8889C276-7F56-4438-A6ED-97D08FF42E4E}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{8A49A7F2-5609-4E3B-910D-EE08DBCFC576}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{8D321246-DCF2-4F98-B265-CD2EDC5B61EC}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{8D668CDF-C03E-45EA-A67F-1D6AF3BE40A4}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{9020AB23-4504-4E45-8E5C-2FCE18AA129E}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{904C973D-81D5-4314-8025-CC140C540108}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{91004B03-40BE-4FED-92DD-D00C35F9452F}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{915161D5-54E5-40E6-A7B1-037EAA5CEA2B}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{9216A342-F336-459C-B3C2-6DEBA0F124F7}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgh.exe |
"{92E3FF7D-A307-439B-B3C5-0992AE493494}" = protocol=17 | dir=in | app=c:\program files\solidworks corp\solidworks\photoview\photoview360.exe |
"{941707FF-2342-4DA9-96BD-74AA379AE238}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{94B34778-471F-4B2F-ABD3-D9094546EE6E}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{9688BAE3-B4F6-4193-A343-C502F6156630}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{9A5A1567-DFCF-451C-9B9D-CBA7EBE9FE9C}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqcopy2.exe |
"{9D0BBDE6-D895-478E-BDB0-EB6173AAA9EE}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{9E85EE40-34B6-4692-93D9-B895F2A32D36}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpoews01.exe |
"{9F2D01EE-161B-4272-88FF-E0BFDEE00B5E}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{A0575136-D9AD-4896-BC2E-3380D2F2958D}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{A07A1117-28EE-488E-8102-6DA968EB34AA}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{A3AD4C64-AA95-4082-871A-19284F289C28}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A5BF0AB3-7F18-48F7-B50B-3A4A2100E015}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{A8C300CC-9A7F-4760-AB06-90ECAA2DFEEC}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{A90D3FBC-191C-41A3-88B4-E1875551182F}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{ACE3DE0C-9EC3-4969-B041-2015789AB48C}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{AE3467F1-44EA-45F3-AF49-6D7D0C5F8608}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqsudi.exe |
"{AF38DDC8-2E8D-4795-B2B7-998E37EACE8F}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{B012D8A8-2FE7-4174-A588-7271BCDC9A59}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{B47497C3-1D57-4A7D-AB5C-6253E8F9C8DE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{B67E7822-FABD-4E49-B078-6A171821FB99}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{B71B1DA4-2CE3-424F-BE2B-1ADF5FAF995D}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{B7F11814-55F4-44C5-BBA6-890F5C593E91}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{BC8935E3-5C64-46E9-A5D0-462D19AA6B01}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{BD9C6523-1ED2-415C-AC6D-DC3F07192B81}" = protocol=6 | dir=out | app=system |
"{BF0560A4-62C2-4F80-926A-A9D822F6FDAA}" = dir=in | app=c:\program files\hp\hp officejet pro 8600\bin\devicesetup.exe |
"{BF06FA40-FF1F-4E3A-A316-9ED14449543B}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{C0F9BD4F-49A2-4A71-965B-CBD195480B12}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{C4CEA24D-8DFF-4D36-8B68-2FFE52C53AC6}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{C9DFCE8C-D773-4A5A-AB1C-2152DAB760B0}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{CBD475E8-95E7-44C2-89EF-D781DE36C80C}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{CBE5A0DC-6DBE-4F7A-87BF-B2C34CB37320}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{CE630564-F9CC-4116-8962-EDA64BEA64DB}" = dir=in | app=c:\program files (x86)\connectify\connectifyd.exe |
"{CF9D2543-1D63-439A-B27C-E3102D64C4A6}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpiscnapp.exe |
"{D03762D1-1BF8-48ED-BB0F-09A4EE091C4C}" = dir=out | app=c:\windows\system32\svchost.exe |
"{D4BAFCCF-8EF2-4E76-8F87-616C0D9F67F2}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{D665D7A6-9ACB-45F5-97FE-FCC3EA82C961}" = protocol=17 | dir=in | app=c:\program files\solidworks corp\solidworks\photoview\photoview360_cl.exe |
"{D74A34A5-832A-4881-8B03-5FCE671BB24A}" = dir=in | app=c:\program files (x86)\hp\hp software update\hpwucli.exe |
"{DAE488A3-7C69-4A1C-81EC-8DE4268A5382}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{DB9BDFBB-05BF-46DD-A063-3404142B795C}" = dir=in | app=c:\program files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe |
"{DBFE6065-A79E-4234-ABA4-6C2E027B9A4C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{DDD8E38C-AE24-48CB-B781-6773533356BC}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{DF6B87F5-2752-4C56-A4E9-7B2A4C7AB03B}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{E76005C5-7E8F-474A-92EC-BA75C1B73C4F}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{E8E5A34E-455F-4BDC-8BA8-3E56C2313BD1}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{ED4545F9-31E6-4CD1-919B-089883B57520}" = protocol=6 | dir=in | app=c:\program files\samsung\allshare framework dms\1.3.06\allshareframeworkdms.exe |
