Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

problem s minerd.exe

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
fassmannov
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 21 říj 2013 16:45

problem s minerd.exe

#1 Příspěvek od fassmannov »

Dobrý den,
prosim o pomoc běží mi v pc minerd.exe a zabira 100% cpu

tady je log RSIT:

Logfile of random's system information tool 1.10 (written by random/random)
Run by PokornyS at 2014-08-21 08:48:17
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 611 GB (88%) free of 693 GB
Total RAM: 4030 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:48:24, on 21.8.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\NIS.exe
C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe
C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
C:\Program Files (x86)\Hewlett-Packard\HP Mouse Suite\hpMonitor.exe
C:\ProgramData\HP Mouse Suite Config\hpwjd.exe
C:\ProgramData\HP Mouse Suite Config\hpwmsd.exe
C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe
C:\Program Files (x86)\OpenVPN\bin\openvpn-gui-1.0.3.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
C:\Windows\SysWOW64\cmd.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\SDKCOMServer.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\PokornyS.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://intranet.gpd.cz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://intranet.gpd.cz
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMNTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BHO_Startup - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\IPS\IPSBHO.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\coIEPlg.dll
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe /start
O4 - HKLM\..\Run: [File Sanitizer] C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [NUSB3MON] "c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [DTRun] c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [MSHostSrv] C:\windows\inf\cssi.vbe
O4 - HKLM\..\Run: [mine] C:\Users\Public\Documents\pooler-cpuminer-2.3.2-win64\nieco.vbs
O4 - HKLM\..\Run: [MSWinHost] C:\windows\inf\cisi.vbe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe
O4 - HKLM\..\Run: [HPQuickWebProxy] "C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKCU\..\Run: [Windows] C:\Users\Public\Public\run.vbs
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: 2320633bbd5b9c41d628d6d2b760a34d.exe
O4 - Startup: MyPC Backup.lnk = C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
O4 - Global Startup: HPMonitor.exe.lnk = C:\Program Files (x86)\Hewlett-Packard\HP Mouse Suite\hpMonitor.exe
O4 - Global Startup: hpwjd.exe.lnk = C:\ProgramData\HP Mouse Suite Config\hpwjd.exe
O4 - Global Startup: hpwmsd.exe.lnk = C:\ProgramData\HP Mouse Suite Config\hpwmsd.exe
O4 - Global Startup: OpenVPN GUI.lnk = C:\Program Files (x86)\OpenVPN\bin\openvpn-gui-1.0.3.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-247 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-247 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {00E49F0C-F908-4A7E-8FCE-02A06F23C380} (VOIS5Package.Package_S) - http://vois.gpd.cz/vois/ax/vois5package.cab
O16 - DPF: {02061E9B-8AA5-4073-8A8E-6B14E8B05C32} (VOISSPS.CAB) - http://vois.gpd.cz/vois/ax/voissps.cab
O16 - DPF: {02F2506E-486F-46B7-9090-32CC12B3B193} (QWView.Cab) - http://vois.gpd.cz/vois/ax/qwview.cab
O16 - DPF: {0350C5D2-4BA5-4FE2-8D9C-135545FDC800} (EDW DB Library - Oledb, SQL, MDX, ...) - http://vois.gpd.cz/vois/ax/edwdb.cab
O16 - DPF: {03AF2B66-B810-4FDD-B6BD-E39D60BEC889} (VOIS3WH.Cab) - http://vois.gpd.cz/vois/ax/vois3wh.cab
O16 - DPF: {03B57A22-B811-4FBD-967D-10728B3AF9E5} (VOIS5Queue.DlgDocForOutGroup) - http://vois.gpd.cz/vois/ax/vois5queue.cab
O16 - DPF: {066776BB-C048-47EC-91CC-0C3EB0E617D7} (EDW Data Mining - Store, Table, View, ...) - http://vois.gpd.cz/vois/ax/edwdatamining.cab
O16 - DPF: {06773F72-4C0C-48FC-92FE-D9522C59A4C4} (ArticleCover1.ArticleCover) - http://vois.gpd.cz/vois/ax/articlecover.cab
O16 - DPF: {074213F2-8FBC-451B-B04C-F66977D4E822} (EDW Zipo - Compress/Decompress Archive) - http://vois.gpd.cz/vois/ax/edwzipo.cab
O16 - DPF: {090A1FFB-215C-414D-8E1B-8CB8291C2D8F} (WHContactTools2.AddrHolder) - http://vois.gpd.cz/vois/ax/whcontacttools.cab
O16 - DPF: {0A094F59-DB90-4162-B3A8-CFCEDA3DF25D} (CGCCShipEditor.ShipEditor) - http://vois.gpd.cz/vois/ax/cgccshipeditor.cab
O16 - DPF: {0BD8A9B3-A284-4529-BD08-296FD64B686D} (VOIS5Doc.Cab) - http://vois.gpd.cz/vois/ax/vois5doc.cab
O16 - DPF: {0C44A8DD-C429-490B-B145-B7AF44423A4F} (VOIS3Doc.Cab) - http://vois.gpd.cz/vois/ax/vois3doc.cab
O16 - DPF: {0D957409-1464-421C-BA8F-A66D51CFEAFC} (CGCCDocCompensation.Cab) - http://vois.gpd.cz/vois/ax/cgccdoccompensation.cab
O16 - DPF: {0E40D485-016B-473F-A379-E79FEBB9B618} (EDW Center Library - Namespace) - http://vois.gpd.cz/vois/ax/edw.cab
O16 - DPF: {0FA7CBD7-61CC-4DF0-B996-84E4B4E24123} (VOISContract.Cab) - http://vois.gpd.cz/vois/ax/voiscontract.cab
O16 - DPF: {12B763AE-022D-490A-B296-8E6E06551B8B} (VOIS5PackageGPD.TransportProviderFilter) - http://vois.gpd.cz/vois/ax/vois5packagegpd.cab
O16 - DPF: {179819A1-5026-4D95-864C-3A58DB681A4A} (VOISItemAddOnCost.CAB) - http://vois.gpd.cz/vois/ax/voisitemaddoncost.cab
O16 - DPF: {1B2D80CC-9349-47F9-B445-0B912CD6D4EC} (CasseDoc.CasseDocCtrl) - http://vois.gpd.cz/vois/ax/cassedoc.cab
O16 - DPF: {1DBEDAD6-FD35-44C9-B482-752C0E35312E} (BackFlowIN2.Cab) - http://vois.gpd.cz/vois/ax/backflowin2.cab
O16 - DPF: {1E16ADD2-26CF-4839-B59A-25CEEB780E4C} (CGCCAdvSearch.Cab) - http://vois.gpd.cz/vois/ax/cgccadvsearch.cab
O16 - DPF: {1E653C4B-BFD1-4811-9ED4-A4EB4D471D8F} (VOISInfoMap.Cab) - http://vois.gpd.cz/vois/ax/voisinfomap.cab
O16 - DPF: {1F9B9EA4-7512-4658-B4F3-6457E940A54F} (VOIS3FlowIn.Cab) - http://vois.gpd.cz/vois/ax/vois3flowin.cab
O16 - DPF: {2174F360-137F-11D4-9390-0050044A852B} (WHQueueArticle.QueueArticleCtl) - http://vois.gpd.cz/vois/ax/whqueuearticle.cab
O16 - DPF: {22A5BA47-7C5B-455B-A6E2-A9B208880874} (VOIS5OrderOut.Cab) - http://vois.gpd.cz/vois/ax/vois5orderout.cab
O16 - DPF: {2538E0F6-8DEE-47D7-9D27-F07D42FC974A} (VOISPackage.CAB) - http://vois.gpd.cz/vois/ax/voispackage.cab
O16 - DPF: {2746F4B1-24F1-4FD2-A31F-0127F199A0A7} (VOISProject.CAB) - http://vois.gpd.cz/vois/ax/voisproject.cab
