VIRY.CZ

Prosím o kontrolu. Dnes po spuštění nb s OS W7 HP trvalo cca.30 min. než se prohlížeč vůbec načte a následně opět trvá velice dlouho, než je možné se přihlásit. Nevím, kde je chyba a proto přikládám log.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-05-2015 02
Ran by Ruda (administrator) on RUDA-PC on 15-05-2015 12:35:12
Running from C:\PerfLogs\Desktop
Loaded Profiles: Ruda (Available profiles: Ruda & 63ruda99 & Guest & Classic .NET AppPool & DefaultAppPool)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
() C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x86\QuickGesture.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe
(IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\TCPSVCS.EXE
(Microsoft Corporation) C:\Windows\System32\snmp.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(PS Media s.r.o.) C:\Windows\SysWOW64\ssins.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATII4E.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATII4E.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDGesture.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
() C:\Program Files (x86)\Rapoo\RpWireless\LedStatus.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officec2rclient.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2661672 2012-02-19] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [361984 2011-05-26] (Alcor Micro Corp.)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [1023616 2012-05-31] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-05-31] (Atheros Commnucations)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1426136 2015-04-20] (COMODO)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2000-01-01] (Intel Corporation)
HKLM-x32\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [102568 2012-02-22] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2321072 2012-02-03] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [322208 2012-06-25] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174752 2012-06-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1057408 2015-03-14] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207360 2015-03-30] (ArcSoft Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKLM-x32\...\Run: [LedStatus] => C:\Program Files (x86)\Rapoo\RpWireless\LedStatus.exe [1709736 2015-04-08] ()
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2072928 2015-04-17] (Wondershare)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-841361005-909514878-2309378359-1002\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATII4E.EXE [283232 2015-03-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-841361005-909514878-2309378359-1002\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATII4E.EXE [283232 2015-03-14] (SEIKO EPSON CORPORATION)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [166568 2015-03-23] (NVIDIA Corporation)
AppInit_DLLs: , C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [166568 2015-03-23] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [146480 2015-03-23] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [146480 2015-03-23] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [146480 2015-03-23] (NVIDIA Corporation)
AppInit_DLLs-x32: , c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [146480 2015-03-23] (NVIDIA Corporation)
AppInit_DLLs-x32: , C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [146480 2015-03-23] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass FF RunOnce.lnk [2015-03-22]
ShortcutTarget: Install LastPass FF RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk [2015-03-22]
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe ()
Startup: C:\Users\Ruda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SystemExplorerDisabled [2014-05-05] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-841361005-909514878-2309378359-1002\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
SearchScopes: HKLM-x32 -> SuggestionsURL_JSON http://api.widdit.com/suggestions/?form ... earchTerms}
SearchScopes: HKLM-x32 -> TopResultURLFallback http://search.certified-toolbar.com?si= ... earchTerms}
SearchScopes: HKU\S-1-5-21-841361005-909514878-2309378359-1002 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-841361005-909514878-2309378359-1002 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKU\S-1-5-21-841361005-909514878-2309378359-1002 -> {1E1F17B7-F889-4480-8A29-31EC9A9EFF8C} URL = http://www.novinky.cz/hledej?w={searchT ... arch_12454
SearchScopes: HKU\S-1-5-21-841361005-909514878-2309378359-1002 -> {1E2C0E9F-5A57-404C-B006-0935D8B62540} URL = http://www.alza.cz/SearchAdvanced.asp?EXPS={searchTerms}
SearchScopes: HKU\S-1-5-21-841361005-909514878-2309378359-1002 -> {261F48F8-D058-48FB-AF2F-1612D1198CC3} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_12454
SearchScopes: HKU\S-1-5-21-841361005-909514878-2309378359-1002 -> {4B2BCD33-D984-4D8E-9C54-B803E34B1CA9} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_12454
SearchScopes: HKU\S-1-5-21-841361005-909514878-2309378359-1002 -> {593B6F83-B0BB-4B83-A5D9-7AC258B674B2} URL = http://www.mapy.cz/?query={searchTerms} ... arch_12454
SearchScopes: HKU\S-1-5-21-841361005-909514878-2309378359-1002 -> {9249FFDB-058C-45D6-9AF3-F1B23BF48FF0} URL = http://search.seznam.cz/?q={searchTerms ... arch_12454
SearchScopes: HKU\S-1-5-21-841361005-909514878-2309378359-1002 -> {9FF53AE7-AE60-4664-949F-033A0F77247D} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
SearchScopes: HKU\S-1-5-21-841361005-909514878-2309378359-1002 -> {A11803E2-62F5-4A23-B930-9F8D435E2A78} URL = http://www.firmy.cz/phr/{searchTerms}?s ... arch_12454
SearchScopes: HKU\S-1-5-21-841361005-909514878-2309378359-1002 -> {A3A70049-68EA-44AC-905D-25C4A57E654C} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
SearchScopes: HKU\S-1-5-21-841361005-909514878-2309378359-1002 -> {C7C7B0ED-D00A-4989-9D5A-29377FA141AF} URL = http://cs.wikipedia.org/w/index.php?tit ... earchTerms}
SearchScopes: HKU\S-1-5-21-841361005-909514878-2309378359-1002 -> {D55EDDC6-DF84-4DE3-A258-8E0FC1DAE671} URL = http://www.radirna.cz/search/{searchTerms}/
SearchScopes: HKU\S-1-5-21-841361005-909514878-2309378359-1002 -> {DCEBF011-A869-4BF6-AF25-376F5EE21962} URL = http://cs.wikipedia.org/w/index.php?tit ... earchTerms}
BHO: No Name -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> No File
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-03-10] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-16] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-03-14] (SEIKO EPSON CORPORATION)
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2015-03-22] (LastPass)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-03-10] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-10] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-16] (Oracle Corporation)
BHO: DownloadHelper Class -> {FF2573AE-E1ED-40e1-83BA-F544CB2EE135} -> C:\Program Files\Common Files\Download Helper\DownloadHelperx64.dll [2011-01-07] (IE Download Helper)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-02-25] (Eyeo GmbH)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-05-31] (Atheros Commnucations)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar.dll [2015-03-22] (LastPass)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-03-10] (Microsoft Corporation)
BHO-x32: DownloadHelper Class -> {FF2573AE-E1ED-40e1-83BA-F544CB2EE135} -> C:\Program Files (x86)\Common Files\Download Helper\DownloadHelper.dll [2011-01-07] (IE Download Helper)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-02-25] (Eyeo GmbH)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-03-14] (SEIKO EPSON CORPORATION)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2015-03-22] (LastPass)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll [2015-03-22] (LastPass)
DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} http://www.asus.com/support/asusTek_sys_ctrl3.cab
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shoc ... tor/sw.cab
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - No File

FireFox:
========
FF ProfilePath: C:\Users\Ruda\AppData\Roaming\Mozilla\Firefox\Profiles\0hfd64x0.default-1423008048081
FF Homepage: https://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-05-06] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2015-03-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-16] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-16] (Oracle Corporation)
FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2015-03-22] (LastPass)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll No File
FF Plugin: @Skype Technologies S.A..com/Skype Web Plugin -> C:\Program Files (x86)\SkypeWebPlugin\npSkypeWebPlugin64.dll [2013-12-04] (Skype)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2015-03-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-05-06] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-03-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-02-13] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2000-01-01] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2000-01-01] (Intel Corporation)
FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2015-03-22] (LastPass)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-04-12] (Microsoft Corporation)
FF Plugin-x32: @oberon-media.com/ONCAdapter -> C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.14\npapicomadapter.dll [2012-05-31] (Oberon-Media )
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-03-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin HKU\S-1-5-21-841361005-909514878-2309378359-1002: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-03-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-841361005-909514878-2309378359-1002: @kb-ext.cz/PKIComponent -> C:\Users\Ruda\AppData\Roaming\KB-ext\lib\x86\npPKIComponentNPAPI-kbext.dll [2015-03-25] (Komerční banka, a.s.)
FF Plugin HKU\S-1-5-21-841361005-909514878-2309378359-1002: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Ruda\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-841361005-909514878-2309378359-1002: @stickypassword.com/Sticky Password -> C:\Program Files (x86)\Sticky Password\npspAutofill.dll [2015-05-08] (Lamantine Software a.s.)
FF Plugin HKU\S-1-5-21-841361005-909514878-2309378359-1002: @tools.google.com/Google Update;version=3 -> C:\Users\Ruda\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-14] (Google Inc.)
FF Plugin HKU\S-1-5-21-841361005-909514878-2309378359-1002: @tools.google.com/Google Update;version=9 -> C:\Users\Ruda\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-14] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll [2015-03-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin ProgramFiles/Appdata: C:\Users\Ruda\AppData\Roaming\mozilla\plugins\nppdf32.dll [2014-12-27] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Ruda\AppData\Roaming\mozilla\plugins\npPDFXCviewNPPlugin.dll [2014-12-28] (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Users\Ruda\AppData\Roaming\Mozilla\Firefox\Profiles\0hfd64x0.default-1423008048081\searchplugins\zbocz.xml [2015-02-05]
FF Extension: LastPass - C:\Users\Ruda\AppData\Roaming\Mozilla\Firefox\Profiles\0hfd64x0.default-1423008048081\Extensions\support@lastpass.com [2015-04-26]
FF Extension: No Name - C:\Users\Ruda\AppData\Roaming\Mozilla\Firefox\Profiles\0hfd64x0.default-1423008048081\Extensions\trash [2015-04-27]
FF Extension: S3.Google Translator - C:\Users\Ruda\AppData\Roaming\Mozilla\Firefox\Profiles\0hfd64x0.default-1423008048081\Extensions\s3google@translator.xpi [2015-02-04]
FF Extension: Speed Dial - C:\Users\Ruda\AppData\Roaming\Mozilla\Firefox\Profiles\0hfd64x0.default-1423008048081\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2015-03-26]
FF Extension: Adblock Plus - C:\Users\Ruda\AppData\Roaming\Mozilla\Firefox\Profiles\0hfd64x0.default-1423008048081\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-04]
FF Extension: Tab Mix Plus - C:\Users\Ruda\AppData\Roaming\Mozilla\Firefox\Profiles\0hfd64x0.default-1423008048081\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2015-03-27]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2015-03-21]
FF HKU\S-1-5-21-841361005-909514878-2309378359-1002\...\Firefox\Extensions: [{54affe52-8223-453b-be1e-2fe2e250045c}] - C:\Users\Ruda\AppData\Roaming\Lamantine\Sticky Password\spAutofill
FF Extension: Sticky Password Autofill Engine - C:\Users\Ruda\AppData\Roaming\Lamantine\Sticky Password\spAutofill [2015-05-08]
FF HKU\S-1-5-21-841361005-909514878-2309378359-1002\...\Thunderbird\Extensions: [{54affe52-8223-453b-be1e-2fe2e250045c}] - C:\Users\Ruda\AppData\Roaming\Lamantine\Sticky Password\spAutofill

Chrome:
=======
CHR StartupUrls: Profile 2 -> "hxxp://www.google.cz/?gws_rd=ssl"
CHR Profile: C:\Users\Ruda\AppData\Local\Google\Chrome\User Data\Default
CHR Profile: C:\Users\Ruda\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Extension: (Google Slides) - C:\Users\Ruda\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-24]
CHR Extension: (Google Docs) - C:\Users\Ruda\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-24]
CHR Extension: (Google Drive) - C:\Users\Ruda\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-24]
CHR Extension: (YouTube) - C:\Users\Ruda\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-24]
CHR Extension: (Adblock Plus) - C:\Users\Ruda\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-03-29]
CHR Extension: (Google Search) - C:\Users\Ruda\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-24]
CHR Extension: (Google Sheets) - C:\Users\Ruda\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-24]
CHR Extension: (Bookmark Manager) - C:\Users\Ruda\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-16]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Ruda\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2015-01-24]
CHR Extension: (Google Wallet) - C:\Users\Ruda\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-24]
CHR Extension: (Gmail) - C:\Users\Ruda\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-24]
CHR HKLM\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - http://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - http://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2015-02-25] (ABBYY)
R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2015-03-30] (ArcSoft Inc.)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [119424 2012-05-31] (Atheros Commnucations) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2719928 2015-05-05] (Microsoft Corporation)
R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70864 2014-12-25] (Comodo Security Solutions, Inc.)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5540424 2015-04-20] (COMODO)
R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2265816 2015-04-20] (COMODO)
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1254400 2015-05-09] (Microsoft Corporation)
R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [216576 2015-02-11] () [File not signed]
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2370240 2014-11-27] (Comodo Security Solutions, Inc.)
R2 EpsonCustomerResearchParticipation; C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe [662592 2015-04-21] (SEIKO EPSON CORPORATION)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2015-05-14] (Seiko Epson Corporation)
S4 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-12-25] (Comodo Security Solutions, Inc.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2000-01-01] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)
R2 MSSQL$SQLEXPRESS; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2015-02-21] (Microsoft Corporation)
R2 MSSQLSERVER; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe [29293408 2015-02-21] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
R2 RapportMgmtService; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [1943832 2015-05-02] (IBM Corp.)
R2 simptcp; C:\Windows\SysWOW64\tcpsvcs.exe [9216 2009-07-14] (Microsoft Corporation)
R2 SNMP; C:\Windows\System32\snmp.exe [49664 2010-11-20] (Microsoft Corporation)
R2 SNMP; C:\Windows\SysWOW64\snmp.exe [47616 2010-11-20] (Microsoft Corporation)
R2 ssinstall; C:\Windows\SysWOW64\ssins.exe [2324216 2013-11-01] (PS Media s.r.o.)
S3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [820960 2014-12-20] (Mister Group)
S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5436176 2015-03-01] (TeamViewer GmbH)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2000-01-01] (VIA Technologies, Inc.)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [327296 2012-05-31] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AiCharger; C:\Windows\SysWOW64\DRIVERS\AiCharger.sys [17152 2012-02-29] (ASUSTek Computer Inc.)
R3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2015-01-06] (AnvSoft Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 AsusVBus; C:\Windows\System32\DRIVERS\AsusVBus.sys [35968 2012-04-12] (Windows (R) Win 7 DDK provider)
R3 AsusVTouch; C:\Windows\System32\DRIVERS\AsusVTouch.sys [16512 2012-04-12] (Windows (R) Win 7 DDK provider)
R1 CFRMD; C:\Windows\System32\DRIVERS\CFRMD.sys [37976 2014-06-26] (Windows (R) Win 7 DDK provider) [File not signed]
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [20696 2015-04-01] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [797280 2015-04-01] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [45880 2015-04-01] (COMODO)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-01-31] ()
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-04-03] (REALiX(tm))
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [104608 2015-04-01] (COMODO)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [113280 2015-05-06] (ITE ) [File not signed]
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [117912 2000-01-01] (Qualcomm Atheros Co., Ltd.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2000-01-01] (Intel Corporation)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S3 PCWinSoft; C:\Windows\System32\DRIVERS\scrcamhrdrv_x64.sys [241800 2012-10-11] (Windows (R) Server 2003 DDK provider)
R1 RapportCerberus_80128; C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_80128.sys [844440 2015-05-02] (IBM Corp.)
R1 RapportEI64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [445816 2015-03-11] (IBM Corp.)
R0 RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [535576 2015-03-11] (IBM Corp.)
R1 RapportPG64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [558872 2015-03-11] (IBM Corp.)
R3 rpkmdrv; C:\Windows\System32\drivers\rpkmdrv.sys [21248 2015-04-08] ()
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-12-22] ()
S3 XHCIdrv; C:\Windows\System32\DRIVERS\XHCIdrv.sys [119720 2013-08-08] (Windows (R) Win 7 DDK provider)
S3 cpuz134; \??\C:\Users\Ruda\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-15 11:39 - 2015-05-15 11:39 - 00000000 ___RD () C:\Users\Ruda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-05-15 11:08 - 2015-05-15 11:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-15 11:06 - 2015-05-15 11:08 - 00000000 ____D () C:\c00fcbf951e24eb515
2015-05-15 10:56 - 2015-05-15 10:56 - 00000000 _____ () C:\Users\Ruda\AppData\Local\{46B461A5-CA78-4F7D-82DE-01B9DB6F713B}
2015-05-15 08:41 - 2015-05-15 08:41 - 00000000 _____ () C:\Users\Ruda\AppData\Local\{3E5CE45F-5149-45FE-9823-C190A8D490D1}
2015-05-14 02:14 - 2015-05-15 11:38 - 00000022 _____ () C:\Windows\S.dirmngr
2015-05-14 02:13 - 2015-05-15 11:38 - 00000504 _____ () C:\Windows\setupact.log
2015-05-14 02:13 - 2015-05-15 11:36 - 00000848 _____ () C:\Windows\PFRO.log
2015-05-14 02:13 - 2015-05-14 02:13 - 00000000 _____ () C:\Windows\setuperr.log
2015-05-13 22:28 - 2015-05-13 22:28 - 00000000 ____D () C:\Windows\System32\Tasks\2BrightSparks
2015-05-13 22:28 - 2015-05-13 22:28 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\2BrightSparks
2015-05-13 22:28 - 2015-05-13 22:28 - 00000000 ____D () C:\Users\Ruda\AppData\Local\2BrightSparks
2015-05-13 22:28 - 2015-05-13 22:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2BrightSparks
2015-05-13 22:28 - 2015-05-13 22:28 - 00000000 ____D () C:\Program Files (x86)\2BrightSparks
2015-05-13 22:22 - 2015-05-13 22:26 - 14148296 _____ (2BrightSparks Pte Ltd ) C:\Users\Ruda\Downloads\SyncBack_Setup.exe
2015-05-13 22:02 - 2015-05-13 22:02 - 00012622 _____ () C:\Users\Ruda\Documents\Programy ve W7.odt
2015-05-13 21:22 - 2015-05-13 21:22 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\com.adobe.amp
2015-05-13 15:57 - 2015-05-13 15:58 - 00002809 _____ () C:\Users\Ruda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Install Clean Up.lnk
2015-05-13 15:57 - 2015-05-13 15:57 - 00000000 ____D () C:\Program Files (x86)\Windows Installer Clean Up
2015-05-13 15:56 - 2015-05-13 15:56 - 00003114 _____ () C:\Windows\System32\Tasks\{9FA5B99F-75D8-4FF1-9725-01FB48586EE6}
2015-05-13 15:43 - 2015-05-13 15:43 - 00000000 ____D () C:\Windows\LastGood.Tmp
2015-05-13 14:36 - 2015-05-01 15:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 14:36 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 13:30 - 2015-05-13 13:30 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\AVG
2015-05-13 13:30 - 2015-05-13 13:30 - 00000000 ____D () C:\Users\Ruda\AppData\Local\Avg
2015-05-13 13:29 - 2015-05-13 13:31 - 00000000 ____D () C:\ProgramData\AVG
2015-05-13 13:28 - 2015-05-13 13:28 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\RHEng
2015-05-13 12:38 - 2015-05-13 12:39 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2015-05-13 12:38 - 2015-05-13 12:38 - 00001013 _____ () C:\Users\Ruda\Desktop\Notepad++.lnk
2015-05-13 12:38 - 2015-05-13 12:38 - 00001013 _____ () C:\Users\Guest\Desktop\Notepad++.lnk
2015-05-13 12:38 - 2015-05-13 12:38 - 00001013 _____ () C:\Users\63ruda99\Desktop\Notepad++.lnk
2015-05-13 12:38 - 2015-05-13 12:38 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-05-13 12:38 - 2015-05-13 12:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-05-13 12:37 - 2015-05-13 12:37 - 15495371 _____ () C:\Users\Ruda\Downloads\nppInstaller.exe
2015-05-13 12:32 - 2015-05-13 12:32 - 17721768 _____ (Adobe Systems Inc.) C:\Users\Ruda\Downloads\AdobeAIRInstaller(1).exe
2015-05-13 12:05 - 2015-05-13 12:06 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.4
2015-05-13 12:05 - 2015-05-13 12:05 - 00001468 _____ () C:\Users\Public\Desktop\LibreOffice 4.4.lnk
2015-05-13 11:43 - 2015-05-13 11:43 - 06836224 _____ () C:\Users\Ruda\Downloads\LibreOffice_4.4.3_Win_x86_helppack_cs.msi
2015-05-13 11:41 - 2015-05-13 11:43 - 224387072 _____ () C:\Users\Ruda\Downloads\LibreOffice_4.4.3_Win_x86.msi
2015-05-13 03:15 - 2015-05-05 03:29 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-13 03:15 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-05-13 03:15 - 2015-04-18 05:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-13 03:15 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-05-13 03:14 - 2015-04-22 04:28 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-13 03:14 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-05-13 03:14 - 2015-04-21 19:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-13 03:14 - 2015-04-21 19:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-13 03:14 - 2015-04-21 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-13 03:14 - 2015-04-21 18:51 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-13 03:14 - 2015-04-21 18:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-13 03:14 - 2015-04-21 18:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-13 03:14 - 2015-04-21 18:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-13 03:14 - 2015-04-21 18:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-13 03:14 - 2015-04-21 18:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-13 03:14 - 2015-04-21 18:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-13 03:14 - 2015-04-21 18:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-13 03:14 - 2015-04-21 18:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-13 03:14 - 2015-04-21 18:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-13 03:14 - 2015-04-21 18:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-13 03:14 - 2015-04-21 18:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-13 03:14 - 2015-04-21 18:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-13 03:14 - 2015-04-21 18:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-13 03:14 - 2015-04-21 18:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-13 03:14 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-05-13 03:14 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-05-13 03:14 - 2015-04-21 18:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-13 03:14 - 2015-04-21 18:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-13 03:14 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-05-13 03:14 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-05-13 03:14 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-05-13 03:14 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-05-13 03:14 - 2015-04-21 18:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-13 03:14 - 2015-04-21 18:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-13 03:14 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-05-13 03:14 - 2015-04-21 18:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-13 03:14 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-05-13 03:14 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-05-13 03:14 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-05-13 03:14 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-05-13 03:14 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-05-13 03:14 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-05-13 03:14 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-05-13 03:14 - 2015-04-21 17:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-13 03:14 - 2015-04-21 17:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-13 03:14 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-05-13 03:14 - 2015-04-21 17:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-13 03:14 - 2015-04-21 17:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-13 03:14 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-05-13 03:14 - 2015-04-21 17:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-13 03:14 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-05-13 03:14 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-05-13 03:14 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-05-13 03:14 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-05-13 03:14 - 2015-04-21 17:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-13 03:14 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-05-13 03:14 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-05-13 03:14 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-05-13 03:14 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-05-13 03:14 - 2015-04-21 17:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-13 03:14 - 2015-04-21 17:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-13 03:14 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-05-13 03:14 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-05-13 03:14 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-05-13 03:14 - 2015-04-13 05:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-13 03:12 - 2015-04-20 05:17 - 01647104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-13 03:12 - 2015-04-20 05:17 - 01179136 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-13 03:12 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-05-13 03:12 - 2015-04-20 04:11 - 03204608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-13 03:12 - 2015-04-08 05:29 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-13 03:12 - 2015-04-08 05:29 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-13 03:12 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-05-12 21:04 - 2015-05-12 23:23 - 00011437 _____ () C:\Users\Ruda\Documents\Programy.odt
2015-05-12 18:42 - 2015-05-12 19:24 - 00000000 ____D () C:\Users\Ruda\AppData\Local\box-9ec6d6a762214a05f09b71757106fc8c
2015-05-12 11:39 - 2015-05-12 12:00 - 00000892 _____ () C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-05-12 11:39 - 2015-05-12 11:39 - 00003882 _____ () C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-05-12 11:26 - 2015-05-12 11:26 - 00000000 ____D () C:\Users\Ruda\AppData\Local\Opera Software
2015-05-12 09:28 - 2015-05-12 09:28 - 04667763 _____ (Mgr. Radovan Kraus ) C:\Users\Ruda\Downloads\TiskObalek_CZ_3228.exe
2015-05-12 06:24 - 2015-05-13 15:43 - 04149784 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys
2015-05-12 02:09 - 2015-05-12 02:09 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2015-05-12 02:04 - 2015-05-12 02:05 - 02168712 _____ (emc) C:\Users\Ruda\Downloads\uTorrent221.exe
2015-05-12 00:57 - 2015-05-12 00:57 - 00077824 _____ (Fox Magic Software) C:\Windows\SysWOW64\fmcodec.DLL
2015-05-12 00:56 - 2015-05-12 00:56 - 17114432 _____ (DsNET Corp ) C:\Users\Ruda\Downloads\aTube_Catcher_ATU3_8001(1).exe
2015-05-09 00:29 - 2015-05-09 00:29 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 01254400 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-09 00:29 - 2015-05-09 00:29 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-09 00:29 - 2015-05-09 00:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-05-09 00:29 - 2015-05-09 00:29 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-05-09 00:29 - 2015-05-09 00:29 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-05-08 00:56 - 2015-05-08 00:56 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\Lamantine
2015-05-08 00:49 - 2015-05-12 17:27 - 00000000 ___SD () C:\Users\Ruda\Documents\Sticky Passwords
2015-05-08 00:49 - 2015-05-08 00:49 - 00001060 _____ () C:\Users\Public\Desktop\Sticky Password.lnk
2015-05-08 00:49 - 2015-05-08 00:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sticky Password
2015-05-08 00:49 - 2015-05-08 00:49 - 00000000 ____D () C:\ProgramData\Lamantine
2015-05-08 00:48 - 2015-05-08 00:49 - 00000000 ____D () C:\Program Files (x86)\Sticky Password
2015-05-08 00:46 - 2015-05-08 00:47 - 22520792 _____ (Lamantine Software ) C:\Users\Ruda\Downloads\StickyPassword_rev80333.exe
2015-05-07 11:33 - 2015-05-07 11:34 - 00000000 ____D () C:\Users\Public\Documents\StickyPassword
2015-05-06 17:55 - 2015-05-06 17:55 - 00000000 ____D () C:\Users\Ruda\AppData\Local\DriverToolkit
2015-05-06 17:28 - 2015-05-06 17:28 - 00003216 _____ () C:\Windows\System32\Tasks\{48FF464B-754B-466F-B402-74777B4B1EBA}
2015-05-06 17:01 - 2015-05-06 17:01 - 00000000 ____D () C:\Users\Ruda\Documents\BlazeVideo
2015-05-06 17:00 - 2015-05-12 19:25 - 00000000 ____D () C:\ProgramData\BlazeVideo
2015-05-06 16:59 - 2015-05-12 19:28 - 00000000 ____D () C:\Program Files (x86)\BlazeVideo
2015-05-06 16:49 - 2015-05-06 16:49 - 00000972 _____ () C:\Users\Public\Desktop\ProgDVB 7.lnk
2015-05-06 16:49 - 2015-05-06 16:49 - 00000948 _____ () C:\Users\Public\Desktop\ProgTV.lnk
2015-05-06 16:49 - 2015-05-06 16:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProgDVB
2015-05-06 14:29 - 2015-05-06 16:50 - 00000000 ____D () C:\Program Files (x86)\ProgDVB
2015-05-06 14:26 - 2015-05-06 14:27 - 19704072 _____ () C:\Users\Ruda\Downloads\ProgDVB7.08.9Std.exe
2015-05-05 15:42 - 2015-05-05 16:47 - 00000000 ____D () C:\Users\Public\Documents\Bláhová
2015-05-04 19:04 - 2015-05-04 19:04 - 00000000 ____D () C:\ProgramData\Wondershare
2015-05-02 17:51 - 2015-03-11 17:04 - 00535576 _____ (IBM Corp.) C:\Windows\system32\Drivers\RapportKE64.sys
2015-05-02 17:50 - 2015-05-02 17:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ochrana koncového bodu Trusteer
2015-05-02 17:50 - 2015-05-02 17:50 - 00000000 ____D () C:\Program Files (x86)\Trusteer
2015-05-02 17:47 - 2015-05-02 17:47 - 00436504 _____ (IBM Corp.) C:\Users\Ruda\Downloads\RapportSetup.exe
2015-05-02 17:47 - 2015-05-02 17:47 - 00000000 ____D () C:\ProgramData\Trusteer
2015-05-02 16:58 - 2015-05-02 16:58 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-02 16:58 - 2015-05-02 16:58 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-05-02 16:58 - 2015-05-02 16:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-02 16:58 - 2015-05-02 16:58 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-05-02 16:58 - 2015-05-02 16:58 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-02 16:58 - 2015-05-02 16:58 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-02 16:58 - 2015-05-02 16:58 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-05-02 16:58 - 2015-05-02 16:58 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-05-02 16:58 - 2015-05-02 16:58 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-05-02 01:39 - 2015-05-02 01:39 - 00129098 _____ () C:\Users\Ruda\Documents\CisReport_x64_v8.2.0.4508_20150502-013943.zip
2015-05-01 01:24 - 2015-05-01 01:24 - 00000000 ____D () C:\Users\Ruda\AppData\Local\Trusteer
2015-04-27 20:32 - 2015-04-27 20:32 - 00000000 _____ () C:\Users\Ruda\AppData\Local\{03E83CAC-05F7-418B-94BF-6DB4601107B2}
2015-04-27 20:11 - 2015-04-27 20:11 - 00570688 _____ () C:\Users\Ruda\Downloads\setup(1).exe
2015-04-27 10:39 - 2015-04-27 10:39 - 01270552 _____ (Ellora Assets Corporation ) C:\Users\Ruda\Downloads\FreemakeVideoConverterSetup.exe
2015-04-25 09:29 - 2015-04-25 09:29 - 13825818 _____ () C:\Users\Ruda\Downloads\cc-setup(1).exe
2015-04-24 16:58 - 2015-04-24 16:58 - 01918240 _____ (Mister Group ) C:\Users\Ruda\Downloads\SystemExplorerSetup_641.exe
2015-04-24 11:15 - 2015-04-24 11:47 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\eM Client
2015-04-23 22:44 - 2015-03-14 05:21 - 01632768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-04-23 22:44 - 2015-03-14 05:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-04-23 22:44 - 2015-03-14 05:04 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-04-23 22:44 - 2015-03-14 05:04 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-04-23 22:44 - 2015-01-29 05:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-04-23 22:44 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-04-23 18:53 - 2015-05-12 19:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-22 10:01 - 2015-04-22 10:01 - 10077320 _____ (Martin Roubec ) C:\Users\Ruda\Downloads\InstalRecepty.exe
2015-04-21 19:51 - 2015-04-21 19:51 - 00000000 ____D () C:\Program Files\EPSON
2015-04-21 01:12 - 2015-04-21 01:12 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\temp
2015-04-20 18:15 - 2015-04-20 18:15 - 00003170 _____ () C:\Windows\System32\Tasks\{A1F61B27-141C-4120-96A2-84789B412077}
2015-04-20 17:33 - 2015-04-20 17:33 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fireluke Software
2015-04-20 17:33 - 2015-04-20 17:33 - 00000000 ____D () C:\Program Files (x86)\Fireluke
2015-04-20 17:28 - 2015-04-20 17:28 - 00102400 _____ (Installshield Software Corporation ) C:\Users\Ruda\Downloads\setup.exe
2015-04-20 17:28 - 2008-01-02 18:50 - 04307549 _____ () C:\Users\Ruda\Downloads\Data.Cab
2015-04-20 17:28 - 2008-01-02 18:50 - 00348672 _____ () C:\Users\Ruda\Downloads\Organizér.msi
2015-04-20 17:28 - 2008-01-02 18:50 - 00062685 _____ () C:\Users\Ruda\Downloads\setup.ini
2015-04-19 11:27 - 2015-04-19 11:27 - 00001769 _____ () C:\Windows\Language_trs.ini
2015-04-17 00:42 - 2015-04-17 00:43 - 55604809 _____ () C:\Users\Ruda\Downloads\adobereader-setup.exe
2015-04-17 00:18 - 2015-04-18 09:19 - 00000000 ____D () C:\Users\Ruda\AppData\Local\Wondershare
2015-04-17 00:18 - 2015-04-17 00:29 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\Wondershare
2015-04-17 00:17 - 2015-04-17 00:17 - 00000000 ____D () C:\Users\Public\Documents\Wondershare
2015-04-16 17:03 - 2015-04-16 17:17 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-04-16 17:02 - 2015-04-16 17:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-04-16 10:34 - 2015-04-16 10:35 - 28849904 _____ () C:\Users\Ruda\Downloads\vlc-2.2.1-win32.exe
2015-04-16 00:40 - 2015-04-16 00:40 - 00003134 _____ () C:\Windows\System32\Tasks\{C582AF60-6D3C-4318-91FB-FED9812D23A6}
2015-04-16 00:39 - 2015-04-16 00:39 - 00384488 _____ () C:\Users\Ruda\Downloads\InstallPlus500(1).exe
2015-04-15 23:36 - 2015-04-16 00:40 - 00000891 _____ () C:\Users\Ruda\Desktop\Plus500.lnk
2015-04-15 23:36 - 2015-04-16 00:40 - 00000891 _____ () C:\Users\Guest\Desktop\Plus500.lnk
2015-04-15 23:36 - 2015-04-16 00:40 - 00000891 _____ () C:\Users\63ruda99\Desktop\Plus500.lnk
2015-04-15 23:36 - 2015-04-15 23:36 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Plus500
2015-04-15 23:36 - 2015-04-15 23:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plus500
2015-04-15 23:35 - 2015-04-15 23:36 - 00000000 ____D () C:\Users\Ruda\AppData\Local\Plus500
2015-04-15 23:35 - 2015-04-15 23:35 - 00000000 ____D () C:\Program Files (x86)\Plus500
2015-04-15 13:14 - 2015-04-15 13:14 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-15 13:14 - 2015-04-15 13:14 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-15 13:14 - 2015-04-15 13:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-15 13:14 - 2015-04-15 13:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-15 13:14 - 2015-04-15 13:14 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-15 13:13 - 2015-04-15 13:13 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-15 13:12 - 2015-04-15 13:12 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-15 13:12 - 2015-04-15 13:12 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 13:12 - 2015-04-15 13:12 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-15 11:31 - 2015-04-15 11:31 - 00009728 ___SH () C:\Users\Ruda\Thumbs.db
2015-04-15 01:35 - 2015-04-15 01:35 - 00000000 _____ () C:\Users\Ruda\AppData\Local\{36F635ED-91FF-464C-8865-271938C323E7}
2015-04-15 01:17 - 2015-04-15 01:17 - 00000000 _____ () C:\Users\Ruda\AppData\Local\{8E97867A-90E3-49AA-A208-442D6D79A711}

