VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosím si o kontrolu. Děkuju

https://forum.viry.cz:443/viewtopic.php?t=147976

Stránka 1 z 1

Prosím si o kontrolu. Děkuju

Napsal: 17 úno 2016 10:02
od Indigo
Ahojte vespolek,
Prosím o kontrolu. V mé nepřítomnosti, při vypnutém ntb, když sem byl v práci, sem se prý přihlásil a sdílel něco o Gottovi na fb do dvou skupin. Z jedné mě vykopli a z druhé sem skupiny sem to smazal po příchodu z práce.
Že prej to šlo z bezvastránky.cz
Děkuju

Logfile of random's system information tool 1.10 (written by random/random)
Run by Irko at 2016-02-17 09:53:44
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 55 GB (45%) free of 122 GB
Total RAM: 8079 MB (81% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:53:52, on 17.2.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18205)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Evaer\videochannel.exe
C:\Users\Irko\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\trend micro\Irko.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [KORG USB-MIDI Driver] C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe /s
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [avichannel] "C:\Program Files (x86)\Evaer\videochannel.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [MiPhoneManager] "C:\Users\Irko\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do OneNotu - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105
O9 - Extra button: Odeslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10154 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
winlogon.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bonjour\mDNSResponder.exe"
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\system32\svchost.exe -k bthsvcs
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Evaer\videochannel.exe"
"C:\Users\Irko\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe"
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe"
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe" /s
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe" -CtxID "#Hewlett-Packard#HP Deskjet F300 Series#1453493352" -Startup
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe" -Embedding
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe" -Embedding
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe"
C:\Windows\servicing\TrustedInstaller.exe
"taskhost.exe"
taskeng.exe {2B531A74-E2C2-498B-9E26-850420CA0251}
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe75_ Global\UsGthrCtrlFltPipeMssGthrPipe75 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 528 532 540 65536 536
"C:\Users\Irko\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-01-12 228552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office15\URLREDIR.DLL [2014-01-23 881880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL [2016-01-12 2348336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-01-12 163016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-07 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL [2014-01-21 707800]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2016-01-12 1741104]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-07 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2015-06-04 173672]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2015-06-04 401512]
"Persistence"=C:\Windows\system32\igfxpers.exe [2015-06-04 444008]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"avichannel"=C:\Program Files (x86)\Evaer\videochannel.exe [2015-12-03 1740776]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-11-30 4179288]
"MiPhoneManager"=C:\Users\Irko\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe [2016-01-25 146224]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"hpqSRMon"=C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
""= []
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-29 594992]
"KORG USB-MIDI Driver"=C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe [2016-01-15 394144]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-09-13 59720]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2015-05-26 442880]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux6"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-02-17 09:53:45 ----D---- C:\Program Files\trend micro
2016-02-17 09:53:44 ----D---- C:\rsit
2016-02-13 15:16:18 ----D---- C:\Users\Irko\AppData\Roaming\Apple Computer
2016-02-12 20:58:48 ----D---- C:\Program Files (x86)\VirtualDJ
2016-02-11 18:23:21 ----D---- C:\ProgramData\Apple Computer
2016-02-11 18:23:21 ----D---- C:\Program Files (x86)\QuickTime
2016-02-11 18:22:50 ----D---- C:\Program Files (x86)\Apple Software Update
2016-02-11 17:52:33 ----D---- C:\Program Files\Reloop ASIO Driver 1.22
2016-02-11 15:54:21 ----D---- C:\Program Files (x86)\ASIO4ALL v2
2016-02-10 17:03:17 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2016-02-10 17:03:17 ----A---- C:\Windows\system32\jnwmon.dll
2016-02-10 17:03:17 ----A---- C:\Windows\system32\InkEd.dll
2016-02-10 17:02:49 ----A---- C:\Windows\system32\invagent.dll
2016-02-10 17:02:49 ----A---- C:\Windows\system32\generaltel.dll
2016-02-10 17:02:49 ----A---- C:\Windows\system32\devinv.dll
2016-02-10 17:02:49 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-02-10 17:02:49 ----A---- C:\Windows\system32\appraiser.dll
2016-02-10 17:02:49 ----A---- C:\Windows\system32\aeinv.dll
2016-02-10 17:02:49 ----A---- C:\Windows\system32\acmigration.dll
2016-02-10 17:02:26 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-02-10 17:02:26 ----A---- C:\Windows\system32\iertutil.dll
2016-02-10 17:02:25 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-02-10 17:02:24 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-02-10 17:02:24 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-02-10 17:02:24 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-02-10 17:02:24 ----A---- C:\Windows\system32\urlmon.dll
2016-02-10 17:02:23 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-02-10 17:02:23 ----A---- C:\Windows\system32\ieUnatt.exe
2016-02-10 17:02:23 ----A---- C:\Windows\system32\ieui.dll
2016-02-10 17:02:23 ----A---- C:\Windows\system32\ieframe.dll
2016-02-10 17:02:22 ----A---- C:\Windows\system32\mshtml.dll
2016-02-10 17:01:05 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-02-10 17:01:05 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-02-10 17:01:05 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-02-10 17:01:05 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-02-10 17:01:05 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-02-10 17:01:05 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-02-10 17:01:05 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-02-10 17:01:05 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-02-10 17:01:05 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-02-10 17:01:05 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-02-10 17:01:05 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-02-10 17:01:05 ----A---- C:\Windows\system32\inseng.dll
2016-02-10 17:01:05 ----A---- C:\Windows\system32\iernonce.dll
2016-02-10 17:01:05 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-02-10 17:01:05 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-02-10 17:01:05 ----A---- C:\Windows\system32\ie4uinit.exe
2016-02-10 17:01:03 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-02-10 17:01:03 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-02-10 17:01:03 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-02-10 17:01:03 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-02-10 17:01:03 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-02-10 17:01:03 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-02-10 17:01:03 ----A---- C:\Windows\system32\occache.dll
2016-02-10 17:01:03 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-02-10 17:01:03 ----A---- C:\Windows\system32\msfeeds.dll
2016-02-10 17:01:03 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-02-10 17:01:03 ----A---- C:\Windows\system32\iedkcs32.dll
2016-02-10 17:01:03 ----A---- C:\Windows\system32\dxtrans.dll
2016-02-10 17:01:02 ----A---- C:\Windows\system32\iesetup.dll
2016-02-10 17:01:02 ----A---- C:\Windows\system32\ieapfltr.dll
2016-02-10 17:01:01 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-02-10 17:01:01 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-02-10 17:01:01 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-02-10 17:01:01 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-02-10 17:01:01 ----A---- C:\Windows\system32\vbscript.dll
2016-02-10 17:01:00 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-02-10 17:01:00 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-02-10 17:01:00 ----A---- C:\Windows\system32\jsproxy.dll
2016-02-10 17:01:00 ----A---- C:\Windows\system32\dxtmsft.dll
2016-02-10 17:00:59 ----A---- C:\Windows\system32\webcheck.dll
2016-02-10 17:00:59 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-02-10 17:00:59 ----A---- C:\Windows\system32\mshtmled.dll
2016-02-10 17:00:59 ----A---- C:\Windows\system32\jscript.dll
2016-02-10 17:00:58 ----A---- C:\Windows\system32\wininet.dll
2016-02-10 17:00:58 ----A---- C:\Windows\system32\jscript9diag.dll
2016-02-10 17:00:58 ----A---- C:\Windows\system32\jscript9.dll
2016-02-10 17:00:57 ----A---- C:\Windows\system32\msrating.dll
2016-02-10 17:00:57 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-02-10 17:00:53 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2016-02-10 17:00:53 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2016-02-10 17:00:53 ----A---- C:\Windows\system32\WebClnt.dll