O16 - DPF: {283A5CEF-C567-11D4-93B0-0050044A852B} (CGCCHelper.MSTabs) - http://vois.gpd.cz/vois/ax/cgcchelper.cab
O16 - DPF: {28E6C8D1-0282-479F-B8F9-5FC80B73A940} (VOIS3Order.CAB) - http://vois.gpd.cz/vois/ax/vois3order.cab
O16 - DPF: {29837538-3091-40A5-8C7B-57733D9CF3E6} (EDW Common Setting - Session singleton, utils, ...) - http://vois.gpd.cz/VOIS/AX/edwcommonsetting.cab
O16 - DPF: {29CA474A-C67F-46ED-AA3F-6422BE11C55B} (CGCCOutputAx.Cab) - http://vois.gpd.cz/vois/ax/cgccoutputax.cab
O16 - DPF: {2FB10944-E057-40DF-AB13-E17B2CAE84EE} (VOIS3Contact.Cab) - http://vois.gpd.cz/vois/ax/vois3contact.cab
O16 - DPF: {2FC36E80-5D15-401E-A6AE-20F0C3CCE21E} (GroupList Class) - http://vois.gpd.cz/vois/ax/cgccgrouplistlib.cab
O16 - DPF: {31B50413-B069-4322-964B-8028FE21D5A8} (VOIS5Partner.Cab) - http://vois.gpd.cz/vois/ax/vois5partner.cab
O16 - DPF: {32FAE098-6127-4191-AAB9-AED5B5491F3D} (VOIS5Queue.DocForDispOut_S) - http://vois.gpd.cz/vois/ax/vois5queue.cab
O16 - DPF: {374C4448-FA6C-468A-A4C8-646811EB79CD} (VOIS3KernIO.Cab) - http://vois.gpd.cz/vois/ax/vois3kernio.cab
O16 - DPF: {38B15006-95C6-4754-B3C0-3290FC5F5FC0} (VOIS5Location.Cab) - http://vois.gpd.cz/vois/ax/vois5location.cab
O16 - DPF: {3B1234CC-8007-487C-9C10-F5F3E58BD5F5} (QWDebug.Cab) - http://vois.gpd.cz/vois/ax/qwdebug.cab
O16 - DPF: {3C05993F-77EE-4C7F-8877-BF61B19586CD} (VOIS5Price.Cab) - http://vois.gpd.cz/vois/ax/vois5price.cab
O16 - DPF: {3D63D15A-5DB7-44AC-B9B3-58341640F838} (FormDataDataStore.Cab) - http://vois.gpd.cz/vois/ax/formdatadatastore.cab
O16 - DPF: {3E2B76FD-A565-4035-B3FA-8CF39FFF334D} (VOISWMS.DocPrintQueue_S) - http://vois.gpd.cz/vois/ax/voiswms.cab
O16 - DPF: {40A3F5CE-2A80-442B-85F1-274DFF7D7081} (VOISOrderIn.CAB) - http://vois.gpd.cz/vois/ax/voisorderin.cab
O16 - DPF: {448CC3EB-77A8-4D6E-A6CA-E057BC00597D} (ContactPerson1.ContactPerson) - http://vois.gpd.cz/vois/ax/contactperson1.cab
O16 - DPF: {46F6AED1-0B77-489C-BDB5-97E89A32EEDF} (VOIS3Order.CAB) - http://vois.gpd.cz/vois/ax/vois3order.cab
O16 - DPF: {47678536-35CA-4236-99A5-21362896870E} (EDW RS Library - Recordset, RS.V1,V2,V3, ...) - http://vois.gpd.cz/vois/ax/edwrs.cab
O16 - DPF: {477E32BE-AE2F-11D3-ABF6-00104BDAE1E7} (SuperArtFlow.SuperArtFlowCtl) - http://vois.gpd.cz/vois/ax/superartflow.cab
O16 - DPF: {48282861-43E7-47B7-BCD5-027D49C20B38} (ToolTipLib.TTUser) - http://vois.gpd.cz/vois/ax/tooltiplib.cab
O16 - DPF: {4880890F-394F-11D5-BB94-0080C785FC10} (BackordoutChange.Wizard) - http://vois.gpd.cz/vois/ax/backordoutchange.cab
O16 - DPF: {48AC470F-ED85-4A3A-8D74-04B03D9D8F63} (VOIS5Tool.Cab) - http://vois.gpd.cz/vois/ax/vois5tool.cab
O16 - DPF: {4A27E6B4-B499-4DFF-AD65-6D9A448F30E6} (VOIS5Operate.Cab) - http://vois.gpd.cz/vois/ax/vois5operate.cab
O16 - DPF: {4A57D54D-485D-4D00-B3C6-F0D7F4FB08B7} (CGCCVTLocal.Cab) - http://vois.gpd.cz/vois/ax/cgccvtlocal.cab
O16 - DPF: {4AD3315F-D1E3-4153-A1CA-79CF0AC6245A} (ListTree2 Control (version 2,1,0,19)) - http://vois.gpd.cz/vois/ax/listtree2.cab
O16 - DPF: {4F00F7B5-333E-4B6E-BAF8-8146569FF707} (VOISStockTakingExch.Cab) - http://vois.gpd.cz/vois/ax/voisstocktakingexch.cab
O16 - DPF: {5159AB2B-05A8-435C-B1E5-0A280210F8BD} (VOISContactStockTree.Cab) - http://vois.gpd.cz/vois/ax/voiscontactstocktree.cab
O16 - DPF: {551D08CE-288B-11D3-B85A-00105A0E5111} (RecSet Class) - http://vois.gpd.cz/vois/ax/wdbrecset.cab
O16 - DPF: {5663A3B0-4723-460C-AB90-8568AFCB80B5} (FastSearchLib.GridCombo) - http://vois.gpd.cz/vois/ax/fastsearchlib.cab
O16 - DPF: {56B5B5AC-BB24-4592-A24E-14E9500651AB} (QW.Cab) - http://vois.gpd.cz/vois/ax/qw.cab
O16 - DPF: {577C7570-5CAC-4641-BAE9-3BDAB9627137} (QWAdmin.CAB) - http://vois.gpd.cz/vois/ax/qwadmin.cab
O16 - DPF: {58985593-35BA-4022-978E-83EA448CD7C1} (FastSearchLib.ContactPreview) - http://vois.gpd.cz/vois/ax/fastsearchlib.cab
O16 - DPF: {5EB3FF37-4355-4CD5-BECD-12A6E5944E30} (SysMessageModule.Cab) - http://vois.gpd.cz/vois/ax/sysmessagemodule.cab
O16 - DPF: {65119B75-636B-4118-84A6-06B10AFAF458} (VOISProducerTeam.CAB) - http://vois.gpd.cz/vois/ax/voisproducerteam.cab
O16 - DPF: {65EF3D87-34F7-467F-A509-7C9E92C9CCCD} (VOIS4ArticleImport.Cab) - http://vois.gpd.cz/vois/ax/vois4articleimport.cab
O16 - DPF: {66A54C50-195F-44DF-A896-39C475D378C0} (VOISSurvey.Survey_S) - http://vois.gpd.cz/vois/ax/voissurvey.cab
O16 - DPF: {67B6E400-D6C1-41F2-A322-8640CCC459CD} (VOIS5Location.Cab) - http://vois.gpd.cz/vois/ax/vois5location.cab
O16 - DPF: {690DC1C1-390C-4CB1-BB91-1154718A36FD} (CGCCTextPrinter.TextPrinter) - http://vois.gpd.cz/vois/ax/cgcctextprinter.cab
O16 - DPF: {6ACD9D44-0DAD-459F-90D5-B7EBAB86998B} (CGCCSearchCom.Cab) - http://vois.gpd.cz/vois/ax/cgccsearchcom.cab
O16 - DPF: {6B575BAD-41C5-44D8-957B-B055ECC89495} (VOIS5View.Cab) - http://vois.gpd.cz/vois/ax/vois5view.cab
O16 - DPF: {6B5F895E-FE4A-4825-960B-A735EE98C978} (WHFinderHolder2.Holder) - http://vois.gpd.cz/vois/ax/whfinderholder2.cab
O16 - DPF: {6C323E3F-D7F2-4C28-A98A-AB9ACE0600C8} (VOIS3Host.Cab) - http://vois.gpd.cz/vois/ax/vois3host.cab
O16 - DPF: {700DEAC4-6454-4295-A591-8D20D6CE071B} (VOIS5Package.ParcelPackage) - http://vois.gpd.cz/vois/ax/vois5package.cab
O16 - DPF: {7063B06D-F7BA-4B33-BAE8-3FBE45B95D1D} (VOIS5WH.Cab) - http://vois.gpd.cz/vois/ax/vois5wh.cab
O16 - DPF: {70AF14FC-B500-45DE-BAB9-DBA06C8E183E} (VOIS3Msg.Cab) - http://vois.gpd.cz/vois/ax/vois3msg.cab
O16 - DPF: {73293BCA-CEDC-4A74-938A-A92399EEDB03} (EDW Controls - Framework, Tools, Xichts, ...) - http://vois.gpd.cz/vois/ax/edwcommoncontrols.cab
O16 - DPF: {772A061D-F2D1-40A3-B3A5-6CBA80816175} (VOIS3Order.CAB) - http://vois.gpd.cz/vois/ax/vois3order.cab
O16 - DPF: {787AA85E-18EE-4A52-9464-E1420770370D} (VOISItemGiveAway.CAB) - http://vois.gpd.cz/vois/ax/voisitemgiveaway.cab
O16 - DPF: {7934E7B0-14D7-4F23-87F6-8BE16EDAD31E} (QWFlow.Cab) - http://vois.gpd.cz/vois/ax/qwflow.cab
O16 - DPF: {7BBFDFD5-2B5E-4F41-B82E-0B18681ADCD3} (VOIS4SelectionList.Cab) - http://vois.gpd.cz/vois/ax/vois4selectionlist.cab
O16 - DPF: {7C8121F0-EDA7-4CED-B216-9E7E9EEF23A7} (VOIS5Price.Cab) - http://vois.gpd.cz/vois/ax/vois5price.cab
O16 - DPF: {7E639A5E-455F-4E74-B1C6-82BBD9593FE0} (VOIS5View.Cab) - http://vois.gpd.cz/vois/ax/vois5view.cab
O16 - DPF: {7EDBFFD4-13D2-4436-A697-10432568FF51} (CGCCCommonPrint.Button) - http://vois.gpd.cz/vois/ax/cgcccommonprint.cab