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-15 12:35 - 2015-01-10 00:20 - 00000000 ____D () C:\FRST
2015-05-15 12:28 - 2014-12-28 04:28 - 04537510 _____ () C:\Windows\system32\Drivers\fvstore.dat
2015-05-15 12:22 - 2015-03-28 20:27 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-15 11:57 - 2013-05-29 01:14 - 01895739 _____ () C:\Windows\WindowsUpdate.log
2015-05-15 11:53 - 2013-07-15 20:59 - 00000000 ____D () C:\Users\Ruda\AppData\Local\LogMeIn Hamachi
2015-05-15 11:52 - 2009-07-14 06:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-15 11:52 - 2009-07-14 06:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-15 11:46 - 2014-12-25 15:40 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat
2015-05-15 11:42 - 2014-04-13 16:39 - 00000434 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2015-05-15 11:39 - 2013-03-07 03:52 - 00000466 _____ () C:\Users\Ruda\AppData\Roaming\sp_data.sys
2015-05-15 11:38 - 2014-09-14 13:37 - 00000000 _____ () C:\Windows\SysWOW64\sinstall.log
2015-05-15 11:37 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-15 11:32 - 2013-11-23 01:33 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\vlc
2015-05-15 11:08 - 2013-10-11 00:21 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-05-15 11:08 - 2013-10-11 00:21 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-05-15 10:50 - 2015-03-29 15:42 - 00000000 ___SD () C:\Windows\system32\GWX
2015-05-15 10:50 - 2015-03-27 02:19 - 00000000 ____D () C:\Users\63ruda99
2015-05-15 10:50 - 2014-12-25 15:40 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO
2015-05-15 10:50 - 2014-01-05 16:51 - 00000000 ____D () C:\Users\Guest
2015-05-15 10:50 - 2013-12-07 19:51 - 00000000 ____D () C:\Users\Classic .NET AppPool
2015-05-15 10:50 - 2013-12-02 12:38 - 00000000 ____D () C:\Program Files\CCleaner
2015-05-15 10:50 - 2013-07-28 11:32 - 00000000 ____D () C:\Users\DefaultAppPool
2015-05-15 10:50 - 2013-03-07 03:48 - 00000000 ____D () C:\Users\Ruda
2015-05-15 10:48 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2015-05-14 19:10 - 2013-08-23 17:09 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\Skype
2015-05-14 04:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2015-05-14 02:34 - 2015-03-14 18:16 - 00000000 ____D () C:\Users\Ruda\Downloads\EPSON
2015-05-14 01:58 - 2015-03-14 16:09 - 00135824 _____ (Seiko Epson Corporation) C:\Windows\system32\escsvc64.exe
2015-05-14 01:58 - 2015-03-14 14:40 - 00000932 _____ () C:\Users\Public\Desktop\EPSON Scan.lnk
2015-05-14 01:53 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2015-05-14 00:25 - 2013-03-07 11:49 - 00000000 ____D () C:\Users\Ruda\AppData\Local\CrashDumps
2015-05-13 22:36 - 2011-02-19 07:36 - 00893944 _____ () C:\Windows\system32\perfh005.dat
2015-05-13 22:36 - 2011-02-19 07:36 - 00268970 _____ () C:\Windows\system32\perfc005.dat
2015-05-13 22:36 - 2009-07-14 07:13 - 02168618 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-13 22:05 - 2015-01-06 18:01 - 03897344 ___SH () C:\Users\Ruda\Documents\Thumbs.db
2015-05-13 21:17 - 2015-04-03 03:48 - 00000000 ____D () C:\ProgramData\firebird
2015-05-13 21:15 - 2013-10-02 18:41 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\uTorrent
2015-05-13 15:56 - 2013-04-17 02:28 - 00000000 ____D () C:\Program Files (x86)\MSECache
2015-05-13 15:28 - 2009-07-14 06:45 - 04906320 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-13 15:23 - 2009-07-14 09:45 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-13 15:16 - 2013-07-10 14:25 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-13 14:53 - 2013-03-07 10:48 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-13 13:19 - 2014-09-13 01:22 - 00077872 _____ () C:\Users\Ruda\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-13 12:39 - 2015-03-15 03:41 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\Notepad++
2015-05-13 12:05 - 2014-11-16 18:45 - 00000000 ____D () C:\Program Files (x86)\LibreOffice 4
2015-05-12 20:18 - 2014-11-28 02:50 - 00000000 ____D () C:\Users\Ruda\Documents\čištění
2015-05-12 19:44 - 2014-02-13 12:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-12 11:39 - 2015-01-30 00:41 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-05-12 11:39 - 2015-01-30 00:41 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-05-12 11:39 - 2015-01-30 00:41 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-05-12 11:39 - 2013-03-07 04:23 - 00000000 ____D () C:\Users\Ruda\AppData\Local\Adobe
2015-05-12 09:30 - 2015-03-19 00:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tisk Obalek
2015-05-12 00:57 - 2014-10-07 11:59 - 00000049 _____ () C:\Windows\SysWOW64\ScrRecX.log
2015-05-12 00:57 - 2014-08-16 15:30 - 00001148 _____ () C:\Users\Public\Desktop\aTube Catcher.lnk
2015-05-12 00:57 - 2014-08-16 15:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2015-05-12 00:47 - 2015-01-08 19:10 - 01240576 ___SH () C:\Users\Ruda\Downloads\Thumbs.db
2015-05-11 23:18 - 2014-03-14 21:54 - 00000000 ____D () C:\Users\Ruda\Documents\Korejs,Havlán
2015-05-11 18:47 - 2014-01-11 19:37 - 00002487 _____ () C:\Users\Ruda\Documents\Nová databáze.odb
2015-05-10 20:27 - 2013-03-07 03:52 - 00000000 ____D () C:\Users\Ruda\Documents\Bluetooth Folder
2015-05-10 17:25 - 2012-02-24 13:40 - 00000000 ____D () C:\Program Files (x86)\Google
2015-05-09 00:46 - 2013-03-07 03:52 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\Atheros
2015-05-08 01:23 - 2013-08-23 16:45 - 00000000 ____D () C:\ProgramData\Skype
2015-05-07 15:32 - 2013-03-22 01:36 - 00000000 ____D () C:\Windows\pss
2015-05-07 01:32 - 2014-10-07 01:16 - 00010752 _____ () C:\Users\Ruda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-05-06 21:01 - 2015-02-11 12:30 - 00000000 ____D () C:\ProgramData\ProgDVB
2015-05-06 18:04 - 2014-06-03 09:57 - 00013541 _____ () C:\ProgramData\LSDmbTH.log
2015-05-06 18:04 - 2014-06-03 09:57 - 00013522 _____ () C:\ProgramData\LmeUSB.log
2015-05-06 17:03 - 2014-11-28 02:08 - 00000000 ___DC () C:\Temp
2015-05-06 16:44 - 2015-03-26 15:22 - 00000000 ____D () C:\Program Files\ProgDVB
2015-05-06 16:36 - 2010-02-03 10:05 - 00113280 _____ (ITE ) C:\Windows\system32\Drivers\IT9135BDA.sys
2015-05-05 06:37 - 2014-03-25 02:22 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-05-02 22:24 - 2014-09-28 16:19 - 00002145 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-02 16:26 - 2015-02-25 11:22 - 00000000 ___HD () C:\ProgramData\ArcSoft
2015-05-02 02:54 - 2015-03-27 02:19 - 00000000 ___RD () C:\Users\63ruda99\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-05-02 02:54 - 2015-03-27 02:19 - 00000000 ___RD () C:\Users\63ruda99\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-02 02:54 - 2014-09-30 11:22 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\PicPick
2015-05-02 02:54 - 2014-09-28 16:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-02 02:54 - 2014-05-05 01:52 - 00000000 ____D () C:\ProgramData\SystemExplorer
2015-05-02 02:53 - 2015-03-27 02:23 - 00000000 ____D () C:\Users\63ruda99\AppData\Roaming\Epson
2015-05-02 02:53 - 2015-03-27 02:23 - 00000000 ____D () C:\Users\63ruda99\AppData\Roaming\ArcSoft
2015-05-02 02:53 - 2015-03-27 02:22 - 00000000 ____D () C:\Users\63ruda99\AppData\Local\NVIDIA
2015-05-02 02:53 - 2015-03-27 02:19 - 00000000 ____D () C:\Users\63ruda99\AppData\Roaming\Macromedia
2015-05-02 02:53 - 2015-03-27 02:19 - 00000000 ____D () C:\Users\63ruda99\AppData\Local\ASUS
2015-04-27 10:42 - 2014-08-07 01:33 - 00000000 ____D () C:\ProgramData\Freemake
2015-04-27 10:41 - 2014-12-17 13:50 - 00001312 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk
2015-04-27 10:41 - 2014-12-17 13:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2015-04-25 09:34 - 2013-12-02 12:38 - 00000824 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-04-24 16:59 - 2014-05-05 01:52 - 00001054 _____ () C:\Users\Public\Desktop\System Explorer.lnk
2015-04-24 16:59 - 2014-05-05 01:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Explorer
2015-04-24 16:59 - 2014-04-21 14:00 - 00000000 ____D () C:\Program Files (x86)\System Explorer
2015-04-23 22:51 - 2009-07-14 07:08 - 00032638 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-04-23 22:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-04-23 14:55 - 2014-05-15 14:38 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\TeamViewer
2015-04-23 14:37 - 2015-04-03 12:49 - 00000000 ____D () C:\ProgramData\IObit
2015-04-23 14:36 - 2015-04-03 12:49 - 00003230 _____ () C:\Windows\System32\Tasks\Driver Booster Scan
2015-04-23 14:36 - 2015-04-03 12:49 - 00003174 _____ () C:\Windows\System32\Tasks\Driver Booster Update
2015-04-23 14:36 - 2015-04-03 12:49 - 00002872 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (Ruda)
2015-04-23 00:16 - 2014-01-06 03:52 - 00000000 ____D () C:\Users\Ruda\.gimp-2.8
2015-04-22 10:02 - 2014-06-19 15:40 - 00201216 _____ () C:\Windows\SysWOW64\mediarcpt.dll
2015-04-22 10:02 - 2014-06-19 15:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recepty doma
2015-04-22 10:02 - 2014-06-19 15:40 - 00000000 ____D () C:\Program Files (x86)\Recepty doma
2015-04-21 19:51 - 2015-03-14 15:06 - 00000000 ____D () C:\ProgramData\EPSON
2015-04-20 22:55 - 2013-04-24 17:57 - 00000000 ____D () C:\Program Files\Common Files\Download Helper
2015-04-19 11:47 - 2014-05-08 21:46 - 00000000 ____D () C:\Users\Ruda\Downloads\Návody+tutoriály
2015-04-18 23:02 - 2014-11-16 19:04 - 00000000 ___DC () C:\Obrázky
2015-04-16 17:24 - 2013-03-12 15:25 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-04-16 17:19 - 2015-01-24 13:44 - 00000000 ____D () C:\ProgramData\Oracle
2015-04-16 17:17 - 2015-01-24 13:43 - 00000000 ____D () C:\Program Files\Java
2015-04-16 10:39 - 2013-12-29 20:08 - 00001028 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-04-16 00:18 - 2015-03-19 16:23 - 00014239 _____ () C:\Users\Ruda\Documents\EMAILY Nov.heslem.odt
2015-04-15 18:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-04-15 18:41 - 2012-02-24 13:39 - 02144198 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-04-15 12:20 - 2015-01-06 02:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvsoft
2015-04-15 12:20 - 2015-01-06 02:12 - 00000000 ____D () C:\Program Files (x86)\Anvsoft
2015-04-15 12:18 - 2013-03-08 03:36 - 00000000 ____D () C:\ProgramData\Temp
2015-04-15 12:01 - 2015-02-24 02:41 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\XnView
2015-04-15 12:01 - 2013-04-07 17:45 - 00000000 ____D () C:\Users\Ruda\AppData\Roaming\PhotoScape
2015-04-15 01:29 - 2012-02-24 13:42 - 00000000 ____D () C:\Program Files\Windows Live
2015-04-15 01:29 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