"{EDD5F7FD-5845-4642-B24B-9AF091E0170F}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{F036251E-2893-4683-B50F-968CD45563DC}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{F10B96C0-F004-48FC-83AC-3CE6120887AF}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqkygrp.exe |
"{F124C8CE-2CC4-441C-B11D-C27E5BB2F441}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgplgtupl.exe |
"{F2BB27A7-705A-4D1B-A222-44602FF94B6E}" = dir=in | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"{F60BE3FF-4C5C-44B8-BE3F-A11EC556D305}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{F6CAF0A8-55B8-4B8E-B37D-D0AF29250CE1}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{F7F153DC-64BA-42D3-91CF-131D91A5595D}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{FB9FD8CD-20B2-4AE3-AD09-C0EA4B300A5A}" = dir=out | app=c:\program files (x86)\connectify\connectifyd.exe |
"{FCFADB33-19C7-4D91-95BF-2FA9ABD2A365}" = protocol=6 | dir=in | app=c:\program files (x86)\lenovo\system update\uncserver.exe |
"{FFA42FB7-066F-4CDD-BCDF-58E017752AC0}" = dir=out | app=c:\program files (x86)\connectify\connectifynetservices.exe |
"TCP Query User{0F2F4A07-4175-4796-9690-40D6451FC8B5}C:\users\jakub\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\jakub\appdata\local\akamai\netsession_win.exe |
"TCP Query User{194D8173-1B5B-4950-A1A0-735CEA5D0C5A}C:\users\jakub\appdata\local\temp\rar$exa0.707\adam2app.exe" = protocol=6 | dir=in | app=c:\users\jakub\appdata\local\temp\rar$exa0.707\adam2app.exe |
"TCP Query User{1EAC48B6-1BE2-462D-8F01-D9EFA6B15D53}C:\totalcmd\totalcmd64.exe" = protocol=6 | dir=in | app=c:\totalcmd\totalcmd64.exe |
"TCP Query User{322A615D-6E96-4E06-9549-4AA3C289F068}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"TCP Query User{4018FA71-7471-498F-BCF3-AB88D2956452}C:\users\jakub\desktop\routttttr\tftpd32.exe" = protocol=6 | dir=in | app=c:\users\jakub\desktop\routttttr\tftpd32.exe |
"TCP Query User{52A376AF-C91D-4CFC-988A-F9C10D9A66FD}C:\program files (x86)\java\jre7\launch4j-tmp\frd.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\launch4j-tmp\frd.exe |
"TCP Query User{56EC2FDD-CC01-4B56-8E88-D62D4A5E0D81}C:\program files (x86)\sendmails\sa\spamassassin.exe" = protocol=6 | dir=in | app=c:\program files (x86)\sendmails\sa\spamassassin.exe |
"TCP Query User{5AC12995-81CE-495B-B2A7-9C39261DFB40}C:\users\jakub\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\jakub\appdata\local\akamai\netsession_win.exe |
"TCP Query User{6E26F607-451A-48DF-9CC3-7E4558406389}C:\program files\progdvb\progdvbnet.exe" = protocol=6 | dir=in | app=c:\program files\progdvb\progdvbnet.exe |
"TCP Query User{A2ED22EC-9B07-4A4A-AF48-69546D9E0910}C:\windows\syswow64\javaw.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\javaw.exe |
"TCP Query User{ADAE0AFA-10B4-4652-9FD0-82AC87B609B4}C:\program files (x86)\connectify\connectify.exe" = protocol=6 | dir=in | app=c:\program files (x86)\connectify\connectify.exe |
"TCP Query User{B36FE9DF-F09F-4795-BA4D-76697B78A32C}C:\program files\progdvb\progdvbnet.exe" = protocol=6 | dir=in | app=c:\program files\progdvb\progdvbnet.exe |
"TCP Query User{C23F9FF8-EC35-4AB3-AAE8-43DBAE13ABAF}C:\users\jakub\desktop\routttttr\tftpd32.exe" = protocol=6 | dir=in | app=c:\users\jakub\desktop\routttttr\tftpd32.exe |
"TCP Query User{DE1ACA7B-CAC0-4358-BC7E-CA2E0A91BA6F}C:\program files (x86)\java\jre7\launch4j-tmp\frd.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\launch4j-tmp\frd.exe |
"UDP Query User{02D58736-1D08-4C62-B28E-71D02E852946}C:\users\jakub\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\jakub\appdata\local\akamai\netsession_win.exe |
"UDP Query User{0EC56146-1755-4DD8-99BF-EC31C58FB8C3}C:\program files (x86)\java\jre7\launch4j-tmp\frd.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\launch4j-tmp\frd.exe |
"UDP Query User{23637BC7-D3BC-44BB-B16C-9C1519FA1956}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"UDP Query User{3277A70C-F631-45D1-9E9E-961DBA3AE4C8}C:\users\jakub\desktop\routttttr\tftpd32.exe" = protocol=17 | dir=in | app=c:\users\jakub\desktop\routttttr\tftpd32.exe |
"UDP Query User{36117D7C-BEBE-4959-A07E-E592F1938FEE}C:\users\jakub\desktop\routttttr\tftpd32.exe" = protocol=17 | dir=in | app=c:\users\jakub\desktop\routttttr\tftpd32.exe |
"UDP Query User{5C08CB92-5B03-49D8-92D9-CECD48E291AF}C:\users\jakub\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\jakub\appdata\local\akamai\netsession_win.exe |
"UDP Query User{78D1C84B-3BD0-4DF8-A932-7AA6C03B1D7E}C:\users\jakub\appdata\local\temp\rar$exa0.707\adam2app.exe" = protocol=17 | dir=in | app=c:\users\jakub\appdata\local\temp\rar$exa0.707\adam2app.exe |
"UDP Query User{939A7B30-7453-411A-9637-AE3E5124B315}C:\program files (x86)\sendmails\sa\spamassassin.exe" = protocol=17 | dir=in | app=c:\program files (x86)\sendmails\sa\spamassassin.exe |
"UDP Query User{989EEA70-2D6C-4D45-972F-44A2F4C876CF}C:\windows\syswow64\javaw.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\javaw.exe |