O16 - DPF: {8147F544-B779-49CE-81E4-8506412F6FDD} (VOIS3PriceList.OldPriceListEdit) - http://vois.gpd.cz/vois/ax/vois3pricelist.cab
O16 - DPF: {831AC1EB-5601-4C43-8588-098227C15DE5} (VOISItemAccSpc.ItemAccSpcNoFlowSale_S) - http://vois.gpd.cz/vois/ax/voisitemaccspc.cab
O16 - DPF: {83BFBAB1-D95B-4DD1-9BDB-1B61689E1775} (VOIS3BackFlowOut.Cab) - http://vois.gpd.cz/vois/ax/vois3backflowout.cab
O16 - DPF: {874D7240-B10A-46BA-A8F9-4ADC7DA795EB} (VOISFM3000.CAB) - http://vois.gpd.cz/vois/ax/voisfm3000.cab
O16 - DPF: {87B7A250-D553-4E05-B933-058CECEF4A12} (ArticleExternal1.ArticleExternal) - http://vois.gpd.cz/vois/ax/articleexternal.cab
O16 - DPF: {89C50FE0-FA39-44D9-B441-1081025B2747} (CGCCOutput.XLSFileEDW) - http://vois.gpd.cz/vois/ax/cgccoutput.cab
O16 - DPF: {8A10C8B4-E89D-4F45-91B4-952DA72CA20D} (VOIS5Fast.Cab) - http://vois.gpd.cz/vois/ax/vois5fast.cab
O16 - DPF: {8A21569C-29C4-4D89-B489-8DC8F5A99ABA} (QWApp.Cab) - http://vois.gpd.cz/vois/ax/qwapp.cab
O16 - DPF: {8A942387-242A-11D3-B856-00105A0E5111} (WHArtProp.PropEditor) - http://vois.gpd.cz/vois/ax/whartprop.cab
O16 - DPF: {8C00E794-C948-4577-A6FD-00CC6B6283B8} (VOIS3Package.CAB) - http://vois.gpd.cz/vois/ax/vois3package.cab
O16 - DPF: {8C4E2795-468C-4F59-A885-CEC0DE55A05C} (QWContact.Cab) - http://vois.gpd.cz/vois/ax/qwcontact.cab
O16 - DPF: {8DA53495-DF2D-4712-8BDE-14A6B20DA88B} (VOIS3Order.CAB) - http://vois.gpd.cz/vois/ax/vois3order.cab
O16 - DPF: {8F960EBA-2D32-48CE-B9D5-8384DD517BAC} (VOIS5Contact.Cab) - http://vois.gpd.cz/vois/ax/vois5contact.cab
O16 - DPF: {9007A6AB-63E7-4491-8E05-5E5CB39241C4} (Print Preview Control (version 1,0,0,32)) - http://vois.gpd.cz/vois/ax/printpreview.cab
O16 - DPF: {9549AD26-A95D-4F65-BE3A-9BE8A6E7240A} (PHB4Pages.InstallMe) - http://vois.gpd.cz/vois/ax/phb4pages.cab
O16 - DPF: {99B3B379-C5F4-4E49-B4B6-1AD33679E50B} (VOISOfferIn.CAB) - http://vois.gpd.cz/vois/ax/voisofferin.cab
O16 - DPF: {99FF4677-FFC3-11D0-BD02-00C04FC2FB86} (StdDataFormats Object) - http://vois.gpd.cz/vois/ax/msstdfmt.cab
O16 - DPF: {9AA2FF2D-BD2A-41AD-B367-24ED2F0A3B81} (VOIS5OrderInRest.OrderInRestItem_S) - http://vois.gpd.cz/vois/ax/vois5orderinrest.cab
O16 - DPF: {9B0FEF27-C77A-4713-94D9-E9628E522DA9} (VOIS3PrintLib.Cab) - http://vois.gpd.cz/vois/ax/vois3printlib.cab
O16 - DPF: {9DF02A0E-914A-4C16-BA83-A3F0A8B79F1E} (VOISAdvances.CAB) - http://vois.gpd.cz/vois/ax/voisadvances.cab
O16 - DPF: {9E6BF495-9A50-4F58-BA3D-01211E8ED5D1} (CGCCShipTemplSelect.ShipTemplSelect) - http://vois.gpd.cz/vois/ax/cgccshiptemplselect.cab
O16 - DPF: {9ED94440-E5E8-101B-B9B5-444553540000} (Microsoft TabStrip Control, version 5.0 (SP2)) - http://vois.gpd.cz/vois/ax/comctl32.cab
O16 - DPF: {9F2DEF90-BE4A-4500-BF16-396B528DA139} (QWItem.CAB) - http://vois.gpd.cz/vois/ax/qwitem.cab
O16 - DPF: {9F6885C1-78E4-11D4-B17C-00600813C963} (CGCSelectList 1.0 Type Library) - http://vois.gpd.cz/vois/ax/cgcselectlist.cab
O16 - DPF: {A00ABA71-9EFC-4EE3-B105-F8DE15FDD85A} (VOIS5FlowAmountLink.FlowAmountLink_S) - http://vois.gpd.cz/vois/ax/vois5flowamountlink.cab
O16 - DPF: {A1149E02-91A0-4A05-A5B0-8C73CA4BD1BB} (VOIS5App.Cab) - http://vois.gpd.cz/vois/ax/vois5app.cab
O16 - DPF: {A2524D25-57F0-4887-B475-BCE6ADDD51B6} (VOIS3Order.CAB) - http://vois.gpd.cz/vois/ax/vois3order.cab
O16 - DPF: {A584627F-EA2F-4D51-ACDA-698F53E9A81B} (VOISDocContact.Cab) - http://vois.gpd.cz/vois/ax/voisdoccontact.cab
O16 - DPF: {A7C422F6-2243-4187-B9E7-9D6C57EF90EA} (VOIS3OrderIn.CAB) - http://vois.gpd.cz/vois/ax/vois3orderin.cab
O16 - DPF: {A7D43143-5215-4828-BD3D-D34AF50D34BA} (VOIS5Article.Cab) - http://vois.gpd.cz/vois/ax/vois5article.cab
O16 - DPF: {AB7E0F97-5059-4AC0-B374-16CE3529395E} (WHSalesInfo.Cab) - http://vois.gpd.cz/vois/ax/whsalesinfo.cab
O16 - DPF: {ABA09B04-6D0D-4561-8C98-CB15F549CE79} (VBRunCheck.Cab) - http://vois.gpd.cz/vois/ax/VBRunCheck.cab
O16 - DPF: {ADB71877-3FA1-4F01-9A94-DB4AC8B0CA5F} (VOIS5FlowAmountLink.DocFilterGroup) - http://vois.gpd.cz/vois/ax/vois5flowamountlink.cab
O16 - DPF: {B26A7085-A9E1-4725-AEFF-934F8BCE22FD} (VOIS3FlowOut.Cab) - http://vois.gpd.cz/vois/ax/vois3flowout.cab
O16 - DPF: {B47AC3E5-4BC0-43BE-9D87-5B4293D7DEF7} (VOIS5Print.Cab) - http://vois.gpd.cz/vois/ax/vois5print.cab
O16 - DPF: {B652B335-F5D8-4E58-A020-53D70B5CA99D} (CGCCShipAssist.ShipAssist) - http://vois.gpd.cz/vois/ax/cgccshipassistant.cab
O16 - DPF: {B6C4C95B-C6F3-4763-945A-0E7EAF711162} (LabelPrint.ctlLabelPrint) - http://vois.gpd.cz/vois/ax/labelprint.cab
O16 - DPF: {B6DA2E5F-22F9-41F3-9180-76F58E175C73} (EUROPARK.CAB) - http://vois.gpd.cz/vois/ax/europark.cab
O16 - DPF: {B9BE8FCF-93E6-42A0-AA16-A3B51E4B61BF} (CGCCChartHelper.MSChart) - http://vois.gpd.cz/vois/ax/cgcccharthelper.cab
O16 - DPF: {BBE16BE8-4D20-440A-A1CE-2312D26B4DEC} (VOIS3Order.CAB) - http://vois.gpd.cz/vois/ax/vois3order.cab
O16 - DPF: {BC951467-0725-4C29-908A-EE239C42F12F} (QWDoc.CAB) - http://vois.gpd.cz/vois/ax/qwdoc.cab
O16 - DPF: {BD50B6F3-2A12-11D3-B85A-00105A0E5111} (RealGrid2 Control) - http://vois.gpd.cz/vois/ax/realgrid2.cab
O16 - DPF: {BFE45165-10F2-463D-B430-1397C0A7372A} (VOISMessage.Messages) - http://vois.gpd.cz/vois/ax/voismessage.cab
O16 - DPF: {C0DBF281-F0B2-11D4-93B1-0050044A852B} (CGCCFTEdit.FTEditCtrl) - http://vois.gpd.cz/vois/ax/cgccftedit.cab
O16 - DPF: {C143A827-DAC9-4CC4-8A40-DFC28A763AA7} (VOIS5DataEx.Cab) - http://vois.gpd.cz/vois/ax/vois5dataex.cab
O16 - DPF: {C4CE563D-7EBC-464C-8495-A93534BFD962} (PHBook4.Cab) - http://vois.gpd.cz/vois/ax/phbook4.cab
O16 - DPF: {C6357F24-92E2-4E96-9721-A6CBA5425BF2} (VOIS4DataFilter.Cab) - http://vois.gpd.cz/vois/ax/vois4datafilter.cab
O16 - DPF: {C826AAD0-5A9D-44BC-AE1E-87DC10F5FC66} (VOIS3StockTaking.StockTaking) - http://vois.gpd.cz/vois/ax/vois3stocktaking.cab
O16 - DPF: {C8808373-25FB-11D2-AEA2-00600813C963} (FastCombo 1.0 Type Library) - http://vois.gpd.cz/vois/ax/fastcombo.cab
O16 - DPF: {C8C83B2F-9E35-412E-9256-A6E5B4A33C62} (CGCCOutputAx.OutputCtl) - http://vois.gpd.cz/vois/ax/cgccoutputax.cab
O16 - DPF: {CA2AC408-6578-479E-B629-EEBD0056620B} (VOIS3File.Cab) - http://vois.gpd.cz/vois/ax/vois3file.cab
O16 - DPF: {CF492A13-886B-11D2-AF1F-00600813C963} (EditForm Class) - http://vois.gpd.cz/vois/ax/cgcformat.cab
O16 - DPF: {D0520FA0-D80C-41E8-8EA2-D77AE2EAB5B2} (VOIS3Casse.Cab) - http://vois.gpd.cz/vois/ax/vois3casse.cab