==================== Files in the root of some directories =======

2013-03-16 12:33 - 2013-03-16 05:27 - 15271824 _____ (Google Inc.) C:\Program Files (x86)\picasa39-setup.exe
2013-10-16 01:00 - 2015-03-22 14:11 - 14147584 _____ () C:\Program Files (x86)\Common Files\lpuninstall.exe
2014-06-26 23:06 - 2014-06-26 23:19 - 0000096 _____ () C:\Users\Ruda\AppData\Roaming\Camdata.ini
2014-06-26 23:06 - 2014-06-26 23:19 - 0000408 _____ () C:\Users\Ruda\AppData\Roaming\CamLayout.ini
2014-06-26 23:06 - 2014-06-26 23:19 - 0000408 _____ () C:\Users\Ruda\AppData\Roaming\CamShapes.ini
2014-06-26 23:06 - 2014-06-26 23:19 - 0004509 _____ () C:\Users\Ruda\AppData\Roaming\CamStudio.cfg
2014-03-24 19:03 - 2015-01-01 15:05 - 0099384 _____ () C:\Users\Ruda\AppData\Roaming\inst.exe
2014-03-24 19:03 - 2015-01-01 15:05 - 0007859 _____ () C:\Users\Ruda\AppData\Roaming\pcouffin.cat
2014-03-24 19:03 - 2015-01-01 15:05 - 0001167 _____ () C:\Users\Ruda\AppData\Roaming\pcouffin.inf
2014-03-24 19:03 - 2015-01-01 15:05 - 0082816 _____ (VSO Software) C:\Users\Ruda\AppData\Roaming\pcouffin.sys
2013-03-07 03:52 - 2015-05-15 11:39 - 0000466 _____ () C:\Users\Ruda\AppData\Roaming\sp_data.sys
2014-01-18 19:31 - 2014-01-18 19:31 - 0022713 _____ () C:\Users\Ruda\AppData\Roaming\UserTile.png
2014-12-11 19:11 - 2015-01-01 14:54 - 0001057 _____ () C:\Users\Ruda\AppData\Roaming\vso_ts_preview.xml
2014-10-07 01:16 - 2015-05-07 01:32 - 0010752 _____ () C:\Users\Ruda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-28 17:12 - 2013-11-28 17:12 - 0001715 _____ () C:\Users\Ruda\AppData\Local\FastClean.20131128.161230.txt
2015-04-14 22:54 - 2015-04-14 22:54 - 0000911 _____ () C:\Users\Ruda\AppData\Local\recently-used.xbel
2013-03-27 22:44 - 2014-08-16 16:37 - 0007670 _____ () C:\Users\Ruda\AppData\Local\Resmon.ResmonCfg
2015-04-27 20:32 - 2015-04-27 20:32 - 0000000 _____ () C:\Users\Ruda\AppData\Local\{03E83CAC-05F7-418B-94BF-6DB4601107B2}
2015-04-15 01:35 - 2015-04-15 01:35 - 0000000 _____ () C:\Users\Ruda\AppData\Local\{36F635ED-91FF-464C-8865-271938C323E7}
2015-05-15 08:41 - 2015-05-15 08:41 - 0000000 _____ () C:\Users\Ruda\AppData\Local\{3E5CE45F-5149-45FE-9823-C190A8D490D1}
2015-05-15 10:56 - 2015-05-15 10:56 - 0000000 _____ () C:\Users\Ruda\AppData\Local\{46B461A5-CA78-4F7D-82DE-01B9DB6F713B}
2015-04-15 01:17 - 2015-04-15 01:17 - 0000000 _____ () C:\Users\Ruda\AppData\Local\{8E97867A-90E3-49AA-A208-442D6D79A711}
2015-04-06 14:30 - 2015-04-06 14:30 - 0000000 _____ () C:\Users\Ruda\AppData\Local\{97FF5CF1-E72E-448C-8B55-3A30758AE3D1}
2014-06-03 09:57 - 2015-05-06 18:04 - 0013522 _____ () C:\ProgramData\LmeUSB.log
2014-06-03 09:57 - 2015-05-06 18:04 - 0013541 _____ () C:\ProgramData\LSDmbTH.log
2015-02-06 22:20 - 2015-02-06 22:20 - 0005074 _____ () C:\ProgramData\mxnhytee.feu
2013-03-08 03:37 - 2013-03-08 03:38 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2013-03-08 03:36 - 2013-03-08 03:37 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2013-03-08 03:36 - 2013-03-08 03:36 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-14 04:05

==================== End Of Log ============================

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v4.204 - Log vytvořen 15/05/2015 v 17:58:13
# Aktualizováno 12/05/2015 by Xplode
# Databáze : 2015-05-12.2 [Local]
# Operační system : Windows 7 Home Premium Service Pack 1 (x64)
# Uživatelské jméno : Ruda - RUDA-PC
# Spuštěno z : C:\Users\Ruda\Downloads\adwcleaner_4.204.exe
# Nastavení : Čištění

***** [ Služby ] *****


***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\baidu
Složka Smazáno : C:\ProgramData\SecTaskMan
Složka Smazáno : C:\ProgramData\KingSoft
Složka Smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plus500
Složka Smazáno : C:\Program Files (x86)\Plus500
Složka Smazáno : C:\Users\Ruda\AppData\Local\SecTaskMan
Složka Smazáno : C:\Users\Ruda\AppData\Local\Plus500
Složka Smazáno : C:\Users\Ruda\AppData\Local\DriverToolkit
Složka Smazáno : C:\Users\Ruda\AppData\Roaming\RHEng
Složka Smazáno : C:\Users\Ruda\AppData\Roaming\KingSoft
Složka Smazáno : C:\Users\Ruda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Plus500
Složka Smazáno : C:\Users\Ruda\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja
Soubor Smazáno : C:\Users\Ruda\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_cmaiofennmphjldldcpphcechfnnohja_0.localstorage

***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki
Klíč Smazáno : HKCU\Software\Classes\Directory\shell\pokki
Klíč Smazáno : HKCU\Software\Classes\Drive\shell\pokki
Klíč Smazáno : HKCU\Software\Classes\lnkfile\shell\pokki
Klíč Smazáno : HKLM\SOFTWARE\Classes\Record\{37AC0F3B-749F-3B22-811B-5A019EED2E85}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Record\{4392A6CC-7940-310E-8E16-799A8D93A438}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Record\{66DF7821-ED6D-3534-893C-0E89E74B0F91}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Record\{755CAFCC-F016-3B06-8F22-945EAA3AD10D}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Record\{76552F88-640C-314D-82B6-0D8A740907F7}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Record\{05660A04-00F1-3A04-AB3B-BC1074B84D67}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Record\{903F9872-E87F-3B74-83B0-DBE10073B29D}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Record\{9558EEB4-CDA6-3778-B53B-98076F0A1E90}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Record\{B25AA9BA-FD52-3E5E-BFE3-9B106779DA6E}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Record\{C852CF9F-37DC-35AC-926A-7E6CFFF7C501}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Record\{C9777796-4378-3C90-B52D-7238FFFC2A5C}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Record\{DB1BC8B2-FDBF-30E7-BE1C-AFF9160059E6}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Record\{F3D5729C-7DEB-3850-A026-D0E323ECFEF5}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Record\{FEC70973-CB8B-351C-8047-CAE1274CE249}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{66d59105-fe06-43a4-b292-eb0097e9eb74}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9103c314-c4e2-4463-8934-b19bcb46236d}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{97cef41c-5055-474a-855a-892d4fe3e596}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d375ee64-f893-498a-a0e9-0e9829c88c3d}
Klíč Smazáno : HKCU\Software\SpeedBit
Klíč Smazáno : HKLM\SOFTWARE\SpeedBit
Klíč Smazáno : HKU\.DEFAULT\Software\Goobzo
Klíč Smazáno : HKU\.DEFAULT\Software\IBUpdaterService
Klíč Smazáno : HKU\.DEFAULT\Software\GeekBuddyRSP
Klíč Smazáno : HKU\.DEFAULT\Software\SpeedBit

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17801


-\\ Mozilla Firefox v38.0 (x86 cs)

[0hfd64x0.default-1423008048081\prefs.js] - Řádek Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.lastActivePing", "1430164385957");
[0hfd64x0.default-1423008048081\prefs.js] - Řádek Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.weather.location", "10001");
[0hfd64x0.default-1423008048081\prefs.js] - Řádek Smazáno : user_pref("extensions.toolbar.mindspark.lastInstalled", "videodownloadconverter@mindspark.com");

-\\ Google Chrome v42.0.2311.152


-\\ Chromium v


-\\ Comodo Dragon v36.1.1.21

[C:\Users\Ruda\AppData\Local\Comodo\Dragon\User Data\Default\Preferences] - Smazáno [Extension] : cmaiofennmphjldldcpphcechfnnohja

-\\ Opera v0.0.0.0


*************************

AdwCleaner[R0].txt - [4707 bytů] - [15/05/2015 17:52:11]
AdwCleaner[S0].txt - [4567 bytů] - [15/05/2015 17:58:13]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4625 bytů] ##########

Dejte nový log FRST.

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-05-2015 02
Ran by Ruda at 2015-05-15 19:59:19
Running from C:\PerfLogs\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

63ruda99 (S-1-5-21-841361005-909514878-2309378359-1014 - Administrator - Enabled) => C:\Users\63ruda99
Administrator (S-1-5-21-841361005-909514878-2309378359-500 - Administrator - Disabled)
Guest (S-1-5-21-841361005-909514878-2309378359-501 - Limited - Enabled) => C:\Users\Guest
Ruda (S-1-5-21-841361005-909514878-2309378359-1002 - Administrator - Enabled) => C:\Users\Ruda

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)


==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

„Windows Live Essentials“ (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
„Windows Live Mail“ (x32 Version: 16.4.3528.0331 - „Microsoft Corporation“) Hidden
„Windows Live Messenger“ (x32 Version: 16.4.3528.0331 - „Microsoft Corporation“) Hidden
µTorrent (HKLM-x32\...\uTorrent) (Version: 2.2.1.25534 - emc, uTorrent.CZ)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.00.631.5823 - ABBYY)
ABBYY FineReader 9.0 Sprint (x32 Version: 9.00.631.5823 - ABBYY) Hidden
Adblock Plus for IE (32-bit and 64-bit) (HKLM\...\{26D488C3-89E9-455C-B96A-1ADF65A26C54}) (Version: 1.4 - Eyeo GmbH)
Adblock Plus for IE (HKLM-x32\...\{1ce01891-839b-4ad1-b629-2e608ba0c6ba}) (Version: 1.0 - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 17.0.0.172 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Akamai NetSession Interface (HKU\S-1-5-21-841361005-909514878-2309378359-1002\...\Akamai) (Version: - Akamai Technologies, Inc)
Aktualizace NVIDIA 16.18.9 (Version: 16.18.9 - NVIDIA Corporation) Hidden
Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 1.4.42.69356 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.4.42.69356 - Alcor Micro Corp.) Hidden
Any Video Converter 5.6.4 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com)
Any Video Converter Ultimate 5.7.9 (HKLM-x32\...\Any Video Converter Ultimate_is1) (Version: - Any-Video-Converter.com)
ArcSoft MediaImpression 2 (HKLM-x32\...\{FB46F473-333E-4A06-A777-31C54188593E}) (Version: 2.0.14.672 - ArcSoft)
Ashampoo GetBack Photo v.1.0.1 (HKLM-x32\...\{C92AB6F1-2490-D7C3-A45D-23F3C33ECFA5}_is1) (Version: 1.0.1 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 11 (HKLM-x32\...\{C92AB6F1-0F9C-8526-5DF1-0A2FD0FB33D9}_is1) (Version: 11.1.9 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Optimizer FREE (HKLM-x32\...\Ashampoo Photo Optimizer FREE_is1) (Version: 1.2.0 - ashampoo GmbH & Co. KG)
Ashampoo ZIP Free v.1.0.1 (HKLM-x32\...\{0A11EA01-06AA-A977-2548-2F3C0E8BE50B}_is1) (Version: 1.0.1 - Ashampoo GmbH & Co. KG)
ASUS AI Recovery (HKLM-x32\...\{D39F0676-163E-4595-A917-E28F99BBD4D2}) (Version: 1.0.24 - ASUS)
ASUS FaceLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0014 - ASUS)
ASUS Instant Connect (HKLM-x32\...\{89ECB85A-D933-4CEA-9116-5CBC9C2ED95B}) (Version: 1.2.2 - ASUS)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.1.1 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.1.7 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.2.1 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0041 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.0.9 - ASUS)
ASUS Virtual Touch (HKLM-x32\...\{938CFBD4-0652-49E5-BB8B-153948865941}) (Version: 1.0.11 - ASUS)
ASUS WebStorage (HKLM-x32\...\ASUS WebStorage) (Version: 3.0.144.298 - ASUS Cloud Corporation)
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.309 - ASUSTEK)
Atheros Bluetooth Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.4.0.140 - Atheros)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.12 - Atheros Communications Inc.)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0020 - ASUS)
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 3.8.5187 - DsNET Corp)
aTube Catcher verze 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Avidemux 2.6 (32-bit) (HKLM-x32\...\Avidemux 2.6) (Version: 2.6.8.9045 - )
Bass Audio Decoder (remove only) (HKLM-x32\...\Bass Audio Decoder) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5306 - CDBurnerXP)
Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 36.1.1.21 - Comodo)
COMODO Internet Security Premium (HKLM\...\{18F14F4B-D8A9-4309-817E-3BC0B7664E53}) (Version: 8.0.0.4344 - COMODO Security Solutions Inc.)
CyberLink Media Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.2926 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Defraggler (HKLM\...\Defraggler) (Version: 2.19 - Piriform)
Document Capture Pro (HKLM-x32\...\{B4A3C072-87AF-4937-880D-3D7997111C0D}) (Version: 1.01.0000 - Seiko Epson Corporation)
Dream Day First Home (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}) (Version: - Oberon Media)
Dream Vacation Solitaire (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111249233}) (Version: - Oberon Media)
Epson Connect Guide (HKLM-x32\...\Epson Connect Guide) (Version: - )
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.3.0 - SEIKO EPSON CORPORATION)
Epson Copy Utility 3.5 (HKLM-x32\...\{AA72FB28-73B4-49E5-B6B4-E78F44BBD0AD}) (Version: 3.5.0.0 - )
Epson Customer Research Participation (HKLM\...\{B26449A6-6007-4460-B4FE-C4776115BCEA}) (Version: 1.70.0000 - EPSON)
Epson Easy Photo Print 2 (HKLM-x32\...\{674E262F-72EA-41C1-AF16-9727311A4553}) (Version: 2.4.1.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{148C8BF9-E1B4-445D-AC67-2CABAE63949A}) (Version: 3.01.0009 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{E904F572-D7DB-43C1-929F-043F267FC77D}) (Version: 1.22.0000 - SEIKO EPSON CORPORATION)
EPSON L355 Series Printer Uninstall (HKLM\...\EPSON L355 Series) (Version: - SEIKO EPSON Corporation)
Epson Příručka pro síť L355 Series (HKLM-x32\...\L355 Series Netg) (Version: - )
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Epson Uživatelská příručka EPSON Perfection V370 Photo (HKLM-x32\...\EPSON Perfection V370 Photo Useg) (Version: - )
Epson Uživatelská příručka L355 Series (HKLM-x32\...\L355 Series Useg) (Version: - )
ETDWare PS/2-X64 10.5.9.0 (HKLM\...\Elantech) (Version: 10.5.9.0 - ELAN Microelectronic Corp.)
Evidence LSoft 4.2.0.0 (HKLM-x32\...\{6B7574A7-ADE5-40CD-B4DE-3A72C483DB92}_is1) (Version: - Martin Lutonský)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FastStone Image Viewer 5.3 (HKLM-x32\...\FastStone Image Viewer) (Version: 5.3 - FastStone Soft)
FFMPEG Core Files (remove only) (HKLM-x32\...\FFMPEG Core Files) (Version: - )
FormatFactory 3.6.0.0 (HKLM-x32\...\FormatFactory) (Version: 3.6.0.0 - Format Factory)
Freemake Video Converter verze 4.1.6 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.6 - Ellora Assets Corporation)
Gabest MPEG Splitter (remove only) (HKLM-x32\...\Gabest MPEG Splitter) (Version: - )
Galapago (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457}) (Version: - Oberon Media)
Game Park Console (HKLM-x32\...\Game Park Console) (Version: 1.2.4.431 - Oberon Media Inc.)
GeekBuddy (HKLM\...\{E98902C5-09AF-487A-AFAE-D4C386F506C0}) (Version: 4.18.121 - Comodo Security Solutions Inc)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Go Go Gourmet Chef of the Year (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115290153}) (Version: - Oberon Media)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.152 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Google+ Auto Backup (HKU\S-1-5-21-841361005-909514878-2309378359-1002\...\Google+ Auto Backup) (Version: 1.0.26.151 - Google, Inc.)
Gpg4win (2.2.3) (HKLM-x32\...\GPG4Win) (Version: 2.2.3 - The Gpg4win Project)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version: - Cheat Engine)
IE Download Helper (HKLM\...\{92A49BB2-0039-470F-82F8-A599BF5C4410}) (Version: 3.2 - IE Download Helper)
InstantOn for NB (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 2.3.3 - ASUS)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35342 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.10.255 - Intel Corporation)
IT9130 Driver v11.10.19.1 (HKLM-x32\...\IT9130 DriverInstaller_11.10.19.1) (Version: - )
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Kodi (HKU\S-1-5-21-841361005-909514878-2309378359-1002\...\Kodi) (Version: - XBMC-Foundation)
LastPass (pouze odinstalace) (HKLM-x32\...\LastPass) (Version: - LastPass)
LAV Filters 0.63.0 (HKLM-x32\...\lavfilters_is1) (Version: 0.63.0 - Hendrik Leppkes)
LibreOffice 4.4 Help Pack (Czech) (HKLM-x32\...\{680F9EF4-F1B8-4F1A-8D81-A867677C63C2}) (Version: 4.4.3.2 - The Document Foundation)
LibreOffice 4.4.3.2 (HKLM-x32\...\{A651A592-2F6C-4D66-AEA8-9BFE4B61BCB3}) (Version: 4.4.3.2 - The Document Foundation)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden
Mahjong Secrets (HKLM-x32\...\510008402) (Version: - Oberon Media)
MediaPortal (HKLM-x32\...\MediaPortal) (Version: 1.9.0 - Team MediaPortal)
Microsoft .NET Framework 4.5.2 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-841361005-909514878-2309378359-1002\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft OneNote 2013 - cs-cz (HKLM\...\OneNoteFreeRetail - cs-cz) (Version: 15.0.4711.1003 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0405-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 (HKLM-x32\...\Microsoft SQL Server 2005) (Version: - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 x64 CSY (HKLM\...\{0A8A841B-29C4-4947-BF59-241216B4D904}) (Version: 4.0.8482.1 - Microsoft Corporation)
Microsoft SQL Server Native Client (HKLM\...\{9ACF3FDB-C8E6-444C-8C64-13A221F7BFFD}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server Setup Support Files (English) (HKLM-x32\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{B636C9B9-A3F2-4DCE-ADCC-72E095018385}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft Visual Basic PowerPacks 10.0 (HKLM-x32\...\{2D9F8079-7D50-3EFD-B3BD-ED642E4EE756}) (Version: 10.0.20911 - Microsoft)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Web Platform Installer 4.6 (HKLM\...\{16C7D2AD-20CA-491E-80BC-8607A9AACED9}) (Version: 4.0.40719.0 - Microsoft Corporation)
Mozilla Firefox 38.0 (x86 cs) (HKLM-x32\...\Mozilla Firefox 38.0 (x86 cs)) (Version: 38.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.4.0 - Mozilla)
Mozilla Thunderbird 31.6.0 (x86 cs) (HKLM-x32\...\Mozilla Thunderbird 31.6.0 (x86 cs)) (Version: 31.6.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyHeritage Family Tree Builder (HKLM-x32\...\Family Tree Builder) (Version: 7.0.0.7128 - MyHeritage.com)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.7 - Notepad++ Team)
NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4711.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4711.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4711.1003 - Microsoft Corporation) Hidden
Ochrana koncového bodu Trusteer (HKLM-x32\...\Rapport_msi) (Version: 3.5.1404.84 - Trusteer)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenSource AVI Splitter (remove only) (HKLM-x32\...\OpenSource AVI Splitter) (Version: - )
OpenSource DTS/AC3/DD+ Source Filter (remove only) (HKLM-x32\...\OpenSource DTS/AC3/DD+ Source Filter) (Version: - )
OpenSource Flash Video Splitter (remove only) (HKLM-x32\...\OpenSource Flash Video Splitter) (Version: - )
Organizér (HKLM-x32\...\{4154BF17-EE1F-4F25-9696-2FF191FE0787}) (Version: 4.7.2 - Fireluke Software)
Ovládací panel NVIDIA 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden
Ovladač klávesnice a myši Rapoo v1.6 (HKLM-x32\...\{2E569492-CB19-4510-AB49-1C6A36C6F525}_is1) (Version: - Rapoo Inc.)
PDF Architect 2 OCR Module (x32 Version: 2.0.17.17583 - pdfforge GmbH) Hidden
PDF24 Creator 6.9.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.312.1 - Tracker Software Products Ltd)
PhotoScape (HKLM-x32\...\PhotoScape) (Version: - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PicPick (HKLM-x32\...\PicPick) (Version: 3.4.0 - NTeWORKS)
Plants vs Zombies (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117080787}) (Version: - Oberon Media)
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Plus500 (HKLM-x32\...\Plus500) (Version: - )
PlutoTV version 0.0.4 (HKLM-x32\...\PlutoTV_is1) (Version: 0.0.4 - PlutoTV)
Poczta usługi Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
ProgDVB (HKLM-x32\...\ProgDVB) (Version: 7.x - Prog)
ProgDVB x64 (HKLM\...\ProgDVB) (Version: 7.x - Prog)
Q-Dir (HKLM\...\Q-Dir) (Version: - )
Q-Dir (HKLM-x32\...\Q-Dir) (Version: - )
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{7D916FA5-DAE9-4A25-B089-655C70EAF607}) (Version: 3.0 - Qualcomm Atheros)
Rapport (x32 Version: 3.5.1404.84 - Trusteer) Hidden
Recepty doma (HKLM-x32\...\Recepty doma_is1) (Version: - Martin Roubec)
Recuva (HKLM\...\Recuva) (Version: 1.48 - Piriform)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Sada Compatibility Pack pro systém Office 2007 (HKLM-x32\...\{90120000-0020-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
SceneSwitch (HKLM-x32\...\{5172E572-C175-4F80-A6D5-5CB45826AD61}) (Version: 1.0.12 - ASUS)
Seznam Instalátor (HKLM-x32\...\ssinstall) (Version: - Seznam.cz)
Seznam Software (HKU\S-1-5-21-841361005-909514878-2309378359-1002\...\SeznamInstall) (Version: - Seznam.cz)
SHIELD Streaming (Version: 3.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.18.9 - NVIDIA Corporation) Hidden
Simple Adblock (HKLM-x32\...\{B4920103-09F6-4AD2-B150-CFC4474D2DDC}) (Version: 1.1.5 - Simple Adblock)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype Web Plugin (HKLM-x32\...\{B51DD93B-3CB5-4D9D-BFF2-FD19DBBBFD9A}) (Version: 2.9.13008.18866 - Skype Technologies S.A.)
Skype™ 7.4 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.4.102 - Skype Technologies S.A.)
Speccy (HKLM\...\Speccy) (Version: 1.28 - Piriform)
Sticky Password 8.0.3.33 (HKLM-x32\...\Sticky Password_is1) (Version: 8.0 - Lamantine Software)
stitky verze 2 (HKLM-x32\...\{F4E8564C-67E0-427A-A642-266C835EAA33}_is1) (Version: 2 - Robert Šmíd)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
SyncBackFree (HKLM-x32\...\SyncBackFree_is1) (Version: 7.3.1.29 - 2BrightSparks)
System Explorer 6.4.1 (HKLM-x32\...\{40F485F7-6478-4896-B0D5-F94BE677EB78}_is1) (Version: - Mister Group)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.39052 - TeamViewer)
Tisk Obalek 3.2.2.7 (HKLM-x32\...\Tisk Obalek_is1) (Version: 3.2.2.7 - Mgr. Radovan Kraus)
TKexe (HKLM-x32\...\Kalender) (Version: - )
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VIA Platform Device Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Installer Clean Up (HKLM-x32\...\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}) (Version: 3.00.00.0000 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.41.1 - ASUS)
Wireless Console 3 (HKLM-x32\...\{19EA33FB-B34E-40EA-8B8A-61743AEB795A}) (Version: 3.0.27 - ASUS)
World of Goo (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-116672750}) (Version: - Oberon Media)
XnView 2.32 (HKLM-x32\...\XnView_is1) (Version: 2.32 - Gougelet Pierre-e)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-841361005-909514878-2309378359-1002_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Ruda\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-841361005-909514878-2309378359-1002_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Ruda\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-841361005-909514878-2309378359-1002_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Ruda\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-841361005-909514878-2309378359-1002_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Ruda\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-841361005-909514878-2309378359-1002_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Ruda\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points =========================