2016-02-10 17:00:53 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-02-10 17:00:53 ----A---- C:\Windows\system32\davclnt.dll
2016-02-09 21:42:09 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2016-02-09 21:42:09 ----A---- C:\Windows\SYSWOW64\wups.dll
2016-02-09 21:42:09 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2016-02-09 21:42:09 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2016-02-09 21:42:09 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2016-02-09 21:42:09 ----A---- C:\Windows\system32\wuwebv.dll
2016-02-09 21:42:09 ----A---- C:\Windows\system32\wups2.dll
2016-02-09 21:42:09 ----A---- C:\Windows\system32\wups.dll
2016-02-09 21:42:09 ----A---- C:\Windows\system32\wudriver.dll
2016-02-09 21:42:09 ----A---- C:\Windows\system32\wucltux.dll
2016-02-09 21:42:09 ----A---- C:\Windows\system32\wuaueng.dll
2016-02-09 21:42:09 ----A---- C:\Windows\system32\wuauclt.exe
2016-02-09 21:42:09 ----A---- C:\Windows\system32\wuapp.exe
2016-02-09 21:42:09 ----A---- C:\Windows\system32\wuapi.dll
2016-02-09 21:42:09 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2016-02-09 21:42:09 ----A---- C:\Windows\system32\WinSetupUI.dll
2016-02-09 21:41:40 ----A---- C:\Windows\system32\rdpudd.dll
2016-02-09 21:41:40 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2016-02-09 21:41:40 ----A---- C:\Windows\system32\rdpcorets.dll
2016-02-09 21:41:12 ----A---- C:\Windows\system32\win32k.sys
2016-02-09 21:40:44 ----A---- C:\Windows\system32\ole32.dll
2016-02-09 21:40:43 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-02-09 21:39:53 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2016-02-09 21:39:53 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2016-02-09 21:39:53 ----A---- C:\Windows\system32\EncDec.dll
2016-02-09 21:39:53 ----A---- C:\Windows\system32\CPFilters.dll
2016-02-09 21:39:52 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-02-09 21:39:52 ----A---- C:\Windows\system32\ntdll.dll
2016-02-09 21:39:51 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-02-09 21:39:51 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-02-09 21:39:51 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-02-09 21:39:51 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-02-09 21:39:51 ----A---- C:\Windows\system32\mtxoci.dll
2016-02-09 21:39:51 ----A---- C:\Windows\system32\KernelBase.dll
2016-02-09 21:39:51 ----A---- C:\Windows\system32\kerberos.dll
2016-02-09 21:39:51 ----A---- C:\Windows\system32\advapi32.dll
2016-02-09 21:39:50 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-02-09 21:39:50 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-02-09 21:39:50 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-02-09 21:39:50 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2016-02-09 21:39:50 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-02-09 21:39:50 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2016-02-09 21:39:50 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-02-09 21:39:50 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-02-09 21:39:50 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-02-09 21:39:50 ----A---- C:\Windows\system32\wow64.dll
2016-02-09 21:39:50 ----A---- C:\Windows\system32\winsrv.dll
2016-02-09 21:39:50 ----A---- C:\Windows\system32\wdigest.dll
2016-02-09 21:39:50 ----A---- C:\Windows\system32\srcore.dll
2016-02-09 21:39:50 ----A---- C:\Windows\system32\schannel.dll
2016-02-09 21:39:50 ----A---- C:\Windows\system32\rstrui.exe
2016-02-09 21:39:50 ----A---- C:\Windows\system32\rpcrt4.dll
2016-02-09 21:39:50 ----A---- C:\Windows\system32\ncrypt.dll
2016-02-09 21:39:50 ----A---- C:\Windows\system32\msv1_0.dll
2016-02-09 21:39:50 ----A---- C:\Windows\system32\lsasrv.dll
2016-02-09 21:39:50 ----A---- C:\Windows\system32\kernel32.dll
2016-02-09 21:39:50 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-02-09 21:39:50 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-02-09 21:39:50 ----A---- C:\Windows\system32\conhost.exe
2016-02-09 21:39:50 ----A---- C:\Windows\system32\certcli.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-02-09 21:39:49 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-02-09 21:39:49 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-02-09 21:39:49 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-02-09 21:39:49 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-02-09 21:39:49 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-02-09 21:39:49 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-02-09 21:39:49 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-02-09 21:39:49 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-02-09 21:39:49 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-02-09 21:39:49 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-02-09 21:39:49 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-02-09 21:39:49 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-02-09 21:39:49 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-02-09 21:39:49 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-02-09 21:39:49 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-02-09 21:39:49 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-02-09 21:39:49 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-02-09 21:39:49 ----A---- C:\Windows\system32\wow64win.dll
2016-02-09 21:39:49 ----A---- C:\Windows\system32\wow64cpu.dll
2016-02-09 21:39:49 ----A---- C:\Windows\system32\TSpkg.dll
2016-02-09 21:39:49 ----A---- C:\Windows\system32\sspisrv.dll
2016-02-09 21:39:49 ----A---- C:\Windows\system32\sspicli.dll
2016-02-09 21:39:49 ----A---- C:\Windows\system32\srclient.dll
2016-02-09 21:39:49 ----A---- C:\Windows\system32\smss.exe
2016-02-09 21:39:49 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-02-09 21:39:49 ----A---- C:\Windows\system32\secur32.dll
2016-02-09 21:39:49 ----A---- C:\Windows\system32\rpchttp.dll
2016-02-09 21:39:49 ----A---- C:\Windows\system32\ntvdm64.dll
2016-02-09 21:39:49 ----A---- C:\Windows\system32\lsass.exe
2016-02-09 21:39:49 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-02-09 21:39:49 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-02-09 21:39:49 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-02-09 21:39:49 ----A---- C:\Windows\system32\drivers\appid.sys
2016-02-09 21:39:49 ----A---- C:\Windows\system32\csrsrv.dll
2016-02-09 21:39:49 ----A---- C:\Windows\system32\cryptbase.dll
2016-02-09 21:39:49 ----A---- C:\Windows\system32\credssp.dll
2016-02-09 21:39:49 ----A---- C:\Windows\system32\auditpol.exe
2016-02-09 21:39:49 ----A---- C:\Windows\system32\appidsvc.dll
2016-02-09 21:39:49 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-02-09 21:39:49 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-02-09 21:39:49 ----A---- C:\Windows\system32\appidapi.dll
2016-02-09 21:39:49 ----A---- C:\Windows\system32\apisetschema.dll
2016-02-09 21:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-02-09 21:39:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-02-09 21:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-02-09 21:39:48 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-02-09 21:39:48 ----A---- C:\Windows\SYSWOW64\user.exe
2016-02-09 21:39:48 ----A---- C:\Windows\system32\adtschema.dll
2016-02-09 21:39:47 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-02-09 21:39:47 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-02-09 21:39:47 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-02-09 21:39:47 ----A---- C:\Windows\system32\msobjs.dll
2016-02-09 21:39:47 ----A---- C:\Windows\system32\msaudite.dll
2016-02-09 21:38:25 ----A---- C:\Windows\system32\shell32.dll
2016-02-09 21:38:24 ----A---- C:\Windows\SYSWOW64\shell32.dll
2016-02-09 21:38:24 ----A---- C:\Windows\explorer.exe
2016-02-09 21:38:23 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2016-02-09 21:38:23 ----A---- C:\Windows\SYSWOW64\explorer.exe
2016-02-09 21:38:23 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-02-09 21:38:23 ----A---- C:\Windows\system32\ExplorerFrame.dll
2016-02-09 21:38:23 ----A---- C:\Windows\system32\authui.dll
2016-02-08 21:44:54 ----D---- C:\Program Files (x86)\KORG
2016-02-07 18:28:17 ----HDC---- C:\ProgramData\{60143F1F-63C8-4CC1-A37B-28EB1FC6C10F}
2016-02-07 18:27:52 ----D---- C:\ProgramData\Native Instruments
2016-02-07 18:27:52 ----D---- C:\Program Files\Native Instruments
2016-02-07 18:14:55 ----D---- C:\Program Files (x86)\Native Instruments
2016-02-07 13:21:41 ----D---- C:\Users\Irko\AppData\Roaming\HpUpdate
2016-02-07 13:21:28 ----D---- C:\Windows\Hewlett-Packard
2016-02-05 22:41:27 ----D---- C:\Program Files (x86)\Serato
2016-01-30 21:55:43 ----D---- C:\ProgramData\Hewlett-Packard
2016-01-25 13:19:14 ----A---- C:\Windows\system32\WinUSBCoInstaller2.dll
2016-01-25 13:19:14 ----A---- C:\Windows\system32\WdfCoInstaller01009.dll
2016-01-25 13:19:01 ----D---- C:\Users\Irko\AppData\Roaming\Xiaomi
2016-01-25 03:00:26 ----D---- C:\Program Files (x86)\MSXML 4.0
2016-01-22 21:09:31 ----D---- C:\Users\Irko\AppData\Roaming\HP
2016-01-22 21:09:31 ----D---- C:\ProgramData\WEBREG
2016-01-22 21:07:42 ----D---- C:\ProgramData\HP Product Assistant
2016-01-22 21:07:29 ----D---- C:\Windows\SYSWOW64\spool
2016-01-22 21:07:02 ----D---- C:\Windows\SYSWOW64\Macromed
2016-01-22 21:05:11 ----D---- C:\Program Files (x86)\HP
2016-01-22 21:05:10 ----HD---- C:\Config.Msi
2016-01-22 21:04:31 ----D---- C:\Program Files\HP
2016-01-22 21:04:12 ----N---- C:\Windows\hpomdl19.dat
2016-01-22 21:04:12 ----A---- C:\Windows\hpoins19.dat
2016-01-22 21:04:09 ----D---- C:\ProgramData\HP
2016-01-22 21:04:04 ----A---- C:\Windows\system32\hpzids40.dll
2016-01-22 20:00:42 ----D---- C:\Program Files (x86)\Hewlett-Packard