"UDP Query User{AA562972-6E52-495A-8F62-1795C6F7E9B6}C:\totalcmd\totalcmd64.exe" = protocol=17 | dir=in | app=c:\totalcmd\totalcmd64.exe |
"UDP Query User{B19F74DC-C58C-4281-94C6-3582A1094EF4}C:\program files\progdvb\progdvbnet.exe" = protocol=17 | dir=in | app=c:\program files\progdvb\progdvbnet.exe |
"UDP Query User{BA9EB5AB-618B-47F6-89AF-68DBFBFB2091}C:\program files (x86)\connectify\connectify.exe" = protocol=17 | dir=in | app=c:\program files (x86)\connectify\connectify.exe |
"UDP Query User{C9B58560-22BB-4AE7-BC70-AC618EDC1099}C:\program files\progdvb\progdvbnet.exe" = protocol=17 | dir=in | app=c:\program files\progdvb\progdvbnet.exe |
"UDP Query User{E5628E9B-3A40-462E-99BF-7339F136233E}C:\program files (x86)\java\jre7\launch4j-tmp\frd.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\launch4j-tmp\frd.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{19D00409-7664-446C-01A9-D5B36EB516BE}" = AutoCAD 2013 VBA Enabler
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{266597A9-1764-0000-0100-DCBF2B69166B}" = Autodesk Vault Basic 2013 (Client) English Language Pack
"{28EF7372-9087-4AC3-9B9F-D9751FCDF830}" = Intel(R) Wireless Display
"{37EC048A-81A2-452A-8D1F-3BE2018E767D}" = Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed
"{3DCF00F5-04A5-4543-A088-705480811203}_is1" = Compiled Driver Disk (HTC) 1.0
"{46A84694-59EC-48F0-964C-7E76E9F8A2ED}" = ThinkVantage Active Protection System
"{4713fdb0-2117-4d26-9e12-bbb11350a47f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4BE91685-1632-47FC-B563-A8A542C6664C}" = Autodesk Network License Manager
"{4C66F076-D3AB-49C8-85D4-BAA6D82FCAE2}" = SolidWorks 2012 x64 Edition SP0
"{542DDF04-9F91-4F36-B2F4-2638B788A4C8}" = Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU
"{5783F2D7-0111-0409-0110-0060B0CE6BBA}" = Autodesk CAD Manager Tools
"{5783F2D7-B001-0000-0102-0060B0CE6BBA}" = AutoCAD 2013 – Čeština (Czech)
"{5783F2D7-B001-0405-1102-0060B0CE6BBA}" = AutoCAD 2013 Language Pack – Čeština (Czech)
"{5783F2D7-B001-0405-2102-0060B0CE6BBA}" = AutoCAD 2013 – Čeština (Czech)
"{5783F2D7-B005-0000-0102-0060B0CE6BBA}" = AutoCAD Mechanical 2013 - Čeština (Czech)
"{5783F2D7-B005-0405-1102-0060B0CE6BBA}" = AutoCAD Mechanical 2013 Language Pack - Čeština (Czech)
"{5783F2D7-B005-0405-2102-0060B0CE6BBA}" = AutoCAD Mechanical 2013 - Čeština (Czech)
"{5783F2D7-B028-0409-0100-0060B0CE6BBA}" = DWG TrueView 2013
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6199B534-A1B6-46ED-873B-97B0ECF8F81E}" = Intel® Trusted Connect Service Client
"{65DDB7D8-5E04-45DF-B60E-89557ED37ED2}" = SolidWorks Explorer 2012 SP0 x64 Edition
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{792A9A32-718A-40D1-9867-A903F76AE2F8}" = Eco Materials Adviser for Autodesk Inventor 2013
"{7F4DD591-1764-0001-0000-7107D70F3DB4}" = Autodesk Inventor 2013
"{7F4DD591-1764-0001-1029-7107D70F3DB4}" = Autodesk Inventor 2013 Jazykový balíček - čeština (Czech)
"{7F4DD591-1764-0001-1033-7107D70F3DB4}" = Autodesk Inventor 2013 English Language Pack
"{7F4DD591-1764-0004-0000-7107D70F3DB4}" = Autodesk Inventor View 2013
"{7F4DD591-1764-0004-1033-7107D70F3DB4}" = Autodesk Inventor View 2013 English Language Pack
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{88C6A6D9-324C-46E8-BA87-563D14021442}_is1" = ThinkVantage Communications Utility
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-0015-0405-1000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2010
"{90140000-0015-0405-1000-0000000FF1CE}_Office14.PROPLUSR_{9F412D54-AC04-46F9-AFE7-FE15DC0147A0}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0405-1000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2010
"{90140000-0016-0405-1000-0000000FF1CE}_Office14.PROPLUSR_{9F412D54-AC04-46F9-AFE7-FE15DC0147A0}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0405-1000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2010
"{90140000-0018-0405-1000-0000000FF1CE}_Office14.PROPLUSR_{9F412D54-AC04-46F9-AFE7-FE15DC0147A0}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0405-1000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2010
"{90140000-0019-0405-1000-0000000FF1CE}_Office14.PROPLUSR_{9F412D54-AC04-46F9-AFE7-FE15DC0147A0}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0405-1000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2010
"{90140000-001A-0405-1000-0000000FF1CE}_Office14.PROPLUSR_{9F412D54-AC04-46F9-AFE7-FE15DC0147A0}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0405-1000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2010
"{90140000-001B-0405-1000-0000000FF1CE}_Office14.PROPLUSR_{9F412D54-AC04-46F9-AFE7-FE15DC0147A0}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0405-1000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2010
"{90140000-001F-0405-1000-0000000FF1CE}_Office14.PROPLUSR_{AEC2C00D-1E7E-45E3-9058-81EA2446B3CD}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{70A3169E-288F-454F-A08D-20DF66639B50}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{0242505C-4E90-407F-9299-B5B275F50D86}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-041B-1000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2010