Could not list restore points.
Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2015-02-01 14:33 - 00000035 ___AN C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {00B4C1D0-87B9-446F-9BD5-3FC8C2467514} - System32\Tasks\{18940542-76C0-4F13-9BE4-8A66F0476E6A} => c:\program files (x86)\maxthon\bin\maxthon.exe
Task: {063B2351-F936-4ADC-B53F-DD1E5582889F} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-04-20] (COMODO)
Task: {0AD8A73C-27DA-4B5F-BC3F-96C50ADC26D3} - System32\Tasks\{A1F61B27-141C-4120-96A2-84789B412077} => pcalua.exe -a C:\VTRoot\HarddiskVolume3\Users\Ruda\AppData\Local\Temp\setup_kalender\Uninstall_tkexe.exe
Task: {0C6B6EBC-9031-44FA-B832-2A50AC01A441} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-04-20] (COMODO)
Task: {0EA9B830-5DC4-4E1B-A3F2-5A1794F8501C} - System32\Tasks\{9166EEE1-665A-47B7-9AA3-F28205031DCF} => pcalua.exe -a "C:\Program Files (x86)\Asus\Game Park\Galapago\Uninstall.exe" -c "C:\Program Files (x86)\Asus\Game Park\Galapago\install.log"
Task: {11FA246D-C1FB-4763-82E6-F9EB4F15CCF0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-25] (Piriform Ltd)
Task: {11FB9A9F-DE45-4625-A68C-FFC2E0940A67} - System32\Tasks\{3C9D2E01-D7E9-4342-BDC9-2776D4B876E9} => pcalua.exe -a C:\Users\Ruda\Downloads\Windows-Live-Mail-_16.4.3505.0912.exe -d C:\Users\Ruda\Downloads
Task: {134EB1C5-0156-446D-BC49-A1EDE83BD4F2} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
Task: {16B650C0-89C9-454D-97D5-6C2102834D84} - System32\Tasks\{6B5CC6B3-B792-45FF-9E34-6A890BAA3CBF} => pcalua.exe -a C:\Users\Ruda\Downloads\Android.Manager.WiFi.v2010.10.01.exe -d C:\Users\Ruda\Downloads
Task: {16EC238F-8D7D-4C90-A41B-F10D5F8B95E3} - System32\Tasks\{BFFDA647-C68E-454A-B685-C181E1C9EEF0} => Chrome.exe http://ui.skype.com/ui/0/6.7.0.102/cs/g ... Error=1603
Task: {1AB0F5BC-6361-4DFA-82E6-E03EF58F9B29} - System32\Tasks\{17B8EBB4-ACC4-40FC-9E86-5E55A576447D} => pcalua.exe -a c:\vallen\jpegger\jpegger.exe -c -ui -q
Task: {1B030A60-CD3C-46E5-9D8D-09ECFB600B57} - System32\Tasks\C__Users_Ruda_Downloads_tvonline.exe => C:\Users\Ruda\Downloads\tvonline.exe
Task: {21F63DC7-40DC-4AFB-9776-A61419648025} - System32\Tasks\{D6893A38-300B-4034-AEEE-3EA1D9C1E11C} => c:\program files (x86)\maxthon\bin\maxthon.exe
Task: {247BD6D5-3C21-4DD9-9179-6AC13EC5E037} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-04-20] (COMODO)
Task: {2547CE60-04D2-4E81-A72C-7D14A59FAE45} - System32\Tasks\{83EAA0A7-58FB-4FB5-8FF1-0142CB60BC2D} => Chrome.exe http://ui.skype.com/ui/0/6.7.0.102/cs/g ... Error=1603
Task: {29B6765C-3E5D-4669-B996-06AC5DF531B4} - System32\Tasks\{A1CF3082-39CC-4078-AEC3-25C007D9ED63} => Chrome.exe http://ui.skype.com/ui/0/6.3.0.105/cs/g ... Error=1603
Task: {2AB66E19-7FB0-4505-9C83-4DC0539C0E1A} - System32\Tasks\ASC8_SkipUac_Ruda => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe
Task: {2D6A4E2E-B167-442A-8485-034B7C6BAE8F} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {2F8B20C9-A499-4C3C-A308-C6734868B719} - System32\Tasks\{71BFF601-8F49-4643-AC08-7CD109E89297} => pcalua.exe -a C:\PerfLogs\Desktop\wlsetup-web.exe -d C:\PerfLogs\Desktop
Task: {37087F67-6F6B-497C-8243-910F7194E560} - System32\Tasks\{BF848EB0-7806-4688-96BF-34413190A1F6} => c:\program files (x86)\maxthon\bin\maxthon.exe
Task: {37C1B75B-A500-45B3-B1AE-90E1EFD6C201} - System32\Tasks\{6BBE8BB2-5C12-4A6E-92BE-36A91ADE43FD} => pcalua.exe -a "C:\Program Files (x86)\Asus\Game Park\Bubbletown\Uninstall.exe" -c "C:\Program Files (x86)\Asus\Game Park\Bubbletown\install.log"
Task: {380EF2F5-1933-45D0-84A2-E73992A28DD5} - \GoogleUpdateTaskUserS-1-5-21-841361005-909514878-2309378359-1002Core No Task File <==== ATTENTION
Task: {3BA38A96-8C57-4DFA-B37F-13BEE26FE5BC} - System32\Tasks\{5F50205B-81B7-4BE5-A556-CAF25610E21D} => pcalua.exe -a C:\Users\Ruda\Documents\FreeRapid-0.9u3\FreeRapid-0.9u3\frd.exe -d C:\Users\Ruda\Documents\FreeRapid-0.9u3\FreeRapid-0.9u3
Task: {3D98428B-0114-49A0-B54A-04EA96571626} - System32\Tasks\{A6F96F0C-EB4C-4E2F-AAFA-EDD1BC516833} => pcalua.exe -a C:\Users\Ruda\Downloads\StudioLine_PB4_Setup2015.exe -d C:\Users\Ruda\Downloads
Task: {3DB4F540-0DA0-4B85-B5BC-69EB92075629} - System32\Tasks\{1A9D60BE-8A7F-4668-8FC6-3784F8E88970} => pcalua.exe -a "C:\Program Files (x86)\Team MediaPortal\MediaPortal TV Server\SetupTv.exe" -d "C:\Program Files (x86)\Team MediaPortal\MediaPortal TV Server"
Task: {3FAFCF43-3B51-4FC9-AEEF-12C98082BEFE} - System32\Tasks\{8B1919D7-7714-4D33-96FD-34DF36DC72E6} => C:\Users\Ruda\Downloads\Luminance-HDR-Win32-SETUP-v2.3.1-2.exe
Task: {4218984F-6740-45DF-9257-BEC2967174D6} - System32\Tasks\{2F0CBDFA-5117-4D5A-B7D9-EF2A2ADD726D} => pcalua.exe -a C:\Users\Ruda\Downloads\Install-winMd5Sum.exe -d C:\Users\Ruda\Downloads
Task: {46334A36-2A94-45FE-91AD-21E678AE8106} - System32\Tasks\{A002E75E-1495-4BA8-9A86-F4D44AD135DA} => pcalua.exe -a "C:\Program Files (x86)\Asus\Game Park\Plants vs Zombies\Uninstall.exe" -c "C:\Program Files (x86)\Asus\Game Park\Plants vs Zombies\install.log"
Task: {4A1E6D7E-D213-44F7-80C9-08B4ABDA0F84} - System32\Tasks\{6FBB8A7D-5EE5-43AA-94E5-BE60D121BDD9} => C:\Program Files (x86)\WinThruster\WinThruster.exe
Task: {4D42D988-220F-4BC7-B7DC-B8E44055D893} - System32\Tasks\{2181C5A6-223E-4525-BB57-559A0BC59D43} => pcalua.exe -a E:\obsah\Programy\Ostatní\OpenOffice\OOo_3.2.0rc3_20100118_Win32Intel_install_cs.exe -d E:\obsah\Programy\Ostatní\OpenOffice
Task: {4FD437B7-9854-48BB-B791-B77A1FA57D9A} - System32\Tasks\_UPDATES => C:\Program Files (x86)\WinThruster\WinThruster.exe
Task: {5143E29B-11C6-49CD-AC53-2A8CC7A5635B} - System32\Tasks\{9FA5B99F-75D8-4FF1-9725-01FB48586EE6} => pcalua.exe -a C:\Users\Ruda\Downloads\msicuu2.exe -d C:\Users\Ruda\Downloads
Task: {532591BF-F6F0-430E-9EAA-061231AAF910} - System32\Tasks\{927A8016-7C84-4099-B4A9-7974F86116C3} => pcalua.exe -a C:\Users\Ruda\Downloads\wlsetup-all.exe -d C:\Users\Ruda\Downloads
Task: {54D2DA7B-D6C0-4439-A54E-3D49106D238C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-05-05] (Microsoft Corporation)
Task: {5702B3D4-BC81-45E2-9ABA-68BC3D512AEA} - System32\Tasks\{7F5B67FF-7FC5-433A-B43F-7C97030550DC} => C:\Users\Ruda\Downloads\Luminance-HDR-Win32-SETUP-v2.3.1-2.exe
Task: {596F0B48-FC9F-43E7-B75F-37DBD67176A3} - System32\Tasks\{3CA36EE5-E256-4568-B0D0-D654007BFB6E} => pcalua.exe -a E:\software\oem\oemsetup.exe -d E:\software\oem
Task: {5A08588B-9980-4FAE-A675-B8BE597CE218} - System32\Tasks\{7064E0ED-D387-4527-B3FB-D3E603B18F21} => pcalua.exe -a C:\Users\Ruda\Downloads\FreeRapid-0.9u3\frd.exe -d C:\Users\Ruda\Downloads\FreeRapid-0.9u3
Task: {5DBF41C4-05C3-44C4-8A5A-9F8C01F8D2B4} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2012-09-27] ()
Task: {5FAE1F37-D79B-48A7-A5D4-B4D2FC852F0F} - System32\Tasks\{638DA9E3-5093-48A0-A3A5-F81670454AC0} => pcalua.exe -a C:\PerfLogs\Desktop\wlsetup-all.exe -d C:\PerfLogs\Desktop
Task: {60C99AB4-F669-44B2-8138-1C54E3C0CC62} - System32\Tasks\{F2016396-B017-48F7-A855-8A17138D566C} => pcalua.exe -a "C:\Program Files (x86)\Asus\Game Park\Turbo Fiesta\Uninstall.exe" -c "C:\Program Files (x86)\Asus\Game Park\Turbo Fiesta\install.log"
Task: {62F478F3-81FF-4C11-93B5-0FFF846C66DB} - System32\Tasks\{C582AF60-6D3C-4318-91FB-FED9812D23A6} => pcalua.exe -a C:\Users\Ruda\Downloads\InstallPlus500(1).exe -d C:\Users\Ruda\Downloads
Task: {6BFE70D9-CB90-43BA-BDA3-2D48914FAD26} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {70CF69D2-989B-4CDF-AD9E-7F59AFD5BBE2} - System32\Tasks\{6735FC5D-B0D4-41FB-983F-D6A0632CB305} => C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe
Task: {712B8D58-53FD-47AA-A47E-B77BEB389D27} - System32\Tasks\{47747F88-D939-441C-BA01-5980F3ACC2C1} => pcalua.exe -a C:\Users\Ruda\Downloads\AdobeAIRInstaller(1).exe -d C:\Users\Ruda\Downloads
Task: {733E75A1-36DE-49D1-8213-6A98BF18C630} - System32\Tasks\{48FF464B-754B-466F-B402-74777B4B1EBA} => pcalua.exe -a "C:\Program Files (x86)\BlazeVideo\BlazeDTV 6.0\oemsetup.exe" -d "C:\Program Files (x86)\BlazeVideo\BlazeDTV 6.0"
Task: {73598455-55F6-457F-A91D-18E3C7C42BAC} - System32\Tasks\{B4C4EABB-5B0D-4EF7-8449-BFA20337AEEC} => pcalua.exe -a "C:\Program Files (x86)\Asus\Game Park\Dream Day First Home\Uninstall.exe" -c "C:\Program Files (x86)\Asus\Game Park\Dream Day First Home\install.log"
Task: {73D09C75-C9E8-4D7E-9A05-54315B7E0A74} - System32\Tasks\{17A30D0C-9F9A-42D2-ADD6-E6C2A6087AAA} => pcalua.exe -a C:\Users\Ruda\Downloads\FreeRapid-0.9u3\FreeRapid-0.9u3\frd.exe -d C:\Users\Ruda\Downloads\FreeRapid-0.9u3\FreeRapid-0.9u3\
Task: {73F4FA2A-59E5-4814-A2A9-1130AFCBD7A4} - System32\Tasks\{F4502145-42AF-418D-82E5-00CC641E2BB3} => pcalua.exe -a "C:\Users\Ruda\Downloads\wlsetup-web .exe" -d C:\Users\Ruda\Downloads
Task: {74960CA7-B50D-4A3D-838C-C6E30438E0F2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {74BAB3AC-7C7A-4C02-9F63-AD3A5E095058} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {75977CC3-1E01-4AD2-A0BC-DE752D94BE37} - System32\Tasks\{86B6FF6A-565B-4AE2-A512-561E454D84F8} => C:\Program Files (x86)\ASUS\FaceLogon\logonmgr.exe [2012-02-21] (ASUSTek Computer Inc.)
Task: {782AF7B1-93C4-46BB-9331-671A3DEA7473} - System32\Tasks\ASUS Quick Gesture (x64) => C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x64\QuickGesture64.exe [2012-04-11] (ASUSTeK Computer Inc.)
Task: {796FB41F-561A-4CDB-A13E-DA8677AD52B3} - System32\Tasks\{3B64BBF6-C46E-482D-934F-2F09EA63E528} => Chrome.exe http://ui.skype.com/ui/0/6.7.0.102/cs/g ... Error=1603
Task: {7AB9DA8D-80DE-46E8-B6EE-740D1548BEA2} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2012-06-20] (ASUSTeK Computer Inc.)
Task: {7B810CC3-D17D-4E66-9F3E-04A9DFDB0589} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe
Task: {7EFAFBEE-4A0E-4258-8F22-B56A074FC1EE} - System32\Tasks\{CE160BED-AA6C-4B07-B819-15E1D2ED4F96} => pcalua.exe -a "C:\Program Files (x86)\OpenAL\oalinst.exe"
Task: {7F061C75-D6FC-4936-98CD-A81BADAAA50E} - System32\Tasks\{E70DE9C2-B021-460F-B37F-A045C1BD318B} => pcalua.exe -a C:\Users\Ruda\Downloads\Install-winMd5Sum.exe -d C:\Users\Ruda\Downloads
Task: {81169D4E-22EB-4B20-B641-AFCE30989E53} - System32\Tasks\{E9107696-4A75-4598-8970-BB83E8189B72} => pcalua.exe -a "c:\program files (x86)\kingsoft\kingsoft antivirus\uni0nst.exe"
Task: {8507C6E0-AB15-4A94-8661-252E988BBE53} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-04-20] (COMODO)
Task: {855C2966-0F57-492E-9289-49D291F7077F} - System32\Tasks\{EA700A6E-4619-4175-87F5-4DD8516627A9} => pcalua.exe -a E:\EasySetupAssistant\TL-WDR3600\EasySetupAssistant.exe -d E:\EasySetupAssistant\TL-WDR3600
Task: {8575D19C-8831-4EB6-87EA-FE9F8EF173AC} - System32\Tasks\ASC8_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe
Task: {85EC1DB6-DF1D-4F4F-84A8-8BF3C48D845E} - System32\Tasks\{DF50BD1D-B297-4274-95D1-9537FECDF4FD} => C:\Users\Ruda\Downloads\flock-2.6.0.en-US.win32.exe
Task: {87F70169-16E2-4A1D-BBBE-F5A3BE9BC361} - System32\Tasks\{3C018CAC-80C2-4550-ADE7-06563FDA0C82} => pcalua.exe -a C:\Users\Ruda\Downloads\wlsetup-web(1).exe -d C:\Users\Ruda\Downloads
Task: {8A6064C4-E61B-4442-A531-779DA76F62A6} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe [2012-02-17] (ASUSTek Computer Inc.)
Task: {8B8F3C55-A04A-4C63-93FA-25E3BA0E2AE0} - System32\Tasks\UnHackMe Task Scheduler => C:\Program Files (x86)\UnHackMe\hackmon.exe
Task: {8E1EF39C-C9C4-4604-B02C-5777F2E1D975} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {8F6A888A-91DF-44B3-A669-E86ED83FE6AA} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe
Task: {90FAEF35-3C1F-472B-99EE-577638B37680} - System32\Tasks\{009319D0-F3BB-4BA5-A79C-64A982F5295A} => pcalua.exe -a C:\Users\Ruda\Downloads\FreeRapid-0.9\frd.exe -d C:\Users\Ruda\Downloads\FreeRapid-0.9
Task: {91A967A0-F476-4B53-945C-D10037FFAC9B} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {95BA0704-4383-4360-8A79-C648AC6657CC} - System32\Tasks\{767F9478-3C3D-4EAA-AB9E-61FD8DC323EC} => C:\Users\Ruda\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2014-04-17] (Microsoft Corporation)
Task: {9B604BA7-4990-4066-ADEE-F3E1E3AB2077} - System32\Tasks\{EF25F101-B955-42F5-9878-F24186A0A763} => c:\program files (x86)\maxthon\bin\maxthon.exe
Task: {9C253EF1-E933-4C60-9C9C-2020699D01F1} - System32\Tasks\{4428E1A8-8A3F-43FB-A889-1A0C6ED40E8E} => C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe
Task: {9DD4C10B-EAE3-45B3-B84F-FC885D539853} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-04-20] (COMODO)
Task: {9DE13544-84E7-4557-A7C7-4354C90B2BD7} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {9FAC172D-4CA5-4419-B661-B5C427F70794} - System32\Tasks\{F3796B24-9A0C-4930-A356-6EB166310D6C} => pcalua.exe -a "C:\Program Files (x86)\FlashGet Network\FlashGet 3\uninst.exe"
Task: {A0E4045A-A82E-40C0-8251-CCF2EF9C4DB5} - System32\Tasks\{4CAE5787-73F8-42AA-820D-13DFD7C1BC04} => pcalua.exe -a C:\Users\Ruda\Downloads\RegCleaner.exe -d C:\Users\Ruda\Downloads
Task: {A531A161-339D-4362-A29F-B71B712BCA8E} - System32\Tasks\{E28F3532-125E-4BE3-BC6B-C39100C0C74C} => pcalua.exe -a "C:\Program Files (x86)\Asus\Game Park\Farm Frenzy 3 - Madagascar\Uninstall.exe" -c "C:\Program Files (x86)\Asus\Game Park\Farm Frenzy 3 - Madagascar\install.log"
Task: {A70A2388-E6AE-4C8A-BAC7-72241A828F77} - System32\Tasks\{91E9A25E-61BF-4194-9114-A965A07543E7} => pcalua.exe -a C:\Users\Ruda\Downloads\ytd-1.25.exe -d C:\Users\Ruda\Downloads
Task: {A7B080BD-8455-423E-BD5F-8964591CFCA3} - System32\Tasks\{37307FD2-BAB0-4627-B352-FDAEC564DE7C} => pcalua.exe -a C:\Users\Ruda\Downloads\FreeRapid-0.9u3\FreeRapid-0.9u3\frd.exe -d C:\Users\Ruda\Downloads\FreeRapid-0.9u3\FreeRapid-0.9u3
Task: {ACC1D449-0B5C-4147-9276-7881F1A0CEDF} - System32\Tasks\{F230008E-22AA-45DB-BC33-0AD646C51DAA} => Chrome.exe http://ui.skype.com/ui/0/6.3.0.105/cs/g ... Error=1603
Task: {AE595AEE-C073-4DDA-968A-65FD87657463} - System32\Tasks\ASUS Quick Gesture => C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x86\QuickGesture.exe [2012-04-11] (ASUSTeK Computer Inc.)
Task: {B037B310-9877-4270-A541-A2A4D10B4928} - System32\Tasks\{12F3F5D9-2FE5-4D60-A69F-D350813ABF07} => c:\program files (x86)\maxthon\bin\maxthon.exe
Task: {B45C43C8-6C3D-43B1-9060-360EE01663AA} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-05-05] (Microsoft Corporation)
Task: {B6D3F62D-EA60-47E6-94B5-0951D8F8A948} - System32\Tasks\{DAB592B0-49D5-4393-87F5-F69B1E2418A6} => pcalua.exe -a C:\Users\Ruda\Downloads\InstallPlus500(1).exe -d C:\Users\Ruda\Downloads
Task: {B9377CF7-D996-4021-B03C-C2B772A125D0} - System32\Tasks\{DC882E5B-1A06-4E48-B21B-3D82B17243FD} => c:\program files (x86)\maxthon\bin\maxthon.exe
Task: {BCFAAA81-E865-4CC4-B387-1D54FCB965F5} - System32\Tasks\{3FDD096B-4477-4116-9577-8D01A2A457C0} => pcalua.exe -a C:\Users\Ruda\Downloads\IrfanView-4.32-cestina.exe -d C:\Users\Ruda\Downloads
Task: {C31E0E22-2242-4B96-8DD5-6399CBED420F} - System32\Tasks\{C841434A-58F6-4B51-A900-FDB75DD8C7C6} => pcalua.exe -a C:\Users\Ruda\FreeRapid-0.9u4\frd.exe -d C:\Users\Ruda\FreeRapid-0.9u4
Task: {C71C5F8F-8CBE-41D5-A71A-DD9A34B238C1} - System32\Tasks\{75D8443C-5E6E-4EEC-9CA2-1CD4A83155EF} => pcalua.exe -a "C:\Program Files (x86)\Asus\Game Park\Deadtime Stories\Uninstall.exe" -c "C:\Program Files (x86)\Asus\Game Park\Deadtime Stories\install.log"
Task: {C787445F-7F00-4E87-854D-E25060E58B1F} - System32\Tasks\{EDE012CB-828B-43A7-B05D-799D50643F98} => pcalua.exe -a C:\Users\Ruda\Downloads\Q-Dir_Installer\Q-Dir_Installer.exe -d C:\Users\Ruda\Downloads\Q-Dir_Installer
Task: {C795DFDD-E73F-4421-AF65-2DAA23DCD7D5} - System32\Tasks\_DEFAULT => C:\Program Files (x86)\WinThruster\WinThruster.exe
Task: {C8C1F110-C824-438D-A675-90B8ED30FDCF} - System32\Tasks\{69E4AD2B-0444-4F0F-938E-E25216565717} => pcalua.exe -a C:\Users\Ruda\Downloads\irfanviewcestina.exe -d C:\Users\Ruda\Downloads
Task: {C9B0E551-C092-4A34-A052-48938833C4AE} - System32\Tasks\{A6A6EE80-91BB-4C25-B7AE-007E7827504E} => pcalua.exe -a C:\Users\Ruda\Downloads\PuranDefragFree73cz.exe -d C:\Users\Ruda\Downloads
Task: {CC12428E-D56B-4AD1-B482-958669ACE552} - System32\Tasks\{497236D4-2B86-47EE-B2DC-494DE0F459E0} => Chrome.exe http://ui.skype.com/ui/0/6.7.0.102/cs/g ... Error=1603
Task: {CFFF0114-748E-4136-952C-9885E6DFD2BB} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {D03F2332-EE2B-4B19-9FCE-81837046DBA9} - System32\Tasks\{B537248A-7A51-4F21-9537-1F4656D35C43} => pcalua.exe -a "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller"
Task: {D64DB2C2-AAC6-4556-8592-56CB58FEAECF} - System32\Tasks\Driver Booster SkipUAC (Ruda) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {DC3B6C01-BB96-4CC8-A94A-12D5DADC8CB2} - System32\Tasks\{F1C323FF-2AE3-4EE4-B2A7-664C45CF8786} => pcalua.exe -a C:\Users\Ruda\Downloads\FreeRapid-0.9u3\FreeRapid-0.9u3\frd.exe -d C:\Users\Ruda\Downloads\FreeRapid-0.9u3\FreeRapid-0.9u3
Task: {DCFE36AD-5A4B-4737-8371-E3AECD3D28F2} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2012-06-25] (ASUSTek Computer Inc.)
Task: {E1CC17F3-46BC-4C83-9AB4-2D5301740B16} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-841361005-909514878-2309378359-1002 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe
Task: {E39B3F81-57A4-4C48-A27C-B7BB6641F6D9} - System32\Tasks\{6093F58B-05B8-4885-AC3E-5CBADB3B9EE8} => pcalua.exe -a "C:\Program Files (x86)\Q-Dir\Q-Dir.exe" -c -uninstall
Task: {E3A4C2E2-F09C-4FB8-AB3B-A5C57EA40DB8} - System32\Tasks\{F54D05B9-8665-451C-B33E-50DBCEE2C466} => pcalua.exe -a C:\Users\Ruda\Downloads\FreeRapid-0.9u4\frd.exe -d C:\Users\Ruda\Downloads\FreeRapid-0.9u4
Task: {E86C242E-58BE-4D9E-9CD7-377E682ABDA1} - System32\Tasks\{46D68E75-36A5-415B-870B-2044C36BB17D} => Chrome.exe http://ui.skype.com/ui/0/6.3.0.105/cs/g ... Error=1603
Task: {EAC240FD-628B-421C-B9D9-F9A6699C5447} - System32\Tasks\{8934D43F-07E3-4AC9-8B51-EE69159070D9} => pcalua.exe -a C:\Users\Ruda\Downloads\InstallPlus500.exe -d C:\PerfLogs\Desktop
Task: {EE121801-62E4-413E-90B1-35D247602CDC} - System32\Tasks\{565C191B-0775-4FC9-9A45-B4693D41137F} => pcalua.exe -a "C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe" -d "C:\Program Files (x86)\Maxthon\Bin"
Task: {F1F971D1-C6AC-4C78-BDA2-617D7F2B1D2B} - System32\Tasks\{9153B0BA-90A9-4180-9C9C-7732DF80A851} => pcalua.exe -a C:\Users\Ruda\Downloads\wlsetup-web.exe -d C:\Users\Ruda\Downloads
Task: {F22C2E35-F41F-4796-A405-B7B0FC0004FF} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-02-29] (ASUSTek Computer Inc.)
Task: {F68F5127-7E5C-43A9-B13E-6B79E1600FF9} - System32\Tasks\Wise Disk Cleaner Schedule Task => C:\Program Files (x86)\Wise\Wise Disk Cleaner\WiseDiskCleaner.exe
Task: {F8762AE5-8D0F-4553-964B-38F1CB6524F3} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {F9CEAC5E-8BD9-4E8D-A9DD-72585A11D274} - System32\Tasks\{D0A82C02-D5B6-40F3-A6FE-5C6222ECAC6A} => Chrome.exe http://ui.skype.com/ui/0/6.3.0.105/cs/g ... Error=1603
Task: {F9F7AE3C-F149-49A5-B175-AA2EAC6D5570} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {FADD9E22-61F0-4458-8434-3BCE6C875CE8} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_pepper.exe [2015-05-12] (Adobe Systems Incorporated)
Task: {FBB56E48-46C1-4174-A6F9-1E58A55FC723} - System32\Tasks\{974A3388-1B51-49AC-ADC4-7C199260FE17} => pcalua.exe -a C:\Users\Ruda\Downloads\iview436_setup.exe
Task: {FC4C46C5-AAE6-4316-9892-FD88BE98D484} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-12] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (Whitelisted) ==============