O16 - DPF: {D104A7B6-798E-45FA-8D41-687AFFC77004} (VOIS5Host.Cab) - http://vois.gpd.cz/vois/ax/vois5host.cab
O16 - DPF: {D1E8A621-4A08-4376-9734-370697D143FF} (VOIS3InvoiceIn.Cab) - http://vois.gpd.cz/vois/ax/vois3invoicein.cab
O16 - DPF: {D89B0AAC-8B87-11D2-BD3C-60F97D000000} (ListTree Control (version 1,0,0,6)) - http://vois.gpd.cz/vois/ax/listtree.cab
O16 - DPF: {D96466DE-746F-43F0-99D3-7A8F3B83B8A6} (ChangeItemItem.ChangeItemItemCtl) - http://vois.gpd.cz/vois/ax/changeitemitem.cab
O16 - DPF: {D99F5654-7D00-4ED8-934A-359831997CF6} (CGCCOutput.Cab) - http://vois.gpd.cz/vois/ax/cgccoutput.cab
O16 - DPF: {DA7D5260-FF58-42C7-A1A7-27117173C77D} (VOIS5Location.Cab) - http://vois.gpd.cz/vois/ax/vois5location.cab
O16 - DPF: {DA8CCCAB-36AB-4F11-B4D2-C4D293B08551} (VOIS5Group.Cab) - http://vois.gpd.cz/vois/ax/vois5group.cab
O16 - DPF: {DA8CEA01-AE49-11D4-B18E-00600813C963} (CGCButton 1.0 Type Library) - http://vois.gpd.cz/vois/ax/cgcbutton.cab
O16 - DPF: {DBC4195D-B1B7-4FDA-828F-5C9373429B43} (CGCCListPriceChange.ListPriceChange) - http://vois.gpd.cz/vois/ax/cgcclistpricechange.cab
O16 - DPF: {DDCB5D9B-1EF0-402F-B671-C3ADA9C162C8} (WHqueueKontaktprj.WHqueueKontakt) - http://vois.gpd.cz/vois/ax/whqueuekontaktprj.cab
O16 - DPF: {E05F23DB-6EC0-4D10-A4AF-0816EEC9EC43} (VOIS5OrderIn.BatchProposal_S) - http://vois.gpd.cz/vois/ax/vois5orderin.cab
O16 - DPF: {E0B6746E-1D39-4C0F-A718-4B43E30388E7} (VOIS5User.Cab) - http://vois.gpd.cz/vois/ax/vois5user.cab
O16 - DPF: {E5BC2BC3-4D32-47E5-B3DC-3154924E0DE8} (ArtBizChannel1.ArtBizChannel) - http://vois.gpd.cz/vois/ax/artbizchannel.cab
O16 - DPF: {E742F6DB-37A9-4D79-99DA-B064B28D8568} (VOIS3InvoiceListGpd.CAB) - http://vois.gpd.cz/vois/ax/vois3invoicelistgpd.cab
O16 - DPF: {E85F7820-6A5F-4127-A582-1CA62B8834FC} (VOIS5Location.Cab) - http://vois.gpd.cz/vois/ax/vois5location.cab
O16 - DPF: {E8CA9D6E-E7D8-4DA6-ACB1-E2CDD1EADF31} (VOIS5Start.Cab) - http://vois.gpd.cz/vois/ax/vois5start.cab
O16 - DPF: {EB04CB7C-F551-441A-A1A9-C3595EF632B9} (QWTools.Cab) - http://vois.gpd.cz/vois/ax/qwtools.cab
O16 - DPF: {EB9A0E14-3604-4FAD-BB08-CBE5549B02D6} (VOIS3StockLocation.PageExchange) - http://vois.gpd.cz/vois/ax/vois3stocklocation.cab
O16 - DPF: {EBEEDACC-0FED-44EE-9599-65F0DD7E4D6A} (VOIS3ContactFlowBiz_S.CAB) - http://vois.gpd.cz/vois/ax/vois3contactflowbiz_s.cab
O16 - DPF: {ECAD39BF-D48A-4E10-A677-61E9FD1B5641} (VOIS5Casse.Cab) - http://vois.gpd.cz/vois/ax/vois5casse.cab
O16 - DPF: {ED67B250-C777-4FC4-A5AA-6B3ECFA352AC} (VOISItemPartNum.wpItemProducer) - http://vois.gpd.cz/vois/ax/voisitempartnum.cab
O16 - DPF: {F0EA3088-A5BD-11D2-BD4F-70013D000000} (Cpt. Hook Module (version 1,0,0,1)) - http://vois.gpd.cz/vois/ax/cpthook.cab
O16 - DPF: {F152B3E9-59EF-43D6-BB93-BE4C339C57FB} (PriceListArticle1.PriceListArticle) - http://vois.gpd.cz/vois/ax/pricelistarticle1.cab
O16 - DPF: {F27E5A83-1FEB-4177-883D-A04B01F5D394} (EDW I/O Library - Tcp, Http, Mpx, ...) - http://vois.gpd.cz/vois/ax/edwio.cab
O16 - DPF: {F2EF0AC2-4FD8-489A-ADF5-0A70C1C959C0} (VOISPromoStockPriceSaving.CAB) - http://vois.gpd.cz/vois/ax/voispromosto ... saving.cab
O16 - DPF: {F4C0585A-772D-466C-9B5D-EAF71AD74C59} (CGCCAdvSearchKontakty.Cab) - http://vois.gpd.cz/vois/ax/cgccadvsearchkontakty.cab
O16 - DPF: {F5EF0F97-12B3-11D3-B84D-00105A0E5111} (WHGroupInput.ComboSet) - http://vois.gpd.cz/vois/ax/whgroupinput.cab
O16 - DPF: {F6E7C6D3-CD6E-4187-A668-B039275404B0} (CGCCTextPrnSupport.TextPrnHWSupport) - http://vois.gpd.cz/vois/ax/cgcctextprnsupport.cab
O16 - DPF: {F70573D2-39B1-4B4E-ADFC-DB72F634BA31} (VOIS3Order.CAB) - http://vois.gpd.cz/vois/ax/vois3order.cab
O16 - DPF: {FB2443BF-F2C9-4F3E-BC13-C8C18879283F} (VBListLib.LinePreviewCtrl) - http://vois.gpd.cz/vois/ax/vblistlib.cab
O16 - DPF: {FE119961-EB1A-4D94-A6D0-E8114E4C18A0} (VOIS3Repair.Cab) - http://vois.gpd.cz/vois/ax/vois3repair.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = GPD.lan
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = GPD.lan
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = GPD.lan
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - Winlogon Notify: DeviceNP - DeviceNP.dll (file missing)
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Computer Backup (MyPC Backup) (BackupStack) - Just Develop It - C:\Program Files (x86)\MyPC Backup\BackupStack.exe
O23 - Service: Bluetooth Device Manager - Motorola Solutions, Inc. - C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
O23 - Service: Bluetooth Media Service - Motorola Solutions, Inc. - C:\Program Files\Motorola\Bluetooth\audiosrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files\Motorola\Bluetooth\obexsrv.exe
O23 - Service: @C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe
O23 - Service: HP ProtectTools Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Company - c:\Windows\SysWOW64\flcdlock.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Hamachi Service (HamachiService) - LogMeIn Inc. - C:\Program Files (x86)\Hamachi\hamachi.exe
O23 - Service: HP Power Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Connection Manager 4 Service (hpCMSrv) - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
O23 - Service: HP DayStarter Service (HPDayStarterService) - Hewlett-Packard Company - c:\Program Files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: File Sanitizer for HP ProtectTools (HPFSService) - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\windows\system32\Hpservice.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: ioloToolService (ioloService) - iolo technologies, LLC - C:\Program Files (x86)\SafePCRepair\ioloToolService.exe
O23 - Service: Intel(R) Identity Protection Technology Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Endpoint Encryption Agent - Unknown owner - C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\NIS.exe
O23 - Service: OpenVPN Service (OpenVPNService) - Unknown owner - C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe
O23 - Service: Portrait Displays SDK Service (PdiService) - Portrait Displays, Inc. - C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: ArcCapture (uArcCapture) - ArcSoft, Inc. - C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: XobniService - Xobni Corporation - C:\Program Files (x86)\Xobni\XobniService.exe