======List of files/folders modified in the last 1 month======

2016-02-17 09:53:46 ----D---- C:\Windows\Temp
2016-02-17 09:53:45 ----RD---- C:\Program Files
2016-02-16 23:39:16 ----SD---- C:\Users\Irko\AppData\Roaming\Microsoft
2016-02-16 13:21:34 ----SHD---- C:\System Volume Information
2016-02-14 22:39:34 ----D---- C:\Users\Irko\AppData\Roaming\vlc
2016-02-14 20:58:48 ----D---- C:\Users\Irko\AppData\Roaming\uTorrent
2016-02-14 20:32:06 ----D---- C:\Windows\Prefetch
2016-02-14 20:32:04 ----D---- C:\Windows\system32\NDF
2016-02-14 15:34:44 ----D---- C:\Windows\rescache
2016-02-13 20:19:09 ----D---- C:\Windows\System32
2016-02-13 20:19:09 ----D---- C:\Windows\inf
2016-02-13 20:19:09 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-02-13 15:18:45 ----D---- C:\Windows\system32\config
2016-02-12 20:58:50 ----SHD---- C:\Windows\Installer
2016-02-12 20:58:48 ----RD---- C:\Program Files (x86)
2016-02-11 19:32:00 ----D---- C:\Windows\Microsoft.NET
2016-02-11 19:21:07 ----RSD---- C:\Windows\assembly
2016-02-11 18:23:37 ----D---- C:\Program Files\Internet Explorer
2016-02-11 18:23:22 ----D---- C:\Windows\SysWOW64
2016-02-11 18:23:21 ----HD---- C:\ProgramData
2016-02-11 18:23:04 ----D---- C:\Windows\winsxs
2016-02-11 18:22:57 ----D---- C:\Program Files (x86)\Common Files
2016-02-11 18:22:07 ----D---- C:\ProgramData\Package Cache
2016-02-11 15:57:21 ----SD---- C:\Windows\system32\CompatTel
2016-02-11 15:57:21 ----D---- C:\Windows\SYSWOW64\en-US
2016-02-11 15:57:21 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-02-11 15:57:21 ----D---- C:\Windows\system32\en-US
2016-02-11 15:57:21 ----D---- C:\Windows\system32\cs-CZ
2016-02-11 15:57:21 ----D---- C:\Windows\system32\appraiser
2016-02-11 15:57:21 ----D---- C:\Windows\AppPatch
2016-02-11 15:57:21 ----D---- C:\Program Files\Windows Journal
2016-02-11 15:57:21 ----D---- C:\Program Files (x86)\Internet Explorer
2016-02-11 15:57:20 ----D---- C:\Windows\SYSWOW64\sk-SK
2016-02-11 15:57:20 ----D---- C:\Windows\system32\sk-SK
2016-02-11 15:57:20 ----D---- C:\Windows\system32\drivers
2016-02-11 15:47:18 ----D---- C:\ProgramData\Microsoft Help
2016-02-11 15:45:23 ----A---- C:\Windows\win.ini
2016-02-10 17:09:36 ----D---- C:\Windows\system32\Boot
2016-02-10 17:09:35 ----D---- C:\Windows\sk-SK
2016-02-10 17:09:35 ----D---- C:\Windows\cs-CZ
2016-02-10 17:09:35 ----D---- C:\Windows
2016-02-10 16:50:11 ----D---- C:\Windows\system32\MRT
2016-02-10 16:46:14 ----A---- C:\Windows\system32\MRT.exe
2016-02-09 21:42:24 ----D---- C:\Windows\system32\wdi
2016-02-09 21:33:46 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-02-09 21:23:33 ----D---- C:\Windows\system32\catroot2
2016-02-08 21:45:12 ----D---- C:\Windows\system32\DriverStore
2016-02-07 18:04:52 ----D---- C:\ProgramData\Oracle
2016-02-07 17:42:49 ----D---- C:\Program Files (x86)\Java
2016-02-07 17:42:00 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2016-02-03 15:01:58 ----D---- C:\Windows\Tasks
2016-01-30 22:46:29 ----D---- C:\Windows\system32\Tasks
2016-01-30 22:45:35 ----D---- C:\Windows\system32\drivers\etc
2016-01-30 22:45:14 ----SD---- C:\ProgramData\Microsoft
2016-01-22 21:07:46 ----RSD---- C:\Windows\Fonts
2016-01-22 21:06:48 ----D---- C:\Windows\twain_32
2016-01-22 21:05:23 ----D---- C:\Windows\system32\catroot