2014-01-08 21:21 - 2014-05-20 03:25 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-03-25 02:22 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-11-25 21:25 - 2015-02-11 18:25 - 00216576 _____ () C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
2015-04-15 22:13 - 2015-04-15 22:13 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2015-04-08 11:14 - 2015-04-08 11:14 - 01709736 _____ () C:\Program Files (x86)\Rapoo\RpWireless\LedStatus.exe
2013-04-15 18:39 - 2015-01-09 00:02 - 00067808 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav
2014-11-25 21:11 - 2014-11-25 21:11 - 00221184 _____ () C:\Program Files (x86)\GNU\GnuPG\libksba-8.dll
2014-11-25 21:05 - 2014-11-25 21:05 - 00038400 _____ () C:\Program Files (x86)\GNU\GnuPG\libgpg-error-0.dll
2014-11-25 20:57 - 2014-11-25 20:57 - 00050176 _____ () C:\Program Files (x86)\GNU\GnuPG\libw32pth-0.dll
2014-11-25 21:10 - 2014-11-25 21:10 - 00070144 _____ () C:\Program Files (x86)\GNU\GnuPG\libassuan-0.dll
2014-11-25 21:13 - 2014-11-25 21:13 - 00742912 _____ () C:\Program Files (x86)\GNU\GnuPG\libgcrypt-20.dll
2014-10-10 14:39 - 2015-03-23 18:17 - 00012120 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2014-03-23 16:04 - 2014-03-23 16:04 - 00557056 _____ () C:\Program Files (x86)\Trusteer\Rapport\bin\js32.dll
2012-02-22 00:49 - 2012-02-22 00:49 - 00009216 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2012-01-31 19:25 - 2012-01-31 19:25 - 01163264 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\acAuth.dll
2015-04-08 11:14 - 2015-04-08 11:14 - 00042496 _____ () C:\Program Files (x86)\Rapoo\RpWireless\LedStatus.dll
2015-04-17 00:18 - 2015-04-17 00:18 - 01498112 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2015-04-17 00:18 - 2015-04-17 00:18 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2014-11-17 12:01 - 2000-01-01 02:00 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-04-25 15:01 - 2015-04-25 15:01 - 01056312 _____ () C:\Users\Ruda\AppData\Roaming\Mozilla\Firefox\Profiles\0hfd64x0.default-1423008048081\extensions\support@lastpass.com\platform\WINNT_x86-msvc\components\lpxpcom.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Windows\unins000.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\acmigration.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\adtschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\advapi32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aeinv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aelupsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aepdu.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aepic.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aitstatic.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\apisetschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\apphelp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidcertstorecheck.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidpolicyconverter.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appraiser.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\atmfd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\atmlib.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\audiodg.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\AudioEng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\AUDIOKSE.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\AudioSes.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\auditpol.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\blackbox.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\clfs.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\clfsw32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\conhost.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\credssp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\crypt32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptnet.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptsp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\csrsrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\dciman32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\devinv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\diagtrack.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\diskperf.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\drmmgrtn.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\drmv2clt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\dxmasf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\EncDump.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\enppmon.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\enppui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\enpres.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ensppmon.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ensppui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\enspres.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\escsvc64.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\esdevapp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\E_GCINST.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\system32\E_YD4BI4E.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\system32\E_YLMI4E.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\system32\fontsub.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\gdi32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\generaltel.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\invagent.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\kerberos.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\kernel32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\KernelBase.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\logman.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lpk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lsasrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lsass.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mferror.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mfpmp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mfps.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\MpSigStub.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msaudite.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msctf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msdxm.ocx:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msmmsp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msnetobj.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msobjs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msscp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msv1_0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msxml3.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msxml3r.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ncrypt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nlasvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ntdll.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ntoskrnl.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ntvdm64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvapi64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvcompiler.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvcuda.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvcuvenc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvcuvid.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvd3dumx.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvdispco6434725.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvdispgenco6434725.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\NvFBC64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\NvIFR64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvinitx.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvoglshim64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvoglv64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvopencl.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvumdshimx.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvvsvc.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvwgf2umx.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\oleaut32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcadm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcaevts.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcalua.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcasvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcawrk.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\perftrack.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\poqexec.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\powertracker.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\profsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\quartz.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\rdpcorets.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\RdpGroupPolicyExtension.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\rdpudd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\relog.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\rrinstaller.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\rstrui.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\scesrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\sdbinst.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\sechost.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\secur32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\setbcdlocale.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\shell32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\shimeng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\smss.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\spwmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\srclient.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\srcore.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\sspicli.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\sspisrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\tdh.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\tracerpt.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\TSpkg.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\TSWbPrxy.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\typeperf.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ubpm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\UtcResources.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wdi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wdigest.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WindowsCodecs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winload.efi:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winload.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winresume.efi:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WinSetupUI.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winsrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wintrust.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wmdrmsdk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WMPhoto.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wmploc.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wow64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wow64cpu.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wow64win.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WSDScDrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wu.upgrade.ps.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuapp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuauclt.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuaueng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wucltux.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wudriver.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wups.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wups2.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuwebv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\adtschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\advapi32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\apisetschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\apphelp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\appidapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\atmfd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\atmlib.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\AudioEng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\AUDIOKSE.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\AudioSes.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\auditpol.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\blackbox.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\clfsw32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\credssp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\crypt32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptnet.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptsp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_42.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\dciman32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\diskperf.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\drmmgrtn.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\drmv2clt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\dxmasf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerApp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\fmcodec.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\fontsub.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\gdi32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\GPhotos.scr:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\instnm.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\kerberos.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\kernel32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\KernelBase.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\logman.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\lpk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mediarcpt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mferror.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mfpmp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mfps.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msaudite.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msctf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msdxm.ocx:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msnetobj.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msobjs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msscp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msv1_0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msvcr71.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msxml3.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msxml3r.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ncrypt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ncsi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nlaapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntdll.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntkrnlpa.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntoskrnl.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntvdm64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvcompiler.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvcuda.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvcuvenc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvcuvid.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvd3dum.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\NvFBC.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\NvIFR.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvinit.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvoglshim32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvoglv32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvopencl.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvumdshim.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvwgf2um.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\oleaut32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\poqexec.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\quartz.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\relog.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\rrinstaller.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\scesrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\sdbinst.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\sechost.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\secur32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\setup16.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\shell32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\shimeng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\spwmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\srclient.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\sspicli.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\tdh.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\tracerpt.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\TSpkg.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\typeperf.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ubpm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\user.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wdi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wdigest.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\WindowsCodecs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wintrust.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wmdrmsdk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\WMPhoto.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wmploc.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wow32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wuapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wuapp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wudriver.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wups.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wuwebv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\anvsnddrv.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\appid.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\athrx.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\cng.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\EsgScanner.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\http.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\ksecdd.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\ksecpkg.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\mountmgr.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\mrxdav.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\nvlddmkm.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\nvpciflt.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\PEAuth.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\rpkmdrv.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\usbscan.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\VClone.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\WSDPrint.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\WSDScan.sys:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\Drivers\afc.sys:$CmdTcID
AlternateDataStreams: C:\ProgramData\Temp:DBC416F8
AlternateDataStreams: C:\ProgramData\Temp:F169C698
AlternateDataStreams: C:\Users\Ruda\Downloads\AdobeAIRInstaller(1).exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\adobereader-setup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\adobereader-setup.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\adwcleaner_4.204.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\ashampoo_getback_photo_18891.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\ashampoo_zip_free_1.0.1_sm.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\ashampoo_zip_free_1.0.1_sm.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\aTube_Catcher_ATU3_8001(1).exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\aTube_Catcher_ATU3_8001(1).exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\avc-ultimate.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\cc-setup(1).exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\cc-setup(1).exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\cdbxp_setup_4.5.4.5306.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\dfsetup219.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\EpsonConnect130.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\FirefoxSetup36.0cz.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\FreemakeVideoConverterSetup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\FreemakeVideoConverterSetup.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\FSViewerSetup53(1).exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\GoogleEarthWin.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\InstallPlus500(1).exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\install_flash_player(1).exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\install_flash_player_ax.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\install_reader11_uk_mssa_aaa_aih.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\install_reader11_uk_mssa_aaa_aih.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\InstalRecepty.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\InstalRecepty.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\jre-8u31-windows-x64.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\KRČEK RUDOLF.p12:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\lastpass_x64.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\LibreOffice_4.4.3_Win_x86.msi:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\LibreOffice_4.4.3_Win_x86_helppack_cs.msi:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\nppInstaller.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\OO_4_2010_Obec_dokonceni.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\OO_4_2010_Obec_dokonceni.pdf:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\ProgDVB7.08.9Std.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\Q-Dir_Installer.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\r.l.Šimpachová Františka.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\RapportSetup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\RapportSetup.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\setup(1).exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\setup(1).exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\setup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\skype-setup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\spsetup128.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\StickyPassword_rev80333.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\StickyPassword_rev80333.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\SyncBack_Setup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\SyncBack_Setup.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\SystemExplorerSetup_641.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\SystemExplorerSetup_641.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\TeamViewer_Setup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\ThunderbirdSetup31.4.0 .exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\TiskObalek_CZ_3228.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\uTorrent221.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\vlc-2.2.1-win32.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\vlc-2.2.1-win32.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\wlsetup-web.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\XnView-win.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\AppData\Roaming\inst.exe:$CmdTcID

==================== Safe Mode (Whitelisted) ===================

nevešlo ce to celé najednou

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

There are 11406 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-841361005-909514878-2309378359-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Ruda\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: Fax => 3
MSCONFIG\Services: GeekBuddyRSP => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: NAUpdate => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: VideoAcceleratorService => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Skype.lnk => C:\Windows\pss\Skype.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Ruda^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Odeslat do OneNote.lnk => C:\Windows\pss\Odeslat do OneNote.lnk.Startup
MSCONFIG\startupreg: ASUSWebStorage => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.144.298\AsusWSPanel.exe /S
MSCONFIG\startupreg: eM Client => "C:\Program Files (x86)\eM Client\MailClient.exe" /startup
MSCONFIG\startupreg: Family Tree Builder Update => C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe
MSCONFIG\startupreg: Google+ Auto Backup => "C:\Users\Ruda\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
MSCONFIG\startupreg: iSkysoft Helper Compact.exe => C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe
MSCONFIG\startupreg: PDFPrint => C:\Program Files (x86)\PDF24\pdf24.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [{90F4BCA1-1ED3-473F-B678-77774EEE86C7}] => (Allow) C:\Users\Ruda\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{5BB1574F-6C90-4CCE-B0C0-C4CA1EFAB72F}] => (Allow) C:\Users\Ruda\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [TCP Query User{AB3BFDD5-BDA9-4669-B171-04867DD5E02B}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [UDP Query User{EFB3F90C-ABB2-4B5E-BB6A-4F5BEB02800B}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [TCP Query User{BCC8A6B1-02AF-4ECC-99E7-A4AD98316C82}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{71109C3F-567D-4C66-8613-DA9907DB21C5}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{C0E59EC1-571E-41F4-82DE-4811EF5D1FE1}C:\program files (x86)\asus\asusvibe\asusvibe2.0.exe] => (Allow) C:\program files (x86)\asus\asusvibe\asusvibe2.0.exe
FirewallRules: [UDP Query User{85B00424-1AF6-4568-B96F-7F1E1D43DBA6}C:\program files (x86)\asus\asusvibe\asusvibe2.0.exe] => (Allow) C:\program files (x86)\asus\asusvibe\asusvibe2.0.exe
FirewallRules: [TCP Query User{C8AE922F-AC9D-4A22-B6DF-94EEFE3E8ED0}C:\users\ruda\downloads\odorik.exe] => (Allow) C:\users\ruda\downloads\odorik.exe
FirewallRules: [UDP Query User{C1C730AE-BF4A-4882-A19A-987E04EC0C60}C:\users\ruda\downloads\odorik.exe] => (Allow) C:\users\ruda\downloads\odorik.exe
FirewallRules: [TCP Query User{0B2B5323-A642-4D0F-989D-619B4877D29C}C:\users\ruda\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\ruda\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{BB1033FC-FB64-4506-9453-AABCB3CF1619}C:\users\ruda\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\ruda\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{AF450249-DA00-4C98-9216-44652AAA86C9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{2F3980D4-E942-49B5-B196-67925E938454}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{680AF139-798D-44C5-8A7A-00FD173710A4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{726A8B87-320C-43F1-AAFB-5889FBEA0439}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E45EDA63-02B5-493E-A506-35E9255062EF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9F0310B8-4203-4E28-849C-8C7FD9F3B567}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{C89A843A-8C11-468A-977D-E917C810C55B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{3691493E-4EA9-422C-BA14-D3B25DF78AF2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{D2879268-A411-4E5F-A691-1F2C906EB4C6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{01822DC9-7593-4607-A98E-D7B6B75BA1C1}C:\program files (x86)\java\jre7\launch4j-tmp\frd.exe] => (Allow) C:\program files (x86)\java\jre7\launch4j-tmp\frd.exe
FirewallRules: [UDP Query User{DF581E5F-592B-4B1A-938F-4D2259981200}C:\program files (x86)\java\jre7\launch4j-tmp\frd.exe] => (Allow) C:\program files (x86)\java\jre7\launch4j-tmp\frd.exe
FirewallRules: [{9EA4D1FE-5945-4782-B1EA-7B0C35937587}] => (Allow) C:\program files (x86)\java\jre7\launch4j-tmp\frd.exe
FirewallRules: [{007D1DFE-3301-44A4-8CCC-CF055A80B02A}] => (Allow) C:\program files (x86)\java\jre7\launch4j-tmp\frd.exe
FirewallRules: [{F7B89C45-1502-483F-82BD-06364B5B4F96}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{1E2A564C-59D1-431D-9C6A-9DF54FDE0D49}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{497B3B98-AC98-4E2B-A085-53C416DA96B5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{B905C8FA-4CBB-4EA1-959F-F6CCE20EA2C4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{DE5D90F6-9D3A-48D3-A896-911982AF426A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{071ADE7D-52E1-4164-A39D-2E9B093AD614}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{050F83A9-321B-4CD5-82DA-EFEAF9B08588}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{6E692C09-0409-4332-8D9D-0F9A8477A533}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{56134CEB-BBCC-4350-8183-9ED709F83074}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{908DA1C5-4EEF-4B5F-BD9C-2CA23F09C9E5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{D141B2DC-6C01-416E-8B21-4A070821D9A2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{0642ADDC-6536-4111-A160-EC7E3C947527}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{46E76EBE-477A-4163-B54C-9DD2CF94F6AB}C:\perflogs\desktop\odorik.exe] => (Allow) C:\perflogs\desktop\odorik.exe
FirewallRules: [UDP Query User{9306215F-321D-40E5-9B3A-B4673B409F66}C:\perflogs\desktop\odorik.exe] => (Allow) C:\perflogs\desktop\odorik.exe
FirewallRules: [{DED30F47-226A-4E91-ACB0-A884C610A817}] => (Allow) C:\Program Files (x86)\SkypeWebPlugin\SkypeWebPlugin.exe
FirewallRules: [{A1BF1D34-DA61-471D-B244-CD487783F9CE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4D4918B6-28FD-4E0A-AC66-A7741C06AE9C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{D2091581-F08A-4CC7-BFFE-FFCA211FD3A6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{6BF46CD3-1148-4748-89FC-8564626156D7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{25781D61-0AB3-4F6F-86FC-F630F62A6836}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7CD40FA6-9304-489E-B4C4-254968D80E02}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [SNMP-In-UDP] => (Allow) %SystemRoot%\system32\snmp.exe
FirewallRules: [SNMP-Out-UDP] => (Allow) %SystemRoot%\system32\snmp.exe
FirewallRules: [SNMP-In-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe
FirewallRules: [SNMP-Out-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [{B1207B55-0ED4-4822-869F-7A59B8FBA925}] => (Allow) LPort=2869
FirewallRules: [{BED6ADC2-FB6F-47C3-96CF-8A528921EC22}] => (Allow) LPort=1900
FirewallRules: [TCP Query User{6FE57AF2-BCE0-4D62-A728-DD08A66E25FC}C:\program files (x86)\flashget network\flashget 3\flashget3.exe] => (Allow) C:\program files (x86)\flashget network\flashget 3\flashget3.exe
FirewallRules: [UDP Query User{D228D849-5376-4E45-9653-B356CE78073D}C:\program files (x86)\flashget network\flashget 3\flashget3.exe] => (Allow) C:\program files (x86)\flashget network\flashget 3\flashget3.exe
FirewallRules: [TCP Query User{8BE7E96A-CBA3-43EE-8329-34ADA9A880B2}C:\windows\system32\mmc.exe] => (Allow) C:\windows\system32\mmc.exe
FirewallRules: [UDP Query User{F4F13C9C-F3D1-483B-B7FC-4A9CB9ABFD3C}C:\windows\system32\mmc.exe] => (Allow) C:\windows\system32\mmc.exe
FirewallRules: [{3B1D4050-2E48-4760-A15B-9B86D6EADF01}] => (Allow) C:\windows\system32\mmc.exe
FirewallRules: [{A2833CD8-E408-4E2C-8002-42C676B0BA56}] => (Allow) C:\windows\system32\mmc.exe
FirewallRules: [{E188933D-843E-4EAF-BC78-640CD0DBCF97}] => (Allow) LPort=3306
FirewallRules: [{D8A039FC-0566-4E8F-93EF-23E06DCFCDCC}] => (Allow) C:\Program Files (x86)\iplay_en\dtuser.exe
FirewallRules: [{4DCAB2E5-2D27-45E4-B568-E3654260DC25}] => (Allow) C:\Program Files (x86)\iplay_en\dtuser.exe
FirewallRules: [{419B4389-7566-4E26-B952-AB6D197F0967}] => (Allow) C:\Users\Ruda\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
FirewallRules: [{6913E57E-B7E3-4FEC-9DA3-066C619D7871}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{C2CB22A3-348E-436F-A07D-D63D3469F621}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{DEA92FD6-1348-4892-BA25-3745BFF7BB9C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{401A5A44-4167-447E-A90B-C8D51A539555}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{3CBE25FE-3B9B-425E-8C1D-EBDBCB2B9B51}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{8E00688C-7419-4419-ABA5-55E26476A463}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{24037665-5904-45CC-BAC5-06664862C3A1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{71371E53-84A2-4101-AFE6-79659F554987}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{6C4DBC42-0E8D-4251-9F30-2D35EF723F29}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{0CB9B324-32E6-408D-BE49-97FCF2753D7C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{A9100CF3-4F85-40B6-A0BB-F152476748AB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{BB2F0D87-715E-47F6-81AD-C341C684B320}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{73BBC4FC-F0AF-4FD7-A0F0-1AF26B02753C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{54B5FEB9-2581-44F5-97A5-4A3358DB2E86}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{2560A362-F09E-49FA-9000-4FCAC3152D24}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F0D00006-B2F1-4727-AC73-DED2801CA13D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{C7E7BA54-2F5E-4BFD-B54A-C9A90C0E2FE9}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{9FFD5257-43FD-4850-969E-96966F02B218}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{15EFBE93-CACA-407A-96F8-35DDE97D50E2}] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{C5E2F33F-7513-423E-98B0-2887CE265B1C}] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{4B231037-C5EA-4352-8DB0-883C64EF67E3}] => (Allow) C:\Program Files (x86)\Epson Software\ECPrinterSetup\ENPApp.exe
FirewallRules: [{E34C7B3C-B979-4E59-BCC3-BA275CCF072A}] => (Allow) C:\Program Files (x86)\Epson Software\ECPrinterSetup\ENPApp.exe
FirewallRules: [{7E09104E-0BF3-42B4-882E-31FE68A015F3}] => (Allow) C:\Users\Ruda\AppData\Roaming\uTorrent\utorrent.exe
FirewallRules: [{C453DF6B-56A2-43D1-BA1A-2AB3A97AC7DD}] => (Allow) C:\Users\Ruda\AppData\Roaming\uTorrent\utorrent.exe
FirewallRules: [{E9049963-D83A-4EE8-858D-D4717C6B72F8}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Could not list Devices. Check "winmgmt" service or repair WMI.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/15/2015 06:01:29 PM) (Source: MSSQLServerADHelper) (EventID: 100) (User: )
Description: '0' is an invalid number of start up parameters. This service takes two start up parameters.