"{90140000-001F-041B-1000-0000000FF1CE}_Office14.PROPLUSR_{4B806706-B352-42E8-8C8B-5CEBCEDBC4E0}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0405-1000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2010
"{90140000-002C-0405-1000-0000000FF1CE}_Office14.PROPLUSR_{715203B3-AD16-41A4-B13C-E1065EAB8963}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0043-0000-1000-0000000FF1CE}" = Microsoft Office Office 32-bit Components 2010
"{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{E8B6D35B-0B6F-4DCE-9493-859BF3809A7F}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0043-0405-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (Czech) 2010
"{90140000-0043-0405-1000-0000000FF1CE}_Office14.PROPLUSR_{15D45352-C443-406A-9DF2-EF4A750A40CF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0405-1000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2010
"{90140000-0044-0405-1000-0000000FF1CE}_Office14.PROPLUSR_{9F412D54-AC04-46F9-AFE7-FE15DC0147A0}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0405-1000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2010
"{90140000-006E-0405-1000-0000000FF1CE}_Office14.PROPLUSR_{4B8654FE-410D-462C-9B3C-09D031BF4534}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0405-1000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2010
"{90140000-00A1-0405-1000-0000000FF1CE}_Office14.PROPLUSR_{9F412D54-AC04-46F9-AFE7-FE15DC0147A0}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0405-1000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2010
"{90140000-00BA-0405-1000-0000000FF1CE}_Office14.PROPLUSR_{9F412D54-AC04-46F9-AFE7-FE15DC0147A0}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{91140000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{7BC9B5EB-125A-4E9B-97E1-8D85B5E960B8}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{9ACF3FDB-C8E6-444C-8C64-13A221F7BFFD}" = Microsoft SQL Server Native Client
"{A324DC11-FF02-3CE8-9D6F-67EBC006D970}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{A6B3A293-6427-4266-AE42-2BDC14C7AC2C}" = SolidWorks eDrawings 2012 x64 Edition SP0
"{ABE4638D-D208-4061-9F26-E3E11E3A1E0C}" = Lenovo Patch Utility 64 bit
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 310.90
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 310.90
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.11.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Systémový software PhysX 9.12.1031
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizace NVIDIA 1.11.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B46DECD1-1764-4EF1-0000-22D71E81877C}" = Autodesk Inventor Content Center Libraries 2013 (Desktop Content)
"{B56A6C03-5C57-4035-A966-AEC309B4C019}" = SolidWorks eDrawings 2013 x64
"{B636C9B9-A3F2-4DCE-ADCC-72E095018385}" = Microsoft SQL Server VSS Writer
"{BDDB58A5-F98E-4D3C-B554-4A4D31C6D405}_is1" = Phone Drivers Downloader 1.1
"{C1C5FB06-7CBB-4013-95BC-C86EFA6D0DA5}" = Základní software zařízení HP Officejet Pro 8600
"{C5BB9380-D729-410A-A440-061EBCADCCB9}" = Fingerprint Reader
"{C78D3032-9DFD-41D0-9DE9-58EAE750CBA4}" = Microsoft Security Client
"{CCD4B0FC-DB6D-4741-982E-031627F22691}" = SolidWorks 2012 x64 Czech Resources
"{CF526A26-1764-0000-0000-02E95019B628}" = Autodesk Vault Basic 2013 (Client)
"{D25FF5C1-1764-469A-9794-69309387C193}" = Autodesk Inventor 2013 Quick Uninstaller
"{DD00F699-6861-4DCF-A19F-8CF61E5E28ED}" = Lenovo Solution Center
"{E97F409F-9E1C-42A0-B72D-765A78DF3696}" = Software Intel® PROSet/Wireless WiFi
"{EB9400D5-6289-4F9F-9B79-B3528101C0C7}" = SolidWorks Flow Simulation 2012 SP0 x64 Edition
"{EE5F74BC-5CD5-4EF2-86BA-81E6CF46A18F}" = Autodesk Sync
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FF21C3E6-97FD-474F-9518-8DCBE94C2854}" = 64 Bit HP CIO Components Installer
"AutoCAD 2013 – Čeština (Czech)" = AutoCAD 2013 – Čeština (Czech)
"AutoCAD Mechanical 2013 - Čeština (Czech)" = AutoCAD Mechanical 2013 - Čeština (Czech)
"Autodesk Inventor 2013" = Autodesk Inventor 2013 English
"Autodesk Inventor View 2013" = Autodesk Inventor View 2013 English
"Broadcom 802.11 Network Adapter" = Broadcom 802.11 Network Adapter
"CCleaner" = CCleaner
"CNXT_AUDIO_HDA" = Conexant HD Audio
"Connectify" = Connectify Hotspot
"DWG TrueView 2013" = DWG TrueView 2013
"Jazykový balíček Autodesk Inventor 2013 - čeština (Czech)" = Autodesk Inventor 2013 Jazykový balíček - čeština (Czech)
"LenovoAutoScrollUtility" = Lenovo Auto Scroll Utility
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"Microsoft Security Client" = Microsoft Security Essentials
"Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU" = Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU
"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010
"OnScreenDisplay" = On Screen Display
"Power Management Driver" = Lenovo Power Management Driver
"ProgDVB" = ProgDVB x64
"ProInst" = Intel PROSet Wireless
"SynTPDeinstKey" = ThinkPad UltraNav Driver
"Totalcmd64" = Total Commander 64-bit (Remove or Repair)
"WinRAR archiver" = WinRAR 4.20 (64-bit)
"ZonerPhotoStudio14_CZ_is1" = Zoner Photo Studio 14