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2015-09-16 213848]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2015-09-16 516096]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2015-09-16 60416]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2011-12-13 2797056]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2015-09-16 80384]
R3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtlitescsibus.sys [2015-12-25 30264]
R3 dtliteusbbus;DAEMON Tools Lite Virtual USB Bus; C:\Windows\system32\DRIVERS\dtliteusbbus.sys [2015-12-25 46392]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2015-05-26 5375448]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-10-02 342528]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-07-17 62784]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh64.sys [2014-12-10 797400]
R3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2015-04-30 23200]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2015-09-16 552960]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-21 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2015-09-16 19456]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-11-23 648808]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2015-09-16 29696]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2015-09-16 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2015-09-16 30208]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2015-09-16 42496]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128]
R2 Bonjour Service;Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2015-09-16 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2015-09-16 27136]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2015-09-16 27136]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2015-09-16 27136]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2015-12-20 26168]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-11-30 1368408]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2015-09-16 27136]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-20 144200]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2015-09-16 27136]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2015-09-16 27136]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2015-09-16 27136]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2015-06-04 280680]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-20 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-01-22 114688]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 178760]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2014-01-23 5132888]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2015-09-16 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2015-09-16 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-12-20 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------

Re: Prosím si o kontrolu. Děkuju

Napsal: 17 úno 2016 10:02
od Indigo
info.txt logfile of random's system information tool 1.10 2016-02-17 09:53:53