Error: (05/15/2015 05:41:24 PM) (Source: MSSQLServerADHelper) (EventID: 100) (User: )
Description: '0' is an invalid number of start up parameters. This service takes two start up parameters.

Error: (05/15/2015 05:38:36 PM) (Source: MSSQLServerADHelper) (EventID: 100) (User: )
Description: '0' is an invalid number of start up parameters. This service takes two start up parameters.

Error: (05/15/2015 05:37:02 PM) (Source: MSSQLServerADHelper) (EventID: 100) (User: )
Description: '0' is an invalid number of start up parameters. This service takes two start up parameters.

Error: (05/15/2015 05:02:44 PM) (Source: MSSQLServerADHelper) (EventID: 100) (User: )
Description: '0' is an invalid number of start up parameters. This service takes two start up parameters.

Error: (05/15/2015 03:40:00 PM) (Source: MSSQLServerADHelper) (EventID: 100) (User: )
Description: '0' is an invalid number of start up parameters. This service takes two start up parameters.

Error: (05/15/2015 11:38:30 AM) (Source: MSSQLServerADHelper) (EventID: 100) (User: )
Description: '0' is an invalid number of start up parameters. This service takes two start up parameters.

Error: (05/15/2015 11:08:44 AM) (Source: MsiInstaller) (EventID: 1023) (User: NT AUTHORITY)
Description: Aktualizaci Microsoft Silverlight 5.1.40416.0 produktu Microsoft Silverlight nebylo možné nainstalovat. Kód chyby: 1603. Další informace naleznete v souboru protokolu C:\Windows\TEMP\SilverlightMSI.log.

Error: (05/15/2015 11:08:37 AM) (Source: MsiInstaller) (EventID: 11402) (User: NT AUTHORITY)
Description: Product: Microsoft Silverlight -- Error 1402. Could not open key: HKEY_LOCAL_MACHINE32\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0\Suffixes. System error 5. Verify that you have sufficient access to that key, or contact your support personnel.

Error: (05/15/2015 10:53:59 AM) (Source: MSSQLServerADHelper) (EventID: 100) (User: )
Description: '0' is an invalid number of start up parameters. This service takes two start up parameters.


System errors:
=============
Error: (05/15/2015 07:45:00 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (05/15/2015 07:30:00 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (05/15/2015 07:15:00 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (05/15/2015 06:45:00 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (05/15/2015 06:30:00 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (05/15/2015 06:15:00 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (05/15/2015 06:02:07 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: specifické pro aplikaciMístníSpuštění{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (pomocí LRPC)

Error: (05/15/2015 06:01:37 PM) (Source: SNMP) (EventID: 1500) (User: )
Description: Služba SNMP zjistila při přístupu ke klíči registru SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration chybu.

Error: (05/15/2015 06:01:29 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba SQL Server Active Directory Helper ukončena s chybou %%-1073741724, specifickou pro službu.

Error: (05/15/2015 06:01:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Adaptér naslouchání Net.Tcp závisí na službě Služba sdílení portů Net.Tcp, která neuspěla při spuštění v důsledku následující chyby:
%%1058


Microsoft Office Sessions:
=========================
Error: (05/15/2015 06:01:29 PM) (Source: MSSQLServerADHelper) (EventID: 100) (User: )
Description: 0

Error: (05/15/2015 05:41:24 PM) (Source: MSSQLServerADHelper) (EventID: 100) (User: )
Description: 0

Error: (05/15/2015 05:38:36 PM) (Source: MSSQLServerADHelper) (EventID: 100) (User: )
Description: 0

Error: (05/15/2015 05:37:02 PM) (Source: MSSQLServerADHelper) (EventID: 100) (User: )
Description: 0

Error: (05/15/2015 05:02:44 PM) (Source: MSSQLServerADHelper) (EventID: 100) (User: )
Description: 0

Error: (05/15/2015 03:40:00 PM) (Source: MSSQLServerADHelper) (EventID: 100) (User: )
Description: 0

Error: (05/15/2015 11:38:30 AM) (Source: MSSQLServerADHelper) (EventID: 100) (User: )
Description: 0

Error: (05/15/2015 11:08:44 AM) (Source: MsiInstaller) (EventID: 1023) (User: NT AUTHORITY)
Description: Microsoft SilverlightMicrosoft Silverlight 5.1.40416.01603C:\Windows\TEMP\SilverlightMSI.log(NULL)(NULL)

Error: (05/15/2015 11:08:37 AM) (Source: MsiInstaller) (EventID: 11402) (User: NT AUTHORITY)
Description: Product: Microsoft Silverlight -- Error 1402. Could not open key: HKEY_LOCAL_MACHINE32\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0\Suffixes. System error 5. Verify that you have sufficient access to that key, or contact your support personnel.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (05/15/2015 10:53:59 AM) (Source: MSSQLServerADHelper) (EventID: 100) (User: )
Description: 0


CodeIntegrity Errors:
===================================
Date: 2014-11-16 23:51:45.335
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\IT9135BDA.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-11-16 23:51:45.242
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\IT9135BDA.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-11-16 23:46:25.555
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\IT9135BDA.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-11-16 23:46:25.384
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\IT9135BDA.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-10-22 15:48:44.609
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\IT9135BDA.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-10-22 15:48:44.546
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\IT9135BDA.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-10-22 15:43:39.254
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\IT9135BDA.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-10-22 15:43:39.185
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\IT9135BDA.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-09-15 20:13:30.760
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\IT9135BDA.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-09-15 20:13:30.610
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\IT9135BDA.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel(R) Pentium(R) CPU B970 @ 2.30GHz
Percentage of memory in use: 62%
Total physical RAM: 3979.91 MB
Available physical RAM: 1488 MB
Total Pagefile: 9946.12 MB
Available Pagefile: 6494.59 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:186.3 GB) (Free:64.48 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:254.14 GB) (Free:29.47 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 30EC77D9)

Partition: GPT Partition Type.

==================== End Of Log ============================

Otevřte poznámkový blok a zkopírujte do něj:

Start
Task: {E1CC17F3-46BC-4C83-9AB4-2D5301740B16} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-841361005-909514878-2309378359-1002 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe
AlternateDataStreams: C:\Windows\unins000.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\acmigration.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\adtschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\advapi32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aeinv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aelupsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aepdu.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aepic.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aitstatic.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\apisetschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\apphelp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidcertstorecheck.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidpolicyconverter.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appraiser.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\atmfd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\atmlib.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\audiodg.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\AudioEng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\AUDIOKSE.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\AudioSes.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\auditpol.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\blackbox.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\clfs.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\clfsw32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\conhost.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\credssp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\crypt32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptnet.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptsp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\csrsrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\dciman32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\devinv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\diagtrack.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\diskperf.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\drmmgrtn.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\drmv2clt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\dxmasf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\EncDump.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\enppmon.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\enppui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\enpres.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ensppmon.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ensppui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\enspres.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\escsvc64.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\esdevapp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\E_GCINST.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\system32\E_YD4BI4E.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\system32\E_YLMI4E.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\system32\fontsub.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\gdi32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\generaltel.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\invagent.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\kerberos.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\kernel32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\KernelBase.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\logman.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lpk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lsasrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lsass.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mferror.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mfpmp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mfps.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\MpSigStub.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msaudite.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msctf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msdxm.ocx:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msmmsp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msnetobj.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msobjs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msscp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msv1_0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msxml3.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msxml3r.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ncrypt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nlasvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ntdll.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ntoskrnl.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ntvdm64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvapi64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvcompiler.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvcuda.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvcuvenc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvcuvid.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvd3dumx.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvdispco6434725.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvdispgenco6434725.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\NvFBC64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\NvIFR64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvinitx.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvoglshim64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvoglv64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvopencl.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvumdshimx.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvvsvc.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nvwgf2umx.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\oleaut32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcadm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcaevts.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcalua.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcasvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcawrk.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\perftrack.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\poqexec.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\powertracker.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\profsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\quartz.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\rdpcorets.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\RdpGroupPolicyExtension.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\rdpudd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\relog.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\rrinstaller.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\rstrui.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\scesrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\sdbinst.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\sechost.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\secur32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\setbcdlocale.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\shell32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\shimeng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\smss.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\spwmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\srclient.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\srcore.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\sspicli.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\sspisrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\tdh.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\tracerpt.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\TSpkg.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\TSWbPrxy.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\typeperf.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ubpm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\UtcResources.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wdi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wdigest.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WindowsCodecs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winload.efi:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winload.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winresume.efi:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WinSetupUI.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winsrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wintrust.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wmdrmsdk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WMPhoto.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wmploc.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wow64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wow64cpu.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wow64win.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WSDScDrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wu.upgrade.ps.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuapp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuauclt.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuaueng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wucltux.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wudriver.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wups.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wups2.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuwebv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\adtschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\advapi32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\apisetschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\apphelp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\appidapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\atmfd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\atmlib.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\AudioEng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\AUDIOKSE.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\AudioSes.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\auditpol.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\blackbox.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\clfsw32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\credssp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\crypt32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptnet.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptsp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_42.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\dciman32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\diskperf.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\drmmgrtn.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\drmv2clt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\dxmasf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerApp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\fmcodec.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\fontsub.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\gdi32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\GPhotos.scr:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\instnm.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\kerberos.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\kernel32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\KernelBase.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\logman.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\lpk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mediarcpt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mferror.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mfpmp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mfps.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msaudite.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msctf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msdxm.ocx:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msnetobj.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msobjs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msscp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msv1_0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msvcr71.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msxml3.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msxml3r.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ncrypt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ncsi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nlaapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntdll.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntkrnlpa.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntoskrnl.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntvdm64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvcompiler.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvcuda.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvcuvenc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvcuvid.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvd3dum.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\NvFBC.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\NvIFR.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvinit.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvoglshim32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvoglv32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvopencl.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvumdshim.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nvwgf2um.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\oleaut32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\poqexec.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\quartz.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\relog.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\rrinstaller.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\scesrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\sdbinst.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\sechost.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\secur32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\setup16.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\shell32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\shimeng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\spwmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\srclient.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\sspicli.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\tdh.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\tracerpt.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\TSpkg.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\typeperf.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ubpm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\user.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wdi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wdigest.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\WindowsCodecs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wintrust.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wmdrmsdk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\WMPhoto.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wmploc.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wow32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wuapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wuapp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wudriver.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wups.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wuwebv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\anvsnddrv.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\appid.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\athrx.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\cng.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\EsgScanner.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\http.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\ksecdd.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\ksecpkg.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\mountmgr.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\mrxdav.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\nvlddmkm.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\nvpciflt.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\PEAuth.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\rpkmdrv.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\usbscan.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\VClone.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\WSDPrint.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\WSDScan.sys:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\Drivers\afc.sys:$CmdTcID
AlternateDataStreams: C:\ProgramData\Temp:DBC416F8
AlternateDataStreams: C:\ProgramData\Temp:F169C698
AlternateDataStreams: C:\Users\Ruda\Downloads\AdobeAIRInstaller(1).exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\adobereader-setup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\adobereader-setup.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\adwcleaner_4.204.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\ashampoo_getback_photo_18891.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\ashampoo_zip_free_1.0.1_sm.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\ashampoo_zip_free_1.0.1_sm.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\aTube_Catcher_ATU3_8001(1).exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\aTube_Catcher_ATU3_8001(1).exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\avc-ultimate.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\cc-setup(1).exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\cc-setup(1).exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\cdbxp_setup_4.5.4.5306.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\dfsetup219.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\EpsonConnect130.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\FirefoxSetup36.0cz.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\FreemakeVideoConverterSetup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\FreemakeVideoConverterSetup.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\FSViewerSetup53(1).exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\GoogleEarthWin.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\InstallPlus500(1).exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\install_flash_player(1).exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\install_flash_player_ax.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\install_reader11_uk_mssa_aaa_aih.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\install_reader11_uk_mssa_aaa_aih.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\InstalRecepty.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\InstalRecepty.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\jre-8u31-windows-x64.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\KRČEK RUDOLF.p12:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\lastpass_x64.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\LibreOffice_4.4.3_Win_x86.msi:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\LibreOffice_4.4.3_Win_x86_helppack_cs.msi:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\nppInstaller.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\OO_4_2010_Obec_dokonceni.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\OO_4_2010_Obec_dokonceni.pdf:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\ProgDVB7.08.9Std.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\Q-Dir_Installer.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\r.l.Šimpachová Františka.pdf:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\RapportSetup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\RapportSetup.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\setup(1).exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\setup(1).exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\setup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\skype-setup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\spsetup128.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\StickyPassword_rev80333.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\StickyPassword_rev80333.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\SyncBack_Setup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\SyncBack_Setup.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\SystemExplorerSetup_641.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\SystemExplorerSetup_641.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\TeamViewer_Setup.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\ThunderbirdSetup31.4.0 .exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\TiskObalek_CZ_3228.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\uTorrent221.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\vlc-2.2.1-win32.exe:$CmdTcID
AlternateDataStreams: C:\Users\Ruda\Downloads\vlc-2.2.1-win32.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\wlsetup-web.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\Downloads\XnView-win.exe:$CmdZnID
AlternateDataStreams: C:\Users\Ruda\AppData\Roaming\inst.exe:$CmdTcID
SearchScopes: HKLM-x32 -> SuggestionsURL_JSON http://api.widdit.com/suggestions/?form ... 1&command={searchTerms}
SearchScopes: HKLM-x32 -> TopResultURLFallback http://search.certified-toolbar.com?si= ... D049FA9&q={searchTerms}
BHO: No Name -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> No File
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - No File
C:\Users\Ruda\AppData\Local\{46B461A5-CA78-4F7D-82DE-01B9DB6F713B}
C:\Users\Ruda\AppData\Local\{3E5CE45F-5149-45FE-9823-C190A8D490D1}
C:\ProgramData\mxnhytee.feu
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