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{117EBEEB-5DB0-43C8-9FD6-DD583DB152DD}" = Autodesk Material Library 2013
"{14DC0059-00F1-4F62-BD1A-AB23CD51A95E}" = Adobe AIR
"{153DB567-6FF3-49AD-AC4F-86F8A3CCFDFB}" = Autodesk Design Review 2013
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{1A834332-A9EE-440C-9505-2D07F445F05A}" = MOBILedit! Support Libraries
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{240C3DDD-C5E9-4029-9DF7-95650D040CF2}" = Intel(R) USB 3.0 eXtensible Host Controller Driver
"{25C64847-B900-48AD-A164-1B4F9B774650}" = Lenovo System Update
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 7
"{2750B389-A2D2-4953-99CA-27C1F2A8E6FD}" = Microsoft SQL Server 2005 Tools Express Edition
"{2949F05A-0840-45E9-81AA-DFF630E2679E}" = Freeware PDF Unlocker
"{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}" = LG United Mobile Driver
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (AUTODESKVAULT)
"{31A559C1-9E4D-423B-9DD3-34A6C5398752}" = HTC BMP USB Driver
"{328C0E1C-D5AB-47D2-8580-1F4832A4ADE2}" = Math3D
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{415FA9AD-DA10-4ABE-97B6-5051D4795C90}" = HP FWUpdateEDO2
"{47DA7D2E-408C-4050-B75F-95F6D2E6A332}_is1" = MOBILedit! ver. 6.9.0.2841
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module
"{52291FC0-33D3-4A18-9587-5115225545D8}_is1" = Google Chrome Backup 1.7.0.114
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}" = VBA (2627.01)
"{606E12B9-641F-4644-A22A-FF38AE980AFD}" = Autodesk Material Library Base Resolution Image Library 2013
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{62F029AB-85F2-0000-866A-9FC0DD99DDBC}" = Autodesk Content Service
"{62F029AB-85F2-0001-866A-9FC0DD99DDBC}" = Autodesk Content Service Language Pack
"{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{6D6664A9-3342-4948-9B7E-034EFE366F0F}" = HTC Driver Installer
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}" = Adobe Photoshop CS6
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{85DF2EED-08BC-46FB-90DA-28B0D0A8E8A8}" = HP Update
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{8E537894-A559-4D60-B3CB-F4485E3D24E3}" = ThinkVantage Access Connections
"{90120000-00A4-0409-0000-0000000FF1CE}" = Microsoft Office 2003 Web Components
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{93F34C5C-ACAA-48F3-9B26-70359A117F12}" = Intel(R) WiDi
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D3D2C60-A55F-4fed-B2B9-17311226DF01}" = ThinkPad Wireless LAN Adapter Software
"{A57025CC-5F2E-4D01-B387-06DB10500D43}" = Nokia Connectivity Cable Driver
"{A6C48A9F-694A-4234-B3AA-62590B668927}" = Intel(R) Manageability Engine Firmware Recovery Agent
"{A78800AF-1779-4AE8-8EBE-16E1BE727C71}" = Integrated Camera Driver Installer Package Ver.1.2.1.18
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.5) - Czech
"{AD32F5E9-6BDD-480A-8B7B-95571D04691C}" = Lenovo Patch Utility
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
"{CCF298AF-9CE1-4B26-B251-486E98A34789}" = Windows 7 USB/DVD Download Tool
"{D481EA96-2313-4A7C-98EE-710D1AF884AC}" = Microsoft Visual Studio 2005 Tools for Applications - ENU
"{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}" = Power Manager
"{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1" = ConvertXtoDVD 4.0.11.326
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{EA17F4FC-FDBF-4CF8-A529-2D983132D053}" = Skype™ 6.0
"{EA9640BE-414E-4195-B53B-7905BF1A5A09}" = Mobile Broadband Drivers
"{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) OpenCL CPU Runtime
"abgx360" = abgx360 v1.0.6
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Adolix Split and Merge PDF_is1" = Adolix Split and Merge PDF v1.3
"Ashampoo Burning Studio 6 FREE_is1" = Ashampoo Burning Studio 6 FREE v.6.81
"Autodesk Content Service" = Autodesk Content Service
"Autodesk Design Review 2013" = Autodesk Design Review 2013
"Autodesk Vault Basic 2013 (Client)" = Autodesk Vault Basic 2013 (Client)
"DAEMON Tools Lite" = DAEMON Tools Lite
"FM JPG To PDF Converter Free_is1" = FM JPG To PDF Converter Free 1.1
"FormatFactory" = FormatFactory 3.00
"ImgBurn" = ImgBurn
"KLiteCodecPack_is1" = K-Lite Codec Pack 9.3.0 (Basic)
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Microsoft Visual Studio 2005 Tools for Applications - ENU" = Microsoft Visual Studio 2005 Tools for Applications - ENU
"MozBackup" = MozBackup 1.5.1
"Mozilla Firefox 15.0.1 (x86 cs)" = Mozilla Firefox 15.0.1 (x86 cs)
"Mozilla Thunderbird 17.0.2 (x86 cs)" = Mozilla Thunderbird 17.0.2 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"O2CZ" = O2
"Opera 12.12.1707" = Opera 12.12
"ProFact 3.0_is1" = ProFact 3.0
"PSPad editor_is1" = PSPad editor
"SendMails_is1" = SendMails - hromadné zasílání zpráv
"SolidWorks Installation Manager 20120-40000-1100-100" = SolidWorks 2012 x64 Edition SP0
"SWILenovoDrvInstaller" = Sierra Wireless QMI Lenovo Driver Package
"T-Mobile Communication Centre" = Web'n'walk Manager
"TVCONDrv" = GIGABYTE U8300 BDA Device
"VLC media player" = VLC media player 2.0.3
"WebDataLoader_is1" = WebDataLoader - stahování dat z internetu