--
End of file - 39381 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe"
C:\windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\Hpservice.exe
C:\windows\system32\vcsFPService.exe
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\System32\spoolsv.exe
"C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe"
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Hamachi\hamachi.exe" -service
"c:\Program Files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe"
"C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe"
"C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe"
C:\windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe"
C:\windows\System32\svchost.exe -k HPZ12
C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2524
C:\windows\system32\wbem\unsecapp.exe -Embedding
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Motorola\Bluetooth\obexsrv.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
"C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe" /DisableUI
"C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\NIS.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\diMaster.dll" /prefetch:1
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"taskhost.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\NIS.exe" /c /a /s UserSession
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\rundll32.exe" "C:\Program Files\Motorola\Bluetooth\btmshell.dll",TrayApp
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Motorola\Bluetooth\audiosrv.exe"
"C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe" -Embedding
"C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe"
"C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe" -tray
"C:\Program Files (x86)\Hewlett-Packard\HP Mouse Suite\hpMonitor.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe" /start
"C:\ProgramData\HP Mouse Suite Config\hpwjd.exe"
"C:\ProgramData\HP Mouse Suite Config\hpwmsd.exe"
"C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe"
"C:\Program Files (x86)\OpenVPN\bin\openvpn-gui-1.0.3.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
-Minimized
"C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe"
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
"C:\Windows\SysWOW64\cmd.exe" /K CD C:\Users\Public\Documents\pooler-cpuminer-2.3.2-win64 & mine.bat
\??\C:\windows\system32\conhost.exe "-1098132304-760876529502741217-105191859666401861858970468014551916202089303215
C:\Users\Public\Documents\pooler-cpuminer-2.3.2-win64\minerd.exe --algo=scrypt --url=stratum+tcp://us.clevermining.com:3333 --userpass=1B41Fk5z3NzBztppiCCdPSridMGYnser3K:nieco
{C0783E8B-77BC-4A4A-A5F4-F436572BA01B}
{B5368A81-F42F-4EE4-919B-0F78475812CE}
"C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe"
"C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe"
"C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe" /hidden
"C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\SDKCOMServer.exe" -Embedding
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdiSdkHelperx64.exe"
C:\windows\system32\igfxext.exe -Embedding
C:\windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe" frompopup
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -critical
taskmgr.exe /3
"C:\windows\system32\msconfig.exe"