======MBR======

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

======Uninstall list======

-->C:\ProgramData\{60143F1F-63C8-4CC1-A37B-28EB1FC6C10F}\Traktor 2 Setup PC.exe
-->C:\Windows\SysWOW64\Macromed\Flash\uninstall_activeX.exe
µTorrent-->C:\Users\Irko\AppData\Roaming\uTorrent\uninstall.exe
64 Bit HP CIO Components Installer-->MsiExec.exe /I{FF21C3E6-97FD-474F-9518-8DCBE94C2854}
Adobe Acrobat Reader DC - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AC0F074E4100}
Adobe Flash Player 10 ActiveX-->MsiExec.exe /X{B7B3E9B3-FB14-4927-894B-E9124509AF5A}
Adobe Refresh Manager-->MsiExec.exe /I{AC76BA86-0804-1033-1959-001824166751}
Apple Application Support-->MsiExec.exe /I{46F044A5-CE8B-4196-984E-5BD6525E361D}
Apple Software Update-->MsiExec.exe /I{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
ASIO4ALL-->C:\Program Files (x86)\ASIO4ALL v2\uninstall.exe
Bonjour Print Services-->MsiExec.exe /I{0DA20600-6130-443B-9D4B-F30520315FA6}
Bonjour-->MsiExec.exe /X{B91110FB-33B4-468B-90C2-4D5E8AE3FAE1}
DAEMON Tools Lite-->C:\Program Files\DAEMON Tools Lite\uninst.exe
Definition Update for Microsoft Office 2013 (KB3114731) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{2CF3CE34-C609-41FC-8F13-01959A38C27B}" "1029" "0"
DJ Intro version 1.2.6-->"C:\Program Files (x86)\Serato\DJ Intro\unins000.exe"
DjVuLibre DjView 3.5.27+4.10.4-->C:\Program Files (x86)\DjVuLibre\uninst.exe
Evaer Video Recorder for Skype 1.6.5.26-->C:\Program Files (x86)\Evaer\uninst.exe
Google Chrome-->"C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.109\Installer\setup.exe" --uninstall --multi-install --chrome --system-level
Google Update Helper-->MsiExec.exe /I{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
HP Customer Participation Program 13.0-->C:\Program Files (x86)\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat -forcereboot
HP Imaging Device Functions 13.0-->C:\Program Files (x86)\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart Essential 3.5-->C:\Program Files (x86)\HP\Digital Imaging\PhotosmartEssential\hpzscr01.exe -datfile hpqbud13.dat -forcereboot
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B-->C:\Program Files (x86)\HP\Digital Imaging\{B61ED343-0B14-4241-999C-490CB1A20DA4}\setup\hpzscr40.exe -datfile hposcr19.dat -onestop -forcereboot
HP Smart Web Printing 4.51-->C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpzscr01.exe -datfile hpqbud15.dat
HP Solution Center 13.0-->C:\Program Files (x86)\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat -forcereboot
HP Support Solutions Framework-->MsiExec.exe /X{579A990C-3855-4838-AF23-354CE2264BC0}
HP Update-->MsiExec.exe /X{912D30CF-F39E-4B31-AD9A-123C6B794EE2}
HPDiagnosticAlert-->MsiExec.exe /I{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}
Intel(R) Processor Graphics-->C:\Program Files (x86)\Intel\Intel(R) Processor Graphics\Uninstall\setup.exe -uninstall
Intel(R) SDK for OpenCL - CPU Only Runtime Package-->C:\Program Files (x86)\Intel\OpenCL SDK\2.0\Uninstall\setup.exe -uninstall
Java 8 Update 73-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83218073F0}
KORG USB-MIDI Driver Tools for Windows-->MsiExec.exe /I{C7B06DB0-64A6-436E-B473-0E0EECC5E174}
Microsoft .NET Framework 4.6.1-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.6.01055\\Setup.exe /repair /x86 /x64
Microsoft .NET Framework 4.6.1-->MsiExec.exe /X{BD6F5371-DAC1-30F0-9DDE-CAC6791E28C3}
Microsoft Access MUI (Czech) 2013-->MsiExec.exe /X{90150000-0015-0405-1000-0000000FF1CE}
Microsoft DCF MUI (Czech) 2013-->MsiExec.exe /X{90150000-0090-0405-1000-0000000FF1CE}
Microsoft Excel MUI (Czech) 2013-->MsiExec.exe /X{90150000-0016-0405-1000-0000000FF1CE}
Microsoft Groove MUI (Czech) 2013-->MsiExec.exe /X{90150000-00BA-0405-1000-0000000FF1CE}
Microsoft InfoPath MUI (Czech) 2013-->MsiExec.exe /X{90150000-0044-0405-1000-0000000FF1CE}
Microsoft Lync MUI (Czech) 2013-->MsiExec.exe /X{90150000-012B-0405-1000-0000000FF1CE}
Microsoft Office 32-bit Components 2013-->MsiExec.exe /X{90150000-00C1-0000-1000-0000000FF1CE}
Microsoft Office Korrekturhilfen 2013 - Deutsch-->MsiExec.exe /X{90150000-001F-0407-1000-0000000FF1CE}
Microsoft Office OSM MUI (Czech) 2013-->MsiExec.exe /X{90150000-00E1-0405-1000-0000000FF1CE}
Microsoft Office OSM UX MUI (Czech) 2013-->MsiExec.exe /X{90150000-00E2-0405-1000-0000000FF1CE}
Microsoft Office Professional Plus 2013-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Office Setup Controller\setup.exe" /uninstall PROPLUS
Microsoft Office Professional Plus 2013-->MsiExec.exe /X{90150000-0011-0000-1000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2013-->MsiExec.exe /X{90150000-002C-0405-1000-0000000FF1CE}
Microsoft Office Proofing Tools 2013 - English-->MsiExec.exe /X{90150000-001F-0409-1000-0000000FF1CE}
Microsoft Office Shared 32-bit MUI (Czech) 2013-->MsiExec.exe /X{90150000-00C1-0405-1000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2013-->MsiExec.exe /X{90150000-006E-0405-1000-0000000FF1CE}
Microsoft OneNote MUI (Czech) 2013-->MsiExec.exe /X{90150000-00A1-0405-1000-0000000FF1CE}
Microsoft Outlook MUI (Czech) 2013-->MsiExec.exe /X{90150000-001A-0405-1000-0000000FF1CE}
Microsoft PowerPoint MUI (Czech) 2013-->MsiExec.exe /X{90150000-0018-0405-1000-0000000FF1CE}
Microsoft Publisher MUI (Czech) 2013-->MsiExec.exe /X{90150000-0019-0405-1000-0000000FF1CE}
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219-->MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030-->"C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe" /uninstall
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030-->MsiExec.exe /X{37B8F9C7-03FB-3253-8781-2517C99D7C00}
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030-->MsiExec.exe /X{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}
Microsoft Visual Studio 2010 Tools for Office Runtime (x64)-->C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)\install.exe
Microsoft Visual Studio 2010 Tools for Office Runtime (x64)-->MsiExec.exe /X{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}
Microsoft Word MUI (Czech) 2013-->MsiExec.exe /X{90150000-001B-0405-1000-0000000FF1CE}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština-->MsiExec.exe /X{90150000-001F-0405-1000-0000000FF1CE}
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina-->MsiExec.exe /X{90150000-001F-041B-1000-0000000FF1CE}
Native Instruments Traktor 2-->"C:\ProgramData\{60143F1F-63C8-4CC1-A37B-28EB1FC6C10F}\Traktor 2 Setup PC.exe" REMOVE=TRUE MODIFY=FALSE
Native Instruments Traktor DJ Studio 3-->C:\PROGRA~2\NATIVE~1\TRAKTO~1\UNWISE.EXE C:\PROGRA~2\NATIVE~1\TRAKTO~1\INSTALL.LOG
OCR Software by I.R.I.S. 13.0-->C:\Program Files (x86)\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
QuickTime 7-->MsiExec.exe /I{111EE7DF-FC45-40C7-98A7-753AC46B12FB}
Realtek Ethernet Controller Driver-->C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\setup.exe -runfromtemp -removeonly
Reloop ASIO Driver 1.22-->C:\Program Files\Reloop ASIO Driver 1.22\uninst.exe
Security Update for Microsoft .NET Framework 4.6.1 (KB3122661)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.6.01055\setup.exe /uninstallpatch {52670DE2-48BC-310D-B2C2-0CA3EFBEBC2F}
Security Update for Microsoft .NET Framework 4.6.1 (KB3127233)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.6.01055\setup.exe /uninstallpatch {30D29D7D-5801-31A0-A209-6B6EC9785CDE}
Security Update for Microsoft Excel 2013 (KB3114734) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{45CFB55D-55A6-488A-8AA4-18EFC7AE8A55}" "1029" "0"
Security Update for Microsoft Excel 2013 (KB3114734) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0405-1000-0000000FF1CE}" "{45CFB55D-55A6-488A-8AA4-18EFC7AE8A55}" "1029" "0"
Security Update for Microsoft Excel 2013 (KB3114734) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0405-1000-0000000FF1CE}" "{45CFB55D-55A6-488A-8AA4-18EFC7AE8A55}" "1029" "0"