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3752770136-2494076584-3171830822-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"7f4182272b52fd8f" = CZShare Manager
"Akamai" = Akamai NetSession Interface
"Google Chrome" = Google Chrome

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 16.1.2013 15:57:46 | Computer Name = Jakub-NTB | Source = Microsoft-Windows-EapHost | ID = 2002
Description = Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=21,
ID autora=8086, ID dodavatele=0, typ dodavatele=0

Error - 16.1.2013 15:57:46 | Computer Name = Jakub-NTB | Source = Microsoft-Windows-EapHost | ID = 2002
Description = Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=23,
ID autora=8086, ID dodavatele=0, typ dodavatele=0

Error - 16.1.2013 15:57:46 | Computer Name = Jakub-NTB | Source = Microsoft-Windows-EapHost | ID = 2002
Description = Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=17,
ID autora=9, ID dodavatele=0, typ dodavatele=0

Error - 16.1.2013 15:57:46 | Computer Name = Jakub-NTB | Source = Microsoft-Windows-EapHost | ID = 2002
Description = Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=25,
ID autora=9, ID dodavatele=0, typ dodavatele=0

Error - 16.1.2013 15:57:46 | Computer Name = Jakub-NTB | Source = Microsoft-Windows-EapHost | ID = 2002
Description = Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=43,
ID autora=9, ID dodavatele=0, typ dodavatele=0

Error - 17.1.2013 0:05:50 | Computer Name = Jakub-NTB | Source = Application Error | ID = 1000
Description = Název chybující aplikace: AcSvc.exe, verze: 5.9.7.95, časové razítko:
0x50487c7e Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.17725, časové razítko:
0x4ec49b8f Kód výjimky: 0xc0000005 Posun chyby: 0x000326d1 ID chybujícího procesu:
0x156c Čas spuštění chybující aplikace: 0x01cdf46384a19388 Cesta k chybující aplikaci:
C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe Cesta k chybujícímu modulu:
C:\Windows\SysWOW64\ntdll.dll ID zprávy: 2d8edb23-605b-11e2-8359-685d4342d898

Error - 17.1.2013 4:31:50 | Computer Name = Jakub-NTB | Source = Application Error | ID = 1000
Error - 17.1.2013 5:31:15 | Computer Name = Jakub-NTB | Source = Application Error
| ID = 1000

Description = Název chybující aplikace: AcSvc.exe, verze: 5.9.7.95, časové razítko: 0x50487c7e
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.17725, časové razítko: 0x4ec49b8f
Kód výjimky: 0xc0000005
Posun chyby: 0x000326d1
ID chybujícího procesu: 0x838
Čas spuštění chybující aplikace: 0x01cdf4954fa9d35e
Cesta k chybující aplikaci: C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
Cesta k chybujícímu modulu: C:\Windows\SysWOW64\ntdll.dll
ID zprávy: a3790bf8-6088-11e2-9da0-685d4342d898
Error - 17.1.2013 7:55:41 | Computer Name = Jakub-NTB | Source = Application Error
| ID = 1000

Description = Název chybující aplikace: AcSvc.exe, verze: 5.9.7.95, časové razítko: 0x50487c7e
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.17725, časové razítko: 0x4ec49b8f
Kód výjimky: 0xc0000005
Posun chyby: 0x000326d1
ID chybujícího procesu: 0x14f8
Čas spuštění chybující aplikace: 0x01cdf4a4e24884fc
Cesta k chybující aplikaci: C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
Cesta k chybujícímu modulu: C:\Windows\SysWOW64\ntdll.dll
ID zprávy: d0a3976a-609c-11e2-93e8-b888e330e093
Error - 17.1.2013 10:17:06 | Computer Name = Jakub-NTB | Source = Application Error
| ID = 1000