OMLOUVÁM SE, VČERA JSEM TO ASI POSLAL JINAM

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-05-2015 02
Ran by Ruda at 2015-05-16 14:01:21 Run:1
Running from C:\PerfLogs\Desktop
Loaded Profiles: Ruda (Available profiles: Ruda & 63ruda99 & Guest & Classic .NET AppPool & DefaultAppPool)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Začátek
Úkol: {E1CC17F3-46BC-4C83-9AB4-2D5301740B16} - System32 \ Tasks \ RealDownloaderRealUpgradeLogonTaskS-1-5-21-841361005-909514878-2309378359-1002 => C: \ Program Files (x86) \ RealNetworks \ RealDownloader \ realupgrade exe
AlternateDataStreams: C: \ Windows \ unins000.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ acmigration.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ adtschema.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ advapi32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ aeinv.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ aelupsvc.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ aepdu DLL: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ aepic.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ aitstatic.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-WINDOW core-console-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-datetime-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API ms-win-core-debug-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-delayload-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-ErrorHandling-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ System32 \ API-ms-win-core-vlákna-L1 -1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-file-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms -win-core-rukojeť-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-heap-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-propletená-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-io-l1-1-0. DLL: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-libraryloader-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core- lokalizace-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-localregistry-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API ms-win-core-paměť-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-Různé-l1-1-0.dll: $ CmdTcID
AlternateDataStreams : C: \ Windows \ system32 \ API-ms-win-core-namedpipe-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-processenvironment-l1-1 -0.dll: $ CmdTcID
AlternateDataStreams: C: \ WINDOWS \ system32 \ API-MS-získej-core-processthreads-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win -core-profile-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-rtlsupport-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-string-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-synchronizace-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-Sysinfo-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-threadpool- l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-util-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ api- ms-win-core-xstate-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-bezpečnostní-base-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ apisetschema.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ apphelp.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ appidapi.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ appidcertstorecheck.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ appidpolicyconverter.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ appidsvc.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ appraiser.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ atmfd.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ atmlib.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ audiodg.exe: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ AudioEng.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ AUDIOKSE.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ AudioSes.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ audiosrv.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Auditpol.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ blackbox.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ clfs.sys: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ clfsw32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ conhost.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ credssp.dll: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ Crypt32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ cryptnet.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ cryptsp.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ cryptsvc.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ cryptui.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ csrsrv.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ dciman32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ devinv.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ diagtrack.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ diskperf.exe: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ drmmgrtn.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ drmv2clt.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ dxmasf.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ EncDump.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ enppmon.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ enppui.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ enpres.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ ensppmon.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ ensppui.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ enspres.dll: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ escsvc64.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ esdevapp.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ evr.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ E_GCINST.DLL: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ E_YD4BI4E.DLL: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ E_YLMI4E.DLL: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ fontsub.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ gdi32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ generaltel.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ invagent.dll: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ Kerberos.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ kernel32.dll: $ CmdTcID
AlternateDataStreams: C: \ WINDOWS \ system32 \ KernelBase.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Logman.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ lpk.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Lsasrv.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ lsass.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ mf.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ mferror.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ mfplat.dll: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ mfpmp.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ mfps.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ MpSigStub.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ msaudite.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ msctf.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Msdxm.ocx: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ msmmsp.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ msnetobj.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ msobjs.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ msscp.dll: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ Msv1_0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ msxml3.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ msxml3r.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ ncrypt.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ nlasvc.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ ntdll.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Ntoskrnl.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ ntvdm64.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ nvapi64.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ nvcompiler.dll: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ nvcuda.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ nvcuvenc.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ nvcuvid.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ nvd3dumx.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ nvdispco6434725.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ nvdispgenco6434725.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ NvFBC64.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ NvIFR64.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ nvinitx.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ nvoglshim64.dll: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ nvoglv64.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ nvopencl.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ nvumdshimx.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ nvvsvc.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ nvwgf2umx.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ oleaut32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ pcadm.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ pcaevts.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ pcalua.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ pcasvc.dll: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ pcawrk.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ perftrack.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ poqexec.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ powertracker.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ profsvc.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ qdvd.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ quartz.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ rdpcorets.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ RdpGroupPolicyExtension.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ rdpudd.dll: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ Relog.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ rrinstaller.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ rstrui.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Scesrv.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ sdbinst.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ sechost.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Secur32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ setbcdlocale.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Shell32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ shimeng.dll: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ Smss.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ spwmp.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ srclient.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ srcore.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ sspicli.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ sspisrv.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ tdh.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ tracerpt.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ TSpkg.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ TSWbPrxy.exe: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ typeperf.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ ubpm.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ UtcResources.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ wdi.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ wdigest.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ WindowsCodecs.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ winload.efi: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ winload.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ winresume.efi: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ WinSetupUI.dll: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ winsrv.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Wintrust.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ wmdrmsdk.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Wmp.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ WMPhoto.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ wmploc.DLL: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ wow64.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ wow64cpu.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ wow64win.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ WSDScDrv.dll: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ wu.upgrade.ps.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ wuapi.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ wuapp.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ wuauclt.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Wuaueng.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ wucltux.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ wudriver.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ wups.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ wups2.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ wuwebv.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ adtschema.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ advapi32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-konzolový l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-datetime-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ api- ms-win-core-debug-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-delayload-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C : \ Windows \ SysWOW64 \ API-ms-win-core-ErrorHandling-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API ms-win-core-vláken, l1-1-0 DLL: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-file-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API ms-win-core -handle-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-heap-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API ms-win-core-propletená-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-io-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-libraryloader-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-lokalizace-L1 1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-localregistry-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ api-MS win-core-paměť-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-Různé-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-namedpipe-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-processenvironment-l1-1-0.dll : $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API ms-win-core-processthreads-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-profilem -l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-rtlsupport-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ api -MS-win-core-string-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-Synch-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-Sysinfo-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-threadpool-l1-1- 0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-util-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ Api-MS-WINDOW core-xstate-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-bezpečnostní-base-l1-1-0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ apisetschema.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ apphelp.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ appidapi.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ atmfd.dll : $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ atmlib.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ AudioEng.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ AUDIOKSE.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ AudioSes.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ Auditpol.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ blackbox.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ clfsw32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ credssp.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ Crypt32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ cryptnet.dll : $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ cryptsp.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ cryptsvc.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ cryptui.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ D3DX9_42.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ dciman32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ diskperf.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ drmmgrtn.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ drmv2clt.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ dxmasf.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ evr.dll : $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ FlashPlayerApp.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ fmcodec.DLL: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ fontsub.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ gdi32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ GPhotos.scr: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ instnm.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ Kerberos.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ kernel32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ KernelBase.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ Logman.exe : $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ lpk.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ mediarcpt.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ mf.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ mferror.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ mfplat.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ mfpmp.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ mfps.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ msaudite.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ msctf.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ Msdxm.ocx : $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ msnetobj.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ msobjs.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ msscp.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ Msv1_0.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ msvcr71.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ msxml3.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ msxml3r.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ ncrypt.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ ncsi.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ nlaapi.dll : $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ ntdll.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ Ntkrnlpa.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ Ntoskrnl.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ ntvdm64.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvapi.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvcompiler.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvcuda.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvcuvenc.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvcuvid.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvd3dum.dll : $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ NvFBC.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ NvIFR.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvinit.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvoglshim32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvoglv32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvopencl.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvumdshim.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvwgf2um.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ oleaut32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ poqexec.exe : $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ qdvd.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ quartz.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ Relog.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ rrinstaller.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ Scesrv.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ sdbinst.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ sechost.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ Secur32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ setup16.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ Shell32.dll : $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ shimeng.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ spwmp.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ srclient.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ sspicli.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ tdh.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ tracerpt.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ TSpkg.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ typeperf.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ ubpm.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ User.exe : $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ wdi.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ wdigest.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ WindowsCodecs.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ Wintrust.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ wmdrmsdk.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ Wmp.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ WMPhoto.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ wmploc.DLL: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ wow32.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ wuapi.dll : $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ wuapp.exe: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ wudriver.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ wups.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ wuwebv.dll: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ anvsnddrv.sys: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ appid.sys: $ CmdTcID
AlternateDataStreams: C : \ Windows \ system32 \ drivers \ athrx.sys: $ CmdTcID
AlternateDataStreams: C: \ WINDOWS \ system32 \ Drivers \ cng.sys: $ CmdTcID
AlternateDataStreams: C: \ Windows \ System32 \ Drivers \ EsgScanner.sys: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ http.sys: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ drivers \ ksecdd.sys: $ CmdTcID
AlternateDataStreams: C: \ WINDOWS \ system32 \ Drivers \ ksecpkg.sys: $ CmdTcID
AlternateDataStreams : C: \ Windows \ system32 \ drivers \ Mountmgr.sys: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ mrxdav.sys: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ nvlddmkm.sys: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ nvpciflt.sys: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ PEAuth.sys: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ rpkmdrv.sys: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ drivers \ usbscan.sys: $ CmdTcID
AlternateDataStreams: C: \ WINDOWS \ system32 \ Drivers \ VClone.sys: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ drivers \ WSDPrint.sys: $ CmdTcID
AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ WSDScan.sys: $ CmdTcID
AlternateDataStreams: C: \ Windows \ SysWOW64 \ Drivers \ afc.sys: $ CmdTcID
AlternateDataStreams: C: \ ProgramData \ Temp: DBC416F8
AlternateDataStreams: C: \ ProgramData \ Temp: F169C698
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ AdobeAIRInstaller (1) .exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ AdobeReader-setup.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ AdobeReader-setup.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ adwcleaner_4.204.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ ashampoo_getback_photo_18891.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ ashampoo_zip_free_1.0.1_sm.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ ashampoo_zip_free_1.0.1_sm.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Ke stažení \ aTube_Catcher_ATU3_8001 (1) .exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ aTube_Catcher_ATU3_8001 (1) .exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ AVC-ultimate.exe: $ CmdTcID
AlternateDataStreams : C: \ Users \ Ruda \ Downloads \ cc-setup (1) .exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ cc-nastavení (1) .exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ cdbxp_setup_4.5.4.5306.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ dfsetup219.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ EpsonConnect130.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ FirefoxSetup36.0cz.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ FreemakeVideoConverterSetup.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ FreemakeVideoConverterSetup.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ FSViewerSetup53 (1) .exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ GoogleEarthWin.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ InstallPlus500 (1) .exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ install_flash_player (1) .exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ install_flash_player_ax.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ install_reader11_uk_mssa_aaa_aih.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ install_reader11_uk_mssa_aaa_aih.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ InstalRecepty.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ InstalRecepty.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ JRE-8u31-windows-x64.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ Krček RUDOLF.p12: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ lastpass_x64.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ LibreOffice_4.4.3_Win_x86.msi: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ LibreOffice_4.4.3_Win_x86_helppack_cs.msi: $ CmdZnID
AlternateDataStreams : C: \ Users \ Ruda \ Downloads \ nppInstaller.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ OO_4_2010_Obec_dokonceni.pdf: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ OO_4_2010_Obec_dokonceni.pdf: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ ProgDVB7.08.9Std.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ Q-Dir_Installer.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ rlŠimpachová Františka.pdf: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ RapportSetup.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ RapportSetup.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Ke stažení \ setup (1) .exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ setup (1) .exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ setup.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ skype-setup.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ spsetup128.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ StickyPassword_rev80333.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ StickyPassword_rev80333.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ SyncBack_Setup.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ SyncBack_Setup.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ SystemExplorerSetup_641.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ SystemExplorerSetup_641.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ TeamViewer_Setup.exe : $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ ThunderbirdSetup31.4.0 .exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ TiskObalek_CZ_3228.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ uTorrent221.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ vlc-2.2.1-win32.exe: $ CmdTcID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ vlc-2.2.1-win32.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ wlsetup-web.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ XnView-win.exe: $ CmdZnID
AlternateDataStreams: C: \ Users \ Ruda \ AppData \ Roaming \ inst.exe: $ CmdTcID
SearchScopes: HKLM-X32 -> SuggestionsURL_JSON http://api.widdit.com/suggestions/?form ... 1 & command = {} searchTerms Sear

Začátek => Error: No automatic fix found for this entry.
Úkol: {E1CC17F3-46BC-4C83-9AB4-2D5301740B16} - System32 \ Tasks \ RealDownloaderRealUpgradeLogonTaskS-1-5-21-841361005-909514878-2309378359-1002 => C: \ Program Files (x86) \ RealNetworks \ RealDownloader \ realupgrade exe => Error: No automatic fix found for this entry.
"AlternateDataStreams: C: \ Windows \ unins000.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ unins000.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ acmigration.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ acmigration.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ adtschema.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ adtschema.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ advapi32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ advapi32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ aeinv.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ aeinv.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ aelupsvc.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ aelupsvc.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ aepdu DLL: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ aepdu DLL: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ aepic.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ aepic.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ aitstatic.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ aitstatic.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-WINDOW core-console-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-WINDOW core-console-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-datetime-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-datetime-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API ms-win-core-debug-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API ms-win-core-debug-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-delayload-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-delayload-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-ErrorHandling-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-ErrorHandling-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ System32 \ API-ms-win-core-vlákna-L1 -1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ System32 \ API-ms-win-core-vlákna-L1 -1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-file-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-file-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms -win-core-rukojeť-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms -win-core-rukojeť-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-heap-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-heap-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-propletená-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-propletená-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-io-l1-1-0. DLL: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-io-l1-1-0. DLL: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-libraryloader-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-libraryloader-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core- lokalizace-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core- lokalizace-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-localregistry-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-localregistry-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API ms-win-core-paměť-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API ms-win-core-paměť-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-Různé-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-Různé-l1-1-0.dll: $ CmdTcID" ADS not found.
AlternateDataStreams : C: \ Windows \ system32 \ API-ms-win-core-namedpipe-l1-1-0.dll: $ CmdTcID => Error: No automatic fix found for this entry.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-processenvironment-l1-1 -0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-processenvironment-l1-1 -0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ WINDOWS \ system32 \ API-MS-získej-core-processthreads-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ WINDOWS \ system32 \ API-MS-získej-core-processthreads-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win -core-profile-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win -core-profile-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-rtlsupport-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-rtlsupport-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-string-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-string-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-synchronizace-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-synchronizace-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-Sysinfo-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-Sysinfo-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-threadpool- l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-threadpool- l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-util-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-core-util-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ api- ms-win-core-xstate-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ api- ms-win-core-xstate-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-bezpečnostní-base-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ API-ms-win-bezpečnostní-base-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ apisetschema.dll: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ apisetschema.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ apphelp.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ apphelp.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ appidapi.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ appidapi.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ appidcertstorecheck.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ appidcertstorecheck.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ appidpolicyconverter.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ appidpolicyconverter.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ appidsvc.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ appidsvc.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ appraiser.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ appraiser.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ atmfd.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ atmfd.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ atmlib.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ atmlib.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ audiodg.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ audiodg.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ AudioEng.dll: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ AudioEng.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ AUDIOKSE.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ AUDIOKSE.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ AudioSes.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ AudioSes.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ audiosrv.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ audiosrv.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Auditpol.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Auditpol.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ blackbox.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ blackbox.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ clfs.sys: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ clfs.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ clfsw32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ clfsw32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ conhost.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ conhost.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ credssp.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ credssp.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ Crypt32.dll: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ Crypt32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ cryptnet.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ cryptnet.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ cryptsp.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ cryptsp.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ cryptsvc.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ cryptsvc.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ cryptui.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ cryptui.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ csrsrv.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ csrsrv.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ dciman32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ dciman32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ devinv.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ devinv.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ diagtrack.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ diagtrack.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ diskperf.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ diskperf.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ drmmgrtn.dll: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ drmmgrtn.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ drmv2clt.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ drmv2clt.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ dxmasf.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ dxmasf.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ EncDump.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ EncDump.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ enppmon.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ enppmon.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ enppui.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ enppui.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ enpres.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ enpres.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ ensppmon.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ ensppmon.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ ensppui.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ ensppui.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ enspres.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ enspres.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ escsvc64.exe: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ escsvc64.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ esdevapp.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ esdevapp.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ evr.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ evr.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ E_GCINST.DLL: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ E_GCINST.DLL: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ E_YD4BI4E.DLL: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ E_YD4BI4E.DLL: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ E_YLMI4E.DLL: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ E_YLMI4E.DLL: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ fontsub.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ fontsub.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ gdi32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ gdi32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ generaltel.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ generaltel.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ invagent.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ invagent.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ Kerberos.dll: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ Kerberos.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ kernel32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ kernel32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ WINDOWS \ system32 \ KernelBase.dll: $ CmdTcID" => "AlternateDataStreams: C: \ WINDOWS \ system32 \ KernelBase.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Logman.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Logman.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ lpk.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ lpk.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Lsasrv.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Lsasrv.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ lsass.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ lsass.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ mf.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ mf.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ mferror.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ mferror.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ mfplat.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ mfplat.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ mfpmp.exe: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ mfpmp.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ mfps.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ mfps.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ MpSigStub.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ MpSigStub.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ msaudite.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ msaudite.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ msctf.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ msctf.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Msdxm.ocx: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Msdxm.ocx: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ msmmsp.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ msmmsp.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ msnetobj.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ msnetobj.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ msobjs.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ msobjs.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ msscp.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ msscp.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ Msv1_0.dll: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ Msv1_0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ msxml3.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ msxml3.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ msxml3r.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ msxml3r.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ ncrypt.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ ncrypt.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ nlasvc.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ nlasvc.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ ntdll.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ ntdll.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Ntoskrnl.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Ntoskrnl.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ ntvdm64.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ ntvdm64.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ nvapi64.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ nvapi64.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ nvcompiler.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ nvcompiler.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ nvcuda.dll: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ nvcuda.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ nvcuvenc.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ nvcuvenc.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ nvcuvid.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ nvcuvid.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ nvd3dumx.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ nvd3dumx.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ nvdispco6434725.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ nvdispco6434725.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ nvdispgenco6434725.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ nvdispgenco6434725.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ NvFBC64.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ NvFBC64.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ NvIFR64.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ NvIFR64.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ nvinitx.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ nvinitx.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ nvoglshim64.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ nvoglshim64.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ nvoglv64.dll: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ nvoglv64.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ nvopencl.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ nvopencl.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ nvumdshimx.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ nvumdshimx.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ nvvsvc.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ nvvsvc.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ nvwgf2umx.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ nvwgf2umx.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ oleaut32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ oleaut32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ pcadm.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ pcadm.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ pcaevts.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ pcaevts.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ pcalua.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ pcalua.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ pcasvc.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ pcasvc.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ pcawrk.exe: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ pcawrk.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ perftrack.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ perftrack.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ poqexec.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ poqexec.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ powertracker.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ powertracker.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ profsvc.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ profsvc.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ qdvd.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ qdvd.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ quartz.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ quartz.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ rdpcorets.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ rdpcorets.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ RdpGroupPolicyExtension.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ RdpGroupPolicyExtension.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ rdpudd.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ rdpudd.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ Relog.exe: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ Relog.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ rrinstaller.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ rrinstaller.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ rstrui.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ rstrui.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Scesrv.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Scesrv.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ sdbinst.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ sdbinst.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ sechost.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ sechost.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Secur32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Secur32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ setbcdlocale.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ setbcdlocale.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Shell32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Shell32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ shimeng.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ shimeng.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ Smss.exe: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ Smss.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ spwmp.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ spwmp.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ srclient.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ srclient.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ srcore.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ srcore.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ sspicli.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ sspicli.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ sspisrv.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ sspisrv.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ tdh.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ tdh.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ tracerpt.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ tracerpt.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ TSpkg.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ TSpkg.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ TSWbPrxy.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ TSWbPrxy.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ typeperf.exe: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ typeperf.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ ubpm.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ ubpm.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ UtcResources.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ UtcResources.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ wdi.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ wdi.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ wdigest.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ wdigest.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ WindowsCodecs.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ WindowsCodecs.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ winload.efi: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ winload.efi: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ winload.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ winload.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ winresume.efi: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ winresume.efi: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ WinSetupUI.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ WinSetupUI.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ winsrv.dll: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ winsrv.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Wintrust.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Wintrust.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ wmdrmsdk.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ wmdrmsdk.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Wmp.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Wmp.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ WMPhoto.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ WMPhoto.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ wmploc.DLL: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ wmploc.DLL: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ wow64.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ wow64.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ wow64cpu.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ wow64cpu.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ wow64win.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ wow64win.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ WSDScDrv.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ WSDScDrv.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ wu.upgrade.ps.dll: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ wu.upgrade.ps.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ wuapi.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ wuapi.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ wuapp.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ wuapp.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ wuauclt.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ wuauclt.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Wuaueng.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Wuaueng.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ wucltux.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ wucltux.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ wudriver.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ wudriver.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ wups.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ wups.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ wups2.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ wups2.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ wuwebv.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ wuwebv.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ adtschema.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ adtschema.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ advapi32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ advapi32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-konzolový l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-konzolový l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-datetime-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-datetime-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ api- ms-win-core-debug-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ api- ms-win-core-debug-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-delayload-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-delayload-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ SysWOW64 \ API-ms-win-core-ErrorHandling-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ SysWOW64 \ API-ms-win-core-ErrorHandling-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API ms-win-core-vláken, l1-1-0 DLL: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API ms-win-core-vláken, l1-1-0 DLL: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-file-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-file-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API ms-win-core -handle-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API ms-win-core -handle-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-heap-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-heap-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API ms-win-core-propletená-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API ms-win-core-propletená-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-io-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-io-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-libraryloader-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-libraryloader-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-lokalizace-L1 1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-lokalizace-L1 1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-localregistry-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-localregistry-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ api-MS win-core-paměť-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ api-MS win-core-paměť-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-Různé-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-Různé-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-namedpipe-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-namedpipe-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-processenvironment-l1-1-0.dll : $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-processenvironment-l1-1-0.dll : $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API ms-win-core-processthreads-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API ms-win-core-processthreads-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-profilem -l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-profilem -l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-rtlsupport-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-rtlsupport-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ api -MS-win-core-string-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ api -MS-win-core-string-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-Synch-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-Synch-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-Sysinfo-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-Sysinfo-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-threadpool-l1-1- 0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-threadpool-l1-1- 0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-util-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-core-util-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ Api-MS-WINDOW core-xstate-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ Api-MS-WINDOW core-xstate-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-bezpečnostní-base-l1-1-0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ API-ms-win-bezpečnostní-base-l1-1-0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ apisetschema.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ apisetschema.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ apphelp.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ apphelp.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ appidapi.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ appidapi.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ atmfd.dll : $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ atmfd.dll : $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ atmlib.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ atmlib.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ AudioEng.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ AudioEng.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ AUDIOKSE.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ AUDIOKSE.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ AudioSes.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ AudioSes.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ Auditpol.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ Auditpol.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ blackbox.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ blackbox.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ clfsw32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ clfsw32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ credssp.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ credssp.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ Crypt32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ Crypt32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ cryptnet.dll : $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ cryptnet.dll : $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ cryptsp.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ cryptsp.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ cryptsvc.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ cryptsvc.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ cryptui.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ cryptui.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ D3DX9_42.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ D3DX9_42.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ dciman32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ dciman32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ diskperf.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ diskperf.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ drmmgrtn.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ drmmgrtn.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ drmv2clt.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ drmv2clt.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ dxmasf.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ dxmasf.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ evr.dll : $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ evr.dll : $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ FlashPlayerApp.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ FlashPlayerApp.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ fmcodec.DLL: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ fmcodec.DLL: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ fontsub.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ fontsub.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ gdi32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ gdi32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ GPhotos.scr: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ GPhotos.scr: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ instnm.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ instnm.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ Kerberos.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ Kerberos.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ kernel32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ kernel32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ KernelBase.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ KernelBase.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ Logman.exe : $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ Logman.exe : $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ lpk.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ lpk.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ mediarcpt.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ mediarcpt.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ mf.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ mf.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ mferror.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ mferror.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ mfplat.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ mfplat.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ mfpmp.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ mfpmp.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ mfps.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ mfps.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ msaudite.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ msaudite.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ msctf.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ msctf.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ Msdxm.ocx : $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ Msdxm.ocx : $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ msnetobj.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ msnetobj.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ msobjs.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ msobjs.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ msscp.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ msscp.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ Msv1_0.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ Msv1_0.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ msvcr71.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ msvcr71.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ msxml3.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ msxml3.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ msxml3r.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ msxml3r.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ ncrypt.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ ncrypt.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ ncsi.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ ncsi.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ nlaapi.dll : $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ nlaapi.dll : $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ ntdll.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ ntdll.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ Ntkrnlpa.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ Ntkrnlpa.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ Ntoskrnl.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ Ntoskrnl.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ ntvdm64.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ ntvdm64.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvapi.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvapi.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvcompiler.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvcompiler.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvcuda.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvcuda.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvcuvenc.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvcuvenc.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvcuvid.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvcuvid.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvd3dum.dll : $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvd3dum.dll : $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ NvFBC.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ NvFBC.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ NvIFR.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ NvIFR.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvinit.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvinit.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvoglshim32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvoglshim32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvoglv32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvoglv32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvopencl.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvopencl.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvumdshim.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvumdshim.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvwgf2um.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ nvwgf2um.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ oleaut32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ oleaut32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ poqexec.exe : $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ poqexec.exe : $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ qdvd.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ qdvd.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ quartz.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ quartz.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ Relog.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ Relog.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ rrinstaller.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ rrinstaller.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ Scesrv.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ Scesrv.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ sdbinst.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ sdbinst.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ sechost.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ sechost.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ Secur32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ Secur32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ setup16.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ setup16.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ Shell32.dll : $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ Shell32.dll : $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ shimeng.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ shimeng.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ spwmp.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ spwmp.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ srclient.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ srclient.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ sspicli.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ sspicli.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ tdh.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ tdh.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ tracerpt.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ tracerpt.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ TSpkg.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ TSpkg.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ typeperf.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ typeperf.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ ubpm.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ ubpm.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ User.exe : $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ User.exe : $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ wdi.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ wdi.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ wdigest.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ wdigest.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ WindowsCodecs.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ WindowsCodecs.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ Wintrust.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ Wintrust.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ wmdrmsdk.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ wmdrmsdk.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ Wmp.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ Wmp.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ WMPhoto.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ WMPhoto.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ wmploc.DLL: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ wmploc.DLL: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ wow32.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ wow32.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ wuapi.dll : $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ wuapi.dll : $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ wuapp.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ wuapp.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ wudriver.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ wudriver.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ wups.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ wups.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ wuwebv.dll: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ wuwebv.dll: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ anvsnddrv.sys: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ anvsnddrv.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ appid.sys: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ appid.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C : \ Windows \ system32 \ drivers \ athrx.sys: $ CmdTcID" => "AlternateDataStreams: C : \ Windows \ system32 \ drivers \ athrx.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ WINDOWS \ system32 \ Drivers \ cng.sys: $ CmdTcID" => "AlternateDataStreams: C: \ WINDOWS \ system32 \ Drivers \ cng.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ System32 \ Drivers \ EsgScanner.sys: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ System32 \ Drivers \ EsgScanner.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ http.sys: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ http.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ drivers \ ksecdd.sys: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ drivers \ ksecdd.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ WINDOWS \ system32 \ Drivers \ ksecpkg.sys: $ CmdTcID" => "AlternateDataStreams: C: \ WINDOWS \ system32 \ Drivers \ ksecpkg.sys: $ CmdTcID" ADS not found.
AlternateDataStreams : C: \ Windows \ system32 \ drivers \ Mountmgr.sys: $ CmdTcID => Error: No automatic fix found for this entry.
"AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ mrxdav.sys: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ mrxdav.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ nvlddmkm.sys: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ nvlddmkm.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ nvpciflt.sys: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ nvpciflt.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ PEAuth.sys: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ PEAuth.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ rpkmdrv.sys: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ rpkmdrv.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ drivers \ usbscan.sys: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ drivers \ usbscan.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ WINDOWS \ system32 \ Drivers \ VClone.sys: $ CmdTcID" => "AlternateDataStreams: C: \ WINDOWS \ system32 \ Drivers \ VClone.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ drivers \ WSDPrint.sys: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ drivers \ WSDPrint.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ WSDScan.sys: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ system32 \ Drivers \ WSDScan.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Windows \ SysWOW64 \ Drivers \ afc.sys: $ CmdTcID" => "AlternateDataStreams: C: \ Windows \ SysWOW64 \ Drivers \ afc.sys: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ ProgramData \ Temp: DBC416F8" => "AlternateDataStreams: C: \ ProgramData \ Temp: DBC416F8" ADS not found.
"AlternateDataStreams: C: \ ProgramData \ Temp: F169C698" => "AlternateDataStreams: C: \ ProgramData \ Temp: F169C698" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ AdobeAIRInstaller (1) .exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ AdobeAIRInstaller (1) .exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ AdobeReader-setup.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ AdobeReader-setup.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ AdobeReader-setup.exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ AdobeReader-setup.exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ adwcleaner_4.204.exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ adwcleaner_4.204.exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ ashampoo_getback_photo_18891.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ ashampoo_getback_photo_18891.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ ashampoo_zip_free_1.0.1_sm.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ ashampoo_zip_free_1.0.1_sm.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ ashampoo_zip_free_1.0.1_sm.exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ ashampoo_zip_free_1.0.1_sm.exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Ke stažení \ aTube_Catcher_ATU3_8001 (1) .exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Ke stažení \ aTube_Catcher_ATU3_8001 (1) .exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ aTube_Catcher_ATU3_8001 (1) .exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ aTube_Catcher_ATU3_8001 (1) .exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ AVC-ultimate.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ AVC-ultimate.exe: $ CmdTcID" ADS not found.
AlternateDataStreams : C: \ Users \ Ruda \ Downloads \ cc-setup (1) .exe: $ CmdTcID => Error: No automatic fix found for this entry.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ cc-nastavení (1) .exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ cc-nastavení (1) .exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ cdbxp_setup_4.5.4.5306.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ cdbxp_setup_4.5.4.5306.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ dfsetup219.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ dfsetup219.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ EpsonConnect130.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ EpsonConnect130.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ FirefoxSetup36.0cz.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ FirefoxSetup36.0cz.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ FreemakeVideoConverterSetup.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ FreemakeVideoConverterSetup.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ FreemakeVideoConverterSetup.exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ FreemakeVideoConverterSetup.exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ FSViewerSetup53 (1) .exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ FSViewerSetup53 (1) .exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ GoogleEarthWin.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ GoogleEarthWin.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ InstallPlus500 (1) .exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ InstallPlus500 (1) .exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ install_flash_player (1) .exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ install_flash_player (1) .exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ install_flash_player_ax.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ install_flash_player_ax.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ install_reader11_uk_mssa_aaa_aih.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ install_reader11_uk_mssa_aaa_aih.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ install_reader11_uk_mssa_aaa_aih.exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ install_reader11_uk_mssa_aaa_aih.exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ InstalRecepty.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ InstalRecepty.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ InstalRecepty.exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ InstalRecepty.exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ JRE-8u31-windows-x64.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ JRE-8u31-windows-x64.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ Krček RUDOLF.p12: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ Krček RUDOLF.p12: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ lastpass_x64.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ lastpass_x64.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ LibreOffice_4.4.3_Win_x86.msi: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ LibreOffice_4.4.3_Win_x86.msi: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ LibreOffice_4.4.3_Win_x86_helppack_cs.msi: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ LibreOffice_4.4.3_Win_x86_helppack_cs.msi: $ CmdZnID" ADS not found.
AlternateDataStreams : C: \ Users \ Ruda \ Downloads \ nppInstaller.exe: $ CmdZnID => Error: No automatic fix found for this entry.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ OO_4_2010_Obec_dokonceni.pdf: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ OO_4_2010_Obec_dokonceni.pdf: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ OO_4_2010_Obec_dokonceni.pdf: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ OO_4_2010_Obec_dokonceni.pdf: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ ProgDVB7.08.9Std.exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ ProgDVB7.08.9Std.exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ Q-Dir_Installer.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ Q-Dir_Installer.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ rlŠimpachová Františka.pdf: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ rlŠimpachová Františka.pdf: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ RapportSetup.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ RapportSetup.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ RapportSetup.exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ RapportSetup.exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Ke stažení \ setup (1) .exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Ke stažení \ setup (1) .exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ setup (1) .exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ setup (1) .exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ setup.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ setup.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ skype-setup.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ skype-setup.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ spsetup128.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ spsetup128.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ StickyPassword_rev80333.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ StickyPassword_rev80333.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ StickyPassword_rev80333.exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ StickyPassword_rev80333.exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ SyncBack_Setup.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ SyncBack_Setup.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ SyncBack_Setup.exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ SyncBack_Setup.exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ SystemExplorerSetup_641.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ SystemExplorerSetup_641.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ SystemExplorerSetup_641.exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ SystemExplorerSetup_641.exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ TeamViewer_Setup.exe : $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ TeamViewer_Setup.exe : $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ ThunderbirdSetup31.4.0 .exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ ThunderbirdSetup31.4.0 .exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ TiskObalek_CZ_3228.exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ TiskObalek_CZ_3228.exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ uTorrent221.exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ uTorrent221.exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ vlc-2.2.1-win32.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ vlc-2.2.1-win32.exe: $ CmdTcID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ vlc-2.2.1-win32.exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ vlc-2.2.1-win32.exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ wlsetup-web.exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ wlsetup-web.exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ XnView-win.exe: $ CmdZnID" => "AlternateDataStreams: C: \ Users \ Ruda \ Downloads \ XnView-win.exe: $ CmdZnID" ADS not found.
"AlternateDataStreams: C: \ Users \ Ruda \ AppData \ Roaming \ inst.exe: $ CmdTcID" => "AlternateDataStreams: C: \ Users \ Ruda \ AppData \ Roaming \ inst.exe: $ CmdTcID" ADS not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\SearchScopes: HKLM-X32 -> SuggestionsURL_JSON http://api.widdit.com/suggestions/?form ... 1 & command = {} searchTerms SearchScopes: HKLM-X32 -> TopResultURLFallback http: / /search.certified-toolbar.com?si= ... D049FA9 & q = {} searchTerms BHO: No Name -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> žádný soubor vozík: skypec2c - {91774881-D725-4E58 -B298-07617B9B86A8} - Ne File C:\Users\Ruda\AppData\Local\{46B461A5-CA78-4F7D-82DE-01B9DB6F713B} C:\Users\Ruda\AppData\Local\{3E5CE45F-5149-45FE-9823-C190A8D490D1} C:\ProgramData\mxnhytee.feu End => Value not found.