Security Update for Microsoft Excel 2013 (KB3114734) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0405-1000-0000000FF1CE}" "{45CFB55D-55A6-488A-8AA4-18EFC7AE8A55}" "1029" "0"
Security Update for Microsoft Excel 2013 (KB3114734) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{45CFB55D-55A6-488A-8AA4-18EFC7AE8A55}" "1029" "0"
Security Update for Microsoft Excel 2013 (KB3114734) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0405-1000-0000000FF1CE}" "{45CFB55D-55A6-488A-8AA4-18EFC7AE8A55}" "1029" "0"
Security Update for Microsoft Office 2013 (KB2910941) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{43ECCB82-45DF-4800-8930-0689BF91F765}" "1029" "0"
Security Update for Microsoft Office 2013 (KB3039734) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{FB8031A1-6407-43C0-8AE5-4BD452FA42F0}" "1029" "0"
Security Update for Microsoft Office 2013 (KB3039798) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{05F0956E-88D3-4437-BE87-E2B0CA491BE8}" "1029" "0"
Security Update for Microsoft Office 2013 (KB3039798) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{05F0956E-88D3-4437-BE87-E2B0CA491BE8}" "1029" "0"
Security Update for Microsoft Office 2013 (KB3054816) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{D8AD4AD9-80FA-4D64-A847-B23948D49A6D}" "1029" "0"
Security Update for Microsoft Office 2013 (KB3085572) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-1000-0000000FF1CE}" "{6190EC69-4261-4E1F-AD8A-417355BC58E7}" "1029" "0"
Security Update for Microsoft Publisher 2013 (KB3085561) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{B868C869-9B43-469A-A22F-C2E79B706F14}" "1029" "0"
Security Update for Microsoft Publisher 2013 (KB3085561) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0019-0405-1000-0000000FF1CE}" "{B868C869-9B43-469A-A22F-C2E79B706F14}" "1029" "0"
Security Update for Microsoft Publisher 2013 (KB3085561) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{B868C869-9B43-469A-A22F-C2E79B706F14}" "1029" "0"
Security Update for Microsoft Word 2013 (KB3114724) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{818A33DC-4F52-4B49-B144-BD0CF0F01DC7}" "1029" "0"
Security Update for Microsoft Word 2013 (KB3114724) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0405-1000-0000000FF1CE}" "{818A33DC-4F52-4B49-B144-BD0CF0F01DC7}" "1029" "0"
Security Update for Microsoft Word 2013 (KB3114724) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0405-1000-0000000FF1CE}" "{818A33DC-4F52-4B49-B144-BD0CF0F01DC7}" "1029" "0"
Security Update for Microsoft Word 2013 (KB3114724) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{818A33DC-4F52-4B49-B144-BD0CF0F01DC7}" "1029" "0"
Security Update for Microsoft Word 2013 (KB3114724) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0405-1000-0000000FF1CE}" "{818A33DC-4F52-4B49-B144-BD0CF0F01DC7}" "1029" "0"
Serato DJ -->"C:\ProgramData\Package Cache\{cc7a67f5-1d2a-431a-841c-511575e9c851}\SeratoDJ.exe" /uninstall
Serato DJ -->MsiExec.exe /X{9F2C3215-5B2F-485E-8F8F-31D7FEC80CF1}
Shop for HP Supplies-->C:\Program Files (x86)\HP\Digital Imaging\HPSSupply\hpzscr01.exe -datfile hpqbud16.dat
Skype™ 7.17-->MsiExec.exe /X{FC965A47-4839-40CA-B618-18F486F042C6}
Update for Microsoft Access 2013 (KB3114505) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{F5442B87-0C66-49D4-BB96-F9DE61D3D993}" "1029" "0"
Update for Microsoft Access 2013 (KB3114505) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0015-0405-1000-0000000FF1CE}" "{F5442B87-0C66-49D4-BB96-F9DE61D3D993}" "1029" "0"
Update for Microsoft Access 2013 (KB3114505) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{F5442B87-0C66-49D4-BB96-F9DE61D3D993}" "1029" "0"
Update for Microsoft InfoPath 2013 (KB3039714) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{3BC93882-4958-41BD-9575-1B8529EE179F}" "1029" "0"
Update for Microsoft InfoPath 2013 (KB3114353) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{BA9199B8-A200-49F6-8204-11B502D9A582}" "1029" "0"
Update for Microsoft InfoPath 2013 (KB3114353) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0044-0405-1000-0000000FF1CE}" "{BA9199B8-A200-49F6-8204-11B502D9A582}" "1029" "0"
Update for Microsoft InfoPath 2013 (KB3114353) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-1000-0000000FF1CE}" "{BA9199B8-A200-49F6-8204-11B502D9A582}" "1029" "0"
Update for Microsoft InfoPath 2013 (KB3114353) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{BA9199B8-A200-49F6-8204-11B502D9A582}" "1029" "0"
Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{EF77B4A6-DFEC-4010-A87D-9B6BF87FABEC}" "1029" "0"
Update for Microsoft Office 2013 (KB2760371) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{25DEA344-FF6F-41BD-B88F-5242BB8E80E1}" "1029" "0"
Update for Microsoft Office 2013 (KB2760544) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{62857CDD-2985-4939-91BA-19ED0B0031A5}" "1029" "0"
Update for Microsoft Office 2013 (KB2880487) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{76379D52-B506-4634-8404-8E1718DF1430}" "1029" "0"
Update for Microsoft Office 2013 (KB2883095) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{EADBF225-163E-406B-B11A-26ECCCAB5A0E}" "1029" "0"
Update for Microsoft Office 2013 (KB2889863) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{82D6A9DF-894F-488F-A0C3-54A37A6E7B2A}" "1029" "0"
Update for Microsoft Office 2013 (KB2899522) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{A4E88D96-814F-4183-8DB2-BA3EC2B7E434}" "1029" "0"
Update for Microsoft Office 2013 (KB2975869) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{14A52226-59E1-428F-83CF-C0D8A467A303}" "1029" "0"
Update for Microsoft Office 2013 (KB2975869) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-1000-0000000FF1CE}" "{14A52226-59E1-428F-83CF-C0D8A467A303}" "1029" "0"
Update for Microsoft Office 2013 (KB3023052) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{A472CEA9-44BA-4ADD-8AD1-589B2F0240EE}" "1029" "0"
Update for Microsoft Office 2013 (KB3023068) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{5712B1B8-2345-4FCD-90A6-35B84E8556BE}" "1029" "0"
Update for Microsoft Office 2013 (KB3023068) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0405-1000-0000000FF1CE}" "{5712B1B8-2345-4FCD-90A6-35B84E8556BE}" "1029" "0"
Update for Microsoft Office 2013 (KB3039701) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{8A6AEFA2-8003-4FD6-8EF7-DEAD1C07803C}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0015-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0019-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0407-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0409-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-041B-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002C-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0044-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0090-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00A1-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00BA-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00E1-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00E2-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0405-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1029" "0"
Update for Microsoft Office 2013 (KB3039766) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{881BA890-D29E-4212-ADDC-A92BE0FBA444}" "1029" "0"
Update for Microsoft Office 2013 (KB3039778) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{59474240-80FF-4640-A723-777334B81D28}" "1029" "0"
Update for Microsoft Office 2013 (KB3039800) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{949A0DB9-8915-4B0F-902F-732EE7BA7A7E}" "1029" "0"
Update for Microsoft Office 2013 (KB3054783) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{4F73DEDD-E1B8-43A4-B999-D18C134D22B5}" "1029" "0"
Update for Microsoft Office 2013 (KB3054785) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{A4970C67-6BF6-470D-9A66-BD7488A56F2E}" "1029" "0"
Update for Microsoft Office 2013 (KB3054785) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{A4970C67-6BF6-470D-9A66-BD7488A56F2E}" "1029" "0"