Description = Název chybující aplikace: AcSvc.exe, verze: 5.9.7.95, časové razítko: 0x50487c7e
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.17725, časové razítko: 0x4ec49b8f
Kód výjimky: 0xc0000005
Posun chyby: 0x000326d1
ID chybujícího procesu: 0x1350
Čas spuštění chybující aplikace: 0x01cdf4b91c039757
Cesta k chybující aplikaci: C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
Cesta k chybujícímu modulu: C:\Windows\SysWOW64\ntdll.dll
ID zprávy: 91c59806-60b0-11e2-87ca-685d4342d898
Error - 18.1.2013 3:28:51 | Computer Name = Jakub-NTB | Source = Application Error
| ID = 1000

Description = Název chybující aplikace: AcSvc.exe, verze: 5.9.7.95, časové razítko: 0x50487c7e
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.17725, časové razítko: 0x4ec49b8f
Kód výjimky: 0xc0000005
Posun chyby: 0x000326d1
ID chybujícího procesu: 0xf28
Čas spuštění chybující aplikace: 0x01cdf5496341acba
Cesta k chybující aplikaci: C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
Cesta k chybujícímu modulu: C:\Windows\SysWOW64\ntdll.dll
ID zprávy: b46e1e48-6140-11e2-8ad1-685d4342d898

Error encountered while reading event logs.

< End of report >

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Preventivní kontrola

#6 Příspěvek od vyosek »

:arrow: Spustte znovu OTL
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize
  • Kód: Vybrat vše

    :otl
    IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
    IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
    IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
    IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
    IE - HKU\S-1-5-21-3752770136-2494076584-3171830822-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
    IE - HKU\S-1-5-21-3752770136-2494076584-3171830822-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
    O2 - BHO: (no name) - {32F66A28-7614-11D4-BD11-00104BD3F987} - No CLSID value found.
    O4:64bit: - HKLM..\Run: [] File not found
    O4 - HKLM..\Run: [] File not found
    O4 - HKU\S-1-5-21-3752770136-2494076584-3171830822-1000..\Run: [Akamai NetSession Interface] C:\Users\Jakub\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
    O1364bit: - gopher Prefix: missing
    O13 - gopher Prefix: missing
    O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
    O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
    O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
    O33 - MountPoints2\{840375f7-113e-11e2-9aa9-685d4342d898}\Shell - "" = AutoRun
    [7 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
    [13 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
    [36 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
    [6 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
    [2013.01.20 17:20:00 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
    [2013.01.20 10:44:00 | 000,000,910 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3752770136-2494076584-3171830822-1000Core.job
    [2013.01.20 16:44:00 | 000,000,962 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3752770136-2494076584-3171830822-1000UA.job
    [2013.01.20 10:09:05 | 000,000,828 | ---- | M] () -- C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
    [2013.01.19 19:29:00 | 000,000,830 | ---- | M] () -- C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
    @Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:A1EDB939
    
    :files
    C:\Users\Jakub\AppData\Local\Akamai
    %windir%\system32\*.tmp.dll /s
    %windir%\system32\SET*.tmp /s
    %windir%\*.tmp
    
    :commands
    [RESETHOSTS]
    [EMPTYTEMP]
    [EMPTYFLASH]
    [EMPTYJAVA]
  • Nasledne kliknete na Opravit
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

FJakub
Návštěvník
Návštěvník
Příspěvky: 72
Registrován: 04 zář 2008 19:33

Re: Preventivní kontrola

#7 Příspěvek od FJakub »