==== End of Fixlog 14:01:25 ====

Nějak se to chová divně. Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 16.5.2015
Čas skenování: 17:13:39
Protokol: MB.txt
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2015.05.16.03
Databáze rootkitů: v2015.05.14.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Ruda

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 562558
Uplynulý čas: 1 hod, 10 min, 57 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 42
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4E38B11D-9057-4AA7-ADA8-7FECB1C316D1}, , [75de8212107a01358dcd511dc441b749],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9B6D63C0-E9DF-4EEF-89AA-5526D10B0F52}, , [262d6c288bffc670c297eb83b64fb34d],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C5B247F3-8E38-44F8-BD32-A51045D39FC8}, , [d77ce6ae3c4e44f26eeb4f1f2fd6b24e],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D3EFCA71-B884-4C84-98B9-BCEF5A241416}, , [193a5143711977bf2b2f3e3040c519e7],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D7F6D550-AD07-40ED-990C-E807D096A4B5}, , [75de8d0762287abca0b9115d51b449b7],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F7EC4C87-DA68-46F6-BFDB-9F0EB66F08C6}, , [c88b058fe8a2d85eadadff6f56afa45c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{12DAD4E4-2B32-4B9A-8017-28F648EBE0F6}, , [58fbeea6d9b1b581183fec8253b26d93],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{19F36853-C5C0-4A70-99BD-A3652E5B87B9}, , [7ad97024addd7abc62f4afbf0ff66f91],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{318AD7E4-BD78-4EBC-93E8-622367FA14A0}, , [86cd1282bfcbea4ce1756fff06ffbe42],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{33889032-BB10-40C6-B886-FD7D1D9E4798}, , [1241aaeaa3e7c67095c26d0142c345bb],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3AC254D2-9172-4099-964F-408F65E084D7}, , [5af93361c9c156e067efdf8f23e27987],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3DE94459-CCD3-435C-B568-A6701FFCC998}, , [93c0b2e257334de9045382ec0ff6a55b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3F182DFE-2E57-47B6-9F52-AB189ACF907C}, , [71e297fd9dedd75fb3a30e6059ac7f81],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{42E8EAD9-EC24-46E2-9DE8-4548B3137911}, , [1d362074ee9cbd795502115d7194728e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44E9C5B9-CA22-4E77-B1D4-9C3F1BB98224}, , [a5aec2d2addd44f2282eb0be976ec937],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4CDA130E-C0D1-4FCF-8DC3-A05D9CF4DBF0}, , [1f34276d701a7eb8aaaccea0a95ce11f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4D7FA28E-846D-41E9-838F-FC560CD261E4}, , [c68d1b79622862d470e7125cf90c60a0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4E38B11D-9057-4AA7-ADA8-7FECB1C316D1}, , [242f058fbfcb86b05dfa1e508184d12f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{52184D84-220D-4D1F-8443-CC15D48411A4}, , [8bc82e669ded53e3d483b4ba16efff01],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{65922C97-798C-443A-84B8-541B1178F3CF}, , [b79c8a0a5e2cac8a86d094dac4417a86],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7477E0A8-AEAC-4F9C-B916-DDD120BCD0EE}, , [b3a094008cfee452df78600eed184cb4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{75353410-F5FC-44EA-9034-CCB0BAFDB36F}, , [6de6078df199a3934413402e40c50bf5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7CC4C474-46A9-4A63-8960-837DD9E0A21E}, , [6de6573dfb8f43f313434826c63f748c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8300FC63-AF28-4724-A794-BFFCAE766540}, , [5201256f5337201660f73d31e22357a9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{85BF9D4F-B8BB-41EB-819D-E657B6D5AE4E}, , [9eb55b398ffbdf57df76fc728e772ed2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88C40F35-7636-4C34-BE94-D9805C9BA5F2}, , [20335341d0ba300679dd4b23986d5ea2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8CC12FF1-CD70-47ED-B581-31103D1C5874}, , [252e157f04861b1bdb7c35390ef71ce4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8F52A6A4-5433-4E62-80C4-188BA4857BBF}, , [12416a2a602a7eb80a4d76f8ed18f10f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{90982F15-366F-45FC-A653-683A22982688}, , [75def1a3e3a787af391d432b00056a96],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{98C5066B-40E0-4106-B820-3393DD68DFB2}, , [b2a1a7ed93f79f9775e14e207d8819e7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9B6D63C0-E9DF-4EEF-89AA-5526D10B0F52}, , [99ba484c72182313b2a4bfafc93c936d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A8BEC394-404E-423C-AF93-F2F991FDA441}, , [e0739ff5b5d5e84eb99d0965e81dd12f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B77ABD7C-B3C9-4FC7-BA6D-DC565A9CD0CC}, , [96bdd2c20a800e2872e4333bad58b848],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B79825DD-93A0-4FE7-A889-35D87D9A8BE0}, , [aba8b9dbe3a7350185d29ed08e77936d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C22B25F0-57EF-4EB4-AE4D-D05C125EF558}, , [f75c2c687119c76fd2842a448d78a15f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C5B247F3-8E38-44F8-BD32-A51045D39FC8}, , [f95a5b399feb8bab4412432b4cb9db25],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CACA8738-D246-4B45-AA65-517B286FB357}, , [71e28e06c5c5a88e0156a5c957ae0af6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D3EFCA71-B884-4C84-98B9-BCEF5A241416}, , [4013e7ad2961ad8991c671fd20e57a86],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D7F6D550-AD07-40ED-990C-E807D096A4B5}, , [6be85440e6a444f2292d6a0436cfed13],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DB60D9F2-5EF4-4CF6-AE52-B43589832AA5}, , [d1825a3ac7c3d85e0f47026cbd48b848],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F7EC4C87-DA68-46F6-BFDB-9F0EB66F08C6}, , [0350f4a09febac8a44135e107f869f61],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FFE05106-D528-4610-9858-E8A6752FBC46}, , [143f2f65eb9f9b9bf4622945c83d867a],

Hodnoty registru: 43
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4e38b11d-9057-4aa7-ada8-7fecb1c316d1}|AppName, HDvid Codec V6.0-codedownloader.exe, , [75de8212107a01358dcd511dc441b749]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9b6d63c0-e9df-4eef-89aa-5526d10b0f52}|AppName, HDvid Codec V6.0-buttonutil.exe, , [262d6c288bffc670c297eb83b64fb34d]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{c5b247f3-8e38-44f8-bd32-a51045d39fc8}|AppName, FreeHD-Sport TV V9.0-buttonutil.exe, , [d77ce6ae3c4e44f26eeb4f1f2fd6b24e]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{d3efca71-b884-4c84-98b9-bcef5a241416}|AppName, FreeHDSport TV V7.0-codedownloader.exe, , [193a5143711977bf2b2f3e3040c519e7]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{d7f6d550-ad07-40ed-990c-e807d096a4b5}|AppName, FreeHDSport TV V7.0-buttonutil.exe, , [75de8d0762287abca0b9115d51b449b7]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{f7ec4c87-da68-46f6-bfdb-9f0eb66f08c6}|AppName, FreeHD-Sport TV V9.0-codedownloader.exe, , [c88b058fe8a2d85eadadff6f56afa45c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{12DAD4E4-2B32-4B9A-8017-28F648EBE0F6}|AppName, 4bd3ec58-c42f-443e-8edb-0a5b2d035380-2.exe-codedownloader.exe, , [58fbeea6d9b1b581183fec8253b26d93]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{19F36853-C5C0-4A70-99BD-A3652E5B87B9}|AppName, 4bd3ec58-c42f-443e-8edb-0a5b2d035380-2.exe-buttonutil.exe, , [7ad97024addd7abc62f4afbf0ff66f91]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{318AD7E4-BD78-4EBC-93E8-622367FA14A0}|AppName, HQ-Video-Pro-1.4-enabler.exe-buttonutil.exe, , [86cd1282bfcbea4ce1756fff06ffbe42]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{33889032-BB10-40C6-B886-FD7D1D9E4798}|AppName, HQ-Video-Pro-1.4-enabler.exe-codedownloader.exe, , [1241aaeaa3e7c67095c26d0142c345bb]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3AC254D2-9172-4099-964F-408F65E084D7}|AppName, fbe97edd-eb2f-44c5-b8f7-f44c01ece1de-2.exe-buttonutil.exe, , [5af93361c9c156e067efdf8f23e27987]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3de94459-ccd3-435c-b568-a6701ffcc998}|AppName, FreeHDSport TV V6.0-codedownloader.exe, , [93c0b2e257334de9045382ec0ff6a55b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3F182DFE-2E57-47B6-9F52-AB189ACF907C}|AppName, HQ-Video-Pro-1.4-enabler.exe-buttonutil.exe, , [71e297fd9dedd75fb3a30e6059ac7f81]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{42E8EAD9-EC24-46E2-9DE8-4548B3137911}|AppName, HQ-Video-Pro-1.4-enabler.exe-codedownloader.exe, , [1d362074ee9cbd795502115d7194728e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44E9C5B9-CA22-4E77-B1D4-9C3F1BB98224}|AppName, HQ-Video-Pro-1.4-enabler.exe-buttonutil.exe, , [a5aec2d2addd44f2282eb0be976ec937]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4CDA130E-C0D1-4FCF-8DC3-A05D9CF4DBF0}|AppName, HQ-Video-Pro-1.4-enabler.exe-buttonutil.exe, , [1f34276d701a7eb8aaaccea0a95ce11f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4d7fa28e-846d-41e9-838f-fc560cd261e4}|AppName, HQ-Video-Pro-1.4-codedownloader.exe, , [c68d1b79622862d470e7125cf90c60a0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4e38b11d-9057-4aa7-ada8-7fecb1c316d1}|AppName, HDvid Codec V6.0-codedownloader.exe, , [242f058fbfcb86b05dfa1e508184d12f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{52184D84-220D-4D1F-8443-CC15D48411A4}|AppName, HQ-Video-Pro-1.4-enabler.exe-codedownloader.exe, , [8bc82e669ded53e3d483b4ba16efff01]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{65922C97-798C-443A-84B8-541B1178F3CF}|AppName, HQ-Video-Pro-1.4-enabler.exe-buttonutil.exe, , [b79c8a0a5e2cac8a86d094dac4417a86]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7477E0A8-AEAC-4F9C-B916-DDD120BCD0EE}|AppName, HQ-Video-Pro-1.4-enabler.exe-codedownloader.exe, , [b3a094008cfee452df78600eed184cb4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{75353410-F5FC-44EA-9034-CCB0BAFDB36F}|AppName, fbe97edd-eb2f-44c5-b8f7-f44c01ece1de-2.exe-codedownloader.exe, , [6de6078df199a3934413402e40c50bf5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7CC4C474-46A9-4A63-8960-837DD9E0A21E}|AppName, HQ-Video-Pro-1.4-enabler.exe-buttonutil.exe, , [6de6573dfb8f43f313434826c63f748c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8300FC63-AF28-4724-A794-BFFCAE766540}|AppName, 4bd3ec58-c42f-443e-8edb-0a5b2d035380-2.exe-codedownloader.exe, , [5201256f5337201660f73d31e22357a9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{85bf9d4f-b8bb-41eb-819d-e657b6d5ae4e}|AppName, HQ-Video-Pro-1.4-bg.exe, , [9eb55b398ffbdf57df76fc728e772ed2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88C40F35-7636-4C34-BE94-D9805C9BA5F2}|AppName, HQ-Video-Pro-1.4-enabler.exe-buttonutil.exe, , [20335341d0ba300679dd4b23986d5ea2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8CC12FF1-CD70-47ED-B581-31103D1C5874}|AppName, HQ-Video-Pro-1.4-enabler.exe-codedownloader.exe, , [252e157f04861b1bdb7c35390ef71ce4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8F52A6A4-5433-4E62-80C4-188BA4857BBF}|AppName, HQ-Video-Pro-1.4-enabler.exe-codedownloader.exe, , [12416a2a602a7eb80a4d76f8ed18f10f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{90982F15-366F-45FC-A653-683A22982688}|AppName, 4bd3ec58-c42f-443e-8edb-0a5b2d035380-2.exe-buttonutil.exe, , [75def1a3e3a787af391d432b00056a96]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{98C5066B-40E0-4106-B820-3393DD68DFB2}|AppName, HQ-Video-Pro-1.4-enabler.exe-buttonutil.exe, , [b2a1a7ed93f79f9775e14e207d8819e7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9b6d63c0-e9df-4eef-89aa-5526d10b0f52}|AppName, HDvid Codec V6.0-buttonutil.exe, , [99ba484c72182313b2a4bfafc93c936d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A8BEC394-404E-423C-AF93-F2F991FDA441}|AppName, HQ-Video-Pro-1.4-enabler.exe-buttonutil.exe, , [e0739ff5b5d5e84eb99d0965e81dd12f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B77ABD7C-B3C9-4FC7-BA6D-DC565A9CD0CC}|AppName, HQ-Video-Pro-1.4-enabler.exe-buttonutil.exe, , [96bdd2c20a800e2872e4333bad58b848]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B79825DD-93A0-4FE7-A889-35D87D9A8BE0}|AppName, HQ-Video-Pro-1.4-enabler.exe-codedownloader.exe, , [aba8b9dbe3a7350185d29ed08e77936d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C22B25F0-57EF-4EB4-AE4D-D05C125EF558}|AppName, HQ-Video-Pro-1.4-enabler.exe-buttonutil.exe, , [f75c2c687119c76fd2842a448d78a15f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{c5b247f3-8e38-44f8-bd32-a51045d39fc8}|AppName, FreeHD-Sport TV V9.0-buttonutil.exe, , [f95a5b399feb8bab4412432b4cb9db25]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CACA8738-D246-4B45-AA65-517B286FB357}|AppName, HQ-Video-Pro-1.4-enabler.exe-codedownloader.exe, , [71e28e06c5c5a88e0156a5c957ae0af6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{d3efca71-b884-4c84-98b9-bcef5a241416}|AppName, FreeHDSport TV V7.0-codedownloader.exe, , [4013e7ad2961ad8991c671fd20e57a86]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{d7f6d550-ad07-40ed-990c-e807d096a4b5}|AppName, FreeHDSport TV V7.0-buttonutil.exe, , [6be85440e6a444f2292d6a0436cfed13]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{db60d9f2-5ef4-4cf6-ae52-b43589832aa5}|AppName, FreeHDSport TV V6.0-buttonutil.exe, , [d1825a3ac7c3d85e0f47026cbd48b848]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{f7ec4c87-da68-46f6-bfdb-9f0eb66f08c6}|AppName, FreeHD-Sport TV V9.0-codedownloader.exe, , [0350f4a09febac8a44135e107f869f61]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FFE05106-D528-4610-9858-E8A6752FBC46}|AppName, HQ-Video-Pro-1.4-enabler.exe-buttonutil.exe, , [143f2f65eb9f9b9bf4622945c83d867a]
PUP.Optional.Spigot.A, HKU\S-1-5-21-841361005-909514878-2309378359-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{206BE1CD-D8E5-4E8B-82A6-7642EF131402}|URL, http://search.yahoo.com/search?fr=chr-g ... earchTerms}, , [d57e870d91f961d516f47d5b56aded13]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 1
PUP.Optional.MindSpark.A, C:\Users\Ruda\AppData\Roaming\Mozilla\Firefox\Profiles\0hfd64x0.default-1423008048081\VideoDownloadConverter_4z, , [e271b3e14743cc6acbb7736243c027d9],

Soubory: 5
PUP.Optional.OpenCandy, C:\$RECYCLE.BIN\S-1-5-21-841361005-909514878-2309378359-1002\$RE2E1JF.exe, , [dd76326294f693a35b08e065b551649c],
PUP.Optional.OpenCandy, C:\Users\Ruda\Downloads\Cheat-Engine_6.3.exe, , [440fbed603872d09caef92cc5ba7d12f],
PUP.Optional.BundleInstaller.A, C:\Users\Ruda\Downloads\setup(1).exe, , [d77cefa5e8a236007193eb66946e9769],
PUP.Optional.OpenCandy, C:\Users\Ruda\Downloads\install_reader11_uk_mssa_aaa_aih.exe, , [282b365e1e6cc86e2241271eb551b44c],
PUP.Optional.MindSpark.A, C:\Users\Ruda\AppData\Roaming\Mozilla\Firefox\Profiles\0hfd64x0.default-1423008048081\VideoDownloadConverter_4z\927E211E-8CD2-4DA6-A5A3-02AD8D2465F9.SQLITE, , [e271b3e14743cc6acbb7736243c027d9],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Všechny nálezy smažte.

Tak smazáno. Pokud s vaší pomocí nemám dělat nic dalšího tak moc děkuji za pomoc.

Po restartu nb a přihlášení se, se stránka prohlížeče otevřela po 6 min.

Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.