Update for Microsoft Office 2013 (KB3054805) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{89114288-5452-4A0B-AFFA-264E346B15D6}" "1029" "0"
Update for Microsoft Office 2013 (KB3054819) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0405-1000-0000000FF1CE}" "{690E173C-7ED2-410B-BDF6-A17ED155EE64}" "1029" "0"
Update for Microsoft Office 2013 (KB3054856) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{65B377E4-0004-4060-A2EE-EC38AD73EF92}" "1029" "0"
Update for Microsoft Office 2013 (KB3054941) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{254C2485-E897-484F-B5ED-F3CB82FAFBA4}" "1029" "0"
Update for Microsoft Office 2013 (KB3055006) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{05B28DA2-E60D-4DBD-A26B-DFED10200908}" "1029" "0"
Update for Microsoft Office 2013 (KB3055007) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{FE88633A-5693-4FF9-AA90-32C82C16EC76}" "1029" "0"
Update for Microsoft Office 2013 (KB3055011) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0405-1000-0000000FF1CE}" "{53DB886B-0826-45BC-8C4D-D761A5D5AB3C}" "1029" "0"
Update for Microsoft Office 2013 (KB3055011) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0407-1000-0000000FF1CE}" "{8F98D5E9-1F7E-4848-9431-CEE5E1E51313}" "1029" "0"
Update for Microsoft Office 2013 (KB3055011) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0409-1000-0000000FF1CE}" "{D05C001E-B0A0-4903-BC14-F34CB4A775C1}" "1029" "0"
Update for Microsoft Office 2013 (KB3055011) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-041B-1000-0000000FF1CE}" "{00EE9619-871B-4484-ABDD-2A829F3D683D}" "1029" "0"
Update for Microsoft Office 2013 (KB3085479) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{585AE578-D6B8-4D3B-8281-D36E165C0F17}" "1029" "0"
Update for Microsoft Office 2013 (KB3085482) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{2C69D57F-44CD-4EF0-B925-7FFC64B18DD7}" "1029" "0"
Update for Microsoft Office 2013 (KB3085506) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{F2858C55-53C1-4AA0-9DF5-E240E15F01BE}" "1029" "0"
Update for Microsoft Office 2013 (KB3085570) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{5C435867-13A4-484E-BC09-28FE30FFC085}" "1029" "0"
Update for Microsoft Office 2013 (KB3085570) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0405-1000-0000000FF1CE}" "{5C435867-13A4-484E-BC09-28FE30FFC085}" "1029" "0"
Update for Microsoft Office 2013 (KB3085578) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{9D27FA6E-0179-4B51-B0EA-4655EF446E90}" "1029" "0"
Update for Microsoft Office 2013 (KB3101487) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{51348D5E-3736-4A29-98DD-6B97EE696382}" "1029" "0"
Update for Microsoft Office 2013 (KB3114715) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{6AD87A39-214A-4AD4-9B72-D57E5448EFCC}" "1029" "0"
Update for Microsoft Office 2013 (KB3114717) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{317B7DE9-ADDA-4478-8F89-B861696BA6EA}" "1029" "0"
Update for Microsoft Office 2013 (KB3114717) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-1000-0000000FF1CE}" "{317B7DE9-ADDA-4478-8F89-B861696BA6EA}" "1029" "0"
Update for Microsoft Office 2013 (KB3114717) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{317B7DE9-ADDA-4478-8F89-B861696BA6EA}" "1029" "0"
Update for Microsoft Office 2013 (KB3114727) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{0C962A50-528C-4836-8C13-C49F47697A6E}" "1029" "0"
Update for Microsoft Office 2013 (KB3114727) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-1000-0000000FF1CE}" "{0C962A50-528C-4836-8C13-C49F47697A6E}" "1029" "0"
Update for Microsoft Office 2013 (KB3114727) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{0C962A50-528C-4836-8C13-C49F47697A6E}" "1029" "0"
Update for Microsoft Office 2013 (KB3114736) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{2A764491-B880-49E4-AC8C-39FFED8F14DA}" "1029" "0"
Update for Microsoft Office 2013 (KB3114736) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{2A764491-B880-49E4-AC8C-39FFED8F14DA}" "1029" "0"
Update for Microsoft OneDrive for Business (KB3114509) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{01D60F27-8FB0-4D42-989C-EFA046143C7C}" "1029" "0"
Update for Microsoft OneDrive for Business (KB3114509) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00BA-0405-1000-0000000FF1CE}" "{01D60F27-8FB0-4D42-989C-EFA046143C7C}" "1029" "0"
Update for Microsoft OneDrive for Business (KB3114509) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{01D60F27-8FB0-4D42-989C-EFA046143C7C}" "1029" "0"
Update for Microsoft OneDrive for Business (KB3114509) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0405-1000-0000000FF1CE}" "{01D60F27-8FB0-4D42-989C-EFA046143C7C}" "1029" "0"
Update for Microsoft OneNote 2013 (KB3114344) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{E7C90032-93FE-42C6-8BD7-9DD048CF1698}" "1029" "0"
Update for Microsoft OneNote 2013 (KB3114344) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00A1-0405-1000-0000000FF1CE}" "{E7C90032-93FE-42C6-8BD7-9DD048CF1698}" "1029" "0"
Update for Microsoft OneNote 2013 (KB3114344) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{E7C90032-93FE-42C6-8BD7-9DD048CF1698}" "1029" "0"
Update for Microsoft Outlook 2013 (KB3114729) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{CEE9EDD6-C1E3-49C5-893F-805843C07B39}" "1029" "0"
Update for Microsoft Outlook 2013 (KB3114729) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0405-1000-0000000FF1CE}" "{CEE9EDD6-C1E3-49C5-893F-805843C07B39}" "1029" "0"
Update for Microsoft Outlook Social Connector 2013 (KB3054854) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{0B5649CA-AD84-4970-9FCE-548A3EF323ED}" "1029" "0"
Update for Microsoft Outlook Social Connector 2013 (KB3054854) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0405-1000-0000000FF1CE}" "{0B5649CA-AD84-4970-9FCE-548A3EF323ED}" "1029" "0"
Update for Microsoft PowerPoint 2013 (KB3114716) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{038EAEB8-3DBC-4DEC-8553-CA88F17B238A}" "1029" "0"
Update for Microsoft PowerPoint 2013 (KB3114716) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0405-1000-0000000FF1CE}" "{038EAEB8-3DBC-4DEC-8553-CA88F17B238A}" "1029" "0"
Update for Microsoft PowerPoint 2013 (KB3114716) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{038EAEB8-3DBC-4DEC-8553-CA88F17B238A}" "1029" "0"
Update for Microsoft Project 2013 (KB3114739) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{119D420F-9BEA-4C35-AD1A-317E99403279}" "1029" "0"
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}" "1029" "0"
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-1000-0000000FF1CE}" "{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}" "1029" "0"
Update for Microsoft Word 2013 (KB2878319) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{BC51FE30-3A56-4802-8D9E-E9BC05B56B49}" "1029" "0"
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0405-1000-0000000FF1CE}" "{C224EEBF-D40A-4056-9DD3-EE74666F74AB}" "1029" "0"
Update for Skype for Business 2015 (KB3114732) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{AD89B6F9-C98A-4506-ABDE-782B0959CC84}" "1029" "0"
Update for Skype for Business 2015 (KB3114732) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{AD89B6F9-C98A-4506-ABDE-782B0959CC84}" "1029" "0"
Update for Skype for Business 2015 (KB3114732) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0405-1000-0000000FF1CE}" "{AD89B6F9-C98A-4506-ABDE-782B0959CC84}" "1029" "0"
VirtualDJ 8-->MsiExec.exe /I{415D8B6F-2597-4B84-B677-B4A936C10E37}
VLC media player-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
WD My Cloud-->"C:\Program Files (x86)\WD My Cloud\_WD My Cloud_installation\Uninstall WD My Cloud.exe"
WinRAR 5.20 (64-bit)-->C:\Program Files\WinRAR\uninstall.exe
Xvid MPEG-4 Video Codec-->C:\Windows\system32\rundll32.exe setupapi,InstallHinfSection Remove_XviD 132 C:\Windows\INF\xvid.inf