All processes killed
========== OTL ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKEY_USERS\S-1-5-21-3752770136-2494076584-3171830822-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-3752770136-2494076584-3171830822-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{32F66A28-7614-11D4-BD11-00104BD3F987}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32F66A28-7614-11D4-BD11-00104BD3F987}\ deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-3752770136-2494076584-3171830822-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface deleted successfully.
C:\Users\Jakub\AppData\Local\Akamai\netsession_win.exe moved successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\mso-offdap11\ deleted successfully.
File Protocol\Handler\mso-offdap11 - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype4com\ deleted successfully.
File Protocol\Handler\skype4com - No CLSID value found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{840375f7-113e-11e2-9aa9-685d4342d898}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{840375f7-113e-11e2-9aa9-685d4342d898}\ not found.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2A98.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2F69.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4356.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5EC2.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9EFC.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE966.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP2A0C.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP2BEF.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP3320.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP33AD.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP3439.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP43C4.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP65B4.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP7290.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPCF9D.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPDAD7.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPF4BA.tmp folder deleted successfully.
C:\Windows\Installer\MSI13DC.tmp deleted successfully.
C:\Windows\Installer\MSI1A33.tmp deleted successfully.
C:\Windows\Installer\MSI1D6B.tmp deleted successfully.
C:\Windows\Installer\MSI230B.tmp deleted successfully.
C:\Windows\Installer\MSI256D.tmp deleted successfully.
C:\Windows\Installer\MSI2639.tmp deleted successfully.
C:\Windows\Installer\MSI40D0.tmp deleted successfully.
C:\Windows\Installer\MSI440C.tmp deleted successfully.
C:\Windows\Installer\MSI704D.tmp deleted successfully.
C:\Windows\Installer\MSI753E.tmp deleted successfully.
C:\Windows\Installer\MSI76F5.tmp deleted successfully.
C:\Windows\Installer\MSI7BAD.tmp deleted successfully.
C:\Windows\Installer\MSI7C4A.tmp deleted successfully.
C:\Windows\Installer\MSI7CD7.tmp deleted successfully.
C:\Windows\Installer\MSI7D65.tmp deleted successfully.
C:\Windows\Installer\MSI7DF2.tmp deleted successfully.
C:\Windows\Installer\MSI7E7F.tmp deleted successfully.
C:\Windows\Installer\MSI7F0D.tmp deleted successfully.
C:\Windows\Installer\MSI8381.tmp deleted successfully.
C:\Windows\Installer\MSICC7F.tmp deleted successfully.
C:\Windows\Installer\MSICD2C.tmp deleted successfully.
C:\Windows\Installer\MSICDB9.tmp deleted successfully.
C:\Windows\Installer\MSICE46.tmp deleted successfully.
C:\Windows\Installer\MSICEE.tmp deleted successfully.
C:\Windows\Installer\MSICEE3.tmp deleted successfully.
C:\Windows\Installer\MSICF71.tmp deleted successfully.
C:\Windows\Installer\MSICFFE.tmp deleted successfully.
C:\Windows\Installer\MSID08C.tmp deleted successfully.
C:\Windows\Installer\MSID11A.tmp deleted successfully.
C:\Windows\Installer\MSIDAD9.tmp deleted successfully.
C:\Windows\Installer\MSIDC21.tmp deleted successfully.
C:\Windows\Installer\MSIDCCE.tmp deleted successfully.
C:\Windows\Installer\MSIDDD8.tmp deleted successfully.
C:\Windows\Installer\MSIDE65.tmp deleted successfully.
C:\Windows\Installer\MSIDEE3.tmp deleted successfully.
C:\Windows\Installer\MSIDF71.tmp deleted successfully.
C:\Windows\Temp\DMI18CD.tmp deleted successfully.
C:\Windows\Temp\DMI1ADF.tmp deleted successfully.
C:\Windows\Temp\RGI2DDA.tmp deleted successfully.
C:\Windows\Temp\RGI2DDA.tmp-tmp deleted successfully.
C:\Windows\Temp\RGI5019.tmp deleted successfully.
C:\Windows\Temp\RGI5019.tmp-tmp deleted successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3752770136-2494076584-3171830822-1000Core.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3752770136-2494076584-3171830822-1000UA.job moved successfully.
C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job moved successfully.
C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job moved successfully.
ADS C:\ProgramData\TEMP:A1EDB939 deleted successfully.
========== FILES ==========
C:\Users\Jakub\AppData\Local\Akamai\Logs\dump folder moved successfully.
C:\Users\Jakub\AppData\Local\Akamai\Logs folder moved successfully.
C:\Users\Jakub\AppData\Local\Akamai\Languages folder moved successfully.
C:\Users\Jakub\AppData\Local\Akamai\Cache\trial.autodesk.com\swdlddlm\2013\amech_pp\esd folder moved successfully.
C:\Users\Jakub\AppData\Local\Akamai\Cache\trial.autodesk.com\swdlddlm\2013\amech_pp folder moved successfully.
C:\Users\Jakub\AppData\Local\Akamai\Cache\trial.autodesk.com\swdlddlm\2013 folder moved successfully.
C:\Users\Jakub\AppData\Local\Akamai\Cache\trial.autodesk.com\swdlddlm folder moved successfully.
C:\Users\Jakub\AppData\Local\Akamai\Cache\trial.autodesk.com folder moved successfully.
C:\Users\Jakub\AppData\Local\Akamai\Cache folder moved successfully.
C:\Users\Jakub\AppData\Local\Akamai folder moved successfully.
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 56504 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Jakub
->Temp folder emptied: 130627928 bytes
->Temporary Internet Files folder emptied: 535480234 bytes
->Java cache emptied: 589850 bytes
->FireFox cache emptied: 65101663 bytes
->Google Chrome cache emptied: 262184551 bytes
->Opera cache emptied: 4715728 bytes
->Flash cache emptied: 57430 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 56466 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 61265154 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67978 bytes
RecycleBin emptied: 4080026274 bytes

Total Files Cleaned = 4 902,00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Jakub
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


[EMPTYJAVA]

User: All Users

User: Default

User: Default User

User: Jakub
->Java cache emptied: 0 bytes

User: Public

User: UpdatusUser

Total Java Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 01212013_073041

Files\Folders moved on Reboot...
C:\Users\Jakub\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Preventivní kontrola

#8 Příspěvek od vyosek »

OTL udelalo co melo, jak se chova PC :???:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

FJakub
Návštěvník
Návštěvník
Příspěvky: 72
Registrován: 04 zář 2008 19:33

Re: Preventivní kontrola

#9 Příspěvek od FJakub »

no já nevím, hlavně proč jsem to chtěl zkontrolovat bylo to že se mi přes total comander dostal na FTP vir!

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Preventivní kontrola

#10 Příspěvek od vyosek »

:arrow: To chce mit FTP radne zabezpecene - silne heslo (znaky, cisla) a pouzivat pripadne sifrovane pripojeni

:arrow: Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222
  • Provedte aktualizaci
  • Provedte uplny sken - nic nemazte :!:
  • MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Odpovědět