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4108.0.117036842\859309541" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,5,16 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0116 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2342 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_47/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="4108.2.2032033689\1233771941" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_47/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="4108.6.21260741\140094839" /prefetch:673131151
taskeng.exe {976D9F74-EDDE-4C60-A093-F4DFC48FC612}
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_47/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="4108.21.1008087526\2027517228" /prefetch:673131151
"C:\Users\PokornyS\Desktop\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\windows\tasks\HPCeeScheduleForNB-POKORNYS$.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForNB-POKORNYS$ (null)
C:\windows\tasks\HPCeeScheduleForPokornyS.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForPokornyS (null)

=========Mozilla firefox=========

ProfilePath - C:\Users\PokornyS\AppData\Roaming\Mozilla\Firefox\Profiles\n249o6bl.default

prefs.js - "browser.search.useDBForOrder" - true

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 14.0.0.145 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\windows\SysWOW64\Adobe\Director\np32dsw_1212152.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.4.1]
"Description"=
"Path"=C:\windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App V2 Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\10\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 14.0.0.145 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


C:\Program Files (x86)\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Users\PokornyS\AppData\Roaming\Mozilla\Firefox\Profiles\n249o6bl.default\searchplugins\
ask-web-search.xml
uloto.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine64\21.4.0.13\coIEPlg.dll [2014-06-26 917344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14 2117216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3134413B-49B4-425C-98A5-893C1F195601}]
File Sanitizer for HP ProtectTools - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll [2011-02-07 117248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\coIEPlg.dll [2014-06-26 654688]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Norton Vulnerability Protection - C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\IPS\IPSBHO.DLL [2014-02-21 392344]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-04-04 453504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14 1709152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-04-04 157576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine64\21.4.0.13\coIEPlg.dll [2014-06-26 917344]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\coIEPlg.dll [2014-06-26 654688]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HPPowerAssistant"=C:\Program Files\Hewlett-Packard\HP Power Assistant\DelayedAppStarter.exe [2011-01-27 13880]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-02-04 2679592]
"BTMTrayAgent"=C:\Program Files\Motorola\Bluetooth\btmshell.dll [2011-02-16 21709904]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2011-03-31 167960]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2011-03-31 391704]
"Persistence"=C:\windows\system32\igfxpers.exe [2011-03-31 418840]
"MfeEpePcMonitor"=C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe [2013-02-01 200704]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 1271168]
"LogMeIn GUI"=C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe [2012-04-02 57928]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2014-06-09 1664000]
"SpywareTerminatorShield"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe []
"SpywareTerminatorUpdater"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"NCPluginUpdater"=C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [2014-08-05 21720]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-10-21 20549280]
"NokiaSuite.exe"=C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2013-10-02 1090912]
"Windows"=C:\Users\Public\Public\run.vbs [2014-02-07 75]
""= []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [2011-01-29 299576]
"File Sanitizer"=C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe [2011-02-07 12274688]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-01-26 283160]
"NUSB3MON"=c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-11-17 113288]
"DTRun"=c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe [2010-11-24 517456]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-01-17 252296]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2010-11-29 421888]
"MSHostSrv"=C:\windows\inf\cssi.vbe [2014-01-12 2334]
"mine"=C:\Users\Public\Documents\pooler-cpuminer-2.3.2-win64\nieco.vbs [2014-01-18 150]
"MSWinHost"=C:\windows\inf\cisi.vbe [2014-07-06 2334]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2014-07-21 3816784]
"HPConnectionManager"=C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [2012-09-05 184736]
""= []
"HPQuickWebProxy"=C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe [2014-08-20 169528]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HPMonitor.exe.lnk - C:\Program Files (x86)\Hewlett-Packard\HP Mouse Suite\hpMonitor.exe
hpwjd.exe.lnk - C:\ProgramData\HP Mouse Suite Config\hpwjd.exe
hpwmsd.exe.lnk - C:\ProgramData\HP Mouse Suite Config\hpwmsd.exe
OpenVPN GUI.lnk - C:\Program Files (x86)\OpenVPN\bin\openvpn-gui-1.0.3.exe

C:\Users\PokornyS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2320633bbd5b9c41d628d6d2b760a34d.exe
MyPC Backup.lnk - C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2011-03-26 385024]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
EpePcNp64
scecli

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"RunStartupScriptSync"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-08-21 08:48:17 ----D---- C:\rsit
2014-08-21 08:48:17 ----D---- C:\Program Files\trend micro
2014-08-21 08:19:32 ----D---- C:\ProgramData\Licenses
2014-08-21 08:19:31 ----AD---- C:\ProgramData\TEMP
2014-08-21 08:13:54 ----SHD---- C:\Config.Msi
2014-08-21 08:13:35 ----A---- C:\windows\system32\drivers\stflt.sys
2014-08-20 23:24:26 ----A---- C:\autoexec.bat
2014-08-20 23:23:34 ----D---- C:\Program Files\Enigma Software Group
2014-08-20 23:22:30 ----D---- C:\windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-08-20 21:55:57 ----D---- C:\Users\PokornyS\AppData\Roaming\Macrovision
2014-08-20 21:55:54 ----D---- C:\Users\PokornyS\AppData\Roaming\FLEXnet
2014-08-20 21:55:37 ----D---- C:\windows\DPDrv
2014-08-20 20:26:56 ----D---- C:\ProgramData\McAfee
2014-08-20 20:10:11 ----A---- C:\windows\system32\drivers\ndis.sys
2014-08-20 20:08:07 ----A---- C:\windows\system32\umpo.dll
2014-08-20 18:17:25 ----D---- C:\Program Files (x86)\ESET
2014-08-03 19:19:01 ----A---- C:\windows\system32\drivers\hamachi.sys
2014-08-03 19:19:00 ----D---- C:\Program Files (x86)\Hamachi
2014-08-03 19:09:34 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-08-03 19:07:51 ----D---- C:\Program Files (x86)\MyPC Backup
2014-08-03 19:06:28 ----D---- C:\Users\PokornyS\AppData\Roaming\ImperiaOnline
2014-08-03 13:02:20 ----AH---- C:\windows\system32\hamachi.sys
2014-08-03 13:02:15 ----D---- C:\Program Files (x86)\LogMeIn Hamachi

======List of files/folders modified in the last 1 month======

2014-08-21 08:48:17 ----RD---- C:\Program Files
2014-08-21 08:47:52 ----D---- C:\windows\Temp
2014-08-21 08:41:57 ----D---- C:\Program Files (x86)
2014-08-21 08:37:52 ----D---- C:\windows\system32\config
2014-08-21 08:32:53 ----D---- C:\windows\Prefetch
2014-08-21 08:26:59 ----D---- C:\windows\System32
2014-08-21 08:26:59 ----D---- C:\windows\inf
2014-08-21 08:26:59 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-08-21 08:25:21 ----A---- C:\windows\SYSWOW64\log.txt
2014-08-21 08:22:47 ----D---- C:\Users\PokornyS\AppData\Roaming\Hamachi
2014-08-21 08:19:32 ----HD---- C:\ProgramData
2014-08-21 08:19:28 ----D---- C:\windows\SysWOW64
2014-08-21 08:14:06 ----SHD---- C:\windows\Installer
2014-08-21 08:14:06 ----SD---- C:\Users\PokornyS\AppData\Roaming\Microsoft
2014-08-21 08:14:05 ----D---- C:\windows\system32\Tasks
2014-08-21 08:13:39 ----SHD---- C:\System Volume Information
2014-08-21 08:13:35 ----D---- C:\windows\system32\drivers
2014-08-20 23:22:30 ----D---- C:\Windows
2014-08-20 23:22:27 ----D---- C:\Program Files (x86)\Common Files
2014-08-20 22:31:10 ----D---- C:\Users\PokornyS\AppData\Roaming\Hewlett-Packard
2014-08-20 22:29:08 ----D---- C:\Users\PokornyS\AppData\Roaming\hpqLog
2014-08-20 22:26:46 ----D---- C:\windows\winsxs
2014-08-20 22:24:45 ----D---- C:\windows\system32\catroot
2014-08-20 22:21:09 ----D---- C:\windows\system32\DriverStore
2014-08-20 22:21:04 ----D---- C:\windows\system32\catroot2
2014-08-20 22:20:47 ----D---- C:\swsetup
2014-08-20 22:18:36 ----D---- C:\Program Files (x86)\Hewlett-Packard
2014-08-20 21:55:50 ----D---- C:\windows\SYSWOW64\zh-Hant
2014-08-20 21:55:50 ----D---- C:\windows\SYSWOW64\zh-Hans
2014-08-20 21:55:50 ----D---- C:\windows\SYSWOW64\ru
2014-08-20 21:55:50 ----D---- C:\windows\SYSWOW64\pt-BR
2014-08-20 21:55:50 ----D---- C:\windows\SYSWOW64\ko
2014-08-20 21:55:50 ----D---- C:\windows\SYSWOW64\ja
2014-08-20 21:55:50 ----D---- C:\windows\SYSWOW64\it
2014-08-20 21:55:50 ----D---- C:\windows\SYSWOW64\fr
2014-08-20 21:55:50 ----D---- C:\windows\SYSWOW64\es
2014-08-20 21:55:50 ----D---- C:\windows\SYSWOW64\en-US
2014-08-20 21:55:50 ----D---- C:\windows\SYSWOW64\de
2014-08-20 21:55:50 ----D---- C:\windows\SYSWOW64\cs
2014-08-20 21:55:50 ----D---- C:\windows\system32\zh-Hant
2014-08-20 21:55:50 ----D---- C:\windows\system32\zh-Hans
2014-08-20 21:55:50 ----D---- C:\windows\system32\ru
2014-08-20 21:55:50 ----D---- C:\windows\system32\pt-BR
2014-08-20 21:55:50 ----D---- C:\windows\system32\ko
2014-08-20 21:55:50 ----D---- C:\windows\system32\ja
2014-08-20 21:55:50 ----D---- C:\windows\system32\it
2014-08-20 21:55:50 ----D---- C:\windows\system32\fr
2014-08-20 21:55:50 ----D---- C:\windows\system32\es
2014-08-20 21:55:50 ----D---- C:\windows\system32\en-US
2014-08-20 21:55:50 ----D---- C:\windows\system32\de
2014-08-20 21:55:50 ----D---- C:\windows\system32\cs
2014-08-20 21:55:50 ----D---- C:\Program Files\Hewlett-Packard
2014-08-20 21:55:14 ----RSD---- C:\windows\assembly
2014-08-20 21:53:24 ----D---- C:\ProgramData\HPQLOG
2014-08-20 21:40:19 ----D---- C:\ProgramData\Hewlett-Packard
2014-08-20 20:07:47 ----D---- C:\windows\SYSWOW64\drivers
2014-08-20 20:01:08 ----D---- C:\Users\PokornyS\AppData\Roaming\Skype
2014-08-20 20:01:08 ----D---- C:\ProgramData\LogMeIn
2014-08-20 20:01:08 ----D---- C:\Program Files (x86)\PDFCreator
2014-08-20 20:00:51 ----D---- C:\windows\Panther
2014-08-20 20:00:51 ----D---- C:\windows\Minidump
2014-08-20 20:00:51 ----D---- C:\windows\Logs
2014-08-20 20:00:51 ----D---- C:\windows\debug
2014-08-18 13:39:29 ----D---- C:\windows\Tasks
2014-08-18 13:35:39 ----A---- C:\windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-08-18 13:18:01 ----D---- C:\windows\Downloaded Program Files
2014-08-15 09:22:46 ----D---- C:\windows\system32\drivers\NISx64
2014-08-06 09:41:43 ----RD---- C:\Program Files (x86)\Skype
2014-08-04 18:22:17 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-04 14:59:20 ----D---- C:\Users\PokornyS\AppData\Roaming\.minecraft
2014-08-04 08:49:35 ----D---- C:\Users\PokornyS\AppData\Roaming\McTitan Dinocraft
2014-08-03 19:11:19 ----D---- C:\Program Files (x86)\NortonInstaller
2014-08-03 19:11:14 ----D---- C:\ProgramData\Norton

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;HP Filter; C:\windows\system32\DRIVERS\hpdskflt.sys [2012-09-24 31040]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2011-01-13 439320]
R0 MfeEpeOpal;MfeEpeOpal; C:\windows\system32\drivers\MfeEpeOpal.sys [2013-02-01 101288]
R0 MfeEpePc;MfeEpePc; C:\windows\system32\drivers\MfeEpePc.sys [2013-02-01 158888]
R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2012-03-20 203888]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\windows\system32\drivers\csc.sys [2010-11-20 514560]
R2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [2012-04-02 15928]
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\windows\system32\drivers\LMIRfsDriver.sys [2012-04-02 72216]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\windows\system32\DRIVERS\Accelerometer.sys [2012-09-24 43840]
R3 Afc;PPdus ASPI Shell; C:\windows\SysWOW64\drivers\Afc.sys [2006-11-14 22784]
R3 ARCVCAM;ARCVCAM, ArcSoft Webcam Sharing Manager Driver; C:\windows\system32\DRIVERS\ArcSoftVCapture.sys [2010-11-11 32192]
R3 BHDrvx64;BHDrvx64; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20140703.001\BHDrvx64.sys [2014-06-06 1530160]
R3 BTMUSB;Motorola Bluetooth Radio Service; C:\windows\System32\Drivers\btmusb.sys [2011-02-09 486144]
R3 ccSet_NIS;NIS Settings Manager; C:\windows\system32\drivers\NISx64\1504000.00D\ccSetx64.sys [2014-02-21 162392]
R3 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2014-06-18 486192]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2014-06-18 142128]
R3 hamachi;Hamachi Network Interface; C:\windows\system32\DRIVERS\hamachi.sys [2014-08-03 33344]
R3 HP8207_8307;HP-HP8207_8307; C:\windows\system32\DRIVERS\HP8207_8307.sys [2010-02-04 15360]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\windows\system32\DRIVERS\HpqKbFiltr.sys [2010-12-03 25912]
R3 IDSVia64;IDSVia64; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20140717.001\IDSvia64.sys [2014-06-18 525016]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2011-03-26 12262336]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 JMCR;JMCR; C:\windows\system32\DRIVERS\jmcr.sys [2014-06-09 175928]
R3 lmimirr;lmimirr; C:\windows\system32\DRIVERS\lmimirr.sys [2012-04-02 11552]
R3 MEIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 80384]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 181248]
R3 RDPDR;Terminal Server Device Redirector Driver; C:\windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2014-06-09 708200]
R3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver; C:\windows\system32\DRIVERS\rtl8192Ce.sys [2011-03-30 1143400]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\windows\system32\DRIVERS\snp2uvc.sys [2010-12-21 1826048]
R3 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\windows\system32\drivers\NISx64\1504000.00D\SRTSPX64.SYS [2013-07-31 36952]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\windows\system32\DRIVERS\stwrt64.sys [2014-06-09 543744]
R3 SymDS;Symantec Data Store; C:\windows\system32\drivers\NISx64\1504000.00D\SYMDS64.SYS [2013-08-01 493656]
R3 SymEFA;Symantec Extended File Attributes; C:\windows\system32\drivers\NISx64\1504000.00D\SYMEFA64.SYS [2014-03-04 1148120]
R3 SymEvent;SymEvent; \??\C:\windows\system32\Drivers\SYMEVENT64x86.SYS [2014-06-18 177752]
R3 SymIRON;Symantec Iron Driver; C:\windows\system32\drivers\NISx64\1504000.00D\Ironx64.SYS [2013-07-31 264280]
R3 SymNetS;Symantec Network Security WFP Driver; C:\windows\System32\Drivers\NISx64\1504000.00D\SYMNETS.SYS [2014-02-18 593112]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2011-02-04 1413680]
R3 tap0901;TAP-Win32 Adapter V9; C:\windows\system32\DRIVERS\tap0901.sys [2011-12-15 31232]
S3 AgereSoftModem;Agere Systems Soft Modem; C:\windows\system32\DRIVERS\agrsm64.sys [2009-06-10 1146880]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 BTMCOM;Bluetooth Serial Port; C:\windows\System32\Drivers\btmcom.sys [2010-06-30 52736]
S3 DAMDrv;DAMDrv; C:\windows\system32\DRIVERS\DAMDrv64.sys [2011-02-07 63336]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []
S3 NAVENG;NAVENG; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20140718.002\ENG64.SYS [2014-06-18 126040]
S3 NAVEX15;NAVEX15; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20140718.002\EX64.SYS [2014-06-18 2099288]
S3 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\windows\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\windows\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RimUsb;zařízení BlackBerry Smartphone; C:\windows\System32\Drivers\RimUsb_AMD64.sys [2007-05-14 27520]
S3 s3cap;s3cap; C:\windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 sdbus;sdbus; C:\windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 SRTSP;Symantec Real Time Storage Protection x64; C:\windows\System32\Drivers\NISx64\1504000.00D\SRTSP64.SYS [2014-02-13 875736]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\windows\system32\DRIVERS\ssadbus.sys [2011-05-13 157672]
S3 storvsc;storvsc; C:\windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TPM;TPM; C:\windows\system32\drivers\tpm.sys [2009-07-14 38400]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 upperdev;upperdev; C:\windows\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 usbser;USB Modem Driver; C:\windows\system32\DRIVERS\usbser.sys [2010-11-20 32768]
S3 UsbserFilt;UsbserFilt; C:\windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]
S4 LMIRfsClientNP;LMIRfsClientNP; C:\windows\system32\drivers\LMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2014-06-09 89600]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files\Motorola\Bluetooth\obexsrv.exe [2011-02-16 680016]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 DpHost;@C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [2011-11-10 486224]
R2 Fabs;FABS - Helping agent for MAGIX media database; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2011-05-24 1840128]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2014-07-21 2544976]
R2 HamachiService;Hamachi Service; C:\Program Files (x86)\Hamachi\hamachi.exe [2014-08-03 625952]
R2 HP Power Assistant Service;HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2011-01-27 131128]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2013-11-04 92160]
R2 HPDayStarterService;HP DayStarter Service; c:\Program Files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe [2011-01-28 133688]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2013-05-13 270624]
R2 HPFSService;File Sanitizer for HP ProtectTools; C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe [2011-02-07 320000]
R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe [2011-01-29 281656]
R2 hpsrv;HP Service; C:\windows\system32\Hpservice.exe [2012-09-24 31040]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-26 13336]
R2 jhi_service;Intel(R) Identity Protection Technology Host Interface Service; C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe [2010-11-29 210896]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-07-16 377616]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-01-17 326168]
R2 McAfee Endpoint Encryption Agent;McAfee Endpoint Encryption Agent; C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [2013-02-01 1323008]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 12600]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\NIS.exe [2014-06-27 276376]
R2 PdiService;Portrait Displays SDK Service; C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2011-01-18 113264]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2014-06-09 323072]
R2 uArcCapture;ArcCapture; C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [2010-11-11 502464]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-01-17 2656280]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\windows\system32\vcsFPService.exe [2012-02-15 2602576]
R3 Bluetooth Device Manager;Bluetooth Device Manager; C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe [2011-02-09 4151376]
R3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files\Motorola\Bluetooth\audiosrv.exe [2011-03-01 1189968]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-12-30 1028096]
R3 hpCMSrv;HP Connection Manager 4 Service; C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2012-09-05 1420192]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2013-05-13 1129760]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\windows\System32\svchost.exe [2009-07-14 27136]
S2 BackupStack;Computer Backup (MyPC Backup); C:\Program Files (x86)\MyPC Backup\BackupStack.exe [2014-06-18 36424]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-07-24 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09 262320]
S3 AppMgmt;@appmgmts.dll,-3250; C:\windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-19 44376]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2011-04-26 2702848]
S3 FLCDLOCK;HP ProtectTools Device Locking / Auditing; c:\Windows\SysWOW64\flcdlock.exe [2011-02-04 464480]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-12-30 647680]
S3 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2014-05-10 227904]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2014-05-10 203344]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-07-24 116648]
S3 ioloService;ioloToolService; C:\Program Files (x86)\SafePCRepair\ioloToolService.exe [2013-11-22 2625800]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-08-03 119408]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
S3 OpenVPNService;OpenVPN Service; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [2011-12-15 14848]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\windows\System32\svchost.exe [2009-07-14 27136]
S4 LMIMaint;LogMeIn Maintenance Service; C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe [2012-07-22 147368]
S4 LogMeIn;LogMeIn; C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe [2012-04-02 407424]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: problem s minerd.exe

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Jen maly dotaz, jedna se o domaci PC nebo nejaky pracovni\firemni??
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

fassmannov
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 21 říj 2013 16:45

Re: problem s minerd.exe

#3 Příspěvek od fassmannov »

je to firemní notebook
ale bohužel kolega ho pujčil dětem :-(

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: problem s minerd.exe

#4 Příspěvek od vyosek »

Nase forum je ale urceno pro domaci uzivatele - firma ma vetsinou sveho IT technika, nebo nekoho, kdo je za provoz ntb odpovedny (placeny) a tedy se ma starat, pripadne objednat servis - my tu nebudeme zdarma za nej delat jeho praci...

Pokud firma tohoto technika nema, je na managementu firmy, aby se o stroje postaral...Vam to nedoporucuji, jelikoz muzete stroj poslat i do kytek a to nevim jak pak vysvetlite...

Pripadne se muzete firma obratit na nasi placenou podporu http://www.neslape.cz kde je pomoc osetrena obchodnimi podminkami...


Abyste si nemyslel, ze si to tu cucam z prstu, tak je toto popsano i v pravidlech fora
6. Fórum viry.cz se nezabývá odvirováním firemních PC - na toto jsou ve firmách placení (a někdy až hodně nadstandardně) IT technici, případně si je firma může najmout. My jsme tu zdarma a ve svém volném čase, nehodláme dělat práci za někoho jiného, kdo si pak jen slízne smetánku a plat. Taktéž ani neposkytujeme poradenství v oblasti zabezpečení firemních sítí či nastavení firemních sítí. Zkrátka a jednoduše, naše fórum poskytuje podporu pouze domácím uživatelům.
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Odpovědět