======Hosts File======

0.0.0.0 vortex.data.microsoft.com
0.0.0.0 vortex-win.data.microsoft.com
0.0.0.0 telecommand.telemetry.microsoft.com
0.0.0.0 telecommand.telemetry.microsoft.com.nsatc.net
0.0.0.0 oca.telemetry.microsoft.com
0.0.0.0 sqm.telemetry.microsoft.com
0.0.0.0 sqm.telemetry.microsoft.com.nsatc.net
0.0.0.0 watson.telemetry.microsoft.com
0.0.0.0 watson.telemetry.microsoft.com.nsatc.net
0.0.0.0 redir.metaservices.microsoft.com

======System event log======

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Distributed Link Tracking Client byl změněn na: stopped
Record Number: 5
Source Name: Service Control Manager
Time Written: 20101121035831.108772-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Desktop Window Manager Session Manager byl změněn na: stopped
Record Number: 4
Source Name: Service Control Manager
Time Written: 20101121035831.108772-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Power byl změněn na: stopped
Record Number: 3
Source Name: Service Control Manager
Time Written: 20101121035831.108772-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Windows Event Log byl změněn na: stopped
Record Number: 2
Source Name: Service Control Manager
Time Written: 20101121035831.093172-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Diagnostic Policy Service byl změněn na: stopped
Record Number: 1
Source Name: Service Control Manager
Time Written: 20101121035831.093172-000
Event Type: Informace
User:

=====Application event log=====

Computer Name: 37L4247F27-25
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 5
Source Name: Microsoft-Windows-WMI
Time Written: 20151220132755.000000-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20151220132755.000000-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.


Record Number: 3
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20151220132754.254047-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: 37L4247F27-25
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 2
Source Name: Microsoft-Windows-EventSystem
Time Written: 20151220132754.000000-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 1532
Message: Služba Profil uživatele byla zastavena.


Record Number: 1
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20101121035831.124372-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

=====Security event log=====

Computer Name: 37L4247F27-25
Event Code: 4735
Message: Byla změněna zabezpečená místní skupina.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247F27-25$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Skupina:
ID zabezpečení: S-1-5-32-551
Název skupiny: Backup Operators
Doména skupiny: Builtin

Změněné atributy:
Název účtu SAM: -
Historie identifikátoru zabezpečení: -

Další informace:
Oprávnění: -
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20151220132737.749218-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247F27-25
Event Code: 4731
Message: Byla vytvořena zabezpečená místní skupina.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247F27-25$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Nová skupina:
ID zabezpečení: S-1-5-32-551
Název skupiny: Backup Operators
Doména skupiny: Builtin

Atributy:
Název účtu SAM: Backup Operators
Historie identifikátoru zabezpečení: -

Další informace:
Oprávnění: -
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20151220132737.749218-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247F27-25
Event Code: 4902
Message: Tabulka zásad auditu pro jednotlivé uživatele byla vytvořena.

Počet prvků: 0
ID zásady: 0x39ae5
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20151220132737.733618-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247F27-25
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
ID přihlášení: 0x0

Typ přihlášení: 0

Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x4
Název procesu:

Informace o síti:
Název pracovní stanice: -
Adresa zdrojové sítě -
Zdrojový port: -

Podrobné informace o ověření:
Proces přihlášení: -
Balíček ověření: -
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20151220132737.624417-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247F27-25
Event Code: 4608
Message: Spouští se systém Windows.

Tato událost je zaznamenána při spuštění procesu LSASS.EXE a inicializaci kontrolního podsystému.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20151220132737.608817-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\QuickTime\QTSystem\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
"PROCESSOR_REVISION"=2a07
"windows_tracing_logfile"=C:\BVTBin\Tests\installpackage\csilogfile.log
"windows_tracing_flags"=3

-----------------EOF-----------------

Re: Prosím si o kontrolu. Děkuju

Napsal: 18 úno 2016 08:53
od JaRon
ahoj.
pouzi navod kolegu http://forum.viry.cz/viewtopic.php?f=13 ... e#p1436908
oba kroky

Re: Prosím si o kontrolu. Děkuju

Napsal: 18 úno 2016 10:13
od Indigo
Ahoj, děkuju za pomoc :)
Přikládám zoek log kdyby něco :)


Zoek.exe v5.0.0.1 Updated 31-December-2015
Tool run by Irko on źt 18.02.2016 at 9:39:03,00.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Irko\Desktop\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2016-02-18-083720.log 1299 bytes

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\Users\Irko\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\Users\Irko\.android deleted
C:\PROGRA~3\{60143F1F-63C8-4CC1-A37B-28EB1FC6C10F} deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Irko\AppData\Local\CrashRpt deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\gpt.ini deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [22.01.2016 21:08]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [22.01.2016 21:08]

==== Chromium Look ======================

Helium Backup - Irko\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpglbgbpeobllokpmeagpoagjbfknanl
Dictionary Instant - Irko\AppData\Local\Google\Chrome\User Data\Default\Extensions\hngaklbjlbjhmoilkegninbmpfigheol

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTer ... ORM=IESR02

==== Reset Google Chrome ======================

C:\Users\Irko\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Irko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Irko\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Irko\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Irko\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Irko\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Irko\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=21 folders=18 261514374 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Irko\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Irko\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on źt 18.02.2016 at 9:55:33,35 ======================

Re: Prosím si o kontrolu. Děkuju

Napsal: 18 úno 2016 10:16
od Indigo
a ještě log z JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.3 (02.09.2016)
Operating System: Windows 7 Ultimate x64
Ran by Irko (Administrator) on źt 18.02.2016 at 10:14:10,07
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 1

Successfully deleted: C:\Users\Irko\AppData\Roaming\xiaomi (Folder)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on źt 18.02.2016 at 10:15:30,16
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Re: Prosím si o kontrolu. Děkuju

Napsal: 18 úno 2016 10:19
od JaRon
par drobnosti to vycistilo, nejaky vacsi problem tam nevidim :)

Re: Prosím si o kontrolu. Děkuju

Napsal: 18 úno 2016 13:14
od Indigo
děkuju :)
:worship:

Re: Prosím si o kontrolu. Děkuju

Napsal: 18 úno 2016 13:22
od JaRon
za malo :)
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz