Vyosek prosím o kontrolu. Díky za pomoc.
Napsal: 06 pro 2015 15:29
Logfile of random's system information tool 1.10 (written by random/random)
Run by uzivatel at 2015-12-06 15:28:20
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 32 GB (29%) free of 113 GB
Total RAM: 3975 MB (55% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:28:26, on 6.12.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18098)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe
C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\TrayPopupE\TrayTipAgentE.exe
C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\uzivatel.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ?type=hppp&ts=1432140622&from=xtab&uid=EE37F7F59F8C4eb7ACB70257A39DCFE8
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: BHOHOOK - {030AC7B6-E7EC-40F1-8FB2-C0FD344DE0B9} - C:\Program Files\TOSHIBA\TFPU\x86\TFPUPWDBankBHO.dll
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O2 - BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
O4 - HKLM\..\Run: [TrueImageMonitor.exe] "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"
O4 - HKLM\..\Run: [AcronisTibMounterMonitor] C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
O4 - HKLM\..\Run: [EaseUS EPM tray] C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe
O4 - HKLM\..\Run: [EaseUS EPM Tray Agent] "C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\TrayPopupE\TrayTipAgentE.exe"
O4 - HKLM\..\Run: [EaseUS TB Tray Agent] "C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User 'Default user')
O9 - Extra button: Přeložit - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files (x86)\Verdict Free\etnxp.dll
O9 - Extra button: (no name) - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files (x86)\Verdict Free\etnxp.dll
O9 - Extra 'Tools' menuitem: Internetový překladač... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files (x86)\Verdict Free\etnxp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{6EC5A1F5-5BE6-4C63-9AA5-845B2A254DEA}: NameServer = 217.77.165.211 217.77.165.81
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Acronis Nonstop Backup Service (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AuthenTec Fingerprint Service (ATService) - AuthenTec, Inc. - C:\Program Files\Fingerprint Sensor\ATService.exe
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe
O23 - Service: EaseUS Agent Service (EaseUS Agent) - CHENGDU YIWO Tech Development Co., Ltd - C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Acronis Sync Agent Service (syncagentsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
O23 - Service: Synergy - Unknown owner - C:\Program Files\Synergy\synergyd.exe
O23 - Service: Ochrana HDD TOSHIBA (Thpsrv) - Unknown owner - C:\windows\system32\ThpSrv.exe (file missing)
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\windows\system32\TODDSrv.exe (file missing)
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Mobile Broadband Service (WMCoreService) - Ericsson AB - C:\Program Files (x86)\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10048 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\Fingerprint Sensor\ATService.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
winlogon.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\WLANExt.exe 28340912
\??\C:\Windows\system32\conhost.exe "1577658158-719356268-2260767481855216879-1523665045-15656945651393425328143764780
taskeng.exe {DCF74DF1-9408-4E07-9007-049E7ED234CE}
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Synergy\synergyd.exe"
C:\windows\system32\ThpSrv.exe
"C:/Program Files/Synergy/synergyc.exe" -f --no-tray --debug INFO --name TOSHIBA --ipc --stop-on-desk-switch 169.254.146.41:24800
C:\windows\system32\TODDSrv.exe
\??\C:\Windows\system32\conhost.exe "937056863-639042268-8486738512112501152-172772010894437328-1435327252762321872
"C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exe" servicemode
"C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Apoint2K\Apoint.exe"
"C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe"
"C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
"C:\Program Files\TOSHIBA\TFPU\TFPUPWDBank.exe" /start
"C:\Program Files\TOSHIBA\TFPU\TFPUTaskMonitor.exe" /start
"C:\Windows\System32\ThpSrv.exe" /logon
"C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe"
"C:\Program Files (x86)\RocketDock\RocketDock.exe"
"C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"
"C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe"
"C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Browny02\BrYNSvc.exe"
C:\Windows\System32\vds.exe
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\TrayPopupE\TrayTipAgentE.exe"
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files\Apoint2K\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
"C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe"
"C:\windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-7767c358-c0c7-4913-92bb-dfebbd84301c -SystemEventPortName:HostProcess-3e68df27-22c0-43ea-9c70-e2442d31abc8 -IoCancelEventPortName:HostProcess-c107e603-ef90-4aa4-a25c-df625c8eb5f2 -NonStateChangingEventPortName:HostProcess-fa6aef77-a1ea-421b-ab4e-cf4ef4218978 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:f5ea217e-69fc-4665-98e7-3d595516866c -DeviceGroupId:
"Apntex.exe"
\??\C:\Windows\system32\conhost.exe "68657165211026867941379858088-20469897221554992084249932174-1309767775-2051958917
"C:\Program Files\Apoint2K\HidFind.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\sppsvc.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\system32\wbem\wmiprvse.exe
taskeng.exe {025AAA00-ECF8-4790-B813-1078F5500A51}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe" -startup
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe"
C:\Windows\explorer.exe /factory,{ceff45ee-c862-41de-aee2-a022c81eda92} -Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 528 532 540 65536 536
"C:\Users\uzivatel\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
=========Mozilla firefox=========
ProfilePath - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\lzrsno1x.default-1446294142760
prefs.js - "browser.startup.homepage" - "https://www.google.cz/?gws_rd=ssl"
"{C1CA7765-44E4-452e-9D00-A04F3D434281}"=
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll
C:\Program Files (x86)\Mozilla Firefox\plugins\
nppdf32.dll
npPDFXCviewNPPlugin.dll
C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\lzrsno1x.default-1446294142760\extensions\
zigboom.designs@gmail.com
{77d2ed30-4cd2-11e0-b8af-0800200c9a66}
{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}(49)
C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\lzrsno1x.default-1446294142760\searchplugins\
Google.xml
heurkacz.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{030AC7B6-E7EC-40F1-8FB2-C0FD344DE0B9}]
TFPUPWDBankBHO Class - C:\Program Files\TOSHIBA\TFPU\x86\TFPUPWDBankBHO.dll [2010-03-02 45488]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3C88694-EFFA-4d78-B409-54B7B2535B14}]
TOSHIBA Media Controller Plug-in - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll [2010-12-05 529784]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"IgfxTray"=C:\windows\system32\igfxtray.exe [2011-04-07 167256]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2011-04-07 391000]
"Persistence"=C:\windows\system32\igfxpers.exe [2011-04-07 418136]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-01-18 11775592]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2011-01-21 328048]
"TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2011-03-02 566696]
"HSON"=C:\Program Files\TOSHIBA\TBS\HSON.exe [2010-09-25 296824]
"TCrdMain"=C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2011-03-09 967544]
"IntelWireless"=C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2011-01-05 1933584]
"TFPUPWDBankService"=C:\Program Files\TOSHIBA\TFPU\TFPUPWDBank.exe [2010-03-02 925104]
"TFPUService"=C:\Program Files\TOSHIBA\TFPU\TFPUTaskMonitor.exe [2010-11-04 789368]
"ThpSrv"=C:\windows\system32\thpsrv /logon []
"TosVolRegulator"=C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [2009-11-11 24376]
"Toshiba Registration"=C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [2011-05-29 150992]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-04-30 1337000]
"Acronis Scheduler2 Service"=C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2013-02-15 516928]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"=C:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2015-10-19 8551848]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mylbx]
C:\Program Files\My Lockbox\mylbx.exe [2013-10-28 2289952]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TWebCamera]
C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2011-01-16 2475384]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2010-12-24 112152]
"BrStsMon00"=C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2010-06-10 2621440]
"TrueImageMonitor.exe"=C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2013-04-10 6382328]
"AcronisTibMounterMonitor"=C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [2013-01-10 1103424]
"EaseUS EPM tray"=C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe [2015-09-16 2089056]
"EaseUS EPM Tray Agent"=C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\TrayPopupE\TrayTipAgentE.exe [2014-11-18 255072]
"EaseUS TB Tray Agent"=C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe [2014-12-15 253992]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-12-21 959904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-04-04 385024]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-12-06 15:28:20 ----D---- C:\rsit
2015-12-06 15:28:20 ----D---- C:\Program Files\trend micro
2015-12-06 14:52:31 ----A---- C:\Windows\SYSWOW64\DBCLIENT.DLL
2015-12-03 07:54:34 ----D---- C:\ProgramData\cutevideocutterfree
2015-12-03 07:51:59 ----D---- C:\ProgramData\videocutter
2015-12-03 07:51:58 ----D---- C:\Program Files (x86)\Cute Video Cutter
2015-11-30 15:43:14 ----D---- C:\Users\uzivatel\AppData\Roaming\OpenOffice
2015-11-30 15:41:06 ----D---- C:\Program Files (x86)\OpenOffice 4
2015-11-29 22:01:20 ----D---- C:\Windows\pss
2015-11-29 21:24:43 ----D---- C:\Program Files (x86)\LibreOffice 5
2015-11-27 08:10:46 ----D---- C:\ProgramData\VS Revo Group
2015-11-27 08:10:46 ----A---- C:\Windows\system32\drivers\revoflt.sys
2015-11-27 08:10:44 ----D---- C:\Program Files\VS Revo Group
2015-11-25 19:53:24 ----D---- C:\Program Files (x86)\Verdict Free
2015-11-25 18:09:50 ----D---- C:\Program Files (x86)\Acapela Group
2015-11-25 17:14:34 ----D---- C:\Users\uzivatel\AppData\Roaming\Hunspell
2015-11-25 17:07:14 ----D---- C:\Users\uzivatel\AppData\Roaming\Proofing Tools
2015-11-25 14:42:46 ----D---- C:\Program Files (x86)\SlimDrivers
2015-11-25 14:41:39 ----D---- C:\Users\uzivatel\AppData\Roaming\RidNacs
2015-11-25 14:41:39 ----D---- C:\Program Files (x86)\RidNacs
2015-11-25 14:09:11 ----D---- C:\Program Files (x86)\Vypínač na dobrou noc
2015-11-25 14:00:33 ----D---- C:\ProgramData\APN
2015-11-25 13:55:57 ----D---- C:\Program Files (x86)\FormatFactory
2015-11-25 13:53:47 ----D---- C:\Program Files (x86)\Fast Duplicate File Finder
2015-11-25 09:08:13 ----A---- C:\Windows\system32\drivers\FSPFltd2.sys
2015-11-25 09:08:11 ----D---- C:\Program Files\My Lockbox
2015-11-25 08:59:14 ----AD---- C:\ProgramData\TEMP
2015-11-25 08:58:12 ----D---- C:\Users\uzivatel\AppData\Roaming\MotionDSP
2015-11-25 08:58:12 ----D---- C:\Program Files (x86)\vReveal 3
2015-11-22 17:28:10 ----D---- C:\antitwined
2015-11-22 14:41:11 ----D---- C:\Program Files (x86)\AntiTwin
2015-11-21 15:17:08 ----A---- C:\Windows\SYSWOW64\FileOps.exe
2015-11-21 14:18:26 ----D---- C:\Program Files (x86)\Adobe
2015-11-21 14:17:09 ----D---- C:\ProgramData\Adobe
2015-11-21 14:01:12 ----D---- C:\Windows\SYSWOW64\Adobe
2015-11-18 22:45:45 ----A---- C:\Windows\system32\drivers\EuFdDisk.sys
2015-11-18 22:45:45 ----A---- C:\Windows\system32\drivers\eudskacs.sys
2015-11-18 22:45:45 ----A---- C:\Windows\system32\drivers\EUBKMON.sys
2015-11-18 22:45:45 ----A---- C:\Windows\system32\drivers\eubakup.sys
2015-11-18 22:44:07 ----A---- C:\Windows\system32\fbnative.exe
2015-11-18 22:38:45 ----A---- C:\Windows\SYSWOW64\setupempdrv03.exe
2015-11-18 22:38:45 ----A---- C:\Windows\SYSWOW64\EuGdiDrv.sys
2015-11-18 22:38:45 ----A---- C:\Windows\SYSWOW64\EuEpmGdi.dll
2015-11-18 22:38:45 ----A---- C:\Windows\SYSWOW64\epmntdrv.sys
2015-11-18 22:38:45 ----A---- C:\Windows\SYSWOW64\BootMan.exe
2015-11-18 22:38:45 ----A---- C:\Windows\system32\setupempdrvx64.exe
2015-11-18 22:38:45 ----A---- C:\Windows\system32\EuGdiDrv.sys
2015-11-18 22:38:45 ----A---- C:\Windows\system32\EuEpmGdi.dll
2015-11-18 22:38:45 ----A---- C:\Windows\system32\epmntdrv.sys
2015-11-18 22:38:45 ----A---- C:\Windows\system32\BootMan.exe
2015-11-18 22:22:38 ----D---- C:\Program Files (x86)\EaseUS
2015-11-17 17:33:49 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-11-17 17:33:49 ----A---- C:\Windows\system32\rdpcorets.dll
2015-11-17 17:19:18 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2015-11-17 17:19:16 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2015-11-17 17:19:16 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2015-11-17 17:19:16 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2015-11-17 17:19:16 ----A---- C:\Windows\system32\wksprtPS.dll
2015-11-17 17:19:16 ----A---- C:\Windows\system32\TSWbPrxy.exe
2015-11-17 17:19:16 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-11-17 17:19:16 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-11-17 17:19:16 ----A---- C:\Windows\system32\tsgqec.dll
2015-11-17 17:19:16 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2015-11-17 17:19:16 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2015-11-17 17:19:15 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2015-11-17 17:19:15 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-11-17 17:19:15 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2015-11-17 17:19:15 ----A---- C:\Windows\system32\wksprt.exe
2015-11-17 17:19:15 ----A---- C:\Windows\system32\rdvidcrl.dll
2015-11-17 17:19:15 ----A---- C:\Windows\system32\mstscax.dll
2015-11-17 17:19:15 ----A---- C:\Windows\system32\mstsc.exe
2015-11-17 17:17:30 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys
2015-11-17 17:17:30 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2015-11-17 17:17:29 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2015-11-17 17:17:28 ----A---- C:\Windows\system32\rdpudd.dll
2015-11-17 17:17:28 ----A---- C:\Windows\system32\rdpendp_winip.dll
2015-11-17 17:12:50 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-11-17 17:12:50 ----A---- C:\Windows\system32\schannel.dll
2015-11-17 17:12:50 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-11-17 17:12:50 ----A---- C:\Windows\system32\kerberos.dll
2015-11-17 17:12:49 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-11-17 17:12:49 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-11-17 17:12:49 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-11-17 17:12:49 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-11-17 17:12:49 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-11-17 17:12:49 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2015-11-17 17:12:49 ----A---- C:\Windows\system32\ntdll.dll
2015-11-17 17:12:49 ----A---- C:\Windows\system32\ncrypt.dll
2015-11-17 17:12:49 ----A---- C:\Windows\system32\lsasrv.dll
2015-11-17 17:12:49 ----A---- C:\Windows\system32\kernel32.dll
2015-11-17 17:12:49 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-11-17 17:12:49 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-11-17 17:12:49 ----A---- C:\Windows\system32\drivers\cng.sys
2015-11-17 17:12:49 ----A---- C:\Windows\system32\bcryptprimitives.dll
2015-11-17 17:12:48 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-11-17 17:12:48 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-11-17 17:12:48 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-11-17 17:12:48 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-11-17 17:12:48 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-11-17 17:12:48 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-11-17 17:12:48 ----A---- C:\Windows\system32\wow64.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\winsrv.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\wdigest.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\TSpkg.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\sspicli.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\srcore.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\srclient.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\smss.exe
2015-11-17 17:12:48 ----A---- C:\Windows\system32\rstrui.exe
2015-11-17 17:12:48 ----A---- C:\Windows\system32\rpcrt4.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\msv1_0.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\lsass.exe
2015-11-17 17:12:48 ----A---- C:\Windows\system32\KernelBase.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\conhost.exe
2015-11-17 17:12:48 ----A---- C:\Windows\system32\auditpol.exe
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-11-17 17:12:47 ----A---- C:\Windows\system32\wow64win.dll
2015-11-17 17:12:47 ----A---- C:\Windows\system32\wow64cpu.dll
2015-11-17 17:12:47 ----A---- C:\Windows\system32\sspisrv.dll
2015-11-17 17:12:47 ----A---- C:\Windows\system32\secur32.dll
2015-11-17 17:12:47 ----A---- C:\Windows\system32\ntvdm64.dll
2015-11-17 17:12:47 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-11-17 17:12:47 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-11-17 17:12:47 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-11-17 17:12:47 ----A---- C:\Windows\system32\csrsrv.dll
2015-11-17 17:12:47 ----A---- C:\Windows\system32\cryptbase.dll
2015-11-17 17:12:47 ----A---- C:\Windows\system32\credssp.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-11-17 17:12:46 ----A---- C:\Windows\SYSWOW64\user.exe
2015-11-17 17:12:46 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-11-17 17:12:46 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-11-17 17:12:46 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-11-17 17:12:46 ----A---- C:\Windows\system32\apisetschema.dll
2015-11-17 17:12:46 ----A---- C:\Windows\system32\adtschema.dll
2015-11-17 17:12:45 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-11-17 17:12:45 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-11-17 17:12:45 ----A---- C:\Windows\system32\msobjs.dll
2015-11-17 17:12:45 ----A---- C:\Windows\system32\msaudite.dll
2015-11-17 17:12:40 ----A---- C:\Windows\system32\win32k.sys
2015-11-17 17:12:29 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-11-17 17:12:29 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-11-17 17:12:29 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\occache.dll
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-11-17 17:12:28 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-11-17 17:12:28 ----A---- C:\Windows\system32\iernonce.dll
2015-11-17 17:12:28 ----A---- C:\Windows\system32\ie4uinit.exe
2015-11-17 17:12:27 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-11-17 17:12:27 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-11-17 17:12:27 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-11-17 17:12:26 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-11-17 17:12:26 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-11-17 17:12:26 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-11-17 17:12:26 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-11-17 17:12:26 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-11-17 17:12:26 ----A---- C:\Windows\system32\urlmon.dll
2015-11-17 17:12:26 ----A---- C:\Windows\system32\occache.dll
2015-11-17 17:12:26 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-11-17 17:12:26 ----A---- C:\Windows\system32\iedkcs32.dll
2015-11-17 17:12:25 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-11-17 17:12:25 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-11-17 17:12:25 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-11-17 17:12:25 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-11-17 17:12:25 ----A---- C:\Windows\system32\msfeeds.dll
2015-11-17 17:12:25 ----A---- C:\Windows\system32\iesetup.dll
2015-11-17 17:12:25 ----A---- C:\Windows\system32\ieapfltr.dll
2015-11-17 17:12:25 ----A---- C:\Windows\system32\dxtrans.dll
2015-11-17 17:12:24 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2015-11-17 17:12:24 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-11-17 17:12:24 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-11-17 17:12:24 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-11-17 17:12:24 ----A---- C:\Windows\system32\vbscript.dll
2015-11-17 17:12:24 ----A---- C:\Windows\system32\iertutil.dll
2015-11-17 17:12:23 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-11-17 17:12:23 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-11-17 17:12:23 ----A---- C:\Windows\system32\jsproxy.dll
2015-11-17 17:12:23 ----A---- C:\Windows\system32\ieui.dll
2015-11-17 17:12:23 ----A---- C:\Windows\system32\dxtmsft.dll
2015-11-17 17:12:22 ----A---- C:\Windows\system32\webcheck.dll
2015-11-17 17:12:22 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-11-17 17:12:22 ----A---- C:\Windows\system32\mshtmled.dll
2015-11-17 17:12:22 ----A---- C:\Windows\system32\jscript.dll
2015-11-17 17:12:22 ----A---- C:\Windows\system32\ieUnatt.exe
2015-11-17 17:12:22 ----A---- C:\Windows\system32\ieframe.dll
2015-11-17 17:12:21 ----A---- C:\Windows\system32\wininet.dll
2015-11-17 17:12:21 ----A---- C:\Windows\system32\jscript9diag.dll
2015-11-17 17:12:21 ----A---- C:\Windows\system32\jscript9.dll
2015-11-17 17:12:20 ----A---- C:\Windows\system32\msrating.dll
2015-11-17 17:12:20 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-11-17 17:12:20 ----A---- C:\Windows\system32\mshtml.dll
2015-11-17 17:12:16 ----A---- C:\Windows\system32\icaapi.dll
2015-11-17 17:12:16 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2015-11-17 17:12:09 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-11-17 17:12:09 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-11-17 17:12:09 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-11-17 17:12:09 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-11-17 17:12:09 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wuwebv.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wups2.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wups.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wudriver.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wucltux.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wuaueng.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wuauclt.exe
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wuapp.exe
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wuapi.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-11-17 17:12:01 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-11-17 17:12:01 ----A---- C:\Windows\system32\drivers\afd.sys
2015-11-17 17:11:16 ----A---- C:\Windows\SYSWOW64\shimeng.dll
2015-11-17 17:11:16 ----A---- C:\Windows\SYSWOW64\sdbinst.exe
2015-11-17 17:11:16 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2015-11-17 17:11:16 ----A---- C:\Windows\system32\shimeng.dll
2015-11-17 17:11:16 ----A---- C:\Windows\system32\sdbinst.exe
2015-11-17 17:11:16 ----A---- C:\Windows\system32\apphelp.dll
2015-11-17 17:11:16 ----A---- C:\Windows\system32\aelupsvc.dll
2015-11-17 17:09:54 ----A---- C:\Windows\system32\drivers\ndis.sys
2015-11-17 17:09:26 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-11-17 17:09:26 ----A---- C:\Windows\system32\jnwmon.dll
2015-11-17 17:09:26 ----A---- C:\Windows\system32\InkEd.dll
2015-11-16 19:13:23 ----D---- C:\Users\uzivatel\AppData\Roaming\.dsgui
2015-11-16 16:20:20 ----D---- C:\Program Files (x86)\CZ.NIC
2015-11-16 15:02:43 ----D---- C:\Windows\PCHEALTH
2015-11-16 15:01:03 ----D---- C:\Program Files\Microsoft SQL Server
2015-11-12 13:04:40 ----D---- C:\Program Files (x86)\NeoSmart Technologies
2015-11-12 01:47:44 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-11-12 01:47:39 ----D---- C:\Windows\system32\Macromed
2015-11-11 22:41:42 ----A---- C:\Windows\system32\drivers\afcdp.sys
2015-11-11 22:41:34 ----D---- C:\Users\uzivatel\AppData\Roaming\6D08B452-5F76-4253-ACA8-64F9491980CE
2015-11-11 19:27:21 ----D---- C:\Users\uzivatel\AppData\Roaming\Acronis
2015-11-11 19:26:18 ----A---- C:\Windows\system32\drivers\tdrpman.sys
2015-11-11 19:26:16 ----A---- C:\Windows\system32\drivers\tib_mounter.sys
2015-11-11 19:26:15 ----A---- C:\Windows\system32\drivers\tib.sys
2015-11-11 19:26:14 ----A---- C:\Windows\system32\drivers\vididr.sys
2015-11-11 19:26:13 ----A---- C:\Windows\system32\drivers\vidsflt.sys
2015-11-11 19:26:11 ----A---- C:\Windows\system32\drivers\snapman.sys
2015-11-11 19:26:10 ----D---- C:\ProgramData\Acronis
2015-11-11 19:26:10 ----A---- C:\Windows\system32\drivers\fltsrv.sys
2015-11-11 19:25:43 ----D---- C:\Program Files (x86)\Acronis
2015-11-10 13:58:28 ----D---- C:\Program Files\Tracker Software
2015-11-10 13:44:31 ----D---- C:\Users\uzivatel\AppData\Roaming\PrimoPDF
2015-11-10 13:36:16 ----D---- C:\Users\uzivatel\AppData\Roaming\Philipp Winterberg
2015-11-10 13:36:05 ----D---- C:\Program Files (x86)\Free RAR Extract Frog
2015-11-10 13:34:15 ----A---- C:\Windows\system32\Primomonnt.dll
2015-11-10 13:34:13 ----D---- C:\Program Files (x86)\Nitro PDF
2015-11-09 11:53:57 ----HD---- C:\Windows\system32\CanonMF Uninstaller Information
2015-11-09 11:53:51 ----A---- C:\Windows\system32\CNCMFP30.INI
2015-11-09 11:53:51 ----A---- C:\Windows\system32\CNCLSU30.DLL
2015-11-09 11:53:51 ----A---- C:\Windows\system32\CNCLST30.DLL
2015-11-09 11:53:51 ----A---- C:\Windows\system32\CNCLSI30.DLL
2015-11-09 11:53:51 ----A---- C:\Windows\system32\CNCLSD30.DLL
2015-11-09 11:53:51 ----A---- C:\Windows\system32\CNCLSC30.DLL
2015-11-09 11:53:50 ----A---- C:\Windows\system32\CNCL4600.DLL
2015-11-09 11:53:50 ----A---- C:\Windows\system32\cncilsc.dll
2015-11-09 11:53:50 ----A---- C:\Windows\system32\CNCI4600.DLL
2015-11-09 11:53:50 ----A---- C:\Windows\system32\CNCC4600.DLL
2015-11-09 11:53:46 ----A---- C:\Windows\system32\CNAS0MMK.DLL
2015-11-09 11:53:41 ----D---- C:\Program Files\Canon
2015-11-08 13:35:04 ----D---- C:\Program Files (x86)\Mozilla Firefox
======List of files/folders modified in the last 1 month======
2015-12-06 15:28:20 ----RD---- C:\Program Files
2015-12-06 15:27:28 ----D---- C:\Windows\inf
2015-12-06 15:27:28 ----AD---- C:\Windows\System32
2015-12-06 15:27:28 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-12-06 15:25:57 ----D---- C:\Windows\Temp
2015-12-06 15:25:41 ----A---- C:\Windows\SYSWOW64\log.txt
2015-12-06 15:24:45 ----D---- C:\Windows\system32\config
2015-12-06 15:19:20 ----AD---- C:\Windows
2015-12-06 15:10:19 ----D---- C:\Windows\Prefetch
2015-12-06 14:52:31 ----D---- C:\Windows\SysWOW64
2015-12-06 14:52:31 ----D---- C:\Program Files (x86)\Common Files
2015-12-06 13:53:26 ----HD---- C:\ProgramData
2015-12-06 13:21:00 ----D---- C:\Windows\system32\Tasks
2015-12-04 00:48:46 ----SHD---- C:\System Volume Information
2015-12-03 08:03:33 ----D---- C:\Users\uzivatel\AppData\Roaming\vlc
2015-12-03 07:51:58 ----RD---- C:\Program Files (x86)
2015-12-02 14:18:00 ----SHD---- C:\Windows\Installer
2015-12-02 14:13:15 ----D---- C:\Windows\Tasks
2015-11-30 15:41:17 ----RSD---- C:\Windows\assembly
2015-11-30 15:41:09 ----RSD---- C:\Windows\Fonts
2015-11-29 22:19:59 ----D---- C:\Windows\system32\catroot2
2015-11-27 08:10:47 ----D---- C:\Windows\system32\drivers
2015-11-25 18:46:48 ----HD---- C:\Infovox2.lic
2015-11-25 18:09:53 ----D---- C:\Windows\Speech
2015-11-25 18:09:50 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-11-25 15:25:58 ----D---- C:\ProgramData\irlsoft
2015-11-25 14:59:05 ----SHD---- C:\Boot
2015-11-25 08:58:39 ----D---- C:\Windows\winsxs
2015-11-23 14:33:04 ----D---- C:\My Video
2015-11-23 14:32:43 ----D---- C:\My Saved Files
2015-11-23 14:32:15 ----D---- C:\My Downloads
2015-11-21 15:06:31 ----SD---- C:\Users\uzivatel\AppData\Roaming\Microsoft
2015-11-21 14:27:07 ----D---- C:\Users\uzivatel\AppData\Roaming\Adobe
2015-11-19 11:57:19 ----D---- C:\Windows\rescache
2015-11-19 00:00:52 ----D---- C:\Windows\debug
2015-11-17 17:58:22 ----D---- C:\Windows\Microsoft.NET
2015-11-17 17:39:40 ----D---- C:\Windows\system32\wdi
2015-11-17 17:26:25 ----D---- C:\Windows\system32\catroot
2015-11-17 17:26:18 ----D---- C:\Windows\SYSWOW64\wbem
2015-11-17 17:26:18 ----D---- C:\Windows\SYSWOW64\en-US
2015-11-17 17:26:18 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-11-17 17:26:18 ----D---- C:\Windows\system32\wbem
2015-11-17 17:26:18 ----D---- C:\Windows\system32\en-US
2015-11-17 17:26:18 ----D---- C:\Windows\system32\drivers\en-US
2015-11-17 17:26:18 ----D---- C:\Windows\system32\cs-CZ
2015-11-17 17:26:18 ----D---- C:\Windows\PolicyDefinitions
2015-11-17 17:26:18 ----D---- C:\Program Files\Internet Explorer
2015-11-17 17:26:18 ----D---- C:\Program Files (x86)\Internet Explorer
2015-11-17 17:26:17 ----D---- C:\Windows\system32\migration
2015-11-17 17:26:17 ----D---- C:\Windows\system32\DriverStore
2015-11-17 17:26:17 ----D---- C:\Windows\AppPatch
2015-11-17 17:24:00 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-11-17 17:23:34 ----D---- C:\Windows\system32\MRT
2015-11-17 17:21:07 ----A---- C:\Windows\system32\MRT.exe
2015-11-17 17:13:27 ----D---- C:\Program Files\Microsoft Silverlight
2015-11-17 17:13:27 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-11-17 17:13:19 ----D---- C:\Program Files\Windows Journal
2015-11-16 15:19:58 ----D---- C:\Program Files (x86)\Intel
2015-11-16 15:02:43 ----D---- C:\Program Files\Common Files\Microsoft Shared
2015-11-11 17:52:23 ----D---- C:\Windows\system32\NDF
2015-11-10 13:34:15 ----A---- C:\Windows\primopdf.ini
2015-11-09 11:55:54 ----D---- C:\Windows\twain_32
2015-11-08 15:05:08 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-08 14:49:28 ----D---- C:\Users\uzivatel\AppData\Roaming\Skype
2015-11-08 14:28:09 ----D---- C:\Program Files\Synergy
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 EUBAKUP;EUBAKUP; C:\Windows\system32\drivers\eubakup.sys [2014-12-15 60968]
R0 EUBKMON;EUBKMON; C:\Windows\system32\drivers\EUBKMON.sys [2014-12-15 48168]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2015-11-11 108832]
R0 FSProFilter2;FSPro File Filter 2; C:\Windows\System32\Drivers\FSPFltd2.sys [2011-06-03 57648]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-01-12 439320]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-03-04 280376]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2015-11-11 233760]
R0 Thpdrv;TOSHIBA HDD Protection Driver; C:\Windows\system32\DRIVERS\thpdrv.sys [2009-06-29 34880]
R0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver; C:\Windows\system32\DRIVERS\Thpevm.SYS [2009-06-29 14784]
R0 tib;Acronis TIB Manager; C:\Windows\system32\DRIVERS\tib.sys [2015-11-11 1120032]
R0 tib_mounter;Acronis TIB Mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [2015-11-11 183224]
R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ.SYS [2009-07-14 26840]
R0 vididr;Acronis Virtual Disk; C:\Windows\system32\DRIVERS\vididr.sys [2015-11-11 161568]
R0 vidsflt;Acronis Disk Storage Filter; C:\Windows\system32\DRIVERS\vidsflt.sys [2015-11-11 117024]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 EUDSKACS;EUDSKACS; \??\C:\windows\system32\drivers\eudskacs.sys [2014-12-15 18472]
R1 EUFDDISK;EUFDDISK; \??\C:\windows\system32\drivers\EuFdDisk.sys [2014-12-15 192040]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 124568]
R2 rimspci;rimspci; C:\Windows\system32\DRIVERS\rimspe64.sys [2010-10-21 72192]
R2 risdxc;risdxc; C:\Windows\system32\DRIVERS\risdxc64.sys [2011-01-24 100352]
R2 rixdpcie;rixdpcie; C:\Windows\system32\DRIVERS\rixdpe64.sys [2011-01-29 53760]
R3 afcdp;afcdp; C:\Windows\system32\DRIVERS\afcdp.sys [2015-11-11 367200]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2011-02-18 350328]
R3 ATSwpWDF;AuthenTec TruePrint USB Driver; C:\Windows\System32\Drivers\ATSwpWDF.sys [2010-06-17 770152]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2010-12-02 315568]
R3 ecnssndis; Mobile Broadband Driver; C:\Windows\System32\Drivers\wwuss64.sys [2010-02-23 26664]
R3 ecnssndisfltr; Mobile Broadband Driver Filter; C:\Windows\System32\Drivers\wwussf64.sys [2010-02-23 30248]
R3 guardian2;guardian2; C:\Windows\System32\Drivers\oz776x64.sys [2009-09-09 85280]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-04-04 12262624]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-01-18 2719336]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 Mbm3CBus;Ericsson F5521gw for TOSHIBA Mobile Broadband Device (WDM); C:\Windows\system32\DRIVERS\Mbm3CBus.sys [2010-10-31 411208]
R3 Mbm3DevMt;TOSHIBA Mobile Broadband Device Management Driver (WDM); C:\Windows\system32\DRIVERS\Mbm3DevMt.sys [2010-10-31 419912]
R3 Mbm3mdfl;TOSHIBA Mobile Broadband Modem Filter; C:\Windows\system32\DRIVERS\Mbm3mdfl.sys [2010-10-31 19528]
R3 Mbm3Mdm;TOSHIBA Mobile Broadband Modem Driver; C:\Windows\system32\DRIVERS\Mbm3Mdm.sys [2010-10-31 472648]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-12-24 56344]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2011-01-04 8507392]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2011-02-10 82432]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2011-02-10 181760]
R3 PGEffect;Pangu effect driver; C:\Windows\system32\DRIVERS\pgeffect.sys [2009-06-22 35008]
R3 t36wgps;TOSHIBA Mobile Broadband GPS Port; C:\Windows\system32\DRIVERS\t36wgps64.sys [2010-12-01 101416]
R3 tosrfec;Bluetooth ACPI; C:\Windows\system32\DRIVERS\tosrfec.sys [2010-06-18 18872]
R3 TPM;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 epmntdrv;epmntdrv; \??\C:\Windows\syswow64\epmntdrv.sys [2014-11-18 14944]
S3 EuGdiDrv;EuGdiDrv; \??\C:\Windows\syswow64\EuGdiDrv.sys [2014-11-18 10208]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 Ser2pl;Prolific Serial port driver; C:\Windows\system32\drivers\ser2pl64.sys [2010-03-12 97280]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\Windows\system32\DRIVERS\tdcmdpst.sys [2009-07-30 27784]
S3 tdrpman;Acronis Try&Decide and Restore Points filter; C:\Windows\system32\DRIVERS\tdrpman.sys [2015-11-11 1462560]
S3 Tosrfcom;Tosrfcom; C:\Windows\system32\drivers\Tosrfcom.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 wdkmd;Intel WiDi KMD; C:\Windows\system32\DRIVERS\WDKMD.sys [2010-12-25 42392]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2013-02-15 1143720]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 afcdpsrv;Acronis Nonstop Backup Service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2015-11-11 3783672]
R2 ATService;AuthenTec Fingerprint Service; C:\Program Files\Fingerprint Sensor\ATService.exe [2010-06-17 2734912]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2011-03-01 27648]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2011-03-01 27648]
R2 EaseUS Agent;EaseUS Agent Service; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [2015-08-01 36904]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-01-05 1515792]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-24 325656]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-04-30 23816]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-01-05 836880]
R2 syncagentsrv;Acronis Sync Agent Service; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [2013-03-20 7084672]
R2 Synergy;Synergy; C:\Program Files\Synergy\synergyd.exe [2013-05-03 423424]
R2 Thpsrv;Ochrana HDD TOSHIBA; C:\windows\system32\ThpSrv.exe [2010-12-24 526848]
R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\windows\system32\TODDSrv.exe [2010-10-20 138656]
R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe [2010-12-09 489384]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-24 2656280]
R3 BrYNSvc;BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [2010-01-25 245760]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-04-30 366544]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-01 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2011-03-01 27648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-01 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-10-31 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-11-08 147624]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-01-05 340240]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2011-03-01 27648]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2011-03-01 27648]
S3 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2010-04-12 196976]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2011-03-01 27648]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-10-22 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-11 139944]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-11 139944]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-11 139944]
-----------------EOF-----------------
info.txt logfile of random's system information tool 1.10 2015-12-06 15:28:28
======MBR======
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
======Uninstall list======
-->C:\Program Files\TOSHIBA\TVAP\setup.exe
Adobe Flash Player 19 NPAPI-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_245_Plugin.exe -maintain plugin
Adobe Reader XI (11.0.06)-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-AB0000000001}
Adobe SVG Viewer 3.0-->C:\Program Files (x86)\Common Files\Adobe\SVG Viewer 3.0\Uninstall\Winstall.exe -u -fC:\Program Files (x86)\Common Files\Adobe\SVG Viewer 3.0\Uninstall\Install.log
ALPS Touch Pad Driver-->C:\Program Files\Apoint2K\Uninstap.exe ADDREMOVE
Anti-Twin (Installation 22.11.2015)-->"C:\Program Files (x86)\AntiTwin\uninstall.exe" /uninst "UninstallKey=Anti-Twin 2015-11-22 14.41.15"
AuthenTec Fingerprint Software-->MsiExec.exe /X{5F1DFCC1-595D-4235-A044-E05B706D800A}
BDE (Borland Database Engine)-->C:\Users\uzivatel\AppData\Local\Temp\is-39Q7H.tmp\unins000.exe
Bluetooth Stack for Windows by Toshiba-->MsiExec.exe /X{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}
Canon MF4600 Series-->"C:\Windows\system32\CanonMF Uninstaller Information\{555ADE0A-2AE2-4139-806A-9F98405E4813}\misc\DelDrv.exe" /U:{555ADE0A-2AE2-4139-806A-9F98405E4813} /L0x0000
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Cute Video Cutter 1.4.0.1-->"C:\Program Files (x86)\Cute Video Cutter\unins000.exe"
Datovka-->"C:\Program Files (x86)\CZ.NIC\Datovka\uninst.exe"
Defraggler-->"C:\Program Files\Defraggler\uninst.exe"
EaseUS Partition Master 10.8-->"C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\unins000.exe"
EaseUS Todo Backup Free 8.9 -->"C:\Program Files (x86)\EaseUS\Todo Backup\unins000.exe"
EasyBCD 2.3-->C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\uninstall.exe
Fast Duplicate File Finder 2.8.0.1-->"C:\Program Files (x86)\Fast Duplicate File Finder\unins000.exe"
FormatFactory 3.7.0.0-->C:\Program Files (x86)\FormatFactory\uninst.exe
Free RAR Extract Frog-->C:\Program Files (x86)\Free RAR Extract Frog\uninstall.exe
Google Chrome-->"C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.73\Installer\setup.exe" --uninstall --multi-install --chrome --system-level
Google Update Helper-->MsiExec.exe /I{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
HL-2240D-->"C:\Program Files (x86)\InstallShield Installation Information\{E2A97415-BD97-4867-B906-05E39E9EE51F}\Setup.exe" -runfromtemp -l0x0005 UNINSTALL Reg=BLL-PRT -removeonly
Infovox Desktop 2.2-->C:\Program Files (x86)\InstallShield Installation Information\{52C32940-C538-40CF-8DE9-B91090F49938}\setup.exe -runfromtemp -l0x0009 -removeonly
Intel PROSet Wireless-->Intel PROSet Wireless
Intel(R) Control Center-->C:\Program Files (x86)\Intel\Intel Control Center\uninstaller\SetupICC.exe -uninstall -force -confirm
Intel(R) Management Engine Components-->C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\Uninstall\setup.exe -uninstall
Intel(R) Network Connections Drivers-->Prounstl.exe
Intel(R) Processor Graphics-->C:\Program Files (x86)\Intel\Intel(R) Processor Graphics\Uninstall\setup.exe -uninstall
Microsoft .NET Framework 4.5.2 (CSY)-->MsiExec.exe /X{C48AF3CF-C632-3C19-838E-7DAB7283D46A}
Microsoft .NET Framework 4.5.2 (čeština)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\CSY\\Setup.exe /repair /x86 /x64 /lcid 1029
Microsoft .NET Framework 4.5.2-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\\Setup.exe /repair /x86 /x64
Microsoft .NET Framework 4.5.2-->MsiExec.exe /X{26784146-6E05-3FF9-9335-786C7C0FB5BE}
Microsoft Security Client-->MsiExec.exe /X{D9FCBAAE-DB72-488B-96D0-0AA3C892C0D6}
Microsoft Security Essentials-->"C:\Program Files\Microsoft Security Client\Setup.exe" /x
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17-->MsiExec.exe /X{8220EEFE-38CD-377E-8595-13398D740ACE}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161-->MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219-->MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
Mozilla Firefox 42.0 (x86 cs)-->"C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe"
Mozilla Maintenance Service-->"C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
Mozilla Thunderbird 38.3.0 (x86 cs)-->C:\Program Files (x86)\Mozilla Thunderbird\uninstall\helper.exe
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
My Lockbox 3.0.5-->"C:\Program Files\My Lockbox\unins000.exe"
O2Micro OZ776 SCR Driver-->"C:\Program Files (x86)\InstallShield Installation Information\{C5E85AF3-D784-4CC6-83A9-678402AD87E1}\setup.exe" -runfromtemp -l0x0405 -removeonly
O2Micro OZ776 SCR Driver-->MsiExec.exe /I{C5E85AF3-D784-4CC6-83A9-678402AD87E1}
OpenOffice 4.1.1-->MsiExec.exe /I{C560D6E7-E40A-435D-8B71-62CBCF1701B2}
PDF-Viewer-->"C:\Program Files\Tracker Software\PDF Viewer\unins000.exe"
PL-2303 USB-to-Serial-->"C:\Program Files (x86)\InstallShield Installation Information\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}\setup.exe" -runfromtemp -l0x0009 -removeonly
PlayReady PC Runtime amd64-->MsiExec.exe /X{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}
PrimoPDF -- brought to you by Nitro PDF Software-->"C:\Program Files (x86)\Nitro PDF\PrimoPDF\uninstaller.exe"
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -removeonly
Renesas Electronics USB 3.0 Host Controller Driver-->"C:\Program Files (x86)\InstallShield Installation Information\{5442DAB8-7177-49E1-8B22-09A049EA5996}\setup.exe" -runfromtemp -l0x0405 -removeonly
Renesas Electronics USB 3.0 Host Controller Driver-->MsiExec.exe /X{5442DAB8-7177-49E1-8B22-09A049EA5996}
Revo Uninstaller Pro 3.1.4-->"C:\Program Files\VS Revo Group\Revo Uninstaller Pro\unins000.exe"
RICOH Media Driver v2.13.17.01-->"C:\Program Files (x86)\InstallShield Installation Information\{FE041B02-234C-4AAA-9511-80DF6482A458}\Setup.exe" -runfromtemp -l0x0005 anything -removeonly
RidNacs 2.0.3-->"C:\Program Files (x86)\RidNacs\unins000.exe"
RocketDock 1.3.5-->"C:\Program Files (x86)\RocketDock\unins000.exe"
Security Update for Microsoft .NET Framework 4.5.2 (KB2972107)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {59923C0F-51CB-3F2C-8465-E69019472533}
Security Update for Microsoft .NET Framework 4.5.2 (KB2972216)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {47FA5DCB-D13C-331E-BC32-65E53BDD949C}
Security Update for Microsoft .NET Framework 4.5.2 (KB2978128)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {8B856ECB-ED10-3F9E-880D-03A278EF3FB6}
Security Update for Microsoft .NET Framework 4.5.2 (KB2979578v2)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {48006B2D-366F-3386-92C7-785D3A523042}
Security Update for Microsoft .NET Framework 4.5.2 (KB3023224)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {175C1563-5389-3174-A18B-A90AD45208D2}
Security Update for Microsoft .NET Framework 4.5.2 (KB3035490)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {6F197100-4BF3-3105-AA93-C5731C4FA85F}
Security Update for Microsoft .NET Framework 4.5.2 (KB3037581)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {99A495FF-BC65-375D-B3C9-934E1DE4F558}
Security Update for Microsoft .NET Framework 4.5.2 (KB3074230)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {73E43C35-D717-337B-9F50-66F5623A8E1C}
Security Update for Microsoft .NET Framework 4.5.2 (KB3074550)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {F403E543-04A6-3024-BE38-189172855D13}
Security Update for Microsoft .NET Framework 4.5.2 (KB3097996)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {CE42A318-3E62-3F40-B52A-9CE658805801}
Security Update for Microsoft .NET Framework 4.5.2 (KB3098781)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {CF7790C7-662A-3829-B49E-61578D4D9838}
Skype™ 7.13-->MsiExec.exe /X{6A0549A9-1B96-498C-ACBC-3943001FEB19}
SlimDrivers-->MsiExec.exe /X{746AB259-6474-4111-8966-1C62F9A6E063}
Software Intel(R) PROSet/Wireless WiFi-->MsiExec /I{1927E640-A2C6-4BA7-8F43-FFD2AE3DFCF3}
Synergy (64-bit)-->MsiExec.exe /X{1DFFF26F-08C5-44CB-BD84-6AD6DD32448E}
Synergy-->C:\Program Files\Synergy\uninstall.exe
TFPU-->MsiExec.exe /I{A7760E07-4C23-4766-A99E-F715F298E99C}
TOSHIBA Fingerprint Utility-->C:\Program Files\TOSHIBA\TFPU\Uninstall.exe /u
TOSHIBA HDD Protection-->MsiExec.exe /X{94A90C69-71C1-470A-88F5-AA47ECC96B40}
Toshiba Manuals-->"C:\Program Files (x86)\InstallShield Installation Information\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}\setup.exe" -runfromtemp -l0x0005 -removeonly
TOSHIBA Media Controller Plug-in-->MsiExec.exe /X{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}
TOSHIBA Mobile Broadband Device-->"C:\Program Files (x86)\InstallShield Installation Information\{B7191DD7-E7B4-4658-9025-487916EC21C8}\setup.exe" -runfromtemp -l0x0005 -removeonly
TOSHIBA Recovery Media Creator Reminder-->C:\Program Files (x86)\InstallShield Installation Information\{773970F1-5EBA-4474-ADEE-1EA3B0A59492}\setup.exe -runfromtemp -l0x0405
TOSHIBA Recovery Media Creator-->C:\Program Files (x86)\InstallShield Installation Information\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}\Setup.exe -runfromtemp -removeonly
TOSHIBA Security Assist-->C:\Program Files (x86)\InstallShield Installation Information\{1E63ACB5-D45E-4856-8FC9-78F4B0D7BB80}\setup.exe -runfromtemp -removeonly
TOSHIBA Value Added Package-->C:\Program Files\TOSHIBA\TVAP\Setup.exe
TOSHIBA Web Camera Application-->"C:\Program Files (x86)\InstallShield Installation Information\{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}\setup.exe" -runfromtemp -l0x0405 -removeonly
TOSHIBA Web Camera Application-->MsiExec.exe /I{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}
True Image 2013-->MsiExec.exe /X{5CD38D95-4406-42E7-B52A-A90F11E126EC}
VLC media player-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
vReveal 3-->C:\Program Files (x86)\vReveal 3\Uninstall.exe
Vypínač na dobrou noc verze 2.0-->"C:\Program Files (x86)\Vypínač na dobrou noc\unins000.exe"
======System event log======
Computer Name: WIN-64RBJ11ICBA
Event Code: 7036
Message: Stav služby Windows Search byl změněn na: Zastaveno
Record Number: 4566
Source Name: Service Control Manager
Time Written: 20151020102726.827029-000
Event Type: Informace
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 7040
Message: Režim spuštění služby Windows Search byl změněn z automatické spouštění na Zakázáno.
Record Number: 4565
Source Name: Service Control Manager
Time Written: 20151020102726.125028-000
Event Type: Informace
User: TOSHIBA\Administrator
Computer Name: WIN-64RBJ11ICBA
Event Code: 104
Message: Byl vymazán soubor protokolu Setup.
Record Number: 4564
Source Name: Microsoft-Windows-Eventlog
Time Written: 20151020102719.370216-000
Event Type: Informace
User: TOSHIBA\Administrator
Computer Name: WIN-64RBJ11ICBA
Event Code: 104
Message: Byl vymazán soubor protokolu Application.
Record Number: 4563
Source Name: Microsoft-Windows-Eventlog
Time Written: 20151020102719.354616-000
Event Type: Informace
User: TOSHIBA\Administrator
Computer Name: WIN-64RBJ11ICBA
Event Code: 104
Message: Byl vymazán soubor protokolu System.
Record Number: 4562
Source Name: Microsoft-Windows-Eventlog
Time Written: 20151020102719.354616-000
Event Type: Informace
User: TOSHIBA\Administrator
=====Application event log=====
Computer Name: TOSHIBA
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 2399
Source Name: Microsoft-Windows-EventSystem
Time Written: 20151021133228.000000-000
Event Type: Informace
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 6001
Message: Odběrateli oznámení přihlašování do systému Windows <GPClient> se nezdařilo provést událost oznámení.
Record Number: 2398
Source Name: Microsoft-Windows-Winlogon
Time Written: 20151020102730.000000-000
Event Type: Upozornění
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 1003
Message: Služba Windows Search byla spuštěna.
Record Number: 2397
Source Name: Microsoft-Windows-Search
Time Written: 20151020102727.000000-000
Event Type: Informace
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 1013
Message: Služba Windows Search byla řádně zastavena.
Record Number: 2396
Source Name: Microsoft-Windows-Search
Time Written: 20151020102726.000000-000
Event Type: Informace
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 103
Message: Windows (2664) Windows: Databázový stroj zastavil instanci (0).
Record Number: 2395
Source Name: ESENT
Time Written: 20151020102726.000000-000
Event Type: Informace
User:
=====Security event log=====
Computer Name: WIN-64RBJ11ICBA
Event Code: 4624
Message: Účet byl úspěšně přihlášen.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: WIN-64RBJ11ICBA$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7
Typ přihlášení: 5
Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}
Informace o procesu:
ID procesu: 0x29c
Název procesu: C:\Windows\System32\services.exe
Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -
Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0
Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.
Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.
Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).
Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.
Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.
Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 1961
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20151020102728.667832-000
Event Type: Úspěšný audit
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 4672
Message: Novému přihlášení byla přiřazena zvláštní oprávnění.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
Oprávnění: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 1960
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20151020102727.217030-000
Event Type: Úspěšný audit
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 4624
Message: Účet byl úspěšně přihlášen.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: WIN-64RBJ11ICBA$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7
Typ přihlášení: 5
Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}
Informace o procesu:
ID procesu: 0x29c
Název procesu: C:\Windows\System32\services.exe
Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -
Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0
Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.
Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.
Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).
Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.
Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.
Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 1959
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20151020102727.217030-000
Event Type: Úspěšný audit
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 4738
Message: Byl změněn uživatelský účet.
Předmět:
ID zabezpečení: S-1-5-21-259826245-711611826-3000431904-500
Název účtu: Administrator
Doména účtu: WIN-64RBJ11ICBA
ID přihlášení: 0x32a15
Cílový účet:
ID zabezpečení: S-1-5-21-259826245-711611826-3000431904-500
Název účtu: Administrator
Doména účtu: WIN-64RBJ11ICBA
Změněné atributy:
Název účtu SAM: -
Zobrazovaný název: -
Zaregistrovaný název uživatele: -
Domovský adresář: -
Domovská jednotka: -
Cesta skriptu: -
Cesta profilu: -
Pracovní stanice uživatele: -
Poslední nastavení hesla: -
Vypršení platnosti účtu: -
ID primární skupiny: -
Povolené delegování: -
Původní hodnota UAC: 0x211
Nová hodnota UAC: 0x211
Řízení účtu uživatele: -
Parametry uživatele: -
Historie identifikátoru zabezpečení: -
Přihlašovací hodiny: -
Další informace:
Oprávnění: -
Record Number: 1958
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20151020102725.157826-000
Event Type: Úspěšný audit
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 1102
Message: Protokol auditu byl vymazán.
Předmět:
ID zabezpečení: S-1-5-21-259826245-711611826-3000431904-500
Název účtu: Administrator
Název domény: WIN-64RBJ11ICBA
ID přihlášení: 0x32a15
Record Number: 1957
Source Name: Microsoft-Windows-Eventlog
Time Written: 20151020102719.354616-000
Event Type: Úspěšný audit
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\;C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files (x86)\EaseUS\Todo Backup\bin
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=4
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
"PROCESSOR_REVISION"=2a07
"windows_tracing_logfile"=C:\BVTBin\Tests\installpackage\csilogfile.log
"windows_tracing_flags"=3
-----------------EOF-----------------
Děkuji za kontrolu
Run by uzivatel at 2015-12-06 15:28:20
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 32 GB (29%) free of 113 GB
Total RAM: 3975 MB (55% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:28:26, on 6.12.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18098)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe
C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\TrayPopupE\TrayTipAgentE.exe
C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\uzivatel.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ?type=hppp&ts=1432140622&from=xtab&uid=EE37F7F59F8C4eb7ACB70257A39DCFE8
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: BHOHOOK - {030AC7B6-E7EC-40F1-8FB2-C0FD344DE0B9} - C:\Program Files\TOSHIBA\TFPU\x86\TFPUPWDBankBHO.dll
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O2 - BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
O4 - HKLM\..\Run: [TrueImageMonitor.exe] "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"
O4 - HKLM\..\Run: [AcronisTibMounterMonitor] C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
O4 - HKLM\..\Run: [EaseUS EPM tray] C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe
O4 - HKLM\..\Run: [EaseUS EPM Tray Agent] "C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\TrayPopupE\TrayTipAgentE.exe"
O4 - HKLM\..\Run: [EaseUS TB Tray Agent] "C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User 'Default user')
O9 - Extra button: Přeložit - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files (x86)\Verdict Free\etnxp.dll
O9 - Extra button: (no name) - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files (x86)\Verdict Free\etnxp.dll
O9 - Extra 'Tools' menuitem: Internetový překladač... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files (x86)\Verdict Free\etnxp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{6EC5A1F5-5BE6-4C63-9AA5-845B2A254DEA}: NameServer = 217.77.165.211 217.77.165.81
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Acronis Nonstop Backup Service (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AuthenTec Fingerprint Service (ATService) - AuthenTec, Inc. - C:\Program Files\Fingerprint Sensor\ATService.exe
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe
O23 - Service: EaseUS Agent Service (EaseUS Agent) - CHENGDU YIWO Tech Development Co., Ltd - C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Acronis Sync Agent Service (syncagentsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
O23 - Service: Synergy - Unknown owner - C:\Program Files\Synergy\synergyd.exe
O23 - Service: Ochrana HDD TOSHIBA (Thpsrv) - Unknown owner - C:\windows\system32\ThpSrv.exe (file missing)
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\windows\system32\TODDSrv.exe (file missing)
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Mobile Broadband Service (WMCoreService) - Ericsson AB - C:\Program Files (x86)\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10048 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\Fingerprint Sensor\ATService.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
winlogon.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\WLANExt.exe 28340912
\??\C:\Windows\system32\conhost.exe "1577658158-719356268-2260767481855216879-1523665045-15656945651393425328143764780
taskeng.exe {DCF74DF1-9408-4E07-9007-049E7ED234CE}
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Synergy\synergyd.exe"
C:\windows\system32\ThpSrv.exe
"C:/Program Files/Synergy/synergyc.exe" -f --no-tray --debug INFO --name TOSHIBA --ipc --stop-on-desk-switch 169.254.146.41:24800
C:\windows\system32\TODDSrv.exe
\??\C:\Windows\system32\conhost.exe "937056863-639042268-8486738512112501152-172772010894437328-1435327252762321872
"C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\TOSHIBA\Mobile Broadband Device\WMCore\mini_WMCore.exe" servicemode
"C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Apoint2K\Apoint.exe"
"C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe"
"C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
"C:\Program Files\TOSHIBA\TFPU\TFPUPWDBank.exe" /start
"C:\Program Files\TOSHIBA\TFPU\TFPUTaskMonitor.exe" /start
"C:\Windows\System32\ThpSrv.exe" /logon
"C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe"
"C:\Program Files (x86)\RocketDock\RocketDock.exe"
"C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"
"C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe"
"C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Browny02\BrYNSvc.exe"
C:\Windows\System32\vds.exe
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\TrayPopupE\TrayTipAgentE.exe"
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files\Apoint2K\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
"C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe"
"C:\windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-7767c358-c0c7-4913-92bb-dfebbd84301c -SystemEventPortName:HostProcess-3e68df27-22c0-43ea-9c70-e2442d31abc8 -IoCancelEventPortName:HostProcess-c107e603-ef90-4aa4-a25c-df625c8eb5f2 -NonStateChangingEventPortName:HostProcess-fa6aef77-a1ea-421b-ab4e-cf4ef4218978 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:f5ea217e-69fc-4665-98e7-3d595516866c -DeviceGroupId:
"Apntex.exe"
\??\C:\Windows\system32\conhost.exe "68657165211026867941379858088-20469897221554992084249932174-1309767775-2051958917
"C:\Program Files\Apoint2K\HidFind.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\sppsvc.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\system32\wbem\wmiprvse.exe
taskeng.exe {025AAA00-ECF8-4790-B813-1078F5500A51}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe" -startup
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe"
C:\Windows\explorer.exe /factory,{ceff45ee-c862-41de-aee2-a022c81eda92} -Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 528 532 540 65536 536
"C:\Users\uzivatel\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
=========Mozilla firefox=========
ProfilePath - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\lzrsno1x.default-1446294142760
prefs.js - "browser.startup.homepage" - "https://www.google.cz/?gws_rd=ssl"
"{C1CA7765-44E4-452e-9D00-A04F3D434281}"=
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll
C:\Program Files (x86)\Mozilla Firefox\plugins\
nppdf32.dll
npPDFXCviewNPPlugin.dll
C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\lzrsno1x.default-1446294142760\extensions\
zigboom.designs@gmail.com
{77d2ed30-4cd2-11e0-b8af-0800200c9a66}
{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}(49)
C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\lzrsno1x.default-1446294142760\searchplugins\
Google.xml
heurkacz.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{030AC7B6-E7EC-40F1-8FB2-C0FD344DE0B9}]
TFPUPWDBankBHO Class - C:\Program Files\TOSHIBA\TFPU\x86\TFPUPWDBankBHO.dll [2010-03-02 45488]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3C88694-EFFA-4d78-B409-54B7B2535B14}]
TOSHIBA Media Controller Plug-in - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll [2010-12-05 529784]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"IgfxTray"=C:\windows\system32\igfxtray.exe [2011-04-07 167256]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2011-04-07 391000]
"Persistence"=C:\windows\system32\igfxpers.exe [2011-04-07 418136]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-01-18 11775592]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2011-01-21 328048]
"TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2011-03-02 566696]
"HSON"=C:\Program Files\TOSHIBA\TBS\HSON.exe [2010-09-25 296824]
"TCrdMain"=C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2011-03-09 967544]
"IntelWireless"=C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2011-01-05 1933584]
"TFPUPWDBankService"=C:\Program Files\TOSHIBA\TFPU\TFPUPWDBank.exe [2010-03-02 925104]
"TFPUService"=C:\Program Files\TOSHIBA\TFPU\TFPUTaskMonitor.exe [2010-11-04 789368]
"ThpSrv"=C:\windows\system32\thpsrv /logon []
"TosVolRegulator"=C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [2009-11-11 24376]
"Toshiba Registration"=C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [2011-05-29 150992]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-04-30 1337000]
"Acronis Scheduler2 Service"=C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2013-02-15 516928]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"=C:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2015-10-19 8551848]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mylbx]
C:\Program Files\My Lockbox\mylbx.exe [2013-10-28 2289952]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TWebCamera]
C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2011-01-16 2475384]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2010-12-24 112152]
"BrStsMon00"=C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2010-06-10 2621440]
"TrueImageMonitor.exe"=C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2013-04-10 6382328]
"AcronisTibMounterMonitor"=C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [2013-01-10 1103424]
"EaseUS EPM tray"=C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe [2015-09-16 2089056]
"EaseUS EPM Tray Agent"=C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\TrayPopupE\TrayTipAgentE.exe [2014-11-18 255072]
"EaseUS TB Tray Agent"=C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe [2014-12-15 253992]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-12-21 959904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-04-04 385024]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-12-06 15:28:20 ----D---- C:\rsit
2015-12-06 15:28:20 ----D---- C:\Program Files\trend micro
2015-12-06 14:52:31 ----A---- C:\Windows\SYSWOW64\DBCLIENT.DLL
2015-12-03 07:54:34 ----D---- C:\ProgramData\cutevideocutterfree
2015-12-03 07:51:59 ----D---- C:\ProgramData\videocutter
2015-12-03 07:51:58 ----D---- C:\Program Files (x86)\Cute Video Cutter
2015-11-30 15:43:14 ----D---- C:\Users\uzivatel\AppData\Roaming\OpenOffice
2015-11-30 15:41:06 ----D---- C:\Program Files (x86)\OpenOffice 4
2015-11-29 22:01:20 ----D---- C:\Windows\pss
2015-11-29 21:24:43 ----D---- C:\Program Files (x86)\LibreOffice 5
2015-11-27 08:10:46 ----D---- C:\ProgramData\VS Revo Group
2015-11-27 08:10:46 ----A---- C:\Windows\system32\drivers\revoflt.sys
2015-11-27 08:10:44 ----D---- C:\Program Files\VS Revo Group
2015-11-25 19:53:24 ----D---- C:\Program Files (x86)\Verdict Free
2015-11-25 18:09:50 ----D---- C:\Program Files (x86)\Acapela Group
2015-11-25 17:14:34 ----D---- C:\Users\uzivatel\AppData\Roaming\Hunspell
2015-11-25 17:07:14 ----D---- C:\Users\uzivatel\AppData\Roaming\Proofing Tools
2015-11-25 14:42:46 ----D---- C:\Program Files (x86)\SlimDrivers
2015-11-25 14:41:39 ----D---- C:\Users\uzivatel\AppData\Roaming\RidNacs
2015-11-25 14:41:39 ----D---- C:\Program Files (x86)\RidNacs
2015-11-25 14:09:11 ----D---- C:\Program Files (x86)\Vypínač na dobrou noc
2015-11-25 14:00:33 ----D---- C:\ProgramData\APN
2015-11-25 13:55:57 ----D---- C:\Program Files (x86)\FormatFactory
2015-11-25 13:53:47 ----D---- C:\Program Files (x86)\Fast Duplicate File Finder
2015-11-25 09:08:13 ----A---- C:\Windows\system32\drivers\FSPFltd2.sys
2015-11-25 09:08:11 ----D---- C:\Program Files\My Lockbox
2015-11-25 08:59:14 ----AD---- C:\ProgramData\TEMP
2015-11-25 08:58:12 ----D---- C:\Users\uzivatel\AppData\Roaming\MotionDSP
2015-11-25 08:58:12 ----D---- C:\Program Files (x86)\vReveal 3
2015-11-22 17:28:10 ----D---- C:\antitwined
2015-11-22 14:41:11 ----D---- C:\Program Files (x86)\AntiTwin
2015-11-21 15:17:08 ----A---- C:\Windows\SYSWOW64\FileOps.exe
2015-11-21 14:18:26 ----D---- C:\Program Files (x86)\Adobe
2015-11-21 14:17:09 ----D---- C:\ProgramData\Adobe
2015-11-21 14:01:12 ----D---- C:\Windows\SYSWOW64\Adobe
2015-11-18 22:45:45 ----A---- C:\Windows\system32\drivers\EuFdDisk.sys
2015-11-18 22:45:45 ----A---- C:\Windows\system32\drivers\eudskacs.sys
2015-11-18 22:45:45 ----A---- C:\Windows\system32\drivers\EUBKMON.sys
2015-11-18 22:45:45 ----A---- C:\Windows\system32\drivers\eubakup.sys
2015-11-18 22:44:07 ----A---- C:\Windows\system32\fbnative.exe
2015-11-18 22:38:45 ----A---- C:\Windows\SYSWOW64\setupempdrv03.exe
2015-11-18 22:38:45 ----A---- C:\Windows\SYSWOW64\EuGdiDrv.sys
2015-11-18 22:38:45 ----A---- C:\Windows\SYSWOW64\EuEpmGdi.dll
2015-11-18 22:38:45 ----A---- C:\Windows\SYSWOW64\epmntdrv.sys
2015-11-18 22:38:45 ----A---- C:\Windows\SYSWOW64\BootMan.exe
2015-11-18 22:38:45 ----A---- C:\Windows\system32\setupempdrvx64.exe
2015-11-18 22:38:45 ----A---- C:\Windows\system32\EuGdiDrv.sys
2015-11-18 22:38:45 ----A---- C:\Windows\system32\EuEpmGdi.dll
2015-11-18 22:38:45 ----A---- C:\Windows\system32\epmntdrv.sys
2015-11-18 22:38:45 ----A---- C:\Windows\system32\BootMan.exe
2015-11-18 22:22:38 ----D---- C:\Program Files (x86)\EaseUS
2015-11-17 17:33:49 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-11-17 17:33:49 ----A---- C:\Windows\system32\rdpcorets.dll
2015-11-17 17:19:18 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2015-11-17 17:19:16 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2015-11-17 17:19:16 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2015-11-17 17:19:16 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2015-11-17 17:19:16 ----A---- C:\Windows\system32\wksprtPS.dll
2015-11-17 17:19:16 ----A---- C:\Windows\system32\TSWbPrxy.exe
2015-11-17 17:19:16 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-11-17 17:19:16 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-11-17 17:19:16 ----A---- C:\Windows\system32\tsgqec.dll
2015-11-17 17:19:16 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2015-11-17 17:19:16 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2015-11-17 17:19:15 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2015-11-17 17:19:15 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-11-17 17:19:15 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2015-11-17 17:19:15 ----A---- C:\Windows\system32\wksprt.exe
2015-11-17 17:19:15 ----A---- C:\Windows\system32\rdvidcrl.dll
2015-11-17 17:19:15 ----A---- C:\Windows\system32\mstscax.dll
2015-11-17 17:19:15 ----A---- C:\Windows\system32\mstsc.exe
2015-11-17 17:17:30 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys
2015-11-17 17:17:30 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2015-11-17 17:17:29 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2015-11-17 17:17:28 ----A---- C:\Windows\system32\rdpudd.dll
2015-11-17 17:17:28 ----A---- C:\Windows\system32\rdpendp_winip.dll
2015-11-17 17:12:50 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-11-17 17:12:50 ----A---- C:\Windows\system32\schannel.dll
2015-11-17 17:12:50 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-11-17 17:12:50 ----A---- C:\Windows\system32\kerberos.dll
2015-11-17 17:12:49 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-11-17 17:12:49 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-11-17 17:12:49 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-11-17 17:12:49 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-11-17 17:12:49 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-11-17 17:12:49 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2015-11-17 17:12:49 ----A---- C:\Windows\system32\ntdll.dll
2015-11-17 17:12:49 ----A---- C:\Windows\system32\ncrypt.dll
2015-11-17 17:12:49 ----A---- C:\Windows\system32\lsasrv.dll
2015-11-17 17:12:49 ----A---- C:\Windows\system32\kernel32.dll
2015-11-17 17:12:49 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-11-17 17:12:49 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-11-17 17:12:49 ----A---- C:\Windows\system32\drivers\cng.sys
2015-11-17 17:12:49 ----A---- C:\Windows\system32\bcryptprimitives.dll
2015-11-17 17:12:48 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-11-17 17:12:48 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-11-17 17:12:48 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-11-17 17:12:48 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-11-17 17:12:48 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-11-17 17:12:48 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-11-17 17:12:48 ----A---- C:\Windows\system32\wow64.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\winsrv.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\wdigest.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\TSpkg.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\sspicli.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\srcore.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\srclient.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\smss.exe
2015-11-17 17:12:48 ----A---- C:\Windows\system32\rstrui.exe
2015-11-17 17:12:48 ----A---- C:\Windows\system32\rpcrt4.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\msv1_0.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\lsass.exe
2015-11-17 17:12:48 ----A---- C:\Windows\system32\KernelBase.dll
2015-11-17 17:12:48 ----A---- C:\Windows\system32\conhost.exe
2015-11-17 17:12:48 ----A---- C:\Windows\system32\auditpol.exe
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-17 17:12:47 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-11-17 17:12:47 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-11-17 17:12:47 ----A---- C:\Windows\system32\wow64win.dll
2015-11-17 17:12:47 ----A---- C:\Windows\system32\wow64cpu.dll
2015-11-17 17:12:47 ----A---- C:\Windows\system32\sspisrv.dll
2015-11-17 17:12:47 ----A---- C:\Windows\system32\secur32.dll
2015-11-17 17:12:47 ----A---- C:\Windows\system32\ntvdm64.dll
2015-11-17 17:12:47 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-11-17 17:12:47 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-11-17 17:12:47 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-11-17 17:12:47 ----A---- C:\Windows\system32\csrsrv.dll
2015-11-17 17:12:47 ----A---- C:\Windows\system32\cryptbase.dll
2015-11-17 17:12:47 ----A---- C:\Windows\system32\credssp.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-11-17 17:12:46 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-11-17 17:12:46 ----A---- C:\Windows\SYSWOW64\user.exe
2015-11-17 17:12:46 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-11-17 17:12:46 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-11-17 17:12:46 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-11-17 17:12:46 ----A---- C:\Windows\system32\apisetschema.dll
2015-11-17 17:12:46 ----A---- C:\Windows\system32\adtschema.dll
2015-11-17 17:12:45 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-11-17 17:12:45 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-11-17 17:12:45 ----A---- C:\Windows\system32\msobjs.dll
2015-11-17 17:12:45 ----A---- C:\Windows\system32\msaudite.dll
2015-11-17 17:12:40 ----A---- C:\Windows\system32\win32k.sys
2015-11-17 17:12:29 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-11-17 17:12:29 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-11-17 17:12:29 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\occache.dll
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-11-17 17:12:28 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-11-17 17:12:28 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-11-17 17:12:28 ----A---- C:\Windows\system32\iernonce.dll
2015-11-17 17:12:28 ----A---- C:\Windows\system32\ie4uinit.exe
2015-11-17 17:12:27 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-11-17 17:12:27 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-11-17 17:12:27 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-11-17 17:12:26 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-11-17 17:12:26 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-11-17 17:12:26 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-11-17 17:12:26 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-11-17 17:12:26 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-11-17 17:12:26 ----A---- C:\Windows\system32\urlmon.dll
2015-11-17 17:12:26 ----A---- C:\Windows\system32\occache.dll
2015-11-17 17:12:26 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-11-17 17:12:26 ----A---- C:\Windows\system32\iedkcs32.dll
2015-11-17 17:12:25 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-11-17 17:12:25 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-11-17 17:12:25 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-11-17 17:12:25 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-11-17 17:12:25 ----A---- C:\Windows\system32\msfeeds.dll
2015-11-17 17:12:25 ----A---- C:\Windows\system32\iesetup.dll
2015-11-17 17:12:25 ----A---- C:\Windows\system32\ieapfltr.dll
2015-11-17 17:12:25 ----A---- C:\Windows\system32\dxtrans.dll
2015-11-17 17:12:24 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2015-11-17 17:12:24 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-11-17 17:12:24 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-11-17 17:12:24 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-11-17 17:12:24 ----A---- C:\Windows\system32\vbscript.dll
2015-11-17 17:12:24 ----A---- C:\Windows\system32\iertutil.dll
2015-11-17 17:12:23 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-11-17 17:12:23 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-11-17 17:12:23 ----A---- C:\Windows\system32\jsproxy.dll
2015-11-17 17:12:23 ----A---- C:\Windows\system32\ieui.dll
2015-11-17 17:12:23 ----A---- C:\Windows\system32\dxtmsft.dll
2015-11-17 17:12:22 ----A---- C:\Windows\system32\webcheck.dll
2015-11-17 17:12:22 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-11-17 17:12:22 ----A---- C:\Windows\system32\mshtmled.dll
2015-11-17 17:12:22 ----A---- C:\Windows\system32\jscript.dll
2015-11-17 17:12:22 ----A---- C:\Windows\system32\ieUnatt.exe
2015-11-17 17:12:22 ----A---- C:\Windows\system32\ieframe.dll
2015-11-17 17:12:21 ----A---- C:\Windows\system32\wininet.dll
2015-11-17 17:12:21 ----A---- C:\Windows\system32\jscript9diag.dll
2015-11-17 17:12:21 ----A---- C:\Windows\system32\jscript9.dll
2015-11-17 17:12:20 ----A---- C:\Windows\system32\msrating.dll
2015-11-17 17:12:20 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-11-17 17:12:20 ----A---- C:\Windows\system32\mshtml.dll
2015-11-17 17:12:16 ----A---- C:\Windows\system32\icaapi.dll
2015-11-17 17:12:16 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2015-11-17 17:12:09 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-11-17 17:12:09 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-11-17 17:12:09 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-11-17 17:12:09 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-11-17 17:12:09 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wuwebv.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wups2.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wups.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wudriver.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wucltux.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wuaueng.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wuauclt.exe
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wuapp.exe
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wuapi.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-11-17 17:12:09 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-11-17 17:12:01 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-11-17 17:12:01 ----A---- C:\Windows\system32\drivers\afd.sys
2015-11-17 17:11:16 ----A---- C:\Windows\SYSWOW64\shimeng.dll
2015-11-17 17:11:16 ----A---- C:\Windows\SYSWOW64\sdbinst.exe
2015-11-17 17:11:16 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2015-11-17 17:11:16 ----A---- C:\Windows\system32\shimeng.dll
2015-11-17 17:11:16 ----A---- C:\Windows\system32\sdbinst.exe
2015-11-17 17:11:16 ----A---- C:\Windows\system32\apphelp.dll
2015-11-17 17:11:16 ----A---- C:\Windows\system32\aelupsvc.dll
2015-11-17 17:09:54 ----A---- C:\Windows\system32\drivers\ndis.sys
2015-11-17 17:09:26 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-11-17 17:09:26 ----A---- C:\Windows\system32\jnwmon.dll
2015-11-17 17:09:26 ----A---- C:\Windows\system32\InkEd.dll
2015-11-16 19:13:23 ----D---- C:\Users\uzivatel\AppData\Roaming\.dsgui
2015-11-16 16:20:20 ----D---- C:\Program Files (x86)\CZ.NIC
2015-11-16 15:02:43 ----D---- C:\Windows\PCHEALTH
2015-11-16 15:01:03 ----D---- C:\Program Files\Microsoft SQL Server
2015-11-12 13:04:40 ----D---- C:\Program Files (x86)\NeoSmart Technologies
2015-11-12 01:47:44 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-11-12 01:47:39 ----D---- C:\Windows\system32\Macromed
2015-11-11 22:41:42 ----A---- C:\Windows\system32\drivers\afcdp.sys
2015-11-11 22:41:34 ----D---- C:\Users\uzivatel\AppData\Roaming\6D08B452-5F76-4253-ACA8-64F9491980CE
2015-11-11 19:27:21 ----D---- C:\Users\uzivatel\AppData\Roaming\Acronis
2015-11-11 19:26:18 ----A---- C:\Windows\system32\drivers\tdrpman.sys
2015-11-11 19:26:16 ----A---- C:\Windows\system32\drivers\tib_mounter.sys
2015-11-11 19:26:15 ----A---- C:\Windows\system32\drivers\tib.sys
2015-11-11 19:26:14 ----A---- C:\Windows\system32\drivers\vididr.sys
2015-11-11 19:26:13 ----A---- C:\Windows\system32\drivers\vidsflt.sys
2015-11-11 19:26:11 ----A---- C:\Windows\system32\drivers\snapman.sys
2015-11-11 19:26:10 ----D---- C:\ProgramData\Acronis
2015-11-11 19:26:10 ----A---- C:\Windows\system32\drivers\fltsrv.sys
2015-11-11 19:25:43 ----D---- C:\Program Files (x86)\Acronis
2015-11-10 13:58:28 ----D---- C:\Program Files\Tracker Software
2015-11-10 13:44:31 ----D---- C:\Users\uzivatel\AppData\Roaming\PrimoPDF
2015-11-10 13:36:16 ----D---- C:\Users\uzivatel\AppData\Roaming\Philipp Winterberg
2015-11-10 13:36:05 ----D---- C:\Program Files (x86)\Free RAR Extract Frog
2015-11-10 13:34:15 ----A---- C:\Windows\system32\Primomonnt.dll
2015-11-10 13:34:13 ----D---- C:\Program Files (x86)\Nitro PDF
2015-11-09 11:53:57 ----HD---- C:\Windows\system32\CanonMF Uninstaller Information
2015-11-09 11:53:51 ----A---- C:\Windows\system32\CNCMFP30.INI
2015-11-09 11:53:51 ----A---- C:\Windows\system32\CNCLSU30.DLL
2015-11-09 11:53:51 ----A---- C:\Windows\system32\CNCLST30.DLL
2015-11-09 11:53:51 ----A---- C:\Windows\system32\CNCLSI30.DLL
2015-11-09 11:53:51 ----A---- C:\Windows\system32\CNCLSD30.DLL
2015-11-09 11:53:51 ----A---- C:\Windows\system32\CNCLSC30.DLL
2015-11-09 11:53:50 ----A---- C:\Windows\system32\CNCL4600.DLL
2015-11-09 11:53:50 ----A---- C:\Windows\system32\cncilsc.dll
2015-11-09 11:53:50 ----A---- C:\Windows\system32\CNCI4600.DLL
2015-11-09 11:53:50 ----A---- C:\Windows\system32\CNCC4600.DLL
2015-11-09 11:53:46 ----A---- C:\Windows\system32\CNAS0MMK.DLL
2015-11-09 11:53:41 ----D---- C:\Program Files\Canon
2015-11-08 13:35:04 ----D---- C:\Program Files (x86)\Mozilla Firefox
======List of files/folders modified in the last 1 month======
2015-12-06 15:28:20 ----RD---- C:\Program Files
2015-12-06 15:27:28 ----D---- C:\Windows\inf
2015-12-06 15:27:28 ----AD---- C:\Windows\System32
2015-12-06 15:27:28 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-12-06 15:25:57 ----D---- C:\Windows\Temp
2015-12-06 15:25:41 ----A---- C:\Windows\SYSWOW64\log.txt
2015-12-06 15:24:45 ----D---- C:\Windows\system32\config
2015-12-06 15:19:20 ----AD---- C:\Windows
2015-12-06 15:10:19 ----D---- C:\Windows\Prefetch
2015-12-06 14:52:31 ----D---- C:\Windows\SysWOW64
2015-12-06 14:52:31 ----D---- C:\Program Files (x86)\Common Files
2015-12-06 13:53:26 ----HD---- C:\ProgramData
2015-12-06 13:21:00 ----D---- C:\Windows\system32\Tasks
2015-12-04 00:48:46 ----SHD---- C:\System Volume Information
2015-12-03 08:03:33 ----D---- C:\Users\uzivatel\AppData\Roaming\vlc
2015-12-03 07:51:58 ----RD---- C:\Program Files (x86)
2015-12-02 14:18:00 ----SHD---- C:\Windows\Installer
2015-12-02 14:13:15 ----D---- C:\Windows\Tasks
2015-11-30 15:41:17 ----RSD---- C:\Windows\assembly
2015-11-30 15:41:09 ----RSD---- C:\Windows\Fonts
2015-11-29 22:19:59 ----D---- C:\Windows\system32\catroot2
2015-11-27 08:10:47 ----D---- C:\Windows\system32\drivers
2015-11-25 18:46:48 ----HD---- C:\Infovox2.lic
2015-11-25 18:09:53 ----D---- C:\Windows\Speech
2015-11-25 18:09:50 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-11-25 15:25:58 ----D---- C:\ProgramData\irlsoft
2015-11-25 14:59:05 ----SHD---- C:\Boot
2015-11-25 08:58:39 ----D---- C:\Windows\winsxs
2015-11-23 14:33:04 ----D---- C:\My Video
2015-11-23 14:32:43 ----D---- C:\My Saved Files
2015-11-23 14:32:15 ----D---- C:\My Downloads
2015-11-21 15:06:31 ----SD---- C:\Users\uzivatel\AppData\Roaming\Microsoft
2015-11-21 14:27:07 ----D---- C:\Users\uzivatel\AppData\Roaming\Adobe
2015-11-19 11:57:19 ----D---- C:\Windows\rescache
2015-11-19 00:00:52 ----D---- C:\Windows\debug
2015-11-17 17:58:22 ----D---- C:\Windows\Microsoft.NET
2015-11-17 17:39:40 ----D---- C:\Windows\system32\wdi
2015-11-17 17:26:25 ----D---- C:\Windows\system32\catroot
2015-11-17 17:26:18 ----D---- C:\Windows\SYSWOW64\wbem
2015-11-17 17:26:18 ----D---- C:\Windows\SYSWOW64\en-US
2015-11-17 17:26:18 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-11-17 17:26:18 ----D---- C:\Windows\system32\wbem
2015-11-17 17:26:18 ----D---- C:\Windows\system32\en-US
2015-11-17 17:26:18 ----D---- C:\Windows\system32\drivers\en-US
2015-11-17 17:26:18 ----D---- C:\Windows\system32\cs-CZ
2015-11-17 17:26:18 ----D---- C:\Windows\PolicyDefinitions
2015-11-17 17:26:18 ----D---- C:\Program Files\Internet Explorer
2015-11-17 17:26:18 ----D---- C:\Program Files (x86)\Internet Explorer
2015-11-17 17:26:17 ----D---- C:\Windows\system32\migration
2015-11-17 17:26:17 ----D---- C:\Windows\system32\DriverStore
2015-11-17 17:26:17 ----D---- C:\Windows\AppPatch
2015-11-17 17:24:00 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-11-17 17:23:34 ----D---- C:\Windows\system32\MRT
2015-11-17 17:21:07 ----A---- C:\Windows\system32\MRT.exe
2015-11-17 17:13:27 ----D---- C:\Program Files\Microsoft Silverlight
2015-11-17 17:13:27 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-11-17 17:13:19 ----D---- C:\Program Files\Windows Journal
2015-11-16 15:19:58 ----D---- C:\Program Files (x86)\Intel
2015-11-16 15:02:43 ----D---- C:\Program Files\Common Files\Microsoft Shared
2015-11-11 17:52:23 ----D---- C:\Windows\system32\NDF
2015-11-10 13:34:15 ----A---- C:\Windows\primopdf.ini
2015-11-09 11:55:54 ----D---- C:\Windows\twain_32
2015-11-08 15:05:08 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-08 14:49:28 ----D---- C:\Users\uzivatel\AppData\Roaming\Skype
2015-11-08 14:28:09 ----D---- C:\Program Files\Synergy
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 EUBAKUP;EUBAKUP; C:\Windows\system32\drivers\eubakup.sys [2014-12-15 60968]
R0 EUBKMON;EUBKMON; C:\Windows\system32\drivers\EUBKMON.sys [2014-12-15 48168]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2015-11-11 108832]
R0 FSProFilter2;FSPro File Filter 2; C:\Windows\System32\Drivers\FSPFltd2.sys [2011-06-03 57648]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-01-12 439320]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-03-04 280376]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2015-11-11 233760]
R0 Thpdrv;TOSHIBA HDD Protection Driver; C:\Windows\system32\DRIVERS\thpdrv.sys [2009-06-29 34880]
R0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver; C:\Windows\system32\DRIVERS\Thpevm.SYS [2009-06-29 14784]
R0 tib;Acronis TIB Manager; C:\Windows\system32\DRIVERS\tib.sys [2015-11-11 1120032]
R0 tib_mounter;Acronis TIB Mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [2015-11-11 183224]
R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ.SYS [2009-07-14 26840]
R0 vididr;Acronis Virtual Disk; C:\Windows\system32\DRIVERS\vididr.sys [2015-11-11 161568]
R0 vidsflt;Acronis Disk Storage Filter; C:\Windows\system32\DRIVERS\vidsflt.sys [2015-11-11 117024]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 EUDSKACS;EUDSKACS; \??\C:\windows\system32\drivers\eudskacs.sys [2014-12-15 18472]
R1 EUFDDISK;EUFDDISK; \??\C:\windows\system32\drivers\EuFdDisk.sys [2014-12-15 192040]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 124568]
R2 rimspci;rimspci; C:\Windows\system32\DRIVERS\rimspe64.sys [2010-10-21 72192]
R2 risdxc;risdxc; C:\Windows\system32\DRIVERS\risdxc64.sys [2011-01-24 100352]
R2 rixdpcie;rixdpcie; C:\Windows\system32\DRIVERS\rixdpe64.sys [2011-01-29 53760]
R3 afcdp;afcdp; C:\Windows\system32\DRIVERS\afcdp.sys [2015-11-11 367200]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2011-02-18 350328]
R3 ATSwpWDF;AuthenTec TruePrint USB Driver; C:\Windows\System32\Drivers\ATSwpWDF.sys [2010-06-17 770152]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2010-12-02 315568]
R3 ecnssndis; Mobile Broadband Driver; C:\Windows\System32\Drivers\wwuss64.sys [2010-02-23 26664]
R3 ecnssndisfltr; Mobile Broadband Driver Filter; C:\Windows\System32\Drivers\wwussf64.sys [2010-02-23 30248]
R3 guardian2;guardian2; C:\Windows\System32\Drivers\oz776x64.sys [2009-09-09 85280]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-04-04 12262624]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-01-18 2719336]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 Mbm3CBus;Ericsson F5521gw for TOSHIBA Mobile Broadband Device (WDM); C:\Windows\system32\DRIVERS\Mbm3CBus.sys [2010-10-31 411208]
R3 Mbm3DevMt;TOSHIBA Mobile Broadband Device Management Driver (WDM); C:\Windows\system32\DRIVERS\Mbm3DevMt.sys [2010-10-31 419912]
R3 Mbm3mdfl;TOSHIBA Mobile Broadband Modem Filter; C:\Windows\system32\DRIVERS\Mbm3mdfl.sys [2010-10-31 19528]
R3 Mbm3Mdm;TOSHIBA Mobile Broadband Modem Driver; C:\Windows\system32\DRIVERS\Mbm3Mdm.sys [2010-10-31 472648]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-12-24 56344]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2011-01-04 8507392]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2011-02-10 82432]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2011-02-10 181760]
R3 PGEffect;Pangu effect driver; C:\Windows\system32\DRIVERS\pgeffect.sys [2009-06-22 35008]
R3 t36wgps;TOSHIBA Mobile Broadband GPS Port; C:\Windows\system32\DRIVERS\t36wgps64.sys [2010-12-01 101416]
R3 tosrfec;Bluetooth ACPI; C:\Windows\system32\DRIVERS\tosrfec.sys [2010-06-18 18872]
R3 TPM;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 epmntdrv;epmntdrv; \??\C:\Windows\syswow64\epmntdrv.sys [2014-11-18 14944]
S3 EuGdiDrv;EuGdiDrv; \??\C:\Windows\syswow64\EuGdiDrv.sys [2014-11-18 10208]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 Ser2pl;Prolific Serial port driver; C:\Windows\system32\drivers\ser2pl64.sys [2010-03-12 97280]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\Windows\system32\DRIVERS\tdcmdpst.sys [2009-07-30 27784]
S3 tdrpman;Acronis Try&Decide and Restore Points filter; C:\Windows\system32\DRIVERS\tdrpman.sys [2015-11-11 1462560]
S3 Tosrfcom;Tosrfcom; C:\Windows\system32\drivers\Tosrfcom.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 wdkmd;Intel WiDi KMD; C:\Windows\system32\DRIVERS\WDKMD.sys [2010-12-25 42392]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2013-02-15 1143720]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 afcdpsrv;Acronis Nonstop Backup Service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2015-11-11 3783672]
R2 ATService;AuthenTec Fingerprint Service; C:\Program Files\Fingerprint Sensor\ATService.exe [2010-06-17 2734912]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2011-03-01 27648]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2011-03-01 27648]
R2 EaseUS Agent;EaseUS Agent Service; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [2015-08-01 36904]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-01-05 1515792]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-24 325656]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-04-30 23816]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-01-05 836880]
R2 syncagentsrv;Acronis Sync Agent Service; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [2013-03-20 7084672]
R2 Synergy;Synergy; C:\Program Files\Synergy\synergyd.exe [2013-05-03 423424]
R2 Thpsrv;Ochrana HDD TOSHIBA; C:\windows\system32\ThpSrv.exe [2010-12-24 526848]
R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\windows\system32\TODDSrv.exe [2010-10-20 138656]
R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe [2010-12-09 489384]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-24 2656280]
R3 BrYNSvc;BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [2010-01-25 245760]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-04-30 366544]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-01 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2011-03-01 27648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-01 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-10-31 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-11-08 147624]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-01-05 340240]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2011-03-01 27648]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2011-03-01 27648]
S3 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2010-04-12 196976]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2011-03-01 27648]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-10-22 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-11 139944]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-11 139944]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-11 139944]
-----------------EOF-----------------
info.txt logfile of random's system information tool 1.10 2015-12-06 15:28:28
======MBR======
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
======Uninstall list======
-->C:\Program Files\TOSHIBA\TVAP\setup.exe
Adobe Flash Player 19 NPAPI-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_245_Plugin.exe -maintain plugin
Adobe Reader XI (11.0.06)-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-AB0000000001}
Adobe SVG Viewer 3.0-->C:\Program Files (x86)\Common Files\Adobe\SVG Viewer 3.0\Uninstall\Winstall.exe -u -fC:\Program Files (x86)\Common Files\Adobe\SVG Viewer 3.0\Uninstall\Install.log
ALPS Touch Pad Driver-->C:\Program Files\Apoint2K\Uninstap.exe ADDREMOVE
Anti-Twin (Installation 22.11.2015)-->"C:\Program Files (x86)\AntiTwin\uninstall.exe" /uninst "UninstallKey=Anti-Twin 2015-11-22 14.41.15"
AuthenTec Fingerprint Software-->MsiExec.exe /X{5F1DFCC1-595D-4235-A044-E05B706D800A}
BDE (Borland Database Engine)-->C:\Users\uzivatel\AppData\Local\Temp\is-39Q7H.tmp\unins000.exe
Bluetooth Stack for Windows by Toshiba-->MsiExec.exe /X{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}
Canon MF4600 Series-->"C:\Windows\system32\CanonMF Uninstaller Information\{555ADE0A-2AE2-4139-806A-9F98405E4813}\misc\DelDrv.exe" /U:{555ADE0A-2AE2-4139-806A-9F98405E4813} /L0x0000
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Cute Video Cutter 1.4.0.1-->"C:\Program Files (x86)\Cute Video Cutter\unins000.exe"
Datovka-->"C:\Program Files (x86)\CZ.NIC\Datovka\uninst.exe"
Defraggler-->"C:\Program Files\Defraggler\uninst.exe"
EaseUS Partition Master 10.8-->"C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\unins000.exe"
EaseUS Todo Backup Free 8.9 -->"C:\Program Files (x86)\EaseUS\Todo Backup\unins000.exe"
EasyBCD 2.3-->C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\uninstall.exe
Fast Duplicate File Finder 2.8.0.1-->"C:\Program Files (x86)\Fast Duplicate File Finder\unins000.exe"
FormatFactory 3.7.0.0-->C:\Program Files (x86)\FormatFactory\uninst.exe
Free RAR Extract Frog-->C:\Program Files (x86)\Free RAR Extract Frog\uninstall.exe
Google Chrome-->"C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.73\Installer\setup.exe" --uninstall --multi-install --chrome --system-level
Google Update Helper-->MsiExec.exe /I{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
HL-2240D-->"C:\Program Files (x86)\InstallShield Installation Information\{E2A97415-BD97-4867-B906-05E39E9EE51F}\Setup.exe" -runfromtemp -l0x0005 UNINSTALL Reg=BLL-PRT -removeonly
Infovox Desktop 2.2-->C:\Program Files (x86)\InstallShield Installation Information\{52C32940-C538-40CF-8DE9-B91090F49938}\setup.exe -runfromtemp -l0x0009 -removeonly
Intel PROSet Wireless-->Intel PROSet Wireless
Intel(R) Control Center-->C:\Program Files (x86)\Intel\Intel Control Center\uninstaller\SetupICC.exe -uninstall -force -confirm
Intel(R) Management Engine Components-->C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\Uninstall\setup.exe -uninstall
Intel(R) Network Connections Drivers-->Prounstl.exe
Intel(R) Processor Graphics-->C:\Program Files (x86)\Intel\Intel(R) Processor Graphics\Uninstall\setup.exe -uninstall
Microsoft .NET Framework 4.5.2 (CSY)-->MsiExec.exe /X{C48AF3CF-C632-3C19-838E-7DAB7283D46A}
Microsoft .NET Framework 4.5.2 (čeština)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\CSY\\Setup.exe /repair /x86 /x64 /lcid 1029
Microsoft .NET Framework 4.5.2-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\\Setup.exe /repair /x86 /x64
Microsoft .NET Framework 4.5.2-->MsiExec.exe /X{26784146-6E05-3FF9-9335-786C7C0FB5BE}
Microsoft Security Client-->MsiExec.exe /X{D9FCBAAE-DB72-488B-96D0-0AA3C892C0D6}
Microsoft Security Essentials-->"C:\Program Files\Microsoft Security Client\Setup.exe" /x
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17-->MsiExec.exe /X{8220EEFE-38CD-377E-8595-13398D740ACE}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161-->MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219-->MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
Mozilla Firefox 42.0 (x86 cs)-->"C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe"
Mozilla Maintenance Service-->"C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
Mozilla Thunderbird 38.3.0 (x86 cs)-->C:\Program Files (x86)\Mozilla Thunderbird\uninstall\helper.exe
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
My Lockbox 3.0.5-->"C:\Program Files\My Lockbox\unins000.exe"
O2Micro OZ776 SCR Driver-->"C:\Program Files (x86)\InstallShield Installation Information\{C5E85AF3-D784-4CC6-83A9-678402AD87E1}\setup.exe" -runfromtemp -l0x0405 -removeonly
O2Micro OZ776 SCR Driver-->MsiExec.exe /I{C5E85AF3-D784-4CC6-83A9-678402AD87E1}
OpenOffice 4.1.1-->MsiExec.exe /I{C560D6E7-E40A-435D-8B71-62CBCF1701B2}
PDF-Viewer-->"C:\Program Files\Tracker Software\PDF Viewer\unins000.exe"
PL-2303 USB-to-Serial-->"C:\Program Files (x86)\InstallShield Installation Information\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}\setup.exe" -runfromtemp -l0x0009 -removeonly
PlayReady PC Runtime amd64-->MsiExec.exe /X{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}
PrimoPDF -- brought to you by Nitro PDF Software-->"C:\Program Files (x86)\Nitro PDF\PrimoPDF\uninstaller.exe"
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -removeonly
Renesas Electronics USB 3.0 Host Controller Driver-->"C:\Program Files (x86)\InstallShield Installation Information\{5442DAB8-7177-49E1-8B22-09A049EA5996}\setup.exe" -runfromtemp -l0x0405 -removeonly
Renesas Electronics USB 3.0 Host Controller Driver-->MsiExec.exe /X{5442DAB8-7177-49E1-8B22-09A049EA5996}
Revo Uninstaller Pro 3.1.4-->"C:\Program Files\VS Revo Group\Revo Uninstaller Pro\unins000.exe"
RICOH Media Driver v2.13.17.01-->"C:\Program Files (x86)\InstallShield Installation Information\{FE041B02-234C-4AAA-9511-80DF6482A458}\Setup.exe" -runfromtemp -l0x0005 anything -removeonly
RidNacs 2.0.3-->"C:\Program Files (x86)\RidNacs\unins000.exe"
RocketDock 1.3.5-->"C:\Program Files (x86)\RocketDock\unins000.exe"
Security Update for Microsoft .NET Framework 4.5.2 (KB2972107)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {59923C0F-51CB-3F2C-8465-E69019472533}
Security Update for Microsoft .NET Framework 4.5.2 (KB2972216)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {47FA5DCB-D13C-331E-BC32-65E53BDD949C}
Security Update for Microsoft .NET Framework 4.5.2 (KB2978128)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {8B856ECB-ED10-3F9E-880D-03A278EF3FB6}
Security Update for Microsoft .NET Framework 4.5.2 (KB2979578v2)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {48006B2D-366F-3386-92C7-785D3A523042}
Security Update for Microsoft .NET Framework 4.5.2 (KB3023224)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {175C1563-5389-3174-A18B-A90AD45208D2}
Security Update for Microsoft .NET Framework 4.5.2 (KB3035490)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {6F197100-4BF3-3105-AA93-C5731C4FA85F}
Security Update for Microsoft .NET Framework 4.5.2 (KB3037581)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {99A495FF-BC65-375D-B3C9-934E1DE4F558}
Security Update for Microsoft .NET Framework 4.5.2 (KB3074230)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {73E43C35-D717-337B-9F50-66F5623A8E1C}
Security Update for Microsoft .NET Framework 4.5.2 (KB3074550)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {F403E543-04A6-3024-BE38-189172855D13}
Security Update for Microsoft .NET Framework 4.5.2 (KB3097996)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {CE42A318-3E62-3F40-B52A-9CE658805801}
Security Update for Microsoft .NET Framework 4.5.2 (KB3098781)-->C:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.51209\setup.exe /uninstallpatch {CF7790C7-662A-3829-B49E-61578D4D9838}
Skype™ 7.13-->MsiExec.exe /X{6A0549A9-1B96-498C-ACBC-3943001FEB19}
SlimDrivers-->MsiExec.exe /X{746AB259-6474-4111-8966-1C62F9A6E063}
Software Intel(R) PROSet/Wireless WiFi-->MsiExec /I{1927E640-A2C6-4BA7-8F43-FFD2AE3DFCF3}
Synergy (64-bit)-->MsiExec.exe /X{1DFFF26F-08C5-44CB-BD84-6AD6DD32448E}
Synergy-->C:\Program Files\Synergy\uninstall.exe
TFPU-->MsiExec.exe /I{A7760E07-4C23-4766-A99E-F715F298E99C}
TOSHIBA Fingerprint Utility-->C:\Program Files\TOSHIBA\TFPU\Uninstall.exe /u
TOSHIBA HDD Protection-->MsiExec.exe /X{94A90C69-71C1-470A-88F5-AA47ECC96B40}
Toshiba Manuals-->"C:\Program Files (x86)\InstallShield Installation Information\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}\setup.exe" -runfromtemp -l0x0005 -removeonly
TOSHIBA Media Controller Plug-in-->MsiExec.exe /X{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}
TOSHIBA Mobile Broadband Device-->"C:\Program Files (x86)\InstallShield Installation Information\{B7191DD7-E7B4-4658-9025-487916EC21C8}\setup.exe" -runfromtemp -l0x0005 -removeonly
TOSHIBA Recovery Media Creator Reminder-->C:\Program Files (x86)\InstallShield Installation Information\{773970F1-5EBA-4474-ADEE-1EA3B0A59492}\setup.exe -runfromtemp -l0x0405
TOSHIBA Recovery Media Creator-->C:\Program Files (x86)\InstallShield Installation Information\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}\Setup.exe -runfromtemp -removeonly
TOSHIBA Security Assist-->C:\Program Files (x86)\InstallShield Installation Information\{1E63ACB5-D45E-4856-8FC9-78F4B0D7BB80}\setup.exe -runfromtemp -removeonly
TOSHIBA Value Added Package-->C:\Program Files\TOSHIBA\TVAP\Setup.exe
TOSHIBA Web Camera Application-->"C:\Program Files (x86)\InstallShield Installation Information\{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}\setup.exe" -runfromtemp -l0x0405 -removeonly
TOSHIBA Web Camera Application-->MsiExec.exe /I{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}
True Image 2013-->MsiExec.exe /X{5CD38D95-4406-42E7-B52A-A90F11E126EC}
VLC media player-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
vReveal 3-->C:\Program Files (x86)\vReveal 3\Uninstall.exe
Vypínač na dobrou noc verze 2.0-->"C:\Program Files (x86)\Vypínač na dobrou noc\unins000.exe"
======System event log======
Computer Name: WIN-64RBJ11ICBA
Event Code: 7036
Message: Stav služby Windows Search byl změněn na: Zastaveno
Record Number: 4566
Source Name: Service Control Manager
Time Written: 20151020102726.827029-000
Event Type: Informace
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 7040
Message: Režim spuštění služby Windows Search byl změněn z automatické spouštění na Zakázáno.
Record Number: 4565
Source Name: Service Control Manager
Time Written: 20151020102726.125028-000
Event Type: Informace
User: TOSHIBA\Administrator
Computer Name: WIN-64RBJ11ICBA
Event Code: 104
Message: Byl vymazán soubor protokolu Setup.
Record Number: 4564
Source Name: Microsoft-Windows-Eventlog
Time Written: 20151020102719.370216-000
Event Type: Informace
User: TOSHIBA\Administrator
Computer Name: WIN-64RBJ11ICBA
Event Code: 104
Message: Byl vymazán soubor protokolu Application.
Record Number: 4563
Source Name: Microsoft-Windows-Eventlog
Time Written: 20151020102719.354616-000
Event Type: Informace
User: TOSHIBA\Administrator
Computer Name: WIN-64RBJ11ICBA
Event Code: 104
Message: Byl vymazán soubor protokolu System.
Record Number: 4562
Source Name: Microsoft-Windows-Eventlog
Time Written: 20151020102719.354616-000
Event Type: Informace
User: TOSHIBA\Administrator
=====Application event log=====
Computer Name: TOSHIBA
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 2399
Source Name: Microsoft-Windows-EventSystem
Time Written: 20151021133228.000000-000
Event Type: Informace
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 6001
Message: Odběrateli oznámení přihlašování do systému Windows <GPClient> se nezdařilo provést událost oznámení.
Record Number: 2398
Source Name: Microsoft-Windows-Winlogon
Time Written: 20151020102730.000000-000
Event Type: Upozornění
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 1003
Message: Služba Windows Search byla spuštěna.
Record Number: 2397
Source Name: Microsoft-Windows-Search
Time Written: 20151020102727.000000-000
Event Type: Informace
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 1013
Message: Služba Windows Search byla řádně zastavena.
Record Number: 2396
Source Name: Microsoft-Windows-Search
Time Written: 20151020102726.000000-000
Event Type: Informace
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 103
Message: Windows (2664) Windows: Databázový stroj zastavil instanci (0).
Record Number: 2395
Source Name: ESENT
Time Written: 20151020102726.000000-000
Event Type: Informace
User:
=====Security event log=====
Computer Name: WIN-64RBJ11ICBA
Event Code: 4624
Message: Účet byl úspěšně přihlášen.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: WIN-64RBJ11ICBA$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7
Typ přihlášení: 5
Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}
Informace o procesu:
ID procesu: 0x29c
Název procesu: C:\Windows\System32\services.exe
Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -
Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0
Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.
Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.
Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).
Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.
Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.
Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 1961
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20151020102728.667832-000
Event Type: Úspěšný audit
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 4672
Message: Novému přihlášení byla přiřazena zvláštní oprávnění.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
Oprávnění: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 1960
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20151020102727.217030-000
Event Type: Úspěšný audit
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 4624
Message: Účet byl úspěšně přihlášen.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: WIN-64RBJ11ICBA$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7
Typ přihlášení: 5
Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}
Informace o procesu:
ID procesu: 0x29c
Název procesu: C:\Windows\System32\services.exe
Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -
Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0
Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.
Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.
Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).
Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.
Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.
Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 1959
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20151020102727.217030-000
Event Type: Úspěšný audit
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 4738
Message: Byl změněn uživatelský účet.
Předmět:
ID zabezpečení: S-1-5-21-259826245-711611826-3000431904-500
Název účtu: Administrator
Doména účtu: WIN-64RBJ11ICBA
ID přihlášení: 0x32a15
Cílový účet:
ID zabezpečení: S-1-5-21-259826245-711611826-3000431904-500
Název účtu: Administrator
Doména účtu: WIN-64RBJ11ICBA
Změněné atributy:
Název účtu SAM: -
Zobrazovaný název: -
Zaregistrovaný název uživatele: -
Domovský adresář: -
Domovská jednotka: -
Cesta skriptu: -
Cesta profilu: -
Pracovní stanice uživatele: -
Poslední nastavení hesla: -
Vypršení platnosti účtu: -
ID primární skupiny: -
Povolené delegování: -
Původní hodnota UAC: 0x211
Nová hodnota UAC: 0x211
Řízení účtu uživatele: -
Parametry uživatele: -
Historie identifikátoru zabezpečení: -
Přihlašovací hodiny: -
Další informace:
Oprávnění: -
Record Number: 1958
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20151020102725.157826-000
Event Type: Úspěšný audit
User:
Computer Name: WIN-64RBJ11ICBA
Event Code: 1102
Message: Protokol auditu byl vymazán.
Předmět:
ID zabezpečení: S-1-5-21-259826245-711611826-3000431904-500
Název účtu: Administrator
Název domény: WIN-64RBJ11ICBA
ID přihlášení: 0x32a15
Record Number: 1957
Source Name: Microsoft-Windows-Eventlog
Time Written: 20151020102719.354616-000
Event Type: Úspěšný audit
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\;C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files (x86)\EaseUS\Todo Backup\bin
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=4
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
"PROCESSOR_REVISION"=2a07
"windows_tracing_logfile"=C:\BVTBin\Tests\installpackage\csilogfile.log
"windows_tracing_flags"=3
-----------------EOF-----------------
Děkuji za kontrolu
Děkuji za info a pomoc Jirka