Dobrý den,
pod Chrome mi nejdou otevítar stránky. Pod firefoxem ano.
PC je vytíženo na CPU i když nic nedělám.
Prosím o pomoc a přikládám log z rsit
info.txt logfile of random's system information tool 1.10 2018-02-11 11:30:56
info.txt logfile of random's system information tool 1.10 2018-02-11 11:30:56
======MBR======
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
======Uninstall list======
. . .-->MsiExec.exe /I{DCAFF63A-A26F-4809-A00D-27AD6733ACB3}
-->MsiExec.exe /I{27735B09-9EFE-419F-A377-10AA8111C30A}
Acronis Disk Director-->MsiExec.exe /X{AE372858-B1BD-49EF-8308-648322846008}
Acronis Drive Monitor-->MsiExec.exe /X{706AE61D-40A4-4F50-8359-FE8F6F7FA461}
Acronis True Image-->"C:\Program Files (x86)\Acronis\TrueImageHome\Uninstall.exe" {2D18E04C-2EFC-48C6-A17F-F53FC9D8564C}
Acronis True Image-->MsiExec.exe /X{2D18E04C-2EFC-48C6-A17F-F53FC9D8564C}
Adobe Acrobat Reader DC - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AC0F074E4100}
Adobe Acrobat XI Pro-->MsiExec.exe /I{AC76BA86-1033-FFFF-7760-000000000006}
Adobe AIR-->c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{78DFDC88-FA40-408F-8397-1D7908A6DA21}
Adobe Community Help-->msiexec /qb /x {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
Adobe Community Help-->MsiExec.exe /I{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
Adobe Creative Suite 5 Design Premium-->C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\core\PDApp.exe --appletID="DWA_UI" --appletVersion="1.0" --mode="Uninstall" --mediaSignature="{02698606-3A21-489D-9D2A-75C9E8D3E5BD}"
Adobe Flash Player 28 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_28_0_0_161_ActiveX.exe -maintain activex
Adobe Flash Player 28 NPAPI-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_28_0_0_161_Plugin.exe -maintain plugin
Adobe Media Player-->msiexec /qb /x {DE3A9DC5-9A5D-6485-9662-347162C7E4CA}
Adobe Refresh Manager-->MsiExec.exe /I{AC76BA86-0804-1033-1959-001824245926}
Altap Salamander 3.08 (x64)-->C:\Program Files\Altap Salamander\remove\remove.exe
Atf Profi-->"C:\Program Files (x86)\All Ten Fingers\uninstall.exe"
AutoCAD 2012 - Czech-->C:\Program Files\Autodesk\AutoCAD 2012 - Czech\Setup\Setup.exe /P {5783F2D7-A001-0405-0102-0060B0CE6BBA} /M ACAD /language cs-CZ
AutoCAD 2012 - Czech-->C:\Program Files\Autodesk\AutoCAD 2012 - Czech\Setup\Setup.exe /P {5783F2D7-A001-0405-0102-0060B0CE6BBA} /M ACAD /language cs-CZ
AutoCAD 2017 – Čeština (Czech)-->C:\Program Files\Autodesk\AutoCAD 2017\Setup\cs-cz\Setup\Setup.exe /P {28B89EEF-0001-0405-2102-CF3F3A09B77D} /M ACAD_MAIN /language cs-CZ
AutoCAD 2018 – Čeština (Czech)-->C:\Program Files\Autodesk\AutoCAD 2018\Setup\cs-cz\Setup\Setup.exe /P {28B89EEF-1001-0405-2102-CF3F3A09B77D} /M ACAD_MAIN /language cs-CZ
Autodesk Advanced Material Library Image Library 2017-->MsiExec.exe /X{8ED2ED41-4455-449D-993C-751C039089B9}
Autodesk Advanced Material Library Image Library 2018-->MsiExec.exe /X{177AD7F6-9C77-4E50-BA53-B7259C5F282D}
Autodesk AutoCAD 2017 – Čeština (Czech)-->C:\Program Files\Autodesk\AutoCAD 2017\Setup\cs-cz\Setup\Setup.exe /P {28B89EEF-0001-0405-2102-CF3F3A09B77D} /M ACAD_MAIN /language cs-CZ
Autodesk AutoCAD 2018 – Čeština (Czech)-->C:\Program Files\Autodesk\AutoCAD 2018\Setup\cs-cz\Setup\Setup.exe /P {28B89EEF-1001-0405-2102-CF3F3A09B77D} /M ACAD_MAIN /language cs-CZ
Autodesk AutoCAD 2018.1.1-->"C:\ProgramData\Package Cache\{b501e2dd-1001-0000-0102-2d66c6a91544}\AutoCAD_2018.1.1_Update_64bit.exe" /uninstall
Autodesk AutoCAD Performance Feedback Tool 1.2.5-->MsiExec.exe /X{8600F844-9AA5-412E-B6F2-F9C6CBCFD268}
Autodesk Configurator 360 addin-->MsiExec.exe /X{6560F7BC-74E2-4618-A46B-4073A3E54E6D}
Autodesk Content Service-->MsiExec.exe /X{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}
Autodesk Design Review-->C:\Program Files (x86)\Autodesk\Autodesk Design Review\Setup\Setup.exe /P {139C013B-5BAC-4101-BC6C-B2A78C0125A4} /M ADR /language en-US
Autodesk Desktop Connect Service-->MsiExec.exe /I{FC772454-BB19-0000-0460-44B459520227}
Autodesk DWG TrueView 2017 - English-->C:\Program Files\Autodesk\DWG TrueView 2017 - English\Setup\en-us\Setup\Setup.exe /P {28B89EEF-0028-0409-0100-CF3F3A09B77D} /M AOEM /language en-US
Autodesk DWG TrueView 2018 - English-->C:\Program Files\Autodesk\DWG TrueView 2018 - English\Setup\en-us\Setup\Setup.exe /P {28B89EEF-1028-0409-0100-CF3F3A09B77D} /M AOEM /language en-US
Autodesk Guided Tutorial Plugin-->MsiExec.exe /I{B3AFC608-D811-0003-0460-21FB25B48D6E}
Autodesk Inventor Compatibility Pack 2018-->MsiExec.exe /X{7F4DD591-2164-0006-0000-7107D70F3DB4}
Autodesk Inventor Content Center Libraries 2017 (Desktop Content)-->MsiExec.exe /X{B46DECD1-2164-4EF1-0000-22D71E81877C}
Autodesk Inventor Content Center Libraries 2018 (Desktop Content)-->MsiExec.exe /I{B46DECD1-2264-4EF1-0000-22D71E81877C}
Autodesk Inventor HSM Ultimate 2018 R3.55-->C:\Program Files\Autodesk\Inventor HSM 2018\Setup\Setup.exe /P {AE6ACBED-C139-41FE-9624-FF3438370C5F} /M InventorHSM /LANG cs-CZ
Autodesk Inventor Professional 2017 - Čeština (Czech)-->C:\Program Files\Autodesk\Inventor 2017\Setup\cs-CZ\Setup\Setup.exe /P {7F4DD591-2164-0001-0000-7107D70F3DB4} /M INVENTOR /LANG cs-CZ
Autodesk Inventor Professional 2017 Jazykový balíček – Čeština (Czech) -->Msiexec.exe /uninstall {C2B4B6F5-2130-1029-0064-E0CB94366A9C} /package {7F4DD591-2164-0001-1029-7107D70F3DB4} /qb
Autodesk Inventor Professional 2017 Jazykový balíček – Čeština (Czech) -->Msiexec.exe /uninstall {C2B4B6F5-2130-1029-0064-E0CB94366A9C} /package {7F4DD591-2164-0001-1029-7107D70F3DB4} /qb
Autodesk Inventor Professional 2017 Jazykový balíček – Čeština (Czech)-->MsiExec.exe /X{7F4DD591-2164-0001-1029-7107D70F3DB4}
Autodesk Inventor Professional 2017 R3-->Msiexec.exe /uninstall {C2B4B6F5-2100-3000-0064-E0CB94366A9C} /package {7F4DD591-2164-0001-0000-7107D70F3DB4} /qb
Autodesk Inventor Professional 2017 R4-->Msiexec.exe /uninstall {C2B4B6F5-2100-4000-0064-E0CB94366A9C} /package {7F4DD591-2164-0001-0000-7107D70F3DB4} /qb
Autodesk Inventor Professional 2017 SP1-->Msiexec.exe /uninstall {C2B4B6F5-2100-1000-0064-E0CB94366A9C} /package {7F4DD591-2164-0001-0000-7107D70F3DB4} /qb
Autodesk Inventor Professional 2017 SP2-->Msiexec.exe /uninstall {C2B4B6F5-2100-2000-0064-E0CB94366A9C} /package {7F4DD591-2164-0001-0000-7107D70F3DB4} /qb
Autodesk Inventor Professional 2017-->MsiExec.exe /I{7F4DD591-2164-0001-0000-7107D70F3DB4}
Autodesk Inventor Professional 2018 - čeština (Czech)-->C:\Program Files\Autodesk\Inventor 2018\Setup\cs-CZ\Setup\Setup.exe /P {7F4DD591-2264-0001-0000-7107D70F3DB4} /M INVENTOR /LANG cs-CZ
Autodesk Inventor Professional 2018 Jazykový balíček - čeština (Czech)-->MsiExec.exe /X{7F4DD591-2264-0001-1029-7107D70F3DB4}
Autodesk Inventor Professional 2018.2-->Msiexec.exe /uninstall {C2B4B6F5-2220-0000-0001-E0CB94366A9C} /package {7F4DD591-2264-0001-0000-7107D70F3DB4} /qb
Autodesk Inventor Professional 2018-->MsiExec.exe /I{7F4DD591-2264-0001-0000-7107D70F3DB4}
Autodesk Inventor Tutorials 2018-->MsiExec.exe /I{3EA786FC-2927-0004-0210-3A2C41CDBD79}
Autodesk Inventor View 2017 - Čeština (Czech)-->C:\Program Files\Autodesk\Inventor View 2017\Setup\Setup.exe /P {7F4DD591-2164-0004-0000-7107D70F3DB4} /M INVENTORVIEW /LANG cs-CZ
Autodesk Inventor View 2017 jazykový balíček – Čeština (Czech)-->MsiExec.exe /I{7F4DD591-2164-0004-1029-7107D70F3DB4}
Autodesk Inventor View 2017 SP1-->Msiexec.exe /uninstall {321A676E-2100-1000-0064-76F1CDFD49C2} /package {7F4DD591-2164-0004-0000-7107D70F3DB4} /qb
Autodesk Inventor View 2017-->MsiExec.exe /I{7F4DD591-2164-0004-0000-7107D70F3DB4}
Autodesk Inventor View 2018 - Čeština (Czech)-->C:\Program Files\Autodesk\Inventor View 2018\Setup\Setup.exe /P {7F4DD591-2264-0004-0000-7107D70F3DB4} /M INVENTORVIEW /LANG cs-CZ
Autodesk Inventor View 2018-->MsiExec.exe /I{7F4DD591-2264-0004-0000-7107D70F3DB4}
Autodesk Material Library 2012-->MsiExec.exe /I{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}
Autodesk Material Library 2017-->MsiExec.exe /X{8FB9F735-D64C-4991-8D91-4CDDAB1ABDEE}
Autodesk Material Library 2018-->MsiExec.exe /X{7847611E-92E9-4917-B395-71C91D523104}
Autodesk Material Library Base Resolution Image Library 2017-->MsiExec.exe /X{3FBFBC43-9882-43FA-B979-2D53896747B3}
Autodesk Material Library Low Resolution Image Library 2012-->MsiExec.exe /I{24FF088D-CDCF-480C-8A4B-98F14A54CAA8}
Autodesk Material Library Low Resolution Image Library 2017-->MsiExec.exe /X{360AC116-6CD4-4E7D-8174-28D47B05E898}
Autodesk Material Library Low Resolution Image Library 2018-->MsiExec.exe /X{1B0F011A-66B4-4865-98B7-0FE132841035}
Autodesk Revit Interoperability for Inventor 2017-->MsiExec.exe /X{0BB716E0-1700-0210-0000-097DC2F354DF}
Autodesk Revit Interoperability for Inventor 2017-->MsiExec.exe /X{0BB716E0-1700-0210-0000-097DC2F354DF}
Autodesk Revit Interoperability for Inventor 2018-->MsiExec.exe /X{0BB716E0-1800-0210-0000-097DC2F354DF}
Autodesk Revit Interoperability for Inventor 2018-->MsiExec.exe /X{0BB716E0-1800-0210-0000-097DC2F354DF}
AVS Audio Editor 7.1-->"C:\Program Files (x86)\AVS4YOU\AVSAudioEditor\unins000.exe"
AVS Update Manager 1.0-->"C:\Program Files (x86)\AVS4YOU\AVSUpdateManager\unins000.exe"
AVS4YOU Software Navigator 1.4-->"C:\Program Files (x86)\AVS4YOU\AVSSoftwareNavigator\unins000.exe"
Balíček ovladače systému Windows - Dell Inc. PBADRV System (09/11/2009 1.0.1.6)-->C:\PROGRA~1\DIFX\8730326CFC0D32D8\DPInst64.exe /u C:\Windows\system32\DRVSTORE\pbadrv_D2D6D850155A9A458152AD991F9D098EDD92894A\pbadrv.inf
Balíček ovladače systému Windows - Prusa Research s.r.o. Prusa i3 Plus MK3 3D printer (02/13/2013 1.0.0.0)-->C:\PROGRA~1\DIFX\D29FE547208FE130\DPInstx64.exe /u C:\Windows\System32\DriverStore\FileRepository\prusamk3.inf_amd64_neutral_0d91410013ee81fd\prusamk3.inf
Balíček ovladače systému Windows - UltiMachine 3D Printer (RAMBo) (02/13/2013 1.0.0.0)-->C:\PROGRA~1\DIFX\D29FE547208FE130\DPInstx64.exe /u C:\Windows\System32\DriverStore\FileRepository\rambo.inf_amd64_neutral_2ea9422580b91167\rambo.inf
BioAPI Framework-->MsiExec.exe /X{9DAED4FC-2B0E-4F3F-8141-F2ABF02CCFCB}
Bitnami Joomla! Stack-->C:\Bitnami\joomla-3.5.1-0\uninstall.exe
Bonjour-->MsiExec.exe /X{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
Brother HL-5350DN-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{B7D97BD5-5608-4165-95F5-2EFF62EEB222}\Setup.exe" -l0x5 -removeonly /uninst
BRTSvc version 1.0.0.0-->"C:\Program Files (x86)\BRTSvc\unins000.exe"
BS.Player FREE-->"C:\Program Files (x86)\Webteh\BSPlayer\uninstall.exe"
CamStudio version 2.7-->"C:\Program Files (x86)\CamStudio 2.7\unins000.exe"
Centrum zařízení Windows Mobile-->MsiExec.exe /X{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}
CNC Projects-->C:\Windows\iun6002.exe "C:\Program Files (x86)\CNC Projects\irunin.ini"
Compiled Driver Disk (Android) 1.0-->"C:\Program Files\Compiled Driver Disk (Android)\Setup\unins001.exe"
Compiled Driver Disk (Nokia) 1.0-->"C:\Program Files\Compiled Driver Disk (Nokia)\Setup\unins000.exe"
Compiled Driver Disk (Samsung) 1.0-->"C:\Program Files\Compiled Driver Disk (Samsung)\Setup\unins000.exe"
Compiled Driver Disk (Sony Ericsson) 1.0-->"C:\Program Files\Compiled Driver Disk (Sony Ericsson)\Setup\unins000.exe"
Corel Graphics - Windows Shell Extension 32 Bit-->MsiExec.exe /I{79899C6B-E315-4A3F-8904-02DEAB8D660D}
Corel Graphics - Windows Shell Extension-->c:\Program Files\Common Files\Corel\Shared\Shell Extension\x64\ShellUninst.exe -ProductCode {EBDC2D0D-1E26-4EF2-BB48-C7E18F7800C6} -arp
Corel Graphics - Windows Shell Extension-->MsiExec.exe /X{EBDC2D0D-1E26-4EF2-BB48-C7E18F7800C6}
CorelDRAW Graphics Suite X6 - Content-->C:\Users\Public\Documents\Corel\Content X6\Setup\SetupARP.exe /arp
CorelDRAW Graphics Suite X6 - Content-->MsiExec.exe /I{C221B72F-C0AC-4DD7-B27E-701B1E9DE23A}
CorelDRAW Graphics Suite X6 - IPM-->MsiExec.exe /I{B6DF7031-2843-44FD-9CAB-DECAB4257456}
CorelDRAW Graphics Suite X6 - Writing Tools (x64)-->MsiExec.exe /I{DDE82E3D-20C4-48E1-AE1D-B1F10E42CA44}
CorelDRAW Graphics Suite X6 (64-Bit)-->C:\Program Files\Corel\CorelDRAW Graphics Suite X6\Setup\SetupARP.exe /arp
Creative Pack Volume 1-->MsiExec.exe /I{05181A78-3BA6-4B63-BCE8-888A4BCAACFA}
Custom-->MsiExec.exe /I{7206B668-FEE0-455B-BB1F-9B5A2E0EC94A}
CyberLink PowerDVD 13-->"C:\Program Files (x86)\InstallShield Installation Information\{3CFDF154-7E60-4E98-A8DF-C693A4F8E6B6}\setup.exe" /z-uninstall
CyberLink PowerDVD 13-->"C:\Program Files (x86)\InstallShield Installation Information\{3CFDF154-7E60-4E98-A8DF-C693A4F8E6B6}\setup.exe" /z-uninstall
CyberLink PowerDVD 9.5-->"C:\Program Files (x86)\InstallShield Installation Information\{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}\setup.exe" /z-uninstall
CyberLink PowerDVD 9.5-->"C:\Program Files (x86)\InstallShield Installation Information\{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}\setup.exe" /z-uninstall
Definition Update for Microsoft Office 2010 (KB3115475) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{C6943CC4-79E1-4B29-BFF7-8C4049C7DF61}" "1029" "0"
Definition Update for Microsoft Office 2010 (KB3115475) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{C6943CC4-79E1-4B29-BFF7-8C4049C7DF61}" "1029" "0"
Dell Data Protection | Access | Drivers-->"C:\Program Files (x86)\InstallShield Installation Information\{4E4E65EE-C456-45AC-B5AD-C62C3A325BD0}\setup.exe" -runfromtemp -l0x0005 -removeonly
Dell Data Protection | Access-->"C:\Program Files (x86)\InstallShield Installation Information\{A7D91856-258D-4C87-8041-B170851CE432}\setup.exe" -runfromtemp -l0x0005 -removeonly
Dell Data Protection | Access-->C:\Windows\Downloaded Installations\{ABBA2EA4-740E-4052-902B-9CA70B081E3F}\Installer.exe
Dell Edoc Viewer-->MsiExec.exe /I{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}
DellAccess-->MsiExec.exe /I{F839C6BD-E92E-48FA-9CE6-7BFAF94F7096}
DfontSplitter 0.3.1-->"C:\Program Files (x86)\DfontSplitter\unins000.exe"
DirectX 9 Runtime-->MsiExec.exe /I{AF9E97C1-7431-426D-A8D5-ABE40995C0B1}
DTS+AC3 ÇĘĹÍ-->"C:\Program Files\DtsFilter\uninstall.exe"
DVD Shrink 3.2-->"C:\Program Files (x86)\DVD Shrink\unins000.exe"
DVDFab 9.1.2.5 (22/01/2014)-->"C:\Program Files (x86)\DVDFab 9\unins000.exe"
DWG TrueView 2013-->C:\Program Files\Autodesk\DWG TrueView 2013\Setup\Setup.exe /P {5783F2D7-B028-0409-0100-0060B0CE6BBA} /M AOEM /language en-US
Eco Materials Adviser (x64)-->MsiExec.exe /X{E027C59C-4C47-4BE8-8078-BCD3D2680EC3}
Eco Materials Adviser for Autodesk Inventor 2017 (64-bit)-->MsiExec.exe /X{05D87862-35C9-4CB4-92EC-8A1FC97BFF6C}
Eco Materials Adviser for Autodesk Inventor 2018 (64-bit)-->MsiExec.exe /X{C279B393-1B29-4F67-901A-F4D9EA1178A1}
EduBase 3.71-->"C:\Program Files (x86)\Dosli\EduBase 3\unins000.exe"
EMBASSY Security Center-->MsiExec.exe /I{EEAFE1E5-076B-430A-96D9-B567792AFA88}
ESET Online Scanner v3-->C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
FARO LS 1.1.406.58-->MsiExec.exe /I{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}
FileOpen Client (x64)-->MsiExec.exe /X{C3E00BDD-2811-4720-A6BC-3B8232CD5BA3}
Filmmaker's Toolkit for Studio-->"C:\Program Files (x86)\InstallShield Installation Information\{4CF172C5-F121-41FA-B0B0-0D49840BF003}\setup.exe" -runfromtemp -l0x0409 -removeonly
Filmmaker's Toolkit for Studio-->MsiExec.exe /I{4CF172C5-F121-41FA-B0B0-0D49840BF003}
FontForge verze 27-08-2015-->"C:\Program Files (x86)\FontForgeBuilds\unins000.exe"
FortiClient-->MsiExec.exe /X{BDFE6AD5-567D-4441-A3A2-E84F02769682}
FTP Voyager 16.0-->"C:\Program Files (x86)\RhinoSoft.com\FTP Voyager\unins001.exe"
Gemalto-->MsiExec.exe /I{91CE5F03-3A2A-4268-935A-04944F058AE9}
GeoGebra 5-->"C:\Program Files (x86)\GeoGebra 5.0\uninstaller.exe"
GOM Player-->"C:\Program Files (x86)\GRETECH\GomPlayer\Uninstall.exe"
Google Chrome-->"C:\Program Files (x86)\Google\Chrome\Application\64.0.3282.140\Installer\setup.exe" --uninstall --system-level --verbose-logging
Google Update Helper-->MsiExec.exe /I{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HDD Regenerator-->MsiExec.exe /X{2445981B-A23B-4A0E-AD15-3D391BDAEC3E}
Helillom Planet-->C:\Program Files (x86)\Helillom Planet\uninstall.exe
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946040)-->c:\Windows\SysWOW64\msiexec.exe /package {AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946308)-->c:\Windows\SysWOW64\msiexec.exe /package {AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946344)-->c:\Windows\SysWOW64\msiexec.exe /package {AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947540)-->c:\Windows\SysWOW64\msiexec.exe /package {AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789)-->c:\Windows\SysWOW64\msiexec.exe /package {AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB} /uninstall /qb+ REBOOTPROMPT=""
iCare Data Recovery Professional 4.6.4-->"C:\Program Files (x86)\iCare Data Recovery Professional\unins000.exe"
Imagine Plugin-->"C:\Program Files (x86)\Common Files\Imagine\uninstall.exe" -plugin
Import souborů SketchUp 2016-2017-->MsiExec.exe /X{063925DB-9D8C-48E2-8F04-1B7038B6C783}
Intel(R) Identity Protection Technology 1.1.2.0-->MsiExec.exe /X{C01A86F5-56E7-101F-9BC9-E3F1025EB779}
Intel(R) Management Engine Components-->C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\Uninstall\setup.exe -uninstall
Intel(R) Network Connections 15.7.176.1-->MsiExec.exe /i{8C9B6B1F-0A8E-402A-A60C-110BBB38D67E} ARPREMOVE=1
Intel(R) Network Connections 15.7.176.1-->MsiExec.exe /i{8C9B6B1F-0A8E-402A-A60C-110BBB38D67E} ARPREMOVE=1
Intel(R) Rapid Storage Technology-->C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\Uninstall\setup.exe -uninstall
Intel® Driver Update Utility-->"C:\ProgramData\Package Cache\{66307462-7d19-4f1a-af82-aa04b6017f05}\Intel Driver Update Utility Installer.exe" /uninstall
Inventor 2017.4 Update-->"C:\ProgramData\Package Cache\{93d3a8bc-2100-3000-b242-2a19b2a704f8}\Inventor2017_R4.exe" /uninstall
Inventor 2017.4.1 Update (INV21410)-->C:\Windows\SysWOW64\msiexec.exe /promptrestart /qb /uninstall {B2F1C296-F594-4827-88ED-53173FC79E20} /package {7F4DD591-2164-0001-0000-7107D70F3DB4} SETUP=1
Inventor 2017.4.2 Update (INV21420)-->C:\Windows\SysWOW64\msiexec.exe /promptrestart /qb /uninstall {FC8D31A8-4776-4374-88FF-9A4A6073DEF3} /package {7F4DD591-2164-0001-0000-7107D70F3DB4} SETUP=1
Inventor 2017.4.3 Update (INV21430)-->C:\Windows\SysWOW64\msiexec.exe /promptrestart /qb /uninstall {2BD0BAA3-7634-46FE-AF24-1F40002289DA} /package {7F4DD591-2164-0001-0000-7107D70F3DB4} SETUP=1
Inventor 2018.1 Update-->"C:\ProgramData\Package Cache\{93d3a8bc-2200-1000-b242-2a19b2a704f8}\Inventor2018.1.exe" /uninstall
Inventor 2018.2 Update-->"C:\ProgramData\Package Cache\{93d3a8bc-2200-2000-b242-2a19b2a704f8}\Inventor2018.2.exe" /uninstall
Inventor 2018.2.3 Update (INV22230)-->"C:\ProgramData\Package Cache\{93d3a8bc-2200-2030-b242-2a19b2a704f8}\2018.2.3.exe" /uninstall
Inventor Connected Design-->MsiExec.exe /I{1FA52755-1FBC-0001-0480-7CEA1F3736D8}
Inventor View 2017 Standalone excludes file registrations (IVV21101)-->C:\Windows\SysWOW64\msiexec.exe /promptrestart /qb /uninstall {3B9F2F00-88CE-4A11-B621-5CD155582482} /package {7F4DD591-2164-0004-0000-7107D70F3DB4} SETUP=1
Java 3D 1.3.1 (OpenGL) Runtime-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{24A8F35A-5DF5-4E88-9314-6CD6195BB283}\Setup.exe" -l0x9 anything
Java 8 Update 161-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F32180161F0}
Jazykový balíček Autodesk Inventor View 2018 – čeština (Czech)-->MsiExec.exe /I{7F4DD591-2264-0004-1029-7107D70F3DB4}
Junk Mail filter update-->MsiExec.exe /I{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
Mathematica Extras 9.0 (4055459)-->"C:\Program Files\Extras\UninstallFiles\Windows\unins000.exe"
Mesh Runtime-->MsiExec.exe /I{8C6D6116-B724-4810-8F2D-D047E6B7D68E}
MetaProducts Offline Explorer Pro-->C:\Program Files (x86)\Offline Explorer Pro\OE.exe /UnInstall
Microsoft .NET Framework 4.7.1 (CSY)-->MsiExec.exe /X{0DD97218-46C2-3591-8135-FAEBB27E2F38}
Microsoft .NET Framework 4.7.1 (čeština)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.7.02558\CSY\\Setup.exe /repair /x86 /x64 /lcid 1029
Microsoft .NET Framework 4.7.1-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.7.02558\\Setup.exe /repair /x86 /x64
Microsoft .NET Framework 4.7.1-->MsiExec.exe /X{E0C7523C-686B-3EE6-8FB1-CB4339E30EDD}
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170)-->MsiExec.exe /X{41785C66-90F2-40CE-8CB5-1C94BFC97280}
Microsoft Lync Web App Plug-in-->MsiExec.exe /X{51CF81C5-8540-44BB-8ABB-F8F4C0F2B971}
Microsoft Office Access MUI (Czech) 2010-->MsiExec.exe /X{90140000-0015-0405-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2010-->MsiExec.exe /X{90140000-0016-0405-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2010-->MsiExec.exe /X{90140000-00BA-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2010-->MsiExec.exe /X{90140000-0044-0405-0000-0000000FF1CE}
Microsoft Office Office 64-bit Components 2010-->MsiExec.exe /X{90140000-002A-0000-1000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2010-->MsiExec.exe /X{90140000-00A1-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2010-->MsiExec.exe /X{90140000-001A-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2010-->MsiExec.exe /X{90140000-0018-0405-0000-0000000FF1CE}
Microsoft Office Professional Plus 2010-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2010-->MsiExec.exe /X{90140000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2010-->MsiExec.exe /X{90140000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2010-->MsiExec.exe /X{90140000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2010-->MsiExec.exe /X{90140000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2010-->MsiExec.exe /X{90140000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2010-->MsiExec.exe /X{90140000-002C-0405-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Czech) 2010-->MsiExec.exe /X{90140000-0019-0405-0000-0000000FF1CE}
Microsoft Office Shared 64-bit MUI (Czech) 2010-->MsiExec.exe /X{90140000-002A-0405-1000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2010-->MsiExec.exe /X{90140000-006E-0405-0000-0000000FF1CE}
Microsoft Office Visio 2010-->MsiExec.exe /X{90140000-0057-0000-0000-0000000FF1CE}
Microsoft Office Visio MUI (Czech) 2010-->MsiExec.exe /X{90140000-0054-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2010-->MsiExec.exe /X{90140000-001B-0405-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visio Premium 2010-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" /uninstall VISIO /dll OSETUP.DLL
Microsoft Visual Basic for Applications 7.1 (x64) English-->MsiExec.exe /I{90F60409-7000-11D3-8CFE-0150048383C9}
Microsoft Visual Basic for Applications 7.1 (x64)-->MsiExec.exe /I{90120064-0070-0000-0000-4000000FF1CE}
Microsoft Visual C++ 2005 Redistributable (x64)-->MsiExec.exe /X{071c9b48-7c32-4621-a0ac-3f809523288f}
Microsoft Visual C++ 2005 Redistributable (x64)-->MsiExec.exe /X{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}
Microsoft Visual C++ 2005 Redistributable (x64)-->MsiExec.exe /X{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17-->MsiExec.exe /X{8220EEFE-38CD-377E-8595-13398D740ACE}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148-->MsiExec.exe /X{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161-->MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729-->MsiExec.exe /X{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}
Microsoft Visual C++ 2008 x64 ATL Runtime 9.0.30729-->MsiExec.exe /X{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}
Microsoft Visual C++ 2008 x64 MFC Runtime 9.0.30729-->MsiExec.exe /X{6DA2B636-698A-3294-BF4A-B5E11B238CDD}
Microsoft Visual C++ 2008 x64 OpenMP Runtime 9.0.30729-->MsiExec.exe /X{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}
Microsoft Visual C++ 2008 x86 ATL Runtime 9.0.30729-->MsiExec.exe /X{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}
Microsoft Visual C++ 2008 x86 CRT Runtime 9.0.30729-->MsiExec.exe /X{14866AAD-1F23-39AC-A62B-7091ED1ADE64}
Microsoft Visual C++ 2008 x86 MFC Runtime 9.0.30729-->MsiExec.exe /X{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}
Microsoft Visual C++ 2008 x86 OpenMP Runtime 9.0.30729-->MsiExec.exe /X{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219-->MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030-->"C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe" /uninstall
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030-->MsiExec.exe /X{37B8F9C7-03FB-3253-8781-2517C99D7C00}
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030-->MsiExec.exe /X{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030-->MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030-->MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501-->"C:\ProgramData\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe" /uninstall
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005-->MsiExec.exe /X{929FBD26-9020-399B-9A7A-751D61F0B942}
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005-->MsiExec.exe /X{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005-->MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212-->"C:\ProgramData\Package Cache\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}\VC_redist.x64.exe" /uninstall
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212-->"C:\ProgramData\Package Cache\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}\VC_redist.x86.exe" /uninstall
Microsoft Visual C++ 2015 x64 Additional Runtime - 14.0.24212-->MsiExec.exe /X{F20396E5-D84E-3505-A7A8-7358F0155F6C}
Microsoft Visual C++ 2015 x64 Minimum Runtime - 14.0.24212-->MsiExec.exe /X{FAAD7243-0141-3987-AA2F-E56B20F80E41}
Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.24212-->MsiExec.exe /X{844ECB74-9B63-3D5C-958C-30BD23F19EE4}
Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.24212-->MsiExec.exe /X{37B55901-995A-3650-80B1-BBFD047E2911}
Microsoft Visual C++ 8.0 Support DLLs-->MsiExec.exe /X{342F5437-C87D-4BB5-89B9-B23E16C6A395}
Microsoft Visual Studio 2010 Tools for Office Runtime (x64)-->C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)\install.exe
Microsoft Visual Studio 2010 Tools for Office Runtime (x64)-->MsiExec.exe /X{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}
Microsoft Visual Studio Tools for Applications 2.0 - ENU-->MsiExec.exe /X{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}
Microsoft Visual Studio Tools for Applications 2.0 Runtime-->MsiExec.exe /X{299C0434-4F4E-341F-A916-4E07AEB35E79}
Microsoft_VC80_ATL_x86_x64-->MsiExec.exe /I{925D058B-564A-443A-B4B2-7E90C6432E55}
Microsoft_VC80_ATL_x86-->MsiExec.exe /I{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}
Microsoft_VC80_CRT_x86_x64-->MsiExec.exe /I{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}
Microsoft_VC80_CRT_x86-->MsiExec.exe /I{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}
Microsoft_VC80_MFC_x86_x64-->MsiExec.exe /I{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}
Microsoft_VC80_MFCLOC_x86_x64-->MsiExec.exe /I{1E9FC118-651D-4934-97BE-E53CAE5C7D45}
Microsoft_VC90_ATL_x86_x64-->MsiExec.exe /I{8557397C-A42D-486F-97B3-A2CBC2372593}
Microsoft_VC90_ATL_x86-->MsiExec.exe /I{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}
Microsoft_VC90_CRT_x86_x64-->MsiExec.exe /I{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}
Microsoft_VC90_CRT_x86-->MsiExec.exe /I{08D2E121-7F6A-43EB-97FD-629B44903403}
Microsoft_VC90_MFC_x86_x64-->MsiExec.exe /I{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}
Microsoft_VC90_MFC_x86-->MsiExec.exe /I{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}
MOBILedit! Support Libraries-->MsiExec.exe /I{1A834332-A9EE-440C-9505-2D07F445F05A}
MOBILedit! ver. 7.0.0.3270-->"C:\Program Files (x86)\MOBILedit!\Setup\unins000.exe"
Moorhuhn Kart 3-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{46376BAF-996E-410E-82B2-5D9E61820E6D}\Setup.exe" -l0x7
Motion Graphics Toolkit for Studio-->"C:\Program Files (x86)\InstallShield Installation Information\{178D71F4-DFB1-40EC-9D95-326FD8A3E7A0}\setup.exe" -runfromtemp -l0x0409 -removeonly
Motion Graphics Toolkit for Studio-->MsiExec.exe /I{178D71F4-DFB1-40EC-9D95-326FD8A3E7A0}
Mount Blue - verze 1.0.11.0-->"C:\Program Files (x86)\HYL\MountBlue\unins000.exe"
Mozilla Firefox 58.0.1 (x64 cs)-->"C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe"
Mozilla Maintenance Service-->"C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
MSVCRT-->MsiExec.exe /I{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP3 Parser (KB2758694)-->MsiExec.exe /I{1D95BA90-F4F8-47EC-A882-441C99D30C1E}
MSXML 4.0 SP3 Parser-->MsiExec.exe /I{196467F1-C11F-4F76-858B-5812ADC83B94}
Nero 12-->MsiExec.exe /I{5019D24D-A627-4402-A393-A3AAAF13DE56}
Nero Audio Pack 1-->MsiExec.exe /X{A7A0BF2E-31CC-49E3-9913-52C503EB969D}
Nero Blu-ray Player Help (CHM)-->MsiExec.exe /X{36DA8969-4DCD-48FF-894A-6BD3936050C3}
Nero Blu-ray Player-->MsiExec.exe /X{80D30C87-62C1-4EC5-A12D-B80E70E9749D}
Nero Burning Core-->MsiExec.exe /X{B166374C-105E-445E-8E5D-A86CA5742645}
Nero Burning ROM Help (CHM)-->MsiExec.exe /X{2890E324-6F3B-4975-8B95-E7D6D80E0226}
Nero ControlCenter-->MsiExec.exe /X{ABC88553-8770-4B97-B43E-5A90647A5B63}
Nero Core Components-->MsiExec.exe /X{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}
Nero Device Updates-->MsiExec.exe /X{8DCD39C9-861A-4067-84FD-F9DEC7A79C10}
Nero Disc to Device-->MsiExec.exe /X{82BF7616-508E-44A5-848F-41FE2C0829F1}
Nero Effects Basic-->MsiExec.exe /X{29F67D84-3A70-456E-806A-52301B02070B}
Nero Express Help (CHM)-->MsiExec.exe /X{0708FF30-78C0-47B0-81F0-C84604DC769C}
Nero Express Help (CHM)-->MsiExec.exe /X{4CA46F9F-174C-4766-9EA2-2325DF414B9E}
Nero Express-->MsiExec.exe /X{5CD2E27A-F2C9-4A87-9A06-DFAF9A182481}
Nero Kwik Themes Basic-->MsiExec.exe /X{1B6F5E51-575E-4693-BCA2-7543570D076D}
Nero MediaHome Help (CHM)-->MsiExec.exe /X{75CA8AAE-5346-4312-A9A8-5CF89955930F}
Nero MediaHome-->MsiExec.exe /X{3602E91E-416E-402A-8F52-B880E4AB9BF3}
Nero PiP Effects Basic-->MsiExec.exe /X{ACE49D50-19CD-44A6-B192-46F985283B26}
Nero Prerequisite Installer 3.0-->MsiExec.exe /I{929FAC65-06DD-4577-882C-E8A558C47B75}
Nero Recode Help (CHM)-->MsiExec.exe /X{0CF7D22B-977C-43B2-9219-E03017FBAC6D}
Nero Recode Help (CHM)-->MsiExec.exe /X{86847081-B387-4F49-AED1-C9B0A090D66C}
Nero Recode-->MsiExec.exe /X{1943C3BD-4462-4612-92C3-D36DD917C447}
Nero Recode-->MsiExec.exe /X{5B1886C1-6EFA-4D07-95D3-8B84C743CC71}
Nero RescueAgent Help (CHM)-->MsiExec.exe /X{0B311221-05A5-4766-8D03-7A6446794156}
Nero RescueAgent-->MsiExec.exe /X{581DCE84-1948-4891-A4A7-A1222CC137C5}
Nero RescueAgent-->MsiExec.exe /X{B953732D-B623-4E84-B369-CFFF7B1AE06F}
Nero SharedVideoCodecs-->MsiExec.exe /X{2432E589-6256-4513-B0BF-EFA8E325D5F0}
Nero Update-->MsiExec.exe /X{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
Nero Video Help (CHM)-->MsiExec.exe /X{5446D3AF-B060-49B6-9535-F300E1532022}
Nero Video Help (CHM)-->MsiExec.exe /X{B128179D-A5E1-43AC-9422-12A109ECD2A0}
Nero Video-->MsiExec.exe /X{83FCCFCD-46E3-43FB-A397-78BFD5A8980A}
NewBlue Studio bundle-->"C:\Program Files (x86)\NewBlue\Avid Bundle for Windows\Uninstall.exe"
Nokia Connectivity Cable Driver-->RUNDLL32.EXE ccdcmbwux64.dll,WuUninstall
NTFS Undelete v0.93-->"C:\Program Files (x86)\NTFS Undelete\unins000.exe"
Nuance OmniPage 18-->MsiExec.exe /X{560C6F9C-8D5E-4EAF-B408-98850E5DF49C}
Nuance PDF Create 7-->MsiExec.exe /X{CD7A262C-287E-41DD-A0F7-733856252C6B}
oCam version 430.0-->"C:\Program Files (x86)\oCam\unins000.exe"
oPlayer-->MsiExec.exe /I{AA1B7F27-A49D-4D7F-9755-570AF5597160}
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení-->MsiExec.exe /I{B6190387-0036-4BEB-8D74-A0AFC5F14706}
Ovladače videa společnosti Pinnacle-->MsiExec.exe /X{6DE721A5-5E89-4D74-994C-652BB3C0672E}
PanoramaStudio 2.1 Pro (deinstallieren)-->"C:\Program Files (x86)\PanoramaStudio2Pro\uninstall.exe"
Passware Kit Enterprise 10.3-->MsiExec.exe /I{1AC3BE1A-A59E-48F4-82CB-DF4FBB16990C}
PC-CCID-->MsiExec.exe /I{3DCDFCDB-4D96-4CF0-9BB3-C91DAE9073F3}
PDF Settings CS5-->MsiExec.exe /I{A78FE97A-C0C8-49CE-89D0-EDD524A17392}
PE Builder 3.1.10a-->"c:\temp\pebuilder3110a\unins000.exe"
Phone Drivers Downloader 1.1-->"C:\Program Files\Phone Drivers Downloader\Setup\unins000.exe"
PhotoShowExpress-->MsiExec.exe /I{3250260C-7A95-4632-893B-89657EB5545B}
PingPlotter 4.11.1-->MsiExec.exe /I{9C752683-7C81-43E6-92CA-E12632D3851C}
Pinnacle Studio 16 - Standard Content Pack-->MsiExec.exe /I{7D0F4ACC-698A-41B9-B1E2-17594988FBEF}
Pinnacle Studio 16-->MsiExec.exe /I{284BFDBC-DAC6-43EC-85A8-E1CEC0D3A114}
Počítačová aplikace Autodesk-->C:\Program Files (x86)\Autodesk\Autodesk Desktop App\removeAdAppMgr.exe
Preboot Manager-->MsiExec.exe /I{3A6BE9F4-5FC8-44BB-BE7B-32A29607FEF6}
Premium Pack Volumes 1-2-->MsiExec.exe /X{88C4D8A6-9954-46A0-965D-92E55DAB8734}
Private Information Manager-->MsiExec.exe /I{0B0A2153-58A6-4244-B458-25EDF5FCD809}
proDAD Vitascene 2.0-->"C:\Program Files (x86)\proDAD\Vitascene-2.0\uninstall.exe" uninstall spcp PATHVERSION "2.0" MAINNAME "Vitascene"
Prusa3D verze 2.0.0-->"C:\Program Files\Prusa3D\unins000.exe"
PrusaControl verze 0.9.4.415_beta-->"C:\Program Files\PrusaControl\unins000.exe"
PSPad editor-->"C:\Program Files (x86)\PSPad editor\Uninst\unins000.exe"
Quick Uninstall Tool for Autodesk Inventor 2012-->MsiExec.exe /X{D25FF5C1-1664-469A-9794-69309387C193}
RBVirtualFolder64Inst-->MsiExec.exe /I{9D6DFAD6-09E5-445E-A4B5-A388FEEBD90D}
Roxio Activation Module-->MsiExec.exe /I{A121EEDE-C68F-461D-91AA-D48BA226AF1C}
Roxio BackOnTrack-->MsiExec.exe /I{5A06423A-210C-49FB-950E-CB0EB8C5CEC7}
Roxio Burn-->MsiExec.exe /I{7746BFAA-2B5D-4FFD-A0E8-4558F4668105}
Roxio Creator Starter-->C:\ProgramData\Uninstall\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}\setup.exe /x {6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC} /qb
Roxio Express Labeler 3-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Roxio File Backup-->MsiExec.exe /I{60B2315F-680F-4EB3-B8DD-CCDC86A7CCAB}
Sada Windows Automated Installation Kit-->MsiExec.exe /I{31E8F586-4EF7-4500-844D-BA8756474FF1}
Samsung Kies-->"C:\Program Files (x86)\InstallShield Installation Information\{758C8301-2696-4855-AF45-534B1200980A}\setup.exe" -runfromtemp -l0x0409 -removeonly
Samsung Kies-->MsiExec.exe /I{758C8301-2696-4855-AF45-534B1200980A}
Samsung Kies3-->"C:\Program Files (x86)\InstallShield Installation Information\{88547073-C566-4895-9005-EBE98EA3F7C7}\setup.exe" -runfromtemp -l0x0409 -removeonly
Samsung Kies3-->MsiExec.exe /I{88547073-C566-4895-9005-EBE98EA3F7C7}
Samsung USB Driver for Mobile Phones-->C:\Program Files (x86)\Samsung\USB Drivers\Uninstall.exe
Scanner Mouse-->MsiExec.exe /X{BE4322AE-EE11-4245-8B0C-E014AAA9BEC1}
ScoreFitter Volumes 1-2-->MsiExec.exe /X{0FDA9ECA-6DA3-480E-B7A9-76F353AF6B6C}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft Access 2010 (KB3101544) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{DAE3147C-5212-428A-982D-4D8B298548C4}" "1029" "0"
Security Update for Microsoft Excel 2010 (KB4011660) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{225E6298-196C-49E5-A170-3E15E95932D3}" "1029" "0"
Security Update for Microsoft InfoPath 2010 (KB3114414) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{B3F75577-16EF-48AA-9259-2AF290C973FD}" "1029" "0"
Security Update for Microsoft InfoPath 2010 (KB3114414) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{B3F75577-16EF-48AA-9259-2AF290C973FD}" "1029" "0"
Security Update for Microsoft InfoPath 2010 (KB3114414) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{B3F75577-16EF-48AA-9259-2AF290C973FD}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2553313) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{473DA037-A808-4DF4-9F37-548928C3CDA1}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2553313) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{473DA037-A808-4DF4-9F37-548928C3CDA1}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2553313) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{473DA037-A808-4DF4-9F37-548928C3CDA1}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2553313) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{473DA037-A808-4DF4-9F37-548928C3CDA1}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2553338) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{2409052F-45F0-4B29-AA79-0B5B44E37384}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2553338) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{2409052F-45F0-4B29-AA79-0B5B44E37384}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2553338) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{2409052F-45F0-4B29-AA79-0B5B44E37384}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2553338) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{2409052F-45F0-4B29-AA79-0B5B44E37384}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2760781) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0405-0000-0000000FF1CE}" "{A5B39813-17B0-4481-B19E-9C57C0BF1EE0}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2760781) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0405-0000-0000000FF1CE}" "{A5B39813-17B0-4481-B19E-9C57C0BF1EE0}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2837599) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{E2CC7ED8-B1CD-468E-9277-5D6507FA9BC7}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2837599) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{E2CC7ED8-B1CD-468E-9277-5D6507FA9BC7}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{7AC3F78E-ECA0-45F4-A9CC-3E885DA23662}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{7AC3F78E-ECA0-45F4-A9CC-3E885DA23662}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2880971) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{5EE42B42-1159-435C-898A-2A3298453B20}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2880971) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{5EE42B42-1159-435C-898A-2A3298453B20}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2881029) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{433890E5-7858-4D14-8FD3-CCD28015472F}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2881029) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{433890E5-7858-4D14-8FD3-CCD28015472F}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2956063) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{0567725C-77BA-47C1-BE23-FFC218C8F953}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2956076) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{8EF6E859-B8AB-45AB-ACF9-7807B4DACE39}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2956076) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{8EF6E859-B8AB-45AB-ACF9-7807B4DACE39}" "1029" "0"
Security Update for Microsoft Office 2010 (KB3054984) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{7D8AB432-0662-4DC9-8C37-5BA7541153C9}" "1029" "0"
Security Update for Microsoft Office 2010 (KB3085528) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{9429D223-4B64-4038-B63D-3F239216F6E5}" "1029" "0"
Security Update for Microsoft Office 2010 (KB3085528) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{9429D223-4B64-4038-B63D-3F239216F6E5}" "1029" "0"
Security Update for Microsoft Office 2010 (KB3101520) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{B6BB5C05-372B-48FE-8348-D3ED54EF172B}" "1029" "0"
Security Update for Microsoft Office 2010 (KB3101520) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{B6BB5C05-372B-48FE-8348-D3ED54EF172B}" "1029" "0"
Security Update for Microsoft Office 2010 (KB3118389) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{350F12B5-B76D-4723-8D04-6BE4F483BF5A}" "1029" "0"
Security Update for Microsoft Office 2010 (KB3118389) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{350F12B5-B76D-4723-8D04-6BE4F483BF5A}" "1029" "0"
Security Update for Microsoft Office 2010 (KB3191908) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{D196C74E-1419-4DC9-981F-45B6A6504D69}" "1029" "0"
Security Update for Microsoft Office 2010 (KB3213626) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{389A3C4A-CDAF-42B0-9584-D2BA85B61F22}" "1029" "0"
Security Update for Microsoft Office 2010 (KB3213626) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{389A3C4A-CDAF-42B0-9584-D2BA85B61F22}" "1029" "0"
Security Update for Microsoft Office 2010 (KB3213631) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{5553566A-EC2B-4B4C-9576-8A46B0629BE0}" "1029" "0"
Security Update for Microsoft Office 2010 (KB3213631) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{5553566A-EC2B-4B4C-9576-8A46B0629BE0}" "1029" "0"
Security Update for Microsoft Office 2010 (KB4011610) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{9386D857-BD0C-44EA-B63E-BAAF75C10266}" "1029" "0"
Security Update for Microsoft Office 2010 (KB4011610) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{9386D857-BD0C-44EA-B63E-BAAF75C10266}" "1029" "0"
Security Update for Microsoft Office 2010 (KB4011611) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{27ACD38D-BC2D-41E5-B04F-BA0520B649FB}" "1029" "0"
Security Update for Microsoft Office 2010 (KB4011611) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{27ACD38D-BC2D-41E5-B04F-BA0520B649FB}" "1029" "0"
Security Update for Microsoft OneNote 2010 (KB3114885) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{67E31350-8E55-4143-9F7A-4E703B49FD45}" "1029" "0"
Security Update for Microsoft OneNote 2010 (KB3114885) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{67E31350-8E55-4143-9F7A-4E703B49FD45}" "1029" "0"
Security Update for Microsoft OneNote 2010 (KB3114885) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{67E31350-8E55-4143-9F7A-4E703B49FD45}" "1029" "0"
Security Update for Microsoft Outlook 2010 (KB4011089) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001A-0405-0000-0000000FF1CE}" "{1A82AF21-1AB1-466E-AAC5-0782111F3190}" "1029" "0"
Security Update for Microsoft Outlook 2010 (KB4011273) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{2793D8BC-7227-436E-A5FB-E68D5C79AEB5}" "1029" "0"
Security Update for Microsoft PowerPoint 2010 (KB2920812) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0018-0405-0000-0000000FF1CE}" "{D3062327-37A1-44C8-803D-39BB86F41946}" "1029" "0"
Security Update for Microsoft Publisher 2010 (KB3141537) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{28AC2FD6-273C-44A5-BB15-C01BF2924A99}" "1029" "0"
Security Update for Microsoft Visio 2010 (KB3114872) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{14044761-B4DB-4690-BA5C-E79CC538C58E}" "1029" "0"
Security Update for Microsoft Visio 2010 (KB3114872) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{14044761-B4DB-4690-BA5C-E79CC538C58E}" "1029" "0"
Security Update for Microsoft Visio Viewer 2010 (KB2999465) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{D54D39CD-37D6-42EF-AD2E-2222515782F1}" "1029" "0"
Security Update for Microsoft Word 2010 (KB2965313) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001A-0405-0000-0000000FF1CE}" "{25B309EB-E3E5-4659-A286-A4C82DB40089}" "1029" "0"
Security Update for Microsoft Word 2010 (KB2965313) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001B-0405-0000-0000000FF1CE}" "{25B309EB-E3E5-4659-A286-A4C82DB40089}" "1029" "0"
Security Update for Microsoft Word 2010 (KB4011659) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{7C6D6681-229A-451D-B963-D67C3E62886D}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0015-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0016-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0018-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0019-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001A-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001B-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0405-0000-0000000FF1CE}" "{A71E3AD4-5545-4D59-9F11-75F363563C6A}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0405-0000-0000000FF1CE}" "{A71E3AD4-5545-4D59-9F11-75F363563C6A}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0407-0000-0000000FF1CE}" "{8925227F-C7B5-4C95-AB58-4FCF2433DAEE}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0407-0000-0000000FF1CE}" "{8925227F-C7B5-4C95-AB58-4FCF2433DAEE}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0409-0000-0000000FF1CE}" "{09A9DF49-DA06-4093-A2FD-F339211E39EA}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0409-0000-0000000FF1CE}" "{09A9DF49-DA06-4093-A2FD-F339211E39EA}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-041B-0000-0000000FF1CE}" "{0C337AF5-E6A7-4B6B-8F8E-08F9C6F956B4}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-041B-0000-0000000FF1CE}" "{0C337AF5-E6A7-4B6B-8F8E-08F9C6F956B4}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{E4D76E88-C65F-4003-9C71-EC4306679D17}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{E4D76E88-C65F-4003-9C71-EC4306679D17}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0405-1000-0000000FF1CE}" "{7F5CE17A-23B9-4EED-B017-A7EF4547476C}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0405-1000-0000000FF1CE}" "{7F5CE17A-23B9-4EED-B017-A7EF4547476C}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002C-0405-0000-0000000FF1CE}" "{EA82267F-4AAB-46BA-AD6A-9EBB544D0EF7}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002C-0405-0000-0000000FF1CE}" "{EA82267F-4AAB-46BA-AD6A-9EBB544D0EF7}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0044-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0054-0405-0000-0000000FF1CE}" "{C3EFBABD-3961-4803-B119-D7362B7E19AB}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{359ADBEC-068A-4CC9-9174-77AB8EDB867A}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{2C911571-C8B6-400B-B323-417C1806E866}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{2C911571-C8B6-400B-B323-417C1806E866}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-00A1-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-00BA-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Skype Click to Call-->MsiExec.exe /X{6D1221A9-17BF-4EC0-81F2-27D30EC30701}
Software602 Form Filler-->MsiExec.exe /X{04703FE3-1A8B-4467-88E6-3D6A1A0FA65A}
Sonic CinePlayer Decoder Pack-->MsiExec.exe /I{9A00EC4E-27E1-42C4-98DD-662F32AC8870}
SPBA 5.9-->MsiExec.exe /I{2EECD5EF-5095-467C-B80C-4AB3096EFD60}
Synology Assistant (remove only)-->C:\Program Files (x86)\Synology\Assistant\Uninstall.exe
TeamSpeak 3 Client-->"C:\Program Files (x86)\TeamSpeak 3 Client\uninstall.exe"
TeamViewer 13-->"C:\Program Files (x86)\TeamViewer\uninstall.exe"
Total Commander (Remove or Repair)-->c:\sw\totalcmd\tcuninst.exe
Trusted Drive Manager-->MsiExec.exe /I{6AC87FB3-ACFC-4416-890C-8976D5A9B371}
TurboCAD Professional 14-->MsiExec.exe /I{68FBB7BE-34F5-4FE9-AA07-E7894533CF0E}
UltraISO Premium V9.53-->"C:\Program Files (x86)\UltraISO\unins000.exe"
Update for Microsoft .NET Framework 4.7.1 (KB4054852)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.7.02558\setup.exe /uninstallpatch {F841DF5D-F64E-3B0A-BB90-6996634F216C}
Update for Microsoft Excel 2010 (KB2956084) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0016-0405-0000-0000000FF1CE}" "{4CF299B5-70FA-43A0-A3E7-A5B1062E70D8}" "1029" "0"
Update for Microsoft Excel 2010 (KB2956084) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0018-0405-0000-0000000FF1CE}" "{4CF299B5-70FA-43A0-A3E7-A5B1062E70D8}" "1029" "0"
Update for Microsoft Excel 2010 (KB2956084) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001B-0405-0000-0000000FF1CE}" "{4CF299B5-70FA-43A0-A3E7-A5B1062E70D8}" "1029" "0"
Update for Microsoft Filter Pack 2.0 (KB2999508) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{9DCB10B2-8E20-4678-B85B-DDB48895B885}" "1029" "0"
Update for Microsoft Filter Pack 2.0 (KB2999508) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{9DCB10B2-8E20-4678-B85B-DDB48895B885}" "1029" "0"
Update for Microsoft Filter Pack 2.0 (KB2999508) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{9DCB10B2-8E20-4678-B85B-DDB48895B885}" "1029" "0"
Update for Microsoft Filter Pack 2.0 (KB2999508) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{9DCB10B2-8E20-4678-B85B-DDB48895B885}" "1029" "0"
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}" "1029" "0"
Update for Microsoft Office 2010 (KB2553140) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{8BEEA2FC-D416-428A-B52A-A3ED45921151}" "1029" "0"
Update for Microsoft Office 2010 (KB2553140) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{8BEEA2FC-D416-428A-B52A-A3ED45921151}" "1029" "0"
Update for Microsoft Office 2010 (KB2553140) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{8BEEA2FC-D416-428A-B52A-A3ED45921151}" "1029" "0"
Update for Microsoft Office 2010 (KB2553140) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{8BEEA2FC-D416-428A-B52A-A3ED45921151}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0015-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0016-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0018-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0019-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001A-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001B-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0407-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0407-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0409-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0409-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-041B-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-041B-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0405-1000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0405-1000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002C-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002C-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0044-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0054-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-00A1-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-00BA-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553388) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{AEB4E79E-26B6-42F3-9980-096443C534BE}" "1029" "0"
Update for Microsoft Office 2010 (KB2553388) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{AEB4E79E-26B6-42F3-9980-096443C534BE}" "1029" "0"
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}" "1029" "0"
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}" "1029" "0"
Update for Microsoft Office 2010 (KB2589318) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{091CB6F9-4347-4084-A572-7C320DA7D686}" "1029" "0"
Update for Microsoft Office 2010 (KB2589318) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{091CB6F9-4347-4084-A572-7C320DA7D686}" "1029" "0"
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}" "1029" "0"
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}" "1029" "0"
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}" "1029" "0"
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}" "1029" "0"
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{287A1E92-9E41-4BC1-8920-B3D0E9220800}" "1029" "0"
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{287A1E92-9E41-4BC1-8920-B3D0E9220800}" "1029" "0"
Update for Microsoft Office 2010 (KB2589386) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{A4F91D60-654C-4892-BFD3-0D41ADA649B6}" "1029" "0"
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{9D69691D-823D-4C3E-9B12-563A3F520366}" "1029" "0"
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{9D69691D-823D-4C3E-9B12-563A3F520366}" "1029" "0"
Update for Microsoft Office 2010 (KB2687275) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{0B7744D2-1FDD-4843-9987-7CE11B79F370}" "1029" "0"
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{35698CB7-AAA2-4577-B505-DBFF504AEF23}" "1029" "0"
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{35698CB7-AAA2-4577-B505-DBFF504AEF23}" "1029" "0"
Update for Microsoft Office 2010 (KB2791057) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{43EBBFDD-8FB7-4FCC-9780-EB40277987A2}" "1029" "0"
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{BA610006-2C39-4419-9834-CF61AB24810A}" "1029" "0"
Update for Microsoft Office 2010 (KB2881030) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{D6C976E4-E88C-4048-9A6B-39400D2933C7}" "1029" "0"
Update for Microsoft Office 2010 (KB2883019) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{D1C4AD0B-CC79-41D2-8D6A-571E7B30658C}" "1029" "0"
Update for Microsoft Office 2010 (KB2883019) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{D1C4AD0B-CC79-41D2-8D6A-571E7B30658C}" "1029" "0"
Update for Microsoft Office 2010 (KB2889828) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0407-0000-0000000FF1CE}" "{60C9499F-B532-4206-AB19-F88C3A7684D5}" "1029" "0"
Update for Microsoft Office 2010 (KB2889828) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0407-0000-0000000FF1CE}" "{60C9499F-B532-4206-AB19-F88C3A7684D5}" "1029" "0"
Update for Microsoft Office 2010 (KB3054873) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{9C9636BD-37A7-43F7-BB00-5C7606B42D27}" "1029" "0"
Update for Microsoft Office 2010 (KB3054873) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{9C9636BD-37A7-43F7-BB00-5C7606B42D27}" "1029" "0"
Update for Microsoft Office 2010 (KB3054886) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{A786FC51-D7D5-4499-A230-D1EBEA64932C}" "1029" "0"
Update for Microsoft Office 2010 (KB3054886) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{A786FC51-D7D5-4499-A230-D1EBEA64932C}" "1029" "0"
Update for Microsoft Office 2010 (KB3054886) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{A786FC51-D7D5-4499-A230-D1EBEA64932C}" "1029" "0"
Update for Microsoft Office 2010 (KB3054886) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{A786FC51-D7D5-4499-A230-D1EBEA64932C}" "1029" "0"
Update for Microsoft Office 2010 (KB3055042) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0409-0000-0000000FF1CE}" "{548F42CA-61CC-4A49-9963-50124AC7B81D}" "1029" "0"
Update for Microsoft Office 2010 (KB3055042) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0409-0000-0000000FF1CE}" "{548F42CA-61CC-4A49-9963-50124AC7B81D}" "1029" "0"
Update for Microsoft Office 2010 (KB3055047) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{B29C45D3-4B2D-4FC2-B072-81E3528E4EE1}" "1029" "0"
Update for Microsoft Office 2010 (KB3055047) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{B29C45D3-4B2D-4FC2-B072-81E3528E4EE1}" "1029" "0"
Update for Microsoft Office 2010 (KB3114555) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{F2644070-2DCF-4ABF-812B-DDCFD4652E3A}" "1029" "0"
Update for Microsoft Office 2010 (KB3114555) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{F2644070-2DCF-4ABF-812B-DDCFD4652E3A}" "1029" "0"
Update for Microsoft Office 2010 (KB3128031) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{E686AD78-72BA-4602-A10E-EA0FD975350F}" "1029" "0"
Update for Microsoft Office 2010 (KB3128031) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{E686AD78-72BA-4602-A10E-EA0FD975350F}" "1029" "0"
Update for Microsoft OneNote 2010 (KB2956075) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-00A1-0405-0000-0000000FF1CE}" "{C212FFAD-1911-4EC9-A4E9-664449800574}" "1029" "0"
Update for Microsoft Outlook 2010 (KB2760779) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{B8BF0BCB-30FA-4BCA-BB01-2243B6295CC8}" "1029" "0"
Update for Microsoft Outlook Social Connector 2010 (KB2553308) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{E7C8C158-9575-4120-AF5E-5CCEF2DD6761}" "1029" "0"
Update for Microsoft PowerPoint 2010 (KB4011187) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{23FC6763-6B80-4485-A178-94742D68C76A}" "1029" "0"
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{F9F5A080-AF38-4966-9A6B-C43DCA465035}" "1029" "0"
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{F9F5A080-AF38-4966-9A6B-C43DCA465035}" "1029" "0"
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{F9F5A080-AF38-4966-9A6B-C43DCA465035}" "1029" "0"
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0054-0405-0000-0000000FF1CE}" "{BF8B32C0-447F-4B40-8DB5-4A6B69A84BDD}" "1029" "0"
Upek Touchchip Fingerprint Reader-->MsiExec.exe /I{4E60E212-3177-4B16-BCB3-616CCC52357D}
VariCAD Viewer 2017-2.05 CZ-->"C:\Program Files\VariCADViewer CZ\uninstall.exe"
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {6DA2B636-698A-3294-BF4A-B5E11B238CDD} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {04B34E21-5BEE-3D2B-8D3D-E3E80D253F64} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {14866AAD-1F23-39AC-A62B-7091ED1ADE64} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {4B90093A-5D9C-3956-8ABB-95848BE6EFAD} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D} /qb+ REBOOTPROMPT=""
1. část - celý se sem nevejde
Milan
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
zpomaléné PC, nejdou stránky pog chrome
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
milanstransky77
- Návštěvník
- Příspěvky: 14
- Registrován: 11 úno 2018 11:44
-
milanstransky77
- Návštěvník
- Příspěvky: 14
- Registrován: 11 úno 2018 11:44
Re: zpomaléné PC, nejdou stránky pog chrome
2. část logu
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-00A1-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-00BA-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553388) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{AEB4E79E-26B6-42F3-9980-096443C534BE}" "1029" "0"
Update for Microsoft Office 2010 (KB2553388) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{AEB4E79E-26B6-42F3-9980-096443C534BE}" "1029" "0"
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}" "1029" "0"
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}" "1029" "0"
Update for Microsoft Office 2010 (KB2589318) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{091CB6F9-4347-4084-A572-7C320DA7D686}" "1029" "0"
Update for Microsoft Office 2010 (KB2589318) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{091CB6F9-4347-4084-A572-7C320DA7D686}" "1029" "0"
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}" "1029" "0"
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}" "1029" "0"
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}" "1029" "0"
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}" "1029" "0"
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{287A1E92-9E41-4BC1-8920-B3D0E9220800}" "1029" "0"
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{287A1E92-9E41-4BC1-8920-B3D0E9220800}" "1029" "0"
Update for Microsoft Office 2010 (KB2589386) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{A4F91D60-654C-4892-BFD3-0D41ADA649B6}" "1029" "0"
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{9D69691D-823D-4C3E-9B12-563A3F520366}" "1029" "0"
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{9D69691D-823D-4C3E-9B12-563A3F520366}" "1029" "0"
Update for Microsoft Office 2010 (KB2687275) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{0B7744D2-1FDD-4843-9987-7CE11B79F370}" "1029" "0"
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{35698CB7-AAA2-4577-B505-DBFF504AEF23}" "1029" "0"
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{35698CB7-AAA2-4577-B505-DBFF504AEF23}" "1029" "0"
Update for Microsoft Office 2010 (KB2791057) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{43EBBFDD-8FB7-4FCC-9780-EB40277987A2}" "1029" "0"
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{BA610006-2C39-4419-9834-CF61AB24810A}" "1029" "0"
Update for Microsoft Office 2010 (KB2881030) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{D6C976E4-E88C-4048-9A6B-39400D2933C7}" "1029" "0"
Update for Microsoft Office 2010 (KB2883019) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{D1C4AD0B-CC79-41D2-8D6A-571E7B30658C}" "1029" "0"
Update for Microsoft Office 2010 (KB2883019) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{D1C4AD0B-CC79-41D2-8D6A-571E7B30658C}" "1029" "0"
Update for Microsoft Office 2010 (KB2889828) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0407-0000-0000000FF1CE}" "{60C9499F-B532-4206-AB19-F88C3A7684D5}" "1029" "0"
Update for Microsoft Office 2010 (KB2889828) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0407-0000-0000000FF1CE}" "{60C9499F-B532-4206-AB19-F88C3A7684D5}" "1029" "0"
Update for Microsoft Office 2010 (KB3054873) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{9C9636BD-37A7-43F7-BB00-5C7606B42D27}" "1029" "0"
Update for Microsoft Office 2010 (KB3054873) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{9C9636BD-37A7-43F7-BB00-5C7606B42D27}" "1029" "0"
Update for Microsoft Office 2010 (KB3054886) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{A786FC51-D7D5-4499-A230-D1EBEA64932C}" "1029" "0"
Update for Microsoft Office 2010 (KB3054886) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{A786FC51-D7D5-4499-A230-D1EBEA64932C}" "1029" "0"
Update for Microsoft Office 2010 (KB3054886) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{A786FC51-D7D5-4499-A230-D1EBEA64932C}" "1029" "0"
Update for Microsoft Office 2010 (KB3054886) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{A786FC51-D7D5-4499-A230-D1EBEA64932C}" "1029" "0"
Update for Microsoft Office 2010 (KB3055042) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0409-0000-0000000FF1CE}" "{548F42CA-61CC-4A49-9963-50124AC7B81D}" "1029" "0"
Update for Microsoft Office 2010 (KB3055042) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0409-0000-0000000FF1CE}" "{548F42CA-61CC-4A49-9963-50124AC7B81D}" "1029" "0"
Update for Microsoft Office 2010 (KB3055047) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{B29C45D3-4B2D-4FC2-B072-81E3528E4EE1}" "1029" "0"
Update for Microsoft Office 2010 (KB3055047) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{B29C45D3-4B2D-4FC2-B072-81E3528E4EE1}" "1029" "0"
Update for Microsoft Office 2010 (KB3114555) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{F2644070-2DCF-4ABF-812B-DDCFD4652E3A}" "1029" "0"
Update for Microsoft Office 2010 (KB3114555) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{F2644070-2DCF-4ABF-812B-DDCFD4652E3A}" "1029" "0"
Update for Microsoft Office 2010 (KB3128031) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{E686AD78-72BA-4602-A10E-EA0FD975350F}" "1029" "0"
Update for Microsoft Office 2010 (KB3128031) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{E686AD78-72BA-4602-A10E-EA0FD975350F}" "1029" "0"
Update for Microsoft OneNote 2010 (KB2956075) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-00A1-0405-0000-0000000FF1CE}" "{C212FFAD-1911-4EC9-A4E9-664449800574}" "1029" "0"
Update for Microsoft Outlook 2010 (KB2760779) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{B8BF0BCB-30FA-4BCA-BB01-2243B6295CC8}" "1029" "0"
Update for Microsoft Outlook Social Connector 2010 (KB2553308) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{E7C8C158-9575-4120-AF5E-5CCEF2DD6761}" "1029" "0"
Update for Microsoft PowerPoint 2010 (KB4011187) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{23FC6763-6B80-4485-A178-94742D68C76A}" "1029" "0"
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{F9F5A080-AF38-4966-9A6B-C43DCA465035}" "1029" "0"
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{F9F5A080-AF38-4966-9A6B-C43DCA465035}" "1029" "0"
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{F9F5A080-AF38-4966-9A6B-C43DCA465035}" "1029" "0"
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0054-0405-0000-0000000FF1CE}" "{BF8B32C0-447F-4B40-8DB5-4A6B69A84BDD}" "1029" "0"
Upek Touchchip Fingerprint Reader-->MsiExec.exe /I{4E60E212-3177-4B16-BCB3-616CCC52357D}
VariCAD Viewer 2017-2.05 CZ-->"C:\Program Files\VariCADViewer CZ\uninstall.exe"
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {6DA2B636-698A-3294-BF4A-B5E11B238CDD} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {04B34E21-5BEE-3D2B-8D3D-E3E80D253F64} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {14866AAD-1F23-39AC-A62B-7091ED1ADE64} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {4B90093A-5D9C-3956-8ABB-95848BE6EFAD} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D} /qb+ REBOOTPROMPT=""
VLC media player 2.0.5-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
Warcaft II (Wargus) version 2.3-->"C:\Games\Warcraft 2 - Wargus\unins000.exe"
Warcraft II version 1.0-->"C:\Games\Warcraft 2\unins000.exe"
Warcraft III - Gold Edition verze 1.26-->"C:\Program Files (x86)\Warcraft III - Gold Edition\unins000.exe"
Wave Infrastructure Installer-->MsiExec.exe /I{777FF553-493D-4068-BAC7-EE2D73DB7434}
Wave Support Software Installer-->MsiExec.exe /I{07D618CD-B016-438A-ADC9-A75BD23F85CE}
WD Drive Utilities-->MsiExec.exe /X{48996CDD-DD81-4197-93FE-0971E73C5CA7}
WD Quick View-->MsiExec.exe /X{0AE025C9-2E0B-4927-A64F-1FA7F294DBFA}
WD Security-->"C:\ProgramData\Package Cache\{249644e6-451a-4a5c-bd5c-21eeb9eec79d}\WDSecuritySetup.exe" /uninstall
WD Security-->MsiExec.exe /X{7CC2EDF2-83EC-4707-BDD3-72469236A6CC}
WD SmartWare Installer-->"C:\ProgramData\Package Cache\{1891b882-48f7-442d-98d0-c1ce533f25bd}\WD SmartWare Installer.exe" /uninstall
WD SmartWare-->MsiExec.exe /X{333CFE46-9CA7-4EC5-80A3-985BD4D5E861}
Welcome App (Start-up experience)-->MsiExec.exe /X{828175FA-7307-4DBF-95AD-9CEE086B6F45}
Winamp-->"C:\Program Files (x86)\Winamp\UninstWA.exe"
Windows Live Essentials-->C:\Program Files (x86)\Windows Live\Installer\wlarp.exe
Windows Live ID Sign-in Assistant-->MsiExec.exe /I{1B8ABA62-74F0-47ED-B18C-A43128E591B8}
Windows Live Installer-->MsiExec.exe /I{0B0F231F-CE6A-483D-AA23-77B364F75917}
Windows Live Language Selector-->MsiExec.exe /I{D07A61E5-A59C-433C-BCBD-22025FA2287B}
Windows Live Mail-->MsiExec.exe /I{9D56775A-93F3-44A3-8092-840E3826DE30}
Windows Live Mail-->MsiExec.exe /I{C454280F-3C3E-4929-B60E-9E6CED5717E7}
Windows Live Mesh-->MsiExec.exe /I{80E8C65A-8F70-4585-88A2-ABC54BABD576}
Windows Live Messenger-->MsiExec.exe /X{50300123-F8FC-4B50-B449-E847D04F1BA2}
Windows Live MIME IFilter-->MsiExec.exe /I{DA54F80E-261C-41A2-A855-549A144F2F59}
Windows Live Movie Maker-->MsiExec.exe /X{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}
Windows Live Movie Maker-->MsiExec.exe /X{92EA4134-10D1-418A-91E1-5A0453131A38}
Windows Live Photo Common-->MsiExec.exe /X{78906B56-0E81-42A7-AC25-F54C946E1538}
Windows Live Photo Common-->MsiExec.exe /X{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
Windows Live Photo Gallery-->MsiExec.exe /X{3336F667-9049-4D46-98B6-4C743EEBC5B1}
Windows Live PIMT Platform-->MsiExec.exe /I{83C292B7-38A5-440B-A731-07070E81A64F}
Windows Live Remote Client Resources-->MsiExec.exe /I{3921492E-82D2-4180-8124-E347AD2F2DB4}
Windows Live Remote Client-->MsiExec.exe /I{DF6D988A-EEA0-4277-AAB8-158E086E439B}
Windows Live Remote Service Resources-->MsiExec.exe /I{34384A2A-2CA2-4446-AB0E-1F360BA2AAC5}
Windows Live Remote Service-->MsiExec.exe /I{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}
Windows Live SOXE Definitions-->MsiExec.exe /I{200FEC62-3C34-4D60-9CE8-EC372E01C08F}
Windows Live SOXE-->MsiExec.exe /I{682B3E4F-696A-42DE-A41C-4C07EA1678B4}
Windows Live UX Platform Language Pack-->MsiExec.exe /I{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}
Windows Live Writer Resources-->MsiExec.exe /X{AB78C965-5C67-409B-8433-D7B5BDB12073}
Windows Live Writer-->MsiExec.exe /X{4264C020-850B-4F08-ACBE-98205D9C336C}
Windows Live Writer-->MsiExec.exe /X{A726AE06-AAA3-43D1-87E3-70F510314F04}
Windows Live Writer-->MsiExec.exe /X{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
WinHTTrack Website Copier 3.48-22 (x64)-->"C:\Program Files\WinHTTrack\unins000.exe"
WinRAR 5.50 (64-bit)-->C:\Program Files\WinRAR\uninstall.exe
Winunisoft multicnc version 4.5-->"C:\Program Files (x86)\Winunisoft multicnc\unins000.exe"
WM Capture-->C:\Program Files (x86)\WMCap\Uninstal.exe
Wolfram Mathematica 9 (M-WIN-L 9.0.1 4055652)-->"C:\Program Files\Wolfram Research\Mathematica\9.0\SystemFiles\UninstallFiles\Windows\unins000.exe"
Zoner Photo Studio 16-->"C:\Program Files\Zoner\Photo Studio 16\unins000.exe"
Zoner Photo Studio 18-->"C:\Program Files\Zoner\Photo Studio 18\unins000.exe"
Zoner Photo Studio 18-->MsiExec.exe /X{C5143891-209D-4D49-9FEA-5F3A6E848DBF}
Zoner Photo Studio X-->"C:\Program Files\Zoner\Photo Studio 19\unins000.exe"
Zoner Photo Studio X-->MsiExec.exe /X{FA0DDE27-1249-444F-919B-C3FAC7BEBCF2}
ZTE Handset USB Driver 5.2066.1.8B01-->"C:\Program Files\ZTE Handset USB Driver\unins000.exe"
======System event log======
Computer Name: mojko
Event Code: 7036
Message: Stav služby Hostitel diagnostické služby byl změněn na: Zastaveno
Record Number: 1415345
Source Name: Service Control Manager
Time Written: 20170924025416.514052-000
Event Type: Informace
User:
Computer Name: mojko
Event Code: 7036
Message: Stav služby Klient DHCP byl změněn na: Zastaveno
Record Number: 1415344
Source Name: Service Control Manager
Time Written: 20170924025416.451652-000
Event Type: Informace
User:
Computer Name: mojko
Event Code: 50037
Message: Služba klienta DHCPv4 je zastavena. Hodnota příznaku vypnutí: 1
Record Number: 1415343
Source Name: Microsoft-Windows-Dhcp-Client
Time Written: 20170924025416.451652-000
Event Type: Informace
User: NT AUTHORITY\LOCAL SERVICE
Computer Name: mojko
Event Code: 51047
Message: Služba klienta DHCPv6 je zastavena. Hodnota příznaku vypnutí: 1
Record Number: 1415342
Source Name: Microsoft-Windows-DHCPv6-Client
Time Written: 20170924025416.420451-000
Event Type: Informace
User: NT AUTHORITY\LOCAL SERVICE
Computer Name: mojko
Event Code: 7036
Message: Stav služby Služba DPS (Diagnostic Policy Service) byl změněn na: Zastaveno
Record Number: 1415341
Source Name: Service Control Manager
Time Written: 20170924025416.420451-000
Event Type: Informace
User:
=====Application event log=====
Computer Name: mojko
Event Code: 0
Message:
Record Number: 534579
Source Name: SignInAssistant
Time Written: 20170802201231.000000-000
Event Type: Informace
User:
Computer Name: mojko
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 534578
Source Name: Microsoft-Windows-WMI
Time Written: 20170802201230.000000-000
Event Type: Informace
User:
Computer Name: mojko
Event Code: 0
Message: Služba byla úspěšně spuštěna.
Record Number: 534577
Source Name: Autodesk Content Service
Time Written: 20170802201228.000000-000
Event Type: Informace
User:
Computer Name: mojko
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 534576
Source Name: Microsoft-Windows-WMI
Time Written: 20170802201228.000000-000
Event Type: Informace
User:
Computer Name: mojko
Event Code: 6000
Message: Odběratel oznámení přihlašování do systému Windows <SessionEnv> nemohl zpracovat událost upozornění.
Record Number: 534575
Source Name: Microsoft-Windows-Winlogon
Time Written: 20170802201201.000000-000
Event Type: Informace
User:
=====Security event log=====
Computer Name: mojko
Event Code: 4624
Message: Účet byl úspěšně přihlášen.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: MOJKO$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7
Typ přihlášení: 5
Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}
Informace o procesu:
ID procesu: 0x2a0
Název procesu: C:\Windows\System32\services.exe
Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -
Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0
Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.
Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.
Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).
Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.
Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.
Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 216571
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20170626185034.301229-000
Event Type: Úspěšný audit
User:
Computer Name: mojko
Event Code: 4672
Message: Novému přihlášení byla přiřazena zvláštní oprávnění.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
Oprávnění: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 216570
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20170626185034.285629-000
Event Type: Úspěšný audit
User:
Computer Name: mojko
Event Code: 4624
Message: Účet byl úspěšně přihlášen.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: MOJKO$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7
Typ přihlášení: 5
Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}
Informace o procesu:
ID procesu: 0x2a0
Název procesu: C:\Windows\System32\services.exe
Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -
Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0
Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.
Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.
Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).
Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.
Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.
Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 216569
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20170626185034.285629-000
Event Type: Úspěšný audit
User:
Computer Name: mojko
Event Code: 4672
Message: Novému přihlášení byla přiřazena zvláštní oprávnění.
Předmět:
ID zabezpečení: S-1-5-19
Název účtu: LOCAL SERVICE
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e5
Oprávnění: SeAssignPrimaryTokenPrivilege
SeAuditPrivilege
SeImpersonatePrivilege
Record Number: 216568
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20170626185034.270029-000
Event Type: Úspěšný audit
User:
Computer Name: mojko
Event Code: 4624
Message: Účet byl úspěšně přihlášen.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: MOJKO$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7
Typ přihlášení: 5
Nové přihlášení:
ID zabezpečení: S-1-5-19
Název účtu: LOCAL SERVICE
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e5
GUID přihlášení: {00000000-0000-0000-0000-000000000000}
Informace o procesu:
ID procesu: 0x2a0
Název procesu: C:\Windows\System32\services.exe
Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -
Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0
Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.
Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.
Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).
Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.
Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.
Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 216567
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20170626185034.270029-000
Event Type: Úspěšný audit
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;c:\Program Files\Intel\DMIX;C:\Program Files (x86)\Intel\Services\IPT\;C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Gemalto\Access Client\v5\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Roxio Shared\DLLShared\;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\DLLShared\;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\DLLShared\;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\DLLShared\;C:\Program Files (x86)\Roxio\OEM\AudioCore\;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Windows Imaging\;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile64\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=4
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
"PROCESSOR_REVISION"=2a07
"windows_tracing_logfile"=C:\BVTBin\Tests\installpackage\csilogfile.log
"windows_tracing_flags"=3
"EMC_AUTOPLAY"=C:\Program Files (x86)\Common Files\Roxio Shared\OEM\
"RCAUTOPLAY"=C:\Program Files (x86)\Roxio\OEM\Roxio Central 5\
"BURN_AUTOPLAY"=C:\Program Files (x86)\Roxio\OEM\Roxio Burn\
"CM2012DIR"=C:\Program Files (x86)\Common Files\Autodesk Shared\Materials\
"ILLDIR"=C:\Program Files (x86)\Common Files\Autodesk Shared\Materials\
"ESET_OPTIONS"=
"ADSK_CLM_WPAD_PROXY_CHECK"=FALSE
"OMP_NUM_THREADS"=4
-----------------EOF-----------------
Děkuji moc
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-00A1-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-00BA-0405-0000-0000000FF1CE}" "{7CA28304-D86F-4ACA-97FA-D126E0D02416}" "1029" "0"
Update for Microsoft Office 2010 (KB2553388) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{AEB4E79E-26B6-42F3-9980-096443C534BE}" "1029" "0"
Update for Microsoft Office 2010 (KB2553388) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{AEB4E79E-26B6-42F3-9980-096443C534BE}" "1029" "0"
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}" "1029" "0"
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}" "1029" "0"
Update for Microsoft Office 2010 (KB2589318) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{091CB6F9-4347-4084-A572-7C320DA7D686}" "1029" "0"
Update for Microsoft Office 2010 (KB2589318) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{091CB6F9-4347-4084-A572-7C320DA7D686}" "1029" "0"
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}" "1029" "0"
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}" "1029" "0"
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}" "1029" "0"
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}" "1029" "0"
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{287A1E92-9E41-4BC1-8920-B3D0E9220800}" "1029" "0"
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{287A1E92-9E41-4BC1-8920-B3D0E9220800}" "1029" "0"
Update for Microsoft Office 2010 (KB2589386) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{A4F91D60-654C-4892-BFD3-0D41ADA649B6}" "1029" "0"
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{9D69691D-823D-4C3E-9B12-563A3F520366}" "1029" "0"
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{9D69691D-823D-4C3E-9B12-563A3F520366}" "1029" "0"
Update for Microsoft Office 2010 (KB2687275) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{0B7744D2-1FDD-4843-9987-7CE11B79F370}" "1029" "0"
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{35698CB7-AAA2-4577-B505-DBFF504AEF23}" "1029" "0"
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{35698CB7-AAA2-4577-B505-DBFF504AEF23}" "1029" "0"
Update for Microsoft Office 2010 (KB2791057) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{43EBBFDD-8FB7-4FCC-9780-EB40277987A2}" "1029" "0"
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{BA610006-2C39-4419-9834-CF61AB24810A}" "1029" "0"
Update for Microsoft Office 2010 (KB2881030) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{D6C976E4-E88C-4048-9A6B-39400D2933C7}" "1029" "0"
Update for Microsoft Office 2010 (KB2883019) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{D1C4AD0B-CC79-41D2-8D6A-571E7B30658C}" "1029" "0"
Update for Microsoft Office 2010 (KB2883019) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{D1C4AD0B-CC79-41D2-8D6A-571E7B30658C}" "1029" "0"
Update for Microsoft Office 2010 (KB2889828) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0407-0000-0000000FF1CE}" "{60C9499F-B532-4206-AB19-F88C3A7684D5}" "1029" "0"
Update for Microsoft Office 2010 (KB2889828) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0407-0000-0000000FF1CE}" "{60C9499F-B532-4206-AB19-F88C3A7684D5}" "1029" "0"
Update for Microsoft Office 2010 (KB3054873) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{9C9636BD-37A7-43F7-BB00-5C7606B42D27}" "1029" "0"
Update for Microsoft Office 2010 (KB3054873) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{9C9636BD-37A7-43F7-BB00-5C7606B42D27}" "1029" "0"
Update for Microsoft Office 2010 (KB3054886) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{A786FC51-D7D5-4499-A230-D1EBEA64932C}" "1029" "0"
Update for Microsoft Office 2010 (KB3054886) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{A786FC51-D7D5-4499-A230-D1EBEA64932C}" "1029" "0"
Update for Microsoft Office 2010 (KB3054886) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{A786FC51-D7D5-4499-A230-D1EBEA64932C}" "1029" "0"
Update for Microsoft Office 2010 (KB3054886) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{A786FC51-D7D5-4499-A230-D1EBEA64932C}" "1029" "0"
Update for Microsoft Office 2010 (KB3055042) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0409-0000-0000000FF1CE}" "{548F42CA-61CC-4A49-9963-50124AC7B81D}" "1029" "0"
Update for Microsoft Office 2010 (KB3055042) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0409-0000-0000000FF1CE}" "{548F42CA-61CC-4A49-9963-50124AC7B81D}" "1029" "0"
Update for Microsoft Office 2010 (KB3055047) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{B29C45D3-4B2D-4FC2-B072-81E3528E4EE1}" "1029" "0"
Update for Microsoft Office 2010 (KB3055047) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{B29C45D3-4B2D-4FC2-B072-81E3528E4EE1}" "1029" "0"
Update for Microsoft Office 2010 (KB3114555) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{F2644070-2DCF-4ABF-812B-DDCFD4652E3A}" "1029" "0"
Update for Microsoft Office 2010 (KB3114555) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{F2644070-2DCF-4ABF-812B-DDCFD4652E3A}" "1029" "0"
Update for Microsoft Office 2010 (KB3128031) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{E686AD78-72BA-4602-A10E-EA0FD975350F}" "1029" "0"
Update for Microsoft Office 2010 (KB3128031) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0057-0000-0000-0000000FF1CE}" "{E686AD78-72BA-4602-A10E-EA0FD975350F}" "1029" "0"
Update for Microsoft OneNote 2010 (KB2956075) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-00A1-0405-0000-0000000FF1CE}" "{C212FFAD-1911-4EC9-A4E9-664449800574}" "1029" "0"
Update for Microsoft Outlook 2010 (KB2760779) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{B8BF0BCB-30FA-4BCA-BB01-2243B6295CC8}" "1029" "0"
Update for Microsoft Outlook Social Connector 2010 (KB2553308) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{E7C8C158-9575-4120-AF5E-5CCEF2DD6761}" "1029" "0"
Update for Microsoft PowerPoint 2010 (KB4011187) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{23FC6763-6B80-4485-A178-94742D68C76A}" "1029" "0"
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{F9F5A080-AF38-4966-9A6B-C43DCA465035}" "1029" "0"
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{F9F5A080-AF38-4966-9A6B-C43DCA465035}" "1029" "0"
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002A-0000-1000-0000000FF1CE}" "{F9F5A080-AF38-4966-9A6B-C43DCA465035}" "1029" "0"
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0054-0405-0000-0000000FF1CE}" "{BF8B32C0-447F-4B40-8DB5-4A6B69A84BDD}" "1029" "0"
Upek Touchchip Fingerprint Reader-->MsiExec.exe /I{4E60E212-3177-4B16-BCB3-616CCC52357D}
VariCAD Viewer 2017-2.05 CZ-->"C:\Program Files\VariCADViewer CZ\uninstall.exe"
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {6DA2B636-698A-3294-BF4A-B5E11B238CDD} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {04B34E21-5BEE-3D2B-8D3D-E3E80D253F64} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {14866AAD-1F23-39AC-A62B-7091ED1ADE64} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {4B90093A-5D9C-3956-8ABB-95848BE6EFAD} /qb+ REBOOTPROMPT=""
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177-->C:\Windows\SysWOW64\msiexec.exe /x {B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D} /qb+ REBOOTPROMPT=""
VLC media player 2.0.5-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
Warcaft II (Wargus) version 2.3-->"C:\Games\Warcraft 2 - Wargus\unins000.exe"
Warcraft II version 1.0-->"C:\Games\Warcraft 2\unins000.exe"
Warcraft III - Gold Edition verze 1.26-->"C:\Program Files (x86)\Warcraft III - Gold Edition\unins000.exe"
Wave Infrastructure Installer-->MsiExec.exe /I{777FF553-493D-4068-BAC7-EE2D73DB7434}
Wave Support Software Installer-->MsiExec.exe /I{07D618CD-B016-438A-ADC9-A75BD23F85CE}
WD Drive Utilities-->MsiExec.exe /X{48996CDD-DD81-4197-93FE-0971E73C5CA7}
WD Quick View-->MsiExec.exe /X{0AE025C9-2E0B-4927-A64F-1FA7F294DBFA}
WD Security-->"C:\ProgramData\Package Cache\{249644e6-451a-4a5c-bd5c-21eeb9eec79d}\WDSecuritySetup.exe" /uninstall
WD Security-->MsiExec.exe /X{7CC2EDF2-83EC-4707-BDD3-72469236A6CC}
WD SmartWare Installer-->"C:\ProgramData\Package Cache\{1891b882-48f7-442d-98d0-c1ce533f25bd}\WD SmartWare Installer.exe" /uninstall
WD SmartWare-->MsiExec.exe /X{333CFE46-9CA7-4EC5-80A3-985BD4D5E861}
Welcome App (Start-up experience)-->MsiExec.exe /X{828175FA-7307-4DBF-95AD-9CEE086B6F45}
Winamp-->"C:\Program Files (x86)\Winamp\UninstWA.exe"
Windows Live Essentials-->C:\Program Files (x86)\Windows Live\Installer\wlarp.exe
Windows Live ID Sign-in Assistant-->MsiExec.exe /I{1B8ABA62-74F0-47ED-B18C-A43128E591B8}
Windows Live Installer-->MsiExec.exe /I{0B0F231F-CE6A-483D-AA23-77B364F75917}
Windows Live Language Selector-->MsiExec.exe /I{D07A61E5-A59C-433C-BCBD-22025FA2287B}
Windows Live Mail-->MsiExec.exe /I{9D56775A-93F3-44A3-8092-840E3826DE30}
Windows Live Mail-->MsiExec.exe /I{C454280F-3C3E-4929-B60E-9E6CED5717E7}
Windows Live Mesh-->MsiExec.exe /I{80E8C65A-8F70-4585-88A2-ABC54BABD576}
Windows Live Messenger-->MsiExec.exe /X{50300123-F8FC-4B50-B449-E847D04F1BA2}
Windows Live MIME IFilter-->MsiExec.exe /I{DA54F80E-261C-41A2-A855-549A144F2F59}
Windows Live Movie Maker-->MsiExec.exe /X{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}
Windows Live Movie Maker-->MsiExec.exe /X{92EA4134-10D1-418A-91E1-5A0453131A38}
Windows Live Photo Common-->MsiExec.exe /X{78906B56-0E81-42A7-AC25-F54C946E1538}
Windows Live Photo Common-->MsiExec.exe /X{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
Windows Live Photo Gallery-->MsiExec.exe /X{3336F667-9049-4D46-98B6-4C743EEBC5B1}
Windows Live PIMT Platform-->MsiExec.exe /I{83C292B7-38A5-440B-A731-07070E81A64F}
Windows Live Remote Client Resources-->MsiExec.exe /I{3921492E-82D2-4180-8124-E347AD2F2DB4}
Windows Live Remote Client-->MsiExec.exe /I{DF6D988A-EEA0-4277-AAB8-158E086E439B}
Windows Live Remote Service Resources-->MsiExec.exe /I{34384A2A-2CA2-4446-AB0E-1F360BA2AAC5}
Windows Live Remote Service-->MsiExec.exe /I{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}
Windows Live SOXE Definitions-->MsiExec.exe /I{200FEC62-3C34-4D60-9CE8-EC372E01C08F}
Windows Live SOXE-->MsiExec.exe /I{682B3E4F-696A-42DE-A41C-4C07EA1678B4}
Windows Live UX Platform Language Pack-->MsiExec.exe /I{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}
Windows Live Writer Resources-->MsiExec.exe /X{AB78C965-5C67-409B-8433-D7B5BDB12073}
Windows Live Writer-->MsiExec.exe /X{4264C020-850B-4F08-ACBE-98205D9C336C}
Windows Live Writer-->MsiExec.exe /X{A726AE06-AAA3-43D1-87E3-70F510314F04}
Windows Live Writer-->MsiExec.exe /X{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
WinHTTrack Website Copier 3.48-22 (x64)-->"C:\Program Files\WinHTTrack\unins000.exe"
WinRAR 5.50 (64-bit)-->C:\Program Files\WinRAR\uninstall.exe
Winunisoft multicnc version 4.5-->"C:\Program Files (x86)\Winunisoft multicnc\unins000.exe"
WM Capture-->C:\Program Files (x86)\WMCap\Uninstal.exe
Wolfram Mathematica 9 (M-WIN-L 9.0.1 4055652)-->"C:\Program Files\Wolfram Research\Mathematica\9.0\SystemFiles\UninstallFiles\Windows\unins000.exe"
Zoner Photo Studio 16-->"C:\Program Files\Zoner\Photo Studio 16\unins000.exe"
Zoner Photo Studio 18-->"C:\Program Files\Zoner\Photo Studio 18\unins000.exe"
Zoner Photo Studio 18-->MsiExec.exe /X{C5143891-209D-4D49-9FEA-5F3A6E848DBF}
Zoner Photo Studio X-->"C:\Program Files\Zoner\Photo Studio 19\unins000.exe"
Zoner Photo Studio X-->MsiExec.exe /X{FA0DDE27-1249-444F-919B-C3FAC7BEBCF2}
ZTE Handset USB Driver 5.2066.1.8B01-->"C:\Program Files\ZTE Handset USB Driver\unins000.exe"
======System event log======
Computer Name: mojko
Event Code: 7036
Message: Stav služby Hostitel diagnostické služby byl změněn na: Zastaveno
Record Number: 1415345
Source Name: Service Control Manager
Time Written: 20170924025416.514052-000
Event Type: Informace
User:
Computer Name: mojko
Event Code: 7036
Message: Stav služby Klient DHCP byl změněn na: Zastaveno
Record Number: 1415344
Source Name: Service Control Manager
Time Written: 20170924025416.451652-000
Event Type: Informace
User:
Computer Name: mojko
Event Code: 50037
Message: Služba klienta DHCPv4 je zastavena. Hodnota příznaku vypnutí: 1
Record Number: 1415343
Source Name: Microsoft-Windows-Dhcp-Client
Time Written: 20170924025416.451652-000
Event Type: Informace
User: NT AUTHORITY\LOCAL SERVICE
Computer Name: mojko
Event Code: 51047
Message: Služba klienta DHCPv6 je zastavena. Hodnota příznaku vypnutí: 1
Record Number: 1415342
Source Name: Microsoft-Windows-DHCPv6-Client
Time Written: 20170924025416.420451-000
Event Type: Informace
User: NT AUTHORITY\LOCAL SERVICE
Computer Name: mojko
Event Code: 7036
Message: Stav služby Služba DPS (Diagnostic Policy Service) byl změněn na: Zastaveno
Record Number: 1415341
Source Name: Service Control Manager
Time Written: 20170924025416.420451-000
Event Type: Informace
User:
=====Application event log=====
Computer Name: mojko
Event Code: 0
Message:
Record Number: 534579
Source Name: SignInAssistant
Time Written: 20170802201231.000000-000
Event Type: Informace
User:
Computer Name: mojko
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 534578
Source Name: Microsoft-Windows-WMI
Time Written: 20170802201230.000000-000
Event Type: Informace
User:
Computer Name: mojko
Event Code: 0
Message: Služba byla úspěšně spuštěna.
Record Number: 534577
Source Name: Autodesk Content Service
Time Written: 20170802201228.000000-000
Event Type: Informace
User:
Computer Name: mojko
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 534576
Source Name: Microsoft-Windows-WMI
Time Written: 20170802201228.000000-000
Event Type: Informace
User:
Computer Name: mojko
Event Code: 6000
Message: Odběratel oznámení přihlašování do systému Windows <SessionEnv> nemohl zpracovat událost upozornění.
Record Number: 534575
Source Name: Microsoft-Windows-Winlogon
Time Written: 20170802201201.000000-000
Event Type: Informace
User:
=====Security event log=====
Computer Name: mojko
Event Code: 4624
Message: Účet byl úspěšně přihlášen.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: MOJKO$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7
Typ přihlášení: 5
Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}
Informace o procesu:
ID procesu: 0x2a0
Název procesu: C:\Windows\System32\services.exe
Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -
Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0
Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.
Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.
Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).
Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.
Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.
Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 216571
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20170626185034.301229-000
Event Type: Úspěšný audit
User:
Computer Name: mojko
Event Code: 4672
Message: Novému přihlášení byla přiřazena zvláštní oprávnění.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
Oprávnění: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 216570
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20170626185034.285629-000
Event Type: Úspěšný audit
User:
Computer Name: mojko
Event Code: 4624
Message: Účet byl úspěšně přihlášen.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: MOJKO$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7
Typ přihlášení: 5
Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}
Informace o procesu:
ID procesu: 0x2a0
Název procesu: C:\Windows\System32\services.exe
Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -
Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0
Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.
Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.
Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).
Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.
Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.
Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 216569
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20170626185034.285629-000
Event Type: Úspěšný audit
User:
Computer Name: mojko
Event Code: 4672
Message: Novému přihlášení byla přiřazena zvláštní oprávnění.
Předmět:
ID zabezpečení: S-1-5-19
Název účtu: LOCAL SERVICE
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e5
Oprávnění: SeAssignPrimaryTokenPrivilege
SeAuditPrivilege
SeImpersonatePrivilege
Record Number: 216568
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20170626185034.270029-000
Event Type: Úspěšný audit
User:
Computer Name: mojko
Event Code: 4624
Message: Účet byl úspěšně přihlášen.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: MOJKO$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7
Typ přihlášení: 5
Nové přihlášení:
ID zabezpečení: S-1-5-19
Název účtu: LOCAL SERVICE
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e5
GUID přihlášení: {00000000-0000-0000-0000-000000000000}
Informace o procesu:
ID procesu: 0x2a0
Název procesu: C:\Windows\System32\services.exe
Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -
Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0
Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.
Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.
Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).
Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.
Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.
Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 216567
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20170626185034.270029-000
Event Type: Úspěšný audit
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;c:\Program Files\Intel\DMIX;C:\Program Files (x86)\Intel\Services\IPT\;C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Gemalto\Access Client\v5\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Roxio Shared\DLLShared\;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\DLLShared\;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\DLLShared\;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\DLLShared\;C:\Program Files (x86)\Roxio\OEM\AudioCore\;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Windows Imaging\;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile64\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=4
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
"PROCESSOR_REVISION"=2a07
"windows_tracing_logfile"=C:\BVTBin\Tests\installpackage\csilogfile.log
"windows_tracing_flags"=3
"EMC_AUTOPLAY"=C:\Program Files (x86)\Common Files\Roxio Shared\OEM\
"RCAUTOPLAY"=C:\Program Files (x86)\Roxio\OEM\Roxio Central 5\
"BURN_AUTOPLAY"=C:\Program Files (x86)\Roxio\OEM\Roxio Burn\
"CM2012DIR"=C:\Program Files (x86)\Common Files\Autodesk Shared\Materials\
"ILLDIR"=C:\Program Files (x86)\Common Files\Autodesk Shared\Materials\
"ESET_OPTIONS"=
"ADSK_CLM_WPAD_PROXY_CHECK"=FALSE
"OMP_NUM_THREADS"=4
-----------------EOF-----------------
Děkuji moc
-
Rudy
- Site Admin
- Příspěvky: 119429
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: zpomaléné PC, nejdou stránky pog chrome
Zdravím!
Dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 .
Dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
milanstransky77
- Návštěvník
- Příspěvky: 14
- Registrován: 11 úno 2018 11:44
Re: zpomaléné PC, nejdou stránky pog chrome
Dobrý den,
děkuji moc
stáhne se mi soubor FRSTLauncher.exe s nulovou velikostí.
Děkuji
Milan
děkuji moc
stáhne se mi soubor FRSTLauncher.exe s nulovou velikostí.
Děkuji
Milan
-
milanstransky77
- Návštěvník
- Příspěvky: 14
- Registrován: 11 úno 2018 11:44
Re: zpomaléné PC, nejdou stránky pog chrome
Dobrý den,
nakonec se mi to podařilo, zde jsou logy.
Děkuji
Milan
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10.02.2018 02
Ran by tatulinek (administrator) on MOJKO (11-02-2018 13:01:04)
Running from D:\0000
Loaded Profiles: tatulinek (Available Profiles: tatulinek & huhu)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\scheduler.exe
(UPEK Inc.) C:\Program Files\Common Files\SPBA\upeksvr.exe
() C:\Program Files (x86)\BRTSvc\BRTSvc.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FCDBLog.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FortiESNAC.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FortiSSLVPNdaemon.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmService.exe
(ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe
(oh!soft) C:\Program Files (x86)\oCam\oCamTask.exe
() C:\Program Files (x86)\BRTSvc\BRTSvc.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FCHelper64.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FortiTray.exe
(Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
() C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenManagerService64.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2017\Moldflow\bin\mitsijm.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2018\Moldflow\bin\mitsijm.exe
() C:\Program Files (x86)\OA\oaSas.exe
() C:\Program Files (x86)\OA\oaSysStart.exe
(SODATSW) C:\Program Files (x86)\OA\rcClient.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
() C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(SODATSW) C:\Program Files (x86)\OA\oaServerNt.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Security\egui.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenBroker64.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\AcWebBrowser.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\AcWebBrowser.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe
() C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe
() C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(ALTAP) C:\Program Files\Altap Salamander\salamand.exe
(ALTAP) C:\Program Files\Altap Salamander\utils\salmon.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\update_task.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Endpoint Security\egui.exe [4133072 2012-07-04] (ESET)
HKLM\...\Run: [FileOpenBroker] => C:\Program Files\FileOpen\Services\FileOpenBroker64.exe [1092528 2012-10-17] (FileOpen Systems Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [706392 2017-12-19] (Autodesk, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\spba: C:\Program Files\Common Files\SPBA\homefus2.dll (UPEK Inc.)
HKU\S-1-5-21-3053704680-1182070124-146156013-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [833240 2014-12-23] (ZONER software)
HKU\S-1-5-21-3053704680-1182070124-146156013-1000\...\Policies\Explorer: []
GroupPolicy: Restriction <==== ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.254
Tcpip\..\Interfaces\{5EA80CB2-C835-40E4-86BC-5AD0974A1AB4}: [DhcpNameServer] 192.168.2.254
Tcpip\..\Interfaces\{717C84CE-38C1-464C-B7E4-921359CA34BE}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SK2M&ocid=SK2MDHP&osmkt=en-ww
SearchScopes: HKLM -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL =
SearchScopes: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll [2018-01-23] (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: ZeonIEEventHelper Class -> {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} -> C:\Program Files (x86)\Nuance\PDF Create 7\Bin\ZeonIEFavClient.dll [2011-03-25] (Zeon Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-01-23] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - DocuCom PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - C:\Program Files (x86)\Nuance\PDF Create 7\Bin\ZeonIEFavClient.dll [2011-03-25] (Zeon Corporation)
Toolbar: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-02-01] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default [2018-02-11]
FF Homepage: Mozilla\Firefox\Profiles\mr66dfm9.default -> hxxps://www.google.cz/?gws_rd=ssl
hxxps://www.seznam.cz/
FF Extension: (Bing Search) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\bingsearch.full@microsoft.com [2015-05-10] [Legacy] [not signed]
FF Extension: (Gmail S/MIME) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\{4c197c8f-a50f-4b49-a2d2-ed922c95612f}.xpi [2016-05-01] [Legacy]
FF Extension: (Video DownloadHelper) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2018-01-20]
FF Extension: (Easy YouTube Video Downloader) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi [2013-07-25] [Legacy] [not signed]
FF Extension: (Skype) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-05-25] [Legacy]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2017-11-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Endpoint Security\Mozilla Thunderbird
FF Extension: (ESET Endpoint Security Extension) - C:\Program Files\ESET\ESET Endpoint Security\Mozilla Thunderbird [2012-08-25] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_161.dll [2018-02-07] ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll [2012-12-08] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_161.dll [2018-02-07] ()
FF Plugin-x32: @FortinetCacheClean -> C:\Program Files (x86)\Fortinet\FortiClient\npccplugin.dll [2016-11-10] (Fortinet Inc.)
FF Plugin-x32: @FortinetCacheCleanEx -> C:\Program Files (x86)\Fortinet\FortiClient\npccpluginex.dll [2016-11-10] (Fortinet Inc.)
FF Plugin-x32: @FortinetTunnelControl -> C:\Program Files (x86)\Fortinet\FortiClient\nptcplugin.dll [2016-11-10] (Fortinet Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-01-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-01-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2015-04-10] (Nero AG)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll [2012-08-06] (Software602 a.s.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-12-13] (VideoLAN)
FF Plugin-x32: @wolfram.com/Mathematica -> C:\Program Files (x86)\Common Files\Wolfram Research\Browser\9.0.1.4055459\npmathplugin.dll [2013-01-24] (Wolfram Research, Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2017-11-01] (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)
FF Plugin HKU\S-1-5-21-3053704680-1182070124-146156013-1000: LWA64Plugin15.8 -> C:\Users\tatulinek\AppData\Local\Microsoft\LWAPlugin\15.8.20018.735\npLWAPlugin15.8-x64.dll [2015-02-10] (Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3053704680-1182070124-146156013-1000: LWAPlugin15.8 -> C:\Users\tatulinek\AppData\Local\Microsoft\LWAPlugin\15.8.20018.735\npLWAPlugin15.8.dll [2015-02-10] (Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> msn.com
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC ... earchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxp://www.bing.com/osjson.aspx?FORM=__PARAM__ ... earchTerms}
CHR Profile: C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default [2018-02-11]
CHR Extension: (Adobe Acrobat) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-04]
CHR Extension: (Sumatran Tiger theme) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\naheljmgfollfockdfjafbabagnkhmlf [2015-06-06]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Chrome Media Router) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-02-07]
CHR Extension: (MetaProducts Offline Explorer integration) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkijdmeepjhpenmighhaodgfoogncnlk [2015-03-24]
CHR HKU\S-1-5-21-3053704680-1182070124-146156013-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2017-11-01]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]
CHR HKLM-x32\...\Chrome\Extension: [pkijdmeepjhpenmighhaodgfoogncnlk] - C:\Program Files (x86)\Offline Explorer Pro\mpoe.crx [2014-01-29]
StartMenuInternet: Google Chrome.AHSBODP63WOPXUKKLDWU6FOYAA - C:\Users\tatulinek\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 ABBYY.Licensing.FineReader.Professional.12.0; C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe [961744 2014-07-13] (ABBYY Production LLC)
S4 ABBYY.Licensing.FineReader.Professional.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [759072 2008-10-27] (ABBYY (BIT Software))
S4 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1276216 2016-09-13] ()
R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1364904 2017-12-19] (Autodesk Inc.)
S4 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6086232 2017-01-19] ()
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2319848 2018-01-05] (Adobe Systems, Incorporated)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
S4 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
S4 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
S4 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-03-20] (CyberLink)
S4 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [323336 2013-03-20] (CyberLink)
S3 EhttpSrv; C:\Program Files\ESET\ESET Endpoint Security\EHttpSrv.exe [35720 2012-07-04] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe [999704 2012-07-04] (ESET)
S3 ESHASRV; C:\Program Files\ESET\ESET Endpoint Security\EShaSrv.exe [190208 2012-07-04] (ESET)
S2 ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
R2 FA_Scheduler; C:\Program Files (x86)\Fortinet\FortiClient\scheduler.exe [114194 2016-11-10] (Fortinet Inc.) [File not signed]
R2 FileOpenManagerService; C:\Program Files\FileOpen\Services\FileOpenManagerService64.exe [335288 2012-10-17] (FileOpen Systems Inc.)
R2 hasplms; C:\Windows\system32\hasplms.exe [4180576 2010-09-27] (SafeNet Inc.)
S4 joomlaApache; C:\Bitnami\JOOMLA~1.1-0\apache2\bin\httpd.exe [22528 2015-12-11] (Apache Software Foundation) [File not signed]
S4 joomlaMySQL; C:\Bitnami\joomla-3.5.1-0\mysql\bin\mysqld.exe [11074560 2016-01-15] () [File not signed]
R2 mitsijm2017; C:\Program Files\Autodesk\Inventor 2017\Moldflow\bin\mitsijm.exe [967456 2015-08-04] (Autodesk, Inc.)
R2 mitsijm2018; C:\Program Files\Autodesk\Inventor 2018\Moldflow\bin\mitsijm.exe [967664 2016-09-26] (Autodesk, Inc.)
S4 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4692840 2016-08-15] (Acronis International GmbH)
R2 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [7717528 2016-07-18] (Acronis International GmbH)
R2 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1510712 2016-09-13] ()
R2 oaSas; C:\Program Files (x86)\OA\oaSas.exe [12800 2016-04-03] () [File not signed]
R3 oaServerNT; C:\Program Files (x86)\OA\oaServerNt.exe [425984 2016-04-03] (SODATSW) [File not signed]
R2 oaSysStart; C:\Program Files (x86)\OA\oaSysStart.exe [345600 2016-04-03] () [File not signed]
S4 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [336824 2010-11-30] (arvato digital services llc)
R2 rcClient; C:\Program Files (x86)\OA\rcClient.exe [380416 2016-04-03] (SODATSW) [File not signed]
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [9729272 2016-08-11] ()
S2 SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe [156928 2016-11-17] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10945776 2017-12-15] (TeamViewer GmbH)
R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248736 2015-05-11] () [File not signed]
S3 USER_ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
R2 Wave Authentication Manager Service; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe [1600000 2011-07-01] (Wave Systems Corp.) [File not signed]
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-12-02] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [308088 2016-01-14] (Western Digital Technologies, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S4 AcronisOSSReinstallSvc; "C:\Program Files (x86)\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe" [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 cmnxusbser; C:\Windows\System32\DRIVERS\cmnxusbser.sys [146424 2015-11-24] (Wireless Data Device)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [213416 2012-07-10] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [179920 2012-07-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [152136 2012-03-29] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [194848 2012-03-29] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [38288 2012-03-29] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [63008 2012-03-29] (ESET)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [375136 2017-01-19] (Acronis International GmbH)
S3 fortiapd; C:\Windows\System32\drivers\fortiapd.sys [18000 2016-11-10] (Fortinet Inc)
R1 FortiFilter; C:\Windows\System32\DRIVERS\FortiFilter.sys [25312 2014-12-11] (Fortinet Inc)
S1 FortiFW; C:\Windows\System32\drivers\FortiFW2.sys [37456 2016-11-10] (Fortinet Inc)
S3 Fortips; C:\Windows\System32\drivers\fortips.sys [147536 2016-11-10] (Fortinet Inc)
S3 fortisniff; C:\Windows\System32\drivers\fortisniff2.sys [40528 2016-11-10] (Fortinet Inc)
R3 ft_vnic; C:\Windows\System32\DRIVERS\ftvnic.sys [16928 2011-03-21] (Fortinet Inc.)
S3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [215608 2016-08-22] (GenesysLogic)
S3 IntcAzAudAddService; C:\Windows\System32\drivers\RTDVHD64.sys [1980648 2010-10-04] (Realtek Semiconductor Corp.)
S3 massfilter_hs; C:\Windows\System32\drivers\massfilter_hs.sys [18456 2011-03-07] (HandSet Incorporated)
R0 oaFile; C:\Windows\System32\Drivers\oaFile.sys [61832 2016-04-03] (SODATSW)
R3 pppop; C:\Windows\System32\DRIVERS\pppop64.sys [54344 2016-03-29] (Fortinet Inc.)
S3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2016-10-18] ()
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1267544 2017-01-19] (Acronis International GmbH)
R2 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [212320 2017-01-19] (Acronis International GmbH)
S3 tnd; C:\Windows\System32\DRIVERS\tnd.sys [687968 2017-01-19] (Acronis International GmbH)
R2 virtual_file; C:\Windows\System32\DRIVERS\virtual_file.sys [331104 2017-01-19] (Acronis International GmbH)
S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64_prewin8.sys [23200 2016-01-14] (Western Digital Technologies)
R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [130320 2013-03-19] (CyberLink Corp.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-02-11 12:49 - 2018-02-11 12:49 - 000045713 _____ C:\ComboFix.txt
2018-02-11 12:11 - 2011-06-26 07:45 - 000256000 _____ C:\Windows\PEV.exe
2018-02-11 12:11 - 2010-11-07 18:20 - 000208896 _____ C:\Windows\MBR.exe
2018-02-11 12:11 - 2009-04-20 05:56 - 000060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000098816 _____ C:\Windows\sed.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000080412 _____ C:\Windows\grep.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000068096 _____ C:\Windows\zip.exe
2018-02-11 12:10 - 2018-02-11 12:49 - 000000000 ____D C:\Qoobox
2018-02-11 12:10 - 2018-02-11 12:47 - 000000000 ____D C:\Windows\erdnt
2018-02-11 11:30 - 2018-02-11 11:30 - 000000000 ____D C:\rsit
2018-02-11 11:30 - 2018-02-11 11:30 - 000000000 ____D C:\Program Files\trend micro
2018-02-09 21:24 - 2018-01-22 00:50 - 000136424 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-02-09 21:24 - 2018-01-22 00:40 - 000654336 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 001994752 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2018-02-09 21:24 - 2018-01-19 15:05 - 001569280 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000604672 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000450048 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000378880 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000236544 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2018-02-09 21:10 - 2018-02-09 21:10 - 000002173 _____ C:\Users\Public\Desktop\Autodesk Inventor Professional 2017.lnk
2018-02-09 21:03 - 2018-02-09 21:03 - 000000000 ____D C:\Users\tatulinek\Downloads\2BD0BAA3-7634-46FE-AF24-1F40002289DA
2018-02-08 20:38 - 2018-02-08 20:38 - 000001045 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 13.lnk
2018-02-08 20:38 - 2018-02-08 20:38 - 000001033 _____ C:\Users\Public\Desktop\TeamViewer 13.lnk
2018-02-08 20:38 - 2018-02-08 20:38 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-02-08 18:48 - 2018-01-07 16:47 - 000631680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-02-08 18:48 - 2018-01-07 16:45 - 005581544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-02-08 18:48 - 2018-01-07 16:45 - 000708328 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-02-08 18:48 - 2018-01-07 16:45 - 000262376 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-02-08 18:48 - 2018-01-07 16:45 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-02-08 18:48 - 2018-01-07 16:45 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-02-08 18:48 - 2018-01-07 16:42 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:34 - 001665384 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-02-08 18:48 - 2018-01-07 16:27 - 004013800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-02-08 18:48 - 2018-01-07 16:27 - 003959016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-02-08 18:48 - 2018-01-07 16:25 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:12 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-02-08 18:48 - 2018-01-07 16:12 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-02-08 18:48 - 2018-01-07 16:12 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-02-08 18:48 - 2018-01-07 16:11 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-02-08 18:48 - 2018-01-07 16:08 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-02-08 18:48 - 2018-01-07 16:07 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-02-08 18:48 - 2018-01-07 16:04 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-02-08 18:48 - 2018-01-07 16:03 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-02-08 18:48 - 2018-01-07 16:03 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-02-08 18:48 - 2018-01-07 16:03 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-02-08 18:48 - 2018-01-07 16:03 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-02-08 18:48 - 2018-01-07 16:03 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-02-08 18:48 - 2018-01-07 15:59 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-02-08 18:48 - 2018-01-07 15:59 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-02-08 18:48 - 2018-01-07 15:59 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-02-08 18:48 - 2018-01-07 15:59 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-02-08 18:48 - 2018-01-07 15:58 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-02-08 18:48 - 2018-01-07 15:58 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 15:58 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 15:58 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 15:58 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 001484288 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000218112 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 001176576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 000179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 000135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 000106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2018-02-08 18:48 - 2017-12-05 17:04 - 000404992 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2018-02-03 15:18 - 2018-02-03 15:18 - 000000000 ____D C:\Users\tatulinek\Downloads\8FC4AFF7-E85B-45CC-8AD8-267F3B450F0F
2018-02-02 21:27 - 2018-02-02 21:27 - 000468929 _____ C:\Users\tatulinek\Documents\Umíte česky_ Tohle jsou nejčastější chyby, které Češi dělají.pdf
2018-01-29 19:39 - 2018-01-29 19:39 - 000003460 _____ C:\Windows\System32\Tasks\AdobeGCInvoker-1.0-mojko-tatulinek
2018-01-17 16:04 - 2018-02-11 11:09 - 000008192 _____ C:\Windows\SysWOW64\WDPABKP.dat
2018-01-15 23:04 - 2018-01-15 23:04 - 000002954 _____ C:\Windows\System32\Tasks\BlockchainResearchTools
2018-01-15 23:04 - 2018-01-15 23:04 - 000002948 _____ C:\Windows\System32\Tasks\BlockchainResearchToolsSvc
2018-01-15 23:04 - 2018-01-15 23:04 - 000000000 ____D C:\Program Files (x86)\BRTSvc
2018-01-15 15:56 - 2018-01-15 15:56 - 000151988 ____N C:\Windows\apresult.xml
2018-01-15 15:54 - 2018-01-15 15:54 - 000000161 _____ C:\Windows\system32\autopart.opt
2018-01-15 15:54 - 2018-01-15 15:54 - 000000000 ____D C:\Windows\Acronis
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-02-11 13:01 - 2015-05-24 20:08 - 000000000 ____D C:\FRST
2018-02-11 12:53 - 2017-11-12 22:06 - 000000000 ____D C:\Users\tatulinek\AppData\Local\ElevatedDiagnostics
2018-02-11 12:53 - 2009-07-14 05:45 - 000035040 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-02-11 12:53 - 2009-07-14 05:45 - 000035040 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-02-11 12:53 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2018-02-11 12:52 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\tracing
2018-02-11 12:51 - 2016-12-09 04:43 - 000000000 ____D C:\Users\tatulinek\AppData\LocalLow\Mozilla
2018-02-11 12:51 - 2016-12-08 15:57 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-02-11 12:51 - 2012-08-25 11:04 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-02-11 12:42 - 2009-07-14 03:34 - 000000215 _____ C:\Windows\system.ini
2018-02-11 12:41 - 2013-02-15 20:04 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2018-02-11 12:40 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-02-11 12:31 - 2009-07-14 03:34 - 210239488 _____ C:\Windows\system32\config\software.bak
2018-02-11 12:31 - 2009-07-14 03:34 - 028311552 _____ C:\Windows\system32\config\system.bak
2018-02-11 12:31 - 2009-07-14 03:34 - 002883584 _____ C:\Windows\system32\config\default.bak
2018-02-11 12:31 - 2009-07-14 03:34 - 000262144 _____ C:\Windows\system32\config\security.bak
2018-02-11 12:31 - 2009-07-14 03:34 - 000262144 _____ C:\Windows\system32\config\sam.bak
2018-02-11 12:30 - 2009-07-14 06:32 - 000000000 ____D C:\Windows\Downloaded Program Files
2018-02-11 11:19 - 2014-06-19 20:56 - 000000000 ____D C:\Users\tatulinek\AppData\Local\Adobe
2018-02-09 22:36 - 2013-04-13 15:50 - 000000000 ____D C:\Users\tatulinek\AppData\Roaming\vlc
2018-02-09 21:36 - 2009-07-14 06:08 - 000032570 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-02-09 21:34 - 2014-12-11 08:15 - 000000000 ____D C:\Windows\system32\appraiser
2018-02-09 21:31 - 2011-02-15 08:08 - 001559268 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-02-09 21:31 - 2010-11-21 10:27 - 000668866 _____ C:\Windows\system32\perfh005.dat
2018-02-09 21:31 - 2010-11-21 10:27 - 000141526 _____ C:\Windows\system32\perfc005.dat
2018-02-09 21:31 - 2009-07-14 06:13 - 001559268 _____ C:\Windows\system32\PerfStringBackup.INI
2018-02-09 21:31 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2018-02-09 20:59 - 2012-12-25 13:56 - 000000000 ____D C:\Users\tatulinek\AppData\Roaming\AVS4YOU
2018-02-09 20:48 - 2009-07-14 05:45 - 005302536 _____ C:\Windows\system32\FNTCACHE.DAT
2018-02-09 00:08 - 2012-08-25 10:17 - 000234840 _____ C:\Users\tatulinek\AppData\Local\GDIPFONTCACHEV1.DAT
2018-02-08 22:36 - 2012-08-28 22:13 - 000002336 ____H C:\Users\tatulinek\Documents\Default.rdp
2018-02-07 01:53 - 2012-08-27 20:45 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-02-07 01:53 - 2012-08-27 20:45 - 000004396 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-02-07 01:53 - 2012-08-27 20:45 - 000000000 ____D C:\Windows\system32\Macromed
2018-02-07 01:53 - 2011-11-16 22:40 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-02-07 01:53 - 2011-11-16 22:40 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-02-07 00:40 - 2014-06-16 10:34 - 000002226 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-02-07 00:40 - 2014-06-16 10:34 - 000002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-02-06 16:45 - 2012-12-06 20:59 - 000000000 ____D C:\Users\tatulinek\Documents\Soubory aplikace Outlook
2018-02-06 15:16 - 2016-09-17 19:17 - 000000000 ____D C:\Users\Public\Documents\.forever
2018-02-03 15:32 - 2014-02-18 19:07 - 000000000 ____D C:\ProgramData\Package Cache
2018-02-03 15:30 - 2017-11-09 20:40 - 000002173 _____ C:\Users\Public\Desktop\Autodesk Inventor Professional 2018.lnk
2018-01-29 19:39 - 2012-08-25 10:37 - 000000000 ____D C:\Users\tatulinek\AppData\Roaming\Adobe
2018-01-23 16:25 - 2013-10-16 19:32 - 000000000 ____D C:\ProgramData\Oracle
2018-01-23 15:33 - 2014-12-07 16:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-01-23 15:33 - 2014-11-17 21:46 - 000000000 ____D C:\Program Files (x86)\Java
2018-01-23 15:30 - 2014-12-07 16:08 - 000097344 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2018-01-23 01:03 - 2012-09-19 21:07 - 000000000 ____D C:\Users\tatulinek\AppData\Local\CrashDumps
2018-01-21 13:19 - 2012-11-09 22:59 - 000000000 ____D C:\Users\tatulinek\Documents\Inventor
2018-01-21 12:07 - 2013-08-07 12:06 - 000000000 ____D C:\Users\tatulinek\AppData\Roaming\dvdcss
2018-01-15 23:04 - 2017-11-12 22:38 - 000002922 _____ C:\Windows\System32\Tasks\oCamTask
2018-01-15 23:04 - 2017-11-12 22:38 - 000000953 _____ C:\Users\Public\Desktop\oCam.lnk
2018-01-15 23:04 - 2015-02-23 19:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\oCam
2018-01-15 23:04 - 2015-02-23 19:23 - 000000000 ____D C:\Program Files (x86)\oCam
==================== Files in the root of some directories =======
2016-07-01 13:32 - 2016-06-30 01:32 - 000000040 ____H () C:\Program Files (x86)\c1ff8de6.tmp
2013-11-01 00:11 - 2013-11-01 00:15 - 000000100 _____ () C:\Users\tatulinek\AppData\Roaming\Camdata.ini
2013-11-01 00:11 - 2013-11-01 00:15 - 000000408 _____ () C:\Users\tatulinek\AppData\Roaming\CamLayout.ini
2013-11-01 00:11 - 2013-11-01 00:15 - 000000408 _____ () C:\Users\tatulinek\AppData\Roaming\CamShapes.ini
2013-10-31 23:45 - 2013-11-01 00:15 - 000004519 _____ () C:\Users\tatulinek\AppData\Roaming\CamStudio.cfg
2014-02-11 21:30 - 2014-02-11 21:55 - 000060265 _____ () C:\Users\tatulinek\AppData\Roaming\Hodnoty oddělené čárkami (Windows).ADR
2013-02-01 18:19 - 2017-07-21 10:07 - 000003367 _____ () C:\Users\tatulinek\AppData\Roaming\MOJKO.MTBF.txt
2012-08-25 11:01 - 2015-05-08 18:19 - 000000600 _____ () C:\Users\tatulinek\AppData\Roaming\winscp.rnd
2013-02-01 18:20 - 2017-07-21 13:05 - 000002714 _____ () C:\Users\tatulinek\AppData\Roaming\__AvidCloudManager.log
2013-02-01 18:20 - 2017-07-21 11:08 - 000006972 _____ () C:\Users\tatulinek\AppData\Roaming\__AvidCloudManagerPrevious.log
2013-02-01 22:13 - 2015-08-18 19:25 - 000005120 _____ () C:\Users\tatulinek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-06-26 15:28 - 2017-08-07 22:36 - 000007601 _____ () C:\Users\tatulinek\AppData\Local\resmon.resmoncfg
2013-11-04 17:27 - 2013-11-04 17:28 - 000001064 _____ () C:\Users\tatulinek\AppData\Local\SRDownloader.nast
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-01-08 19:21
==================== End of FRST.txt ============================
nakonec se mi to podařilo, zde jsou logy.
Děkuji
Milan
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10.02.2018 02
Ran by tatulinek (administrator) on MOJKO (11-02-2018 13:01:04)
Running from D:\0000
Loaded Profiles: tatulinek (Available Profiles: tatulinek & huhu)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\scheduler.exe
(UPEK Inc.) C:\Program Files\Common Files\SPBA\upeksvr.exe
() C:\Program Files (x86)\BRTSvc\BRTSvc.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FCDBLog.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FortiESNAC.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FortiSSLVPNdaemon.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmService.exe
(ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe
(oh!soft) C:\Program Files (x86)\oCam\oCamTask.exe
() C:\Program Files (x86)\BRTSvc\BRTSvc.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FCHelper64.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FortiTray.exe
(Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
() C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenManagerService64.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2017\Moldflow\bin\mitsijm.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2018\Moldflow\bin\mitsijm.exe
() C:\Program Files (x86)\OA\oaSas.exe
() C:\Program Files (x86)\OA\oaSysStart.exe
(SODATSW) C:\Program Files (x86)\OA\rcClient.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
() C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(SODATSW) C:\Program Files (x86)\OA\oaServerNt.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Security\egui.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenBroker64.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\AcWebBrowser.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\AcWebBrowser.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe
() C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe
() C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(ALTAP) C:\Program Files\Altap Salamander\salamand.exe
(ALTAP) C:\Program Files\Altap Salamander\utils\salmon.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\update_task.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Endpoint Security\egui.exe [4133072 2012-07-04] (ESET)
HKLM\...\Run: [FileOpenBroker] => C:\Program Files\FileOpen\Services\FileOpenBroker64.exe [1092528 2012-10-17] (FileOpen Systems Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [706392 2017-12-19] (Autodesk, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\spba: C:\Program Files\Common Files\SPBA\homefus2.dll (UPEK Inc.)
HKU\S-1-5-21-3053704680-1182070124-146156013-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [833240 2014-12-23] (ZONER software)
HKU\S-1-5-21-3053704680-1182070124-146156013-1000\...\Policies\Explorer: []
GroupPolicy: Restriction <==== ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.254
Tcpip\..\Interfaces\{5EA80CB2-C835-40E4-86BC-5AD0974A1AB4}: [DhcpNameServer] 192.168.2.254
Tcpip\..\Interfaces\{717C84CE-38C1-464C-B7E4-921359CA34BE}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SK2M&ocid=SK2MDHP&osmkt=en-ww
SearchScopes: HKLM -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL =
SearchScopes: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll [2018-01-23] (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: ZeonIEEventHelper Class -> {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} -> C:\Program Files (x86)\Nuance\PDF Create 7\Bin\ZeonIEFavClient.dll [2011-03-25] (Zeon Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-01-23] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - DocuCom PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - C:\Program Files (x86)\Nuance\PDF Create 7\Bin\ZeonIEFavClient.dll [2011-03-25] (Zeon Corporation)
Toolbar: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-02-01] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default [2018-02-11]
FF Homepage: Mozilla\Firefox\Profiles\mr66dfm9.default -> hxxps://www.google.cz/?gws_rd=ssl
hxxps://www.seznam.cz/
FF Extension: (Bing Search) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\bingsearch.full@microsoft.com [2015-05-10] [Legacy] [not signed]
FF Extension: (Gmail S/MIME) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\{4c197c8f-a50f-4b49-a2d2-ed922c95612f}.xpi [2016-05-01] [Legacy]
FF Extension: (Video DownloadHelper) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2018-01-20]
FF Extension: (Easy YouTube Video Downloader) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi [2013-07-25] [Legacy] [not signed]
FF Extension: (Skype) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-05-25] [Legacy]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2017-11-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Endpoint Security\Mozilla Thunderbird
FF Extension: (ESET Endpoint Security Extension) - C:\Program Files\ESET\ESET Endpoint Security\Mozilla Thunderbird [2012-08-25] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_161.dll [2018-02-07] ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll [2012-12-08] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_161.dll [2018-02-07] ()
FF Plugin-x32: @FortinetCacheClean -> C:\Program Files (x86)\Fortinet\FortiClient\npccplugin.dll [2016-11-10] (Fortinet Inc.)
FF Plugin-x32: @FortinetCacheCleanEx -> C:\Program Files (x86)\Fortinet\FortiClient\npccpluginex.dll [2016-11-10] (Fortinet Inc.)
FF Plugin-x32: @FortinetTunnelControl -> C:\Program Files (x86)\Fortinet\FortiClient\nptcplugin.dll [2016-11-10] (Fortinet Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-01-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-01-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2015-04-10] (Nero AG)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll [2012-08-06] (Software602 a.s.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-12-13] (VideoLAN)
FF Plugin-x32: @wolfram.com/Mathematica -> C:\Program Files (x86)\Common Files\Wolfram Research\Browser\9.0.1.4055459\npmathplugin.dll [2013-01-24] (Wolfram Research, Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2017-11-01] (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)
FF Plugin HKU\S-1-5-21-3053704680-1182070124-146156013-1000: LWA64Plugin15.8 -> C:\Users\tatulinek\AppData\Local\Microsoft\LWAPlugin\15.8.20018.735\npLWAPlugin15.8-x64.dll [2015-02-10] (Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3053704680-1182070124-146156013-1000: LWAPlugin15.8 -> C:\Users\tatulinek\AppData\Local\Microsoft\LWAPlugin\15.8.20018.735\npLWAPlugin15.8.dll [2015-02-10] (Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> msn.com
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC ... earchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxp://www.bing.com/osjson.aspx?FORM=__PARAM__ ... earchTerms}
CHR Profile: C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default [2018-02-11]
CHR Extension: (Adobe Acrobat) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-04]
CHR Extension: (Sumatran Tiger theme) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\naheljmgfollfockdfjafbabagnkhmlf [2015-06-06]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Chrome Media Router) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-02-07]
CHR Extension: (MetaProducts Offline Explorer integration) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkijdmeepjhpenmighhaodgfoogncnlk [2015-03-24]
CHR HKU\S-1-5-21-3053704680-1182070124-146156013-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2017-11-01]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]
CHR HKLM-x32\...\Chrome\Extension: [pkijdmeepjhpenmighhaodgfoogncnlk] - C:\Program Files (x86)\Offline Explorer Pro\mpoe.crx [2014-01-29]
StartMenuInternet: Google Chrome.AHSBODP63WOPXUKKLDWU6FOYAA - C:\Users\tatulinek\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 ABBYY.Licensing.FineReader.Professional.12.0; C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe [961744 2014-07-13] (ABBYY Production LLC)
S4 ABBYY.Licensing.FineReader.Professional.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [759072 2008-10-27] (ABBYY (BIT Software))
S4 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1276216 2016-09-13] ()
R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1364904 2017-12-19] (Autodesk Inc.)
S4 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6086232 2017-01-19] ()
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2319848 2018-01-05] (Adobe Systems, Incorporated)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
S4 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
S4 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
S4 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-03-20] (CyberLink)
S4 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [323336 2013-03-20] (CyberLink)
S3 EhttpSrv; C:\Program Files\ESET\ESET Endpoint Security\EHttpSrv.exe [35720 2012-07-04] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe [999704 2012-07-04] (ESET)
S3 ESHASRV; C:\Program Files\ESET\ESET Endpoint Security\EShaSrv.exe [190208 2012-07-04] (ESET)
S2 ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
R2 FA_Scheduler; C:\Program Files (x86)\Fortinet\FortiClient\scheduler.exe [114194 2016-11-10] (Fortinet Inc.) [File not signed]
R2 FileOpenManagerService; C:\Program Files\FileOpen\Services\FileOpenManagerService64.exe [335288 2012-10-17] (FileOpen Systems Inc.)
R2 hasplms; C:\Windows\system32\hasplms.exe [4180576 2010-09-27] (SafeNet Inc.)
S4 joomlaApache; C:\Bitnami\JOOMLA~1.1-0\apache2\bin\httpd.exe [22528 2015-12-11] (Apache Software Foundation) [File not signed]
S4 joomlaMySQL; C:\Bitnami\joomla-3.5.1-0\mysql\bin\mysqld.exe [11074560 2016-01-15] () [File not signed]
R2 mitsijm2017; C:\Program Files\Autodesk\Inventor 2017\Moldflow\bin\mitsijm.exe [967456 2015-08-04] (Autodesk, Inc.)
R2 mitsijm2018; C:\Program Files\Autodesk\Inventor 2018\Moldflow\bin\mitsijm.exe [967664 2016-09-26] (Autodesk, Inc.)
S4 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4692840 2016-08-15] (Acronis International GmbH)
R2 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [7717528 2016-07-18] (Acronis International GmbH)
R2 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1510712 2016-09-13] ()
R2 oaSas; C:\Program Files (x86)\OA\oaSas.exe [12800 2016-04-03] () [File not signed]
R3 oaServerNT; C:\Program Files (x86)\OA\oaServerNt.exe [425984 2016-04-03] (SODATSW) [File not signed]
R2 oaSysStart; C:\Program Files (x86)\OA\oaSysStart.exe [345600 2016-04-03] () [File not signed]
S4 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [336824 2010-11-30] (arvato digital services llc)
R2 rcClient; C:\Program Files (x86)\OA\rcClient.exe [380416 2016-04-03] (SODATSW) [File not signed]
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [9729272 2016-08-11] ()
S2 SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe [156928 2016-11-17] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10945776 2017-12-15] (TeamViewer GmbH)
R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248736 2015-05-11] () [File not signed]
S3 USER_ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
R2 Wave Authentication Manager Service; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe [1600000 2011-07-01] (Wave Systems Corp.) [File not signed]
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-12-02] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [308088 2016-01-14] (Western Digital Technologies, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S4 AcronisOSSReinstallSvc; "C:\Program Files (x86)\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe" [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 cmnxusbser; C:\Windows\System32\DRIVERS\cmnxusbser.sys [146424 2015-11-24] (Wireless Data Device)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [213416 2012-07-10] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [179920 2012-07-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [152136 2012-03-29] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [194848 2012-03-29] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [38288 2012-03-29] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [63008 2012-03-29] (ESET)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [375136 2017-01-19] (Acronis International GmbH)
S3 fortiapd; C:\Windows\System32\drivers\fortiapd.sys [18000 2016-11-10] (Fortinet Inc)
R1 FortiFilter; C:\Windows\System32\DRIVERS\FortiFilter.sys [25312 2014-12-11] (Fortinet Inc)
S1 FortiFW; C:\Windows\System32\drivers\FortiFW2.sys [37456 2016-11-10] (Fortinet Inc)
S3 Fortips; C:\Windows\System32\drivers\fortips.sys [147536 2016-11-10] (Fortinet Inc)
S3 fortisniff; C:\Windows\System32\drivers\fortisniff2.sys [40528 2016-11-10] (Fortinet Inc)
R3 ft_vnic; C:\Windows\System32\DRIVERS\ftvnic.sys [16928 2011-03-21] (Fortinet Inc.)
S3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [215608 2016-08-22] (GenesysLogic)
S3 IntcAzAudAddService; C:\Windows\System32\drivers\RTDVHD64.sys [1980648 2010-10-04] (Realtek Semiconductor Corp.)
S3 massfilter_hs; C:\Windows\System32\drivers\massfilter_hs.sys [18456 2011-03-07] (HandSet Incorporated)
R0 oaFile; C:\Windows\System32\Drivers\oaFile.sys [61832 2016-04-03] (SODATSW)
R3 pppop; C:\Windows\System32\DRIVERS\pppop64.sys [54344 2016-03-29] (Fortinet Inc.)
S3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2016-10-18] ()
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1267544 2017-01-19] (Acronis International GmbH)
R2 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [212320 2017-01-19] (Acronis International GmbH)
S3 tnd; C:\Windows\System32\DRIVERS\tnd.sys [687968 2017-01-19] (Acronis International GmbH)
R2 virtual_file; C:\Windows\System32\DRIVERS\virtual_file.sys [331104 2017-01-19] (Acronis International GmbH)
S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64_prewin8.sys [23200 2016-01-14] (Western Digital Technologies)
R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [130320 2013-03-19] (CyberLink Corp.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-02-11 12:49 - 2018-02-11 12:49 - 000045713 _____ C:\ComboFix.txt
2018-02-11 12:11 - 2011-06-26 07:45 - 000256000 _____ C:\Windows\PEV.exe
2018-02-11 12:11 - 2010-11-07 18:20 - 000208896 _____ C:\Windows\MBR.exe
2018-02-11 12:11 - 2009-04-20 05:56 - 000060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000098816 _____ C:\Windows\sed.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000080412 _____ C:\Windows\grep.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000068096 _____ C:\Windows\zip.exe
2018-02-11 12:10 - 2018-02-11 12:49 - 000000000 ____D C:\Qoobox
2018-02-11 12:10 - 2018-02-11 12:47 - 000000000 ____D C:\Windows\erdnt
2018-02-11 11:30 - 2018-02-11 11:30 - 000000000 ____D C:\rsit
2018-02-11 11:30 - 2018-02-11 11:30 - 000000000 ____D C:\Program Files\trend micro
2018-02-09 21:24 - 2018-01-22 00:50 - 000136424 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-02-09 21:24 - 2018-01-22 00:40 - 000654336 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 001994752 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2018-02-09 21:24 - 2018-01-19 15:05 - 001569280 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000604672 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000450048 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000378880 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000236544 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2018-02-09 21:10 - 2018-02-09 21:10 - 000002173 _____ C:\Users\Public\Desktop\Autodesk Inventor Professional 2017.lnk
2018-02-09 21:03 - 2018-02-09 21:03 - 000000000 ____D C:\Users\tatulinek\Downloads\2BD0BAA3-7634-46FE-AF24-1F40002289DA
2018-02-08 20:38 - 2018-02-08 20:38 - 000001045 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 13.lnk
2018-02-08 20:38 - 2018-02-08 20:38 - 000001033 _____ C:\Users\Public\Desktop\TeamViewer 13.lnk
2018-02-08 20:38 - 2018-02-08 20:38 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-02-08 18:48 - 2018-01-07 16:47 - 000631680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-02-08 18:48 - 2018-01-07 16:45 - 005581544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-02-08 18:48 - 2018-01-07 16:45 - 000708328 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-02-08 18:48 - 2018-01-07 16:45 - 000262376 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-02-08 18:48 - 2018-01-07 16:45 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-02-08 18:48 - 2018-01-07 16:45 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-02-08 18:48 - 2018-01-07 16:42 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:34 - 001665384 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-02-08 18:48 - 2018-01-07 16:27 - 004013800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-02-08 18:48 - 2018-01-07 16:27 - 003959016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-02-08 18:48 - 2018-01-07 16:25 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:12 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-02-08 18:48 - 2018-01-07 16:12 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-02-08 18:48 - 2018-01-07 16:12 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-02-08 18:48 - 2018-01-07 16:11 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-02-08 18:48 - 2018-01-07 16:08 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-02-08 18:48 - 2018-01-07 16:07 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-02-08 18:48 - 2018-01-07 16:04 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-02-08 18:48 - 2018-01-07 16:03 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-02-08 18:48 - 2018-01-07 16:03 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-02-08 18:48 - 2018-01-07 16:03 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-02-08 18:48 - 2018-01-07 16:03 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-02-08 18:48 - 2018-01-07 16:03 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-02-08 18:48 - 2018-01-07 15:59 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-02-08 18:48 - 2018-01-07 15:59 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-02-08 18:48 - 2018-01-07 15:59 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-02-08 18:48 - 2018-01-07 15:59 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-02-08 18:48 - 2018-01-07 15:58 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-02-08 18:48 - 2018-01-07 15:58 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 15:58 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 15:58 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 15:58 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 001484288 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000218112 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 001176576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 000179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 000135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 000106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2018-02-08 18:48 - 2017-12-05 17:04 - 000404992 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2018-02-03 15:18 - 2018-02-03 15:18 - 000000000 ____D C:\Users\tatulinek\Downloads\8FC4AFF7-E85B-45CC-8AD8-267F3B450F0F
2018-02-02 21:27 - 2018-02-02 21:27 - 000468929 _____ C:\Users\tatulinek\Documents\Umíte česky_ Tohle jsou nejčastější chyby, které Češi dělají.pdf
2018-01-29 19:39 - 2018-01-29 19:39 - 000003460 _____ C:\Windows\System32\Tasks\AdobeGCInvoker-1.0-mojko-tatulinek
2018-01-17 16:04 - 2018-02-11 11:09 - 000008192 _____ C:\Windows\SysWOW64\WDPABKP.dat
2018-01-15 23:04 - 2018-01-15 23:04 - 000002954 _____ C:\Windows\System32\Tasks\BlockchainResearchTools
2018-01-15 23:04 - 2018-01-15 23:04 - 000002948 _____ C:\Windows\System32\Tasks\BlockchainResearchToolsSvc
2018-01-15 23:04 - 2018-01-15 23:04 - 000000000 ____D C:\Program Files (x86)\BRTSvc
2018-01-15 15:56 - 2018-01-15 15:56 - 000151988 ____N C:\Windows\apresult.xml
2018-01-15 15:54 - 2018-01-15 15:54 - 000000161 _____ C:\Windows\system32\autopart.opt
2018-01-15 15:54 - 2018-01-15 15:54 - 000000000 ____D C:\Windows\Acronis
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-02-11 13:01 - 2015-05-24 20:08 - 000000000 ____D C:\FRST
2018-02-11 12:53 - 2017-11-12 22:06 - 000000000 ____D C:\Users\tatulinek\AppData\Local\ElevatedDiagnostics
2018-02-11 12:53 - 2009-07-14 05:45 - 000035040 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-02-11 12:53 - 2009-07-14 05:45 - 000035040 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-02-11 12:53 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2018-02-11 12:52 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\tracing
2018-02-11 12:51 - 2016-12-09 04:43 - 000000000 ____D C:\Users\tatulinek\AppData\LocalLow\Mozilla
2018-02-11 12:51 - 2016-12-08 15:57 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-02-11 12:51 - 2012-08-25 11:04 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-02-11 12:42 - 2009-07-14 03:34 - 000000215 _____ C:\Windows\system.ini
2018-02-11 12:41 - 2013-02-15 20:04 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2018-02-11 12:40 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-02-11 12:31 - 2009-07-14 03:34 - 210239488 _____ C:\Windows\system32\config\software.bak
2018-02-11 12:31 - 2009-07-14 03:34 - 028311552 _____ C:\Windows\system32\config\system.bak
2018-02-11 12:31 - 2009-07-14 03:34 - 002883584 _____ C:\Windows\system32\config\default.bak
2018-02-11 12:31 - 2009-07-14 03:34 - 000262144 _____ C:\Windows\system32\config\security.bak
2018-02-11 12:31 - 2009-07-14 03:34 - 000262144 _____ C:\Windows\system32\config\sam.bak
2018-02-11 12:30 - 2009-07-14 06:32 - 000000000 ____D C:\Windows\Downloaded Program Files
2018-02-11 11:19 - 2014-06-19 20:56 - 000000000 ____D C:\Users\tatulinek\AppData\Local\Adobe
2018-02-09 22:36 - 2013-04-13 15:50 - 000000000 ____D C:\Users\tatulinek\AppData\Roaming\vlc
2018-02-09 21:36 - 2009-07-14 06:08 - 000032570 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-02-09 21:34 - 2014-12-11 08:15 - 000000000 ____D C:\Windows\system32\appraiser
2018-02-09 21:31 - 2011-02-15 08:08 - 001559268 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-02-09 21:31 - 2010-11-21 10:27 - 000668866 _____ C:\Windows\system32\perfh005.dat
2018-02-09 21:31 - 2010-11-21 10:27 - 000141526 _____ C:\Windows\system32\perfc005.dat
2018-02-09 21:31 - 2009-07-14 06:13 - 001559268 _____ C:\Windows\system32\PerfStringBackup.INI
2018-02-09 21:31 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2018-02-09 20:59 - 2012-12-25 13:56 - 000000000 ____D C:\Users\tatulinek\AppData\Roaming\AVS4YOU
2018-02-09 20:48 - 2009-07-14 05:45 - 005302536 _____ C:\Windows\system32\FNTCACHE.DAT
2018-02-09 00:08 - 2012-08-25 10:17 - 000234840 _____ C:\Users\tatulinek\AppData\Local\GDIPFONTCACHEV1.DAT
2018-02-08 22:36 - 2012-08-28 22:13 - 000002336 ____H C:\Users\tatulinek\Documents\Default.rdp
2018-02-07 01:53 - 2012-08-27 20:45 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-02-07 01:53 - 2012-08-27 20:45 - 000004396 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-02-07 01:53 - 2012-08-27 20:45 - 000000000 ____D C:\Windows\system32\Macromed
2018-02-07 01:53 - 2011-11-16 22:40 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-02-07 01:53 - 2011-11-16 22:40 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-02-07 00:40 - 2014-06-16 10:34 - 000002226 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-02-07 00:40 - 2014-06-16 10:34 - 000002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-02-06 16:45 - 2012-12-06 20:59 - 000000000 ____D C:\Users\tatulinek\Documents\Soubory aplikace Outlook
2018-02-06 15:16 - 2016-09-17 19:17 - 000000000 ____D C:\Users\Public\Documents\.forever
2018-02-03 15:32 - 2014-02-18 19:07 - 000000000 ____D C:\ProgramData\Package Cache
2018-02-03 15:30 - 2017-11-09 20:40 - 000002173 _____ C:\Users\Public\Desktop\Autodesk Inventor Professional 2018.lnk
2018-01-29 19:39 - 2012-08-25 10:37 - 000000000 ____D C:\Users\tatulinek\AppData\Roaming\Adobe
2018-01-23 16:25 - 2013-10-16 19:32 - 000000000 ____D C:\ProgramData\Oracle
2018-01-23 15:33 - 2014-12-07 16:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-01-23 15:33 - 2014-11-17 21:46 - 000000000 ____D C:\Program Files (x86)\Java
2018-01-23 15:30 - 2014-12-07 16:08 - 000097344 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2018-01-23 01:03 - 2012-09-19 21:07 - 000000000 ____D C:\Users\tatulinek\AppData\Local\CrashDumps
2018-01-21 13:19 - 2012-11-09 22:59 - 000000000 ____D C:\Users\tatulinek\Documents\Inventor
2018-01-21 12:07 - 2013-08-07 12:06 - 000000000 ____D C:\Users\tatulinek\AppData\Roaming\dvdcss
2018-01-15 23:04 - 2017-11-12 22:38 - 000002922 _____ C:\Windows\System32\Tasks\oCamTask
2018-01-15 23:04 - 2017-11-12 22:38 - 000000953 _____ C:\Users\Public\Desktop\oCam.lnk
2018-01-15 23:04 - 2015-02-23 19:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\oCam
2018-01-15 23:04 - 2015-02-23 19:23 - 000000000 ____D C:\Program Files (x86)\oCam
==================== Files in the root of some directories =======
2016-07-01 13:32 - 2016-06-30 01:32 - 000000040 ____H () C:\Program Files (x86)\c1ff8de6.tmp
2013-11-01 00:11 - 2013-11-01 00:15 - 000000100 _____ () C:\Users\tatulinek\AppData\Roaming\Camdata.ini
2013-11-01 00:11 - 2013-11-01 00:15 - 000000408 _____ () C:\Users\tatulinek\AppData\Roaming\CamLayout.ini
2013-11-01 00:11 - 2013-11-01 00:15 - 000000408 _____ () C:\Users\tatulinek\AppData\Roaming\CamShapes.ini
2013-10-31 23:45 - 2013-11-01 00:15 - 000004519 _____ () C:\Users\tatulinek\AppData\Roaming\CamStudio.cfg
2014-02-11 21:30 - 2014-02-11 21:55 - 000060265 _____ () C:\Users\tatulinek\AppData\Roaming\Hodnoty oddělené čárkami (Windows).ADR
2013-02-01 18:19 - 2017-07-21 10:07 - 000003367 _____ () C:\Users\tatulinek\AppData\Roaming\MOJKO.MTBF.txt
2012-08-25 11:01 - 2015-05-08 18:19 - 000000600 _____ () C:\Users\tatulinek\AppData\Roaming\winscp.rnd
2013-02-01 18:20 - 2017-07-21 13:05 - 000002714 _____ () C:\Users\tatulinek\AppData\Roaming\__AvidCloudManager.log
2013-02-01 18:20 - 2017-07-21 11:08 - 000006972 _____ () C:\Users\tatulinek\AppData\Roaming\__AvidCloudManagerPrevious.log
2013-02-01 22:13 - 2015-08-18 19:25 - 000005120 _____ () C:\Users\tatulinek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-06-26 15:28 - 2017-08-07 22:36 - 000007601 _____ () C:\Users\tatulinek\AppData\Local\resmon.resmoncfg
2013-11-04 17:27 - 2013-11-04 17:28 - 000001064 _____ () C:\Users\tatulinek\AppData\Local\SRDownloader.nast
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-01-08 19:21
==================== End of FRST.txt ============================
- Přílohy
-
- Addition.rar
- (30.82 KiB) Staženo 90 x
-
Rudy
- Site Admin
- Příspěvky: 119429
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: zpomaléné PC, nejdou stránky pog chrome
Teď spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
milanstransky77
- Návštěvník
- Příspěvky: 14
- Registrován: 11 úno 2018 11:44
Re: zpomaléné PC, nejdou stránky pog chrome
Dobrý den,
děkuji moc za Vaši pomoc a zasílám.
S pozdravem
Milan
AdwCleaner 7.0.8.0 - Logfile created on Sun Feb 11 12:41:31 2018
# Updated on 2018/08/02 by Malwarebytes
# Database: 02-08-2018.1
# Running on Windows 7 Professional (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
PUP.Optional.Legacy, C:\Users\tatulinek\AppData\Roaming\download Manager
PUP.Optional.Legacy, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
PUP.Optional.Legacy, C:\Program Files (x86)\myfree codec
PUP.Optional.Ask, C:\ProgramData\Ask
PUP.Optional.Ask, C:\ProgramData\Application Data\Ask
PUP.Optional.Ask, C:\Users\All Users\Ask
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\icq.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\wlogin.icq.com
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Myfree Codec
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\Myfree Codec
PUP.Optional.Legacy, [Key] - HKCU\Software\Myfree Codec
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\APN PIP
PUP.Optional.Legacy, [Key] - HKCU\Software\APN PIP
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\PIP
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\PIP
PUP.Optional.Legacy, [Key] - HKCU\Software\PIP
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
PUP.Optional.Conduit, [Key] - HKLM\SOFTWARE\Conduit
PUP.Optional.Conduit, [Key] - HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\Conduit
PUP.Optional.Conduit, [Key] - HKCU\Software\Conduit
PUP.Optional.ProductSetup.A, [Key] - HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\PRODUCTSETUP
PUP.Optional.ProductSetup.A, [Key] - HKCU\Software\PRODUCTSETUP
***** [ Firefox (and derivatives) ] *****
PUP.Optional.Legacy, Plugin found: Easy YouTube Video Downloader - Alactro LLC
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries.
*************************
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########
děkuji moc za Vaši pomoc a zasílám.
S pozdravem
Milan
AdwCleaner 7.0.8.0 - Logfile created on Sun Feb 11 12:41:31 2018
# Updated on 2018/08/02 by Malwarebytes
# Database: 02-08-2018.1
# Running on Windows 7 Professional (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
PUP.Optional.Legacy, C:\Users\tatulinek\AppData\Roaming\download Manager
PUP.Optional.Legacy, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
PUP.Optional.Legacy, C:\Program Files (x86)\myfree codec
PUP.Optional.Ask, C:\ProgramData\Ask
PUP.Optional.Ask, C:\ProgramData\Application Data\Ask
PUP.Optional.Ask, C:\Users\All Users\Ask
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\icq.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\wlogin.icq.com
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Myfree Codec
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\Myfree Codec
PUP.Optional.Legacy, [Key] - HKCU\Software\Myfree Codec
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\APN PIP
PUP.Optional.Legacy, [Key] - HKCU\Software\APN PIP
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\PIP
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\PIP
PUP.Optional.Legacy, [Key] - HKCU\Software\PIP
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
PUP.Optional.Conduit, [Key] - HKLM\SOFTWARE\Conduit
PUP.Optional.Conduit, [Key] - HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\Conduit
PUP.Optional.Conduit, [Key] - HKCU\Software\Conduit
PUP.Optional.ProductSetup.A, [Key] - HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\PRODUCTSETUP
PUP.Optional.ProductSetup.A, [Key] - HKCU\Software\PRODUCTSETUP
***** [ Firefox (and derivatives) ] *****
PUP.Optional.Legacy, Plugin found: Easy YouTube Video Downloader - Alactro LLC
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries.
*************************
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########
-
Rudy
- Site Admin
- Příspěvky: 119429
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: zpomaléné PC, nejdou stránky pog chrome
V ADW ještě klikněte na mazání, restartujte a dejte nový log FRST.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
milanstransky77
- Návštěvník
- Příspěvky: 14
- Registrován: 11 úno 2018 11:44
Re: zpomaléné PC, nejdou stránky pog chrome
Dobrý den,
zasílám nový log
děkuji moc za pomoc
Martin
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10.02.2018 02
Ran by tatulinek (administrator) on MOJKO (11-02-2018 21:31:55)
Running from D:\0000
Loaded Profiles: tatulinek (Available Profiles: tatulinek & huhu)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\scheduler.exe
(UPEK Inc.) C:\Program Files\Common Files\SPBA\upeksvr.exe
() C:\Program Files (x86)\BRTSvc\BRTSvc.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FCDBLog.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FortiESNAC.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FortiSSLVPNdaemon.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmService.exe
(ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe
(Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
() C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FCHelper64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenManagerService64.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2017\Moldflow\bin\mitsijm.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2018\Moldflow\bin\mitsijm.exe
() C:\Program Files (x86)\OA\oaSas.exe
() C:\Program Files (x86)\OA\oaSysStart.exe
() C:\Program Files (x86)\BRTSvc\BRTSvc.exe
(oh!soft) C:\Program Files (x86)\oCam\oCamTask.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FortiTray.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Security\egui.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenBroker64.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\AcWebBrowser.exe
(ALTAP) C:\Program Files\Altap Salamander\salamand.exe
(ALTAP) C:\Program Files\Altap Salamander\utils\salmon.exe
(Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\AcWebBrowser.exe
(Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\AcWebBrowser.exe
(SODATSW) C:\Program Files (x86)\OA\rcClient.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
() C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(SODATSW) C:\Program Files (x86)\OA\oaServerNt.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
() C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe
() C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe
() C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Endpoint Security\egui.exe [4133072 2012-07-04] (ESET)
HKLM\...\Run: [FileOpenBroker] => C:\Program Files\FileOpen\Services\FileOpenBroker64.exe [1092528 2012-10-17] (FileOpen Systems Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [706392 2017-12-19] (Autodesk, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\spba: C:\Program Files\Common Files\SPBA\homefus2.dll (UPEK Inc.)
HKU\S-1-5-21-3053704680-1182070124-146156013-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [833240 2014-12-23] (ZONER software)
HKU\S-1-5-21-3053704680-1182070124-146156013-1000\...\Policies\Explorer: []
GroupPolicy: Restriction <==== ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.254
Tcpip\..\Interfaces\{5EA80CB2-C835-40E4-86BC-5AD0974A1AB4}: [DhcpNameServer] 192.168.2.254
Tcpip\..\Interfaces\{717C84CE-38C1-464C-B7E4-921359CA34BE}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SK2M&ocid=SK2MDHP&osmkt=en-ww
SearchScopes: HKLM -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL =
SearchScopes: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll [2018-01-23] (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: ZeonIEEventHelper Class -> {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} -> C:\Program Files (x86)\Nuance\PDF Create 7\Bin\ZeonIEFavClient.dll [2011-03-25] (Zeon Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-01-23] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - DocuCom PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - C:\Program Files (x86)\Nuance\PDF Create 7\Bin\ZeonIEFavClient.dll [2011-03-25] (Zeon Corporation)
Toolbar: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-02-01] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default [2018-02-11]
FF Homepage: Mozilla\Firefox\Profiles\mr66dfm9.default -> hxxps://www.google.cz/?gws_rd=ssl
hxxps://www.seznam.cz/
FF Extension: (Bing Search) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\bingsearch.full@microsoft.com [2015-05-10] [Legacy] [not signed]
FF Extension: (Gmail S/MIME) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\{4c197c8f-a50f-4b49-a2d2-ed922c95612f}.xpi [2016-05-01] [Legacy]
FF Extension: (Video DownloadHelper) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2018-01-20]
FF Extension: (Easy YouTube Video Downloader) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi [2013-07-25] [Legacy] [not signed]
FF Extension: (Skype) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-05-25] [Legacy]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2017-11-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Endpoint Security\Mozilla Thunderbird
FF Extension: (ESET Endpoint Security Extension) - C:\Program Files\ESET\ESET Endpoint Security\Mozilla Thunderbird [2012-08-25] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_161.dll [2018-02-07] ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll [2012-12-08] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_161.dll [2018-02-07] ()
FF Plugin-x32: @FortinetCacheClean -> C:\Program Files (x86)\Fortinet\FortiClient\npccplugin.dll [2016-11-10] (Fortinet Inc.)
FF Plugin-x32: @FortinetCacheCleanEx -> C:\Program Files (x86)\Fortinet\FortiClient\npccpluginex.dll [2016-11-10] (Fortinet Inc.)
FF Plugin-x32: @FortinetTunnelControl -> C:\Program Files (x86)\Fortinet\FortiClient\nptcplugin.dll [2016-11-10] (Fortinet Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-01-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-01-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2015-04-10] (Nero AG)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll [2012-08-06] (Software602 a.s.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-12-13] (VideoLAN)
FF Plugin-x32: @wolfram.com/Mathematica -> C:\Program Files (x86)\Common Files\Wolfram Research\Browser\9.0.1.4055459\npmathplugin.dll [2013-01-24] (Wolfram Research, Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2017-11-01] (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)
FF Plugin HKU\S-1-5-21-3053704680-1182070124-146156013-1000: LWA64Plugin15.8 -> C:\Users\tatulinek\AppData\Local\Microsoft\LWAPlugin\15.8.20018.735\npLWAPlugin15.8-x64.dll [2015-02-10] (Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3053704680-1182070124-146156013-1000: LWAPlugin15.8 -> C:\Users\tatulinek\AppData\Local\Microsoft\LWAPlugin\15.8.20018.735\npLWAPlugin15.8.dll [2015-02-10] (Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> msn.com
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC ... earchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxp://www.bing.com/osjson.aspx?FORM=__PARAM__ ... earchTerms}
CHR Profile: C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default [2018-02-11]
CHR Extension: (Adobe Acrobat) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-04]
CHR Extension: (Sumatran Tiger theme) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\naheljmgfollfockdfjafbabagnkhmlf [2015-06-06]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Chrome Media Router) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-02-07]
CHR Extension: (MetaProducts Offline Explorer integration) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkijdmeepjhpenmighhaodgfoogncnlk [2015-03-24]
CHR HKU\S-1-5-21-3053704680-1182070124-146156013-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2017-11-01]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]
CHR HKLM-x32\...\Chrome\Extension: [pkijdmeepjhpenmighhaodgfoogncnlk] - C:\Program Files (x86)\Offline Explorer Pro\mpoe.crx [2014-01-29]
StartMenuInternet: Google Chrome.AHSBODP63WOPXUKKLDWU6FOYAA - C:\Users\tatulinek\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 ABBYY.Licensing.FineReader.Professional.12.0; C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe [961744 2014-07-13] (ABBYY Production LLC)
S4 ABBYY.Licensing.FineReader.Professional.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [759072 2008-10-27] (ABBYY (BIT Software))
S4 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1276216 2016-09-13] ()
R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1364904 2017-12-19] (Autodesk Inc.)
S4 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6086232 2017-01-19] ()
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2319848 2018-01-05] (Adobe Systems, Incorporated)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
S4 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
S4 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
S4 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-03-20] (CyberLink)
S4 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [323336 2013-03-20] (CyberLink)
S3 EhttpSrv; C:\Program Files\ESET\ESET Endpoint Security\EHttpSrv.exe [35720 2012-07-04] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe [999704 2012-07-04] (ESET)
S3 ESHASRV; C:\Program Files\ESET\ESET Endpoint Security\EShaSrv.exe [190208 2012-07-04] (ESET)
R2 ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
R2 FA_Scheduler; C:\Program Files (x86)\Fortinet\FortiClient\scheduler.exe [114194 2016-11-10] (Fortinet Inc.) [File not signed]
R2 FileOpenManagerService; C:\Program Files\FileOpen\Services\FileOpenManagerService64.exe [335288 2012-10-17] (FileOpen Systems Inc.)
R2 hasplms; C:\Windows\system32\hasplms.exe [4180576 2010-09-27] (SafeNet Inc.)
S4 joomlaApache; C:\Bitnami\JOOMLA~1.1-0\apache2\bin\httpd.exe [22528 2015-12-11] (Apache Software Foundation) [File not signed]
S4 joomlaMySQL; C:\Bitnami\joomla-3.5.1-0\mysql\bin\mysqld.exe [11074560 2016-01-15] () [File not signed]
R2 mitsijm2017; C:\Program Files\Autodesk\Inventor 2017\Moldflow\bin\mitsijm.exe [967456 2015-08-04] (Autodesk, Inc.)
R2 mitsijm2018; C:\Program Files\Autodesk\Inventor 2018\Moldflow\bin\mitsijm.exe [967664 2016-09-26] (Autodesk, Inc.)
S4 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4692840 2016-08-15] (Acronis International GmbH)
R2 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [7717528 2016-07-18] (Acronis International GmbH)
R2 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1510712 2016-09-13] ()
R2 oaSas; C:\Program Files (x86)\OA\oaSas.exe [12800 2016-04-03] () [File not signed]
R3 oaServerNT; C:\Program Files (x86)\OA\oaServerNt.exe [425984 2016-04-03] (SODATSW) [File not signed]
R2 oaSysStart; C:\Program Files (x86)\OA\oaSysStart.exe [345600 2016-04-03] () [File not signed]
S4 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [336824 2010-11-30] (arvato digital services llc)
R2 rcClient; C:\Program Files (x86)\OA\rcClient.exe [380416 2016-04-03] (SODATSW) [File not signed]
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [9729272 2016-08-11] ()
S2 SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe [156928 2016-11-17] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10945776 2017-12-15] (TeamViewer GmbH)
R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248736 2015-05-11] () [File not signed]
S3 USER_ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
R2 Wave Authentication Manager Service; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe [1600000 2011-07-01] (Wave Systems Corp.) [File not signed]
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-12-02] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [308088 2016-01-14] (Western Digital Technologies, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S4 AcronisOSSReinstallSvc; "C:\Program Files (x86)\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe" [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 cmnxusbser; C:\Windows\System32\DRIVERS\cmnxusbser.sys [146424 2015-11-24] (Wireless Data Device)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [213416 2012-07-10] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [179920 2012-07-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [152136 2012-03-29] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [194848 2012-03-29] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [38288 2012-03-29] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [63008 2012-03-29] (ESET)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [375136 2017-01-19] (Acronis International GmbH)
S3 fortiapd; C:\Windows\System32\drivers\fortiapd.sys [18000 2016-11-10] (Fortinet Inc)
R1 FortiFilter; C:\Windows\System32\DRIVERS\FortiFilter.sys [25312 2014-12-11] (Fortinet Inc)
S1 FortiFW; C:\Windows\System32\drivers\FortiFW2.sys [37456 2016-11-10] (Fortinet Inc)
S3 Fortips; C:\Windows\System32\drivers\fortips.sys [147536 2016-11-10] (Fortinet Inc)
S3 fortisniff; C:\Windows\System32\drivers\fortisniff2.sys [40528 2016-11-10] (Fortinet Inc)
R3 ft_vnic; C:\Windows\System32\DRIVERS\ftvnic.sys [16928 2011-03-21] (Fortinet Inc.)
S3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [215608 2016-08-22] (GenesysLogic)
S3 IntcAzAudAddService; C:\Windows\System32\drivers\RTDVHD64.sys [1980648 2010-10-04] (Realtek Semiconductor Corp.)
S3 massfilter_hs; C:\Windows\System32\drivers\massfilter_hs.sys [18456 2011-03-07] (HandSet Incorporated)
R0 oaFile; C:\Windows\System32\Drivers\oaFile.sys [61832 2016-04-03] (SODATSW)
R3 pppop; C:\Windows\System32\DRIVERS\pppop64.sys [54344 2016-03-29] (Fortinet Inc.)
R3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2016-10-18] ()
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1267544 2017-01-19] (Acronis International GmbH)
R2 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [212320 2017-01-19] (Acronis International GmbH)
S3 tnd; C:\Windows\System32\DRIVERS\tnd.sys [687968 2017-01-19] (Acronis International GmbH)
R2 virtual_file; C:\Windows\System32\DRIVERS\virtual_file.sys [331104 2017-01-19] (Acronis International GmbH)
S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64_prewin8.sys [23200 2016-01-14] (Western Digital Technologies)
R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [130320 2013-03-19] (CyberLink Corp.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-02-11 13:40 - 2018-02-11 21:27 - 000000000 ____D C:\AdwCleaner
2018-02-11 12:49 - 2018-02-11 12:49 - 000045713 _____ C:\ComboFix.txt
2018-02-11 12:11 - 2011-06-26 07:45 - 000256000 _____ C:\Windows\PEV.exe
2018-02-11 12:11 - 2010-11-07 18:20 - 000208896 _____ C:\Windows\MBR.exe
2018-02-11 12:11 - 2009-04-20 05:56 - 000060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000098816 _____ C:\Windows\sed.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000080412 _____ C:\Windows\grep.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000068096 _____ C:\Windows\zip.exe
2018-02-11 12:10 - 2018-02-11 12:49 - 000000000 ____D C:\Qoobox
2018-02-11 12:10 - 2018-02-11 12:47 - 000000000 ____D C:\Windows\erdnt
2018-02-11 11:30 - 2018-02-11 11:30 - 000000000 ____D C:\rsit
2018-02-11 11:30 - 2018-02-11 11:30 - 000000000 ____D C:\Program Files\trend micro
2018-02-09 21:24 - 2018-01-22 00:50 - 000136424 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-02-09 21:24 - 2018-01-22 00:40 - 000654336 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 001994752 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2018-02-09 21:24 - 2018-01-19 15:05 - 001569280 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000604672 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000450048 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000378880 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000236544 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2018-02-09 21:10 - 2018-02-09 21:10 - 000002173 _____ C:\Users\Public\Desktop\Autodesk Inventor Professional 2017.lnk
2018-02-09 21:03 - 2018-02-09 21:03 - 000000000 ____D C:\Users\tatulinek\Downloads\2BD0BAA3-7634-46FE-AF24-1F40002289DA
2018-02-08 20:38 - 2018-02-08 20:38 - 000001045 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 13.lnk
2018-02-08 20:38 - 2018-02-08 20:38 - 000001033 _____ C:\Users\Public\Desktop\TeamViewer 13.lnk
2018-02-08 20:38 - 2018-02-08 20:38 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-02-08 18:48 - 2018-01-07 16:47 - 000631680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-02-08 18:48 - 2018-01-07 16:45 - 005581544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-02-08 18:48 - 2018-01-07 16:45 - 000708328 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-02-08 18:48 - 2018-01-07 16:45 - 000262376 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-02-08 18:48 - 2018-01-07 16:45 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-02-08 18:48 - 2018-01-07 16:45 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-02-08 18:48 - 2018-01-07 16:42 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:34 - 001665384 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-02-08 18:48 - 2018-01-07 16:27 - 004013800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-02-08 18:48 - 2018-01-07 16:27 - 003959016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-02-08 18:48 - 2018-01-07 16:25 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:12 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-02-08 18:48 - 2018-01-07 16:12 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-02-08 18:48 - 2018-01-07 16:12 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-02-08 18:48 - 2018-01-07 16:11 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-02-08 18:48 - 2018-01-07 16:08 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-02-08 18:48 - 2018-01-07 16:07 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-02-08 18:48 - 2018-01-07 16:04 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-02-08 18:48 - 2018-01-07 16:03 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-02-08 18:48 - 2018-01-07 16:03 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-02-08 18:48 - 2018-01-07 16:03 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-02-08 18:48 - 2018-01-07 16:03 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-02-08 18:48 - 2018-01-07 16:03 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-02-08 18:48 - 2018-01-07 15:59 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-02-08 18:48 - 2018-01-07 15:59 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-02-08 18:48 - 2018-01-07 15:59 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-02-08 18:48 - 2018-01-07 15:59 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-02-08 18:48 - 2018-01-07 15:58 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-02-08 18:48 - 2018-01-07 15:58 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 15:58 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 15:58 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 15:58 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 001484288 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000218112 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 001176576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 000179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 000135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 000106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2018-02-08 18:48 - 2017-12-05 17:04 - 000404992 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2018-02-03 15:18 - 2018-02-03 15:18 - 000000000 ____D C:\Users\tatulinek\Downloads\8FC4AFF7-E85B-45CC-8AD8-267F3B450F0F
2018-02-02 21:27 - 2018-02-02 21:27 - 000468929 _____ C:\Users\tatulinek\Documents\Umíte česky_ Tohle jsou nejčastější chyby, které Češi dělají.pdf
2018-01-29 19:39 - 2018-01-29 19:39 - 000003460 _____ C:\Windows\System32\Tasks\AdobeGCInvoker-1.0-mojko-tatulinek
2018-01-17 16:04 - 2018-02-11 21:19 - 000008192 _____ C:\Windows\SysWOW64\WDPABKP.dat
2018-01-15 23:04 - 2018-01-15 23:04 - 000002954 _____ C:\Windows\System32\Tasks\BlockchainResearchTools
2018-01-15 23:04 - 2018-01-15 23:04 - 000002948 _____ C:\Windows\System32\Tasks\BlockchainResearchToolsSvc
2018-01-15 23:04 - 2018-01-15 23:04 - 000000000 ____D C:\Program Files (x86)\BRTSvc
2018-01-15 15:56 - 2018-01-15 15:56 - 000151988 ____N C:\Windows\apresult.xml
2018-01-15 15:54 - 2018-01-15 15:54 - 000000161 _____ C:\Windows\system32\autopart.opt
2018-01-15 15:54 - 2018-01-15 15:54 - 000000000 ____D C:\Windows\Acronis
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-02-11 21:31 - 2015-05-24 20:08 - 000000000 ____D C:\FRST
2018-02-11 21:28 - 2016-12-09 04:43 - 000000000 ____D C:\Users\tatulinek\AppData\LocalLow\Mozilla
2018-02-11 21:27 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\tracing
2018-02-11 21:25 - 2013-02-15 20:04 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2018-02-11 21:24 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-02-11 21:18 - 2012-10-26 10:02 - 000000000 ____D C:\Program Files (x86)\ABBYY FineReader 9.0
2018-02-11 20:45 - 2014-06-26 15:28 - 000007681 _____ C:\Users\tatulinek\AppData\Local\resmon.resmoncfg
2018-02-11 20:18 - 2009-07-14 05:45 - 000035040 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-02-11 20:18 - 2009-07-14 05:45 - 000035040 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-02-11 14:01 - 2012-08-25 11:04 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-02-11 12:53 - 2017-11-12 22:06 - 000000000 ____D C:\Users\tatulinek\AppData\Local\ElevatedDiagnostics
2018-02-11 12:53 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2018-02-11 12:51 - 2016-12-08 15:57 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-02-11 12:42 - 2009-07-14 03:34 - 000000215 _____ C:\Windows\system.ini
2018-02-11 12:31 - 2009-07-14 03:34 - 210239488 _____ C:\Windows\system32\config\software.bak
2018-02-11 12:31 - 2009-07-14 03:34 - 028311552 _____ C:\Windows\system32\config\system.bak
2018-02-11 12:31 - 2009-07-14 03:34 - 002883584 _____ C:\Windows\system32\config\default.bak
2018-02-11 12:31 - 2009-07-14 03:34 - 000262144 _____ C:\Windows\system32\config\security.bak
2018-02-11 12:31 - 2009-07-14 03:34 - 000262144 _____ C:\Windows\system32\config\sam.bak
2018-02-11 12:30 - 2009-07-14 06:32 - 000000000 ____D C:\Windows\Downloaded Program Files
2018-02-11 11:19 - 2014-06-19 20:56 - 000000000 ____D C:\Users\tatulinek\AppData\Local\Adobe
2018-02-09 22:36 - 2013-04-13 15:50 - 000000000 ____D C:\Users\tatulinek\AppData\Roaming\vlc
2018-02-09 21:36 - 2009-07-14 06:08 - 000032570 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-02-09 21:34 - 2014-12-11 08:15 - 000000000 ____D C:\Windows\system32\appraiser
2018-02-09 21:31 - 2011-02-15 08:08 - 001559268 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-02-09 21:31 - 2010-11-21 10:27 - 000668866 _____ C:\Windows\system32\perfh005.dat
2018-02-09 21:31 - 2010-11-21 10:27 - 000141526 _____ C:\Windows\system32\perfc005.dat
2018-02-09 21:31 - 2009-07-14 06:13 - 001559268 _____ C:\Windows\system32\PerfStringBackup.INI
2018-02-09 21:31 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2018-02-09 20:59 - 2012-12-25 13:56 - 000000000 ____D C:\Users\tatulinek\AppData\Roaming\AVS4YOU
2018-02-09 20:48 - 2009-07-14 05:45 - 005302536 _____ C:\Windows\system32\FNTCACHE.DAT
2018-02-09 00:08 - 2012-08-25 10:17 - 000234840 _____ C:\Users\tatulinek\AppData\Local\GDIPFONTCACHEV1.DAT
2018-02-08 22:36 - 2012-08-28 22:13 - 000002336 ____H C:\Users\tatulinek\Documents\Default.rdp
2018-02-07 01:53 - 2012-08-27 20:45 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-02-07 01:53 - 2012-08-27 20:45 - 000004396 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-02-07 01:53 - 2012-08-27 20:45 - 000000000 ____D C:\Windows\system32\Macromed
2018-02-07 01:53 - 2011-11-16 22:40 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-02-07 01:53 - 2011-11-16 22:40 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-02-07 00:40 - 2014-06-16 10:34 - 000002226 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-02-07 00:40 - 2014-06-16 10:34 - 000002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-02-06 16:45 - 2012-12-06 20:59 - 000000000 ____D C:\Users\tatulinek\Documents\Soubory aplikace Outlook
2018-02-06 15:16 - 2016-09-17 19:17 - 000000000 ____D C:\Users\Public\Documents\.forever
2018-02-03 15:32 - 2014-02-18 19:07 - 000000000 ____D C:\ProgramData\Package Cache
2018-02-03 15:30 - 2017-11-09 20:40 - 000002173 _____ C:\Users\Public\Desktop\Autodesk Inventor Professional 2018.lnk
2018-01-29 19:39 - 2012-08-25 10:37 - 000000000 ____D C:\Users\tatulinek\AppData\Roaming\Adobe
2018-01-23 16:25 - 2013-10-16 19:32 - 000000000 ____D C:\ProgramData\Oracle
2018-01-23 15:33 - 2014-12-07 16:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-01-23 15:33 - 2014-11-17 21:46 - 000000000 ____D C:\Program Files (x86)\Java
2018-01-23 15:30 - 2014-12-07 16:08 - 000097344 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2018-01-23 01:03 - 2012-09-19 21:07 - 000000000 ____D C:\Users\tatulinek\AppData\Local\CrashDumps
2018-01-21 13:19 - 2012-11-09 22:59 - 000000000 ____D C:\Users\tatulinek\Documents\Inventor
2018-01-21 12:07 - 2013-08-07 12:06 - 000000000 ____D C:\Users\tatulinek\AppData\Roaming\dvdcss
2018-01-15 23:04 - 2017-11-12 22:38 - 000002922 _____ C:\Windows\System32\Tasks\oCamTask
2018-01-15 23:04 - 2017-11-12 22:38 - 000000953 _____ C:\Users\Public\Desktop\oCam.lnk
2018-01-15 23:04 - 2015-02-23 19:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\oCam
2018-01-15 23:04 - 2015-02-23 19:23 - 000000000 ____D C:\Program Files (x86)\oCam
==================== Files in the root of some directories =======
2016-07-01 13:32 - 2016-06-30 01:32 - 000000040 ____H () C:\Program Files (x86)\c1ff8de6.tmp
2013-11-01 00:11 - 2013-11-01 00:15 - 000000100 _____ () C:\Users\tatulinek\AppData\Roaming\Camdata.ini
2013-11-01 00:11 - 2013-11-01 00:15 - 000000408 _____ () C:\Users\tatulinek\AppData\Roaming\CamLayout.ini
2013-11-01 00:11 - 2013-11-01 00:15 - 000000408 _____ () C:\Users\tatulinek\AppData\Roaming\CamShapes.ini
2013-10-31 23:45 - 2013-11-01 00:15 - 000004519 _____ () C:\Users\tatulinek\AppData\Roaming\CamStudio.cfg
2014-02-11 21:30 - 2014-02-11 21:55 - 000060265 _____ () C:\Users\tatulinek\AppData\Roaming\Hodnoty oddělené čárkami (Windows).ADR
2013-02-01 18:19 - 2017-07-21 10:07 - 000003367 _____ () C:\Users\tatulinek\AppData\Roaming\MOJKO.MTBF.txt
2012-08-25 11:01 - 2015-05-08 18:19 - 000000600 _____ () C:\Users\tatulinek\AppData\Roaming\winscp.rnd
2013-02-01 18:20 - 2017-07-21 13:05 - 000002714 _____ () C:\Users\tatulinek\AppData\Roaming\__AvidCloudManager.log
2013-02-01 18:20 - 2017-07-21 11:08 - 000006972 _____ () C:\Users\tatulinek\AppData\Roaming\__AvidCloudManagerPrevious.log
2013-02-01 22:13 - 2015-08-18 19:25 - 000005120 _____ () C:\Users\tatulinek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-06-26 15:28 - 2018-02-11 20:45 - 000007681 _____ () C:\Users\tatulinek\AppData\Local\resmon.resmoncfg
2013-11-04 17:27 - 2013-11-04 17:28 - 000001064 _____ () C:\Users\tatulinek\AppData\Local\SRDownloader.nast
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-01-08 19:21
==================== End of FRST.txt ============================
zasílám nový log
děkuji moc za pomoc
Martin
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10.02.2018 02
Ran by tatulinek (administrator) on MOJKO (11-02-2018 21:31:55)
Running from D:\0000
Loaded Profiles: tatulinek (Available Profiles: tatulinek & huhu)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\scheduler.exe
(UPEK Inc.) C:\Program Files\Common Files\SPBA\upeksvr.exe
() C:\Program Files (x86)\BRTSvc\BRTSvc.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FCDBLog.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FortiESNAC.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FortiSSLVPNdaemon.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmService.exe
(ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe
(Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
() C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FCHelper64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenManagerService64.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2017\Moldflow\bin\mitsijm.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2018\Moldflow\bin\mitsijm.exe
() C:\Program Files (x86)\OA\oaSas.exe
() C:\Program Files (x86)\OA\oaSysStart.exe
() C:\Program Files (x86)\BRTSvc\BRTSvc.exe
(oh!soft) C:\Program Files (x86)\oCam\oCamTask.exe
(Fortinet Inc.) C:\Program Files (x86)\Fortinet\FortiClient\FortiTray.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Security\egui.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenBroker64.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\AcWebBrowser.exe
(ALTAP) C:\Program Files\Altap Salamander\salamand.exe
(ALTAP) C:\Program Files\Altap Salamander\utils\salmon.exe
(Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\AcWebBrowser.exe
(Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\AcWebBrowser.exe
(SODATSW) C:\Program Files (x86)\OA\rcClient.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
() C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(SODATSW) C:\Program Files (x86)\OA\oaServerNt.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
() C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe
() C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe
() C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Endpoint Security\egui.exe [4133072 2012-07-04] (ESET)
HKLM\...\Run: [FileOpenBroker] => C:\Program Files\FileOpen\Services\FileOpenBroker64.exe [1092528 2012-10-17] (FileOpen Systems Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [706392 2017-12-19] (Autodesk, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\spba: C:\Program Files\Common Files\SPBA\homefus2.dll (UPEK Inc.)
HKU\S-1-5-21-3053704680-1182070124-146156013-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [833240 2014-12-23] (ZONER software)
HKU\S-1-5-21-3053704680-1182070124-146156013-1000\...\Policies\Explorer: []
GroupPolicy: Restriction <==== ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.254
Tcpip\..\Interfaces\{5EA80CB2-C835-40E4-86BC-5AD0974A1AB4}: [DhcpNameServer] 192.168.2.254
Tcpip\..\Interfaces\{717C84CE-38C1-464C-B7E4-921359CA34BE}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3053704680-1182070124-146156013-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SK2M&ocid=SK2MDHP&osmkt=en-ww
SearchScopes: HKLM -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL =
SearchScopes: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll [2018-01-23] (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: ZeonIEEventHelper Class -> {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} -> C:\Program Files (x86)\Nuance\PDF Create 7\Bin\ZeonIEFavClient.dll [2011-03-25] (Zeon Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-01-23] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - DocuCom PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - C:\Program Files (x86)\Nuance\PDF Create 7\Bin\ZeonIEFavClient.dll [2011-03-25] (Zeon Corporation)
Toolbar: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-02-01] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default [2018-02-11]
FF Homepage: Mozilla\Firefox\Profiles\mr66dfm9.default -> hxxps://www.google.cz/?gws_rd=ssl
hxxps://www.seznam.cz/
FF Extension: (Bing Search) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\bingsearch.full@microsoft.com [2015-05-10] [Legacy] [not signed]
FF Extension: (Gmail S/MIME) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\{4c197c8f-a50f-4b49-a2d2-ed922c95612f}.xpi [2016-05-01] [Legacy]
FF Extension: (Video DownloadHelper) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2018-01-20]
FF Extension: (Easy YouTube Video Downloader) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi [2013-07-25] [Legacy] [not signed]
FF Extension: (Skype) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-05-25] [Legacy]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2017-11-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Endpoint Security\Mozilla Thunderbird
FF Extension: (ESET Endpoint Security Extension) - C:\Program Files\ESET\ESET Endpoint Security\Mozilla Thunderbird [2012-08-25] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_161.dll [2018-02-07] ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll [2012-12-08] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_161.dll [2018-02-07] ()
FF Plugin-x32: @FortinetCacheClean -> C:\Program Files (x86)\Fortinet\FortiClient\npccplugin.dll [2016-11-10] (Fortinet Inc.)
FF Plugin-x32: @FortinetCacheCleanEx -> C:\Program Files (x86)\Fortinet\FortiClient\npccpluginex.dll [2016-11-10] (Fortinet Inc.)
FF Plugin-x32: @FortinetTunnelControl -> C:\Program Files (x86)\Fortinet\FortiClient\nptcplugin.dll [2016-11-10] (Fortinet Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-01-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-01-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2015-04-10] (Nero AG)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll [2012-08-06] (Software602 a.s.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-12-13] (VideoLAN)
FF Plugin-x32: @wolfram.com/Mathematica -> C:\Program Files (x86)\Common Files\Wolfram Research\Browser\9.0.1.4055459\npmathplugin.dll [2013-01-24] (Wolfram Research, Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2017-11-01] (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)
FF Plugin HKU\S-1-5-21-3053704680-1182070124-146156013-1000: LWA64Plugin15.8 -> C:\Users\tatulinek\AppData\Local\Microsoft\LWAPlugin\15.8.20018.735\npLWAPlugin15.8-x64.dll [2015-02-10] (Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3053704680-1182070124-146156013-1000: LWAPlugin15.8 -> C:\Users\tatulinek\AppData\Local\Microsoft\LWAPlugin\15.8.20018.735\npLWAPlugin15.8.dll [2015-02-10] (Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> msn.com
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC ... earchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxp://www.bing.com/osjson.aspx?FORM=__PARAM__ ... earchTerms}
CHR Profile: C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default [2018-02-11]
CHR Extension: (Adobe Acrobat) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-04]
CHR Extension: (Sumatran Tiger theme) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\naheljmgfollfockdfjafbabagnkhmlf [2015-06-06]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Chrome Media Router) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-02-07]
CHR Extension: (MetaProducts Offline Explorer integration) - C:\Users\tatulinek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkijdmeepjhpenmighhaodgfoogncnlk [2015-03-24]
CHR HKU\S-1-5-21-3053704680-1182070124-146156013-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2017-11-01]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]
CHR HKLM-x32\...\Chrome\Extension: [pkijdmeepjhpenmighhaodgfoogncnlk] - C:\Program Files (x86)\Offline Explorer Pro\mpoe.crx [2014-01-29]
StartMenuInternet: Google Chrome.AHSBODP63WOPXUKKLDWU6FOYAA - C:\Users\tatulinek\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 ABBYY.Licensing.FineReader.Professional.12.0; C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe [961744 2014-07-13] (ABBYY Production LLC)
S4 ABBYY.Licensing.FineReader.Professional.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [759072 2008-10-27] (ABBYY (BIT Software))
S4 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1276216 2016-09-13] ()
R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1364904 2017-12-19] (Autodesk Inc.)
S4 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6086232 2017-01-19] ()
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2319848 2018-01-05] (Adobe Systems, Incorporated)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
S4 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
S4 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
S4 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-03-20] (CyberLink)
S4 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [323336 2013-03-20] (CyberLink)
S3 EhttpSrv; C:\Program Files\ESET\ESET Endpoint Security\EHttpSrv.exe [35720 2012-07-04] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe [999704 2012-07-04] (ESET)
S3 ESHASRV; C:\Program Files\ESET\ESET Endpoint Security\EShaSrv.exe [190208 2012-07-04] (ESET)
R2 ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
R2 FA_Scheduler; C:\Program Files (x86)\Fortinet\FortiClient\scheduler.exe [114194 2016-11-10] (Fortinet Inc.) [File not signed]
R2 FileOpenManagerService; C:\Program Files\FileOpen\Services\FileOpenManagerService64.exe [335288 2012-10-17] (FileOpen Systems Inc.)
R2 hasplms; C:\Windows\system32\hasplms.exe [4180576 2010-09-27] (SafeNet Inc.)
S4 joomlaApache; C:\Bitnami\JOOMLA~1.1-0\apache2\bin\httpd.exe [22528 2015-12-11] (Apache Software Foundation) [File not signed]
S4 joomlaMySQL; C:\Bitnami\joomla-3.5.1-0\mysql\bin\mysqld.exe [11074560 2016-01-15] () [File not signed]
R2 mitsijm2017; C:\Program Files\Autodesk\Inventor 2017\Moldflow\bin\mitsijm.exe [967456 2015-08-04] (Autodesk, Inc.)
R2 mitsijm2018; C:\Program Files\Autodesk\Inventor 2018\Moldflow\bin\mitsijm.exe [967664 2016-09-26] (Autodesk, Inc.)
S4 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4692840 2016-08-15] (Acronis International GmbH)
R2 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [7717528 2016-07-18] (Acronis International GmbH)
R2 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1510712 2016-09-13] ()
R2 oaSas; C:\Program Files (x86)\OA\oaSas.exe [12800 2016-04-03] () [File not signed]
R3 oaServerNT; C:\Program Files (x86)\OA\oaServerNt.exe [425984 2016-04-03] (SODATSW) [File not signed]
R2 oaSysStart; C:\Program Files (x86)\OA\oaSysStart.exe [345600 2016-04-03] () [File not signed]
S4 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [336824 2010-11-30] (arvato digital services llc)
R2 rcClient; C:\Program Files (x86)\OA\rcClient.exe [380416 2016-04-03] (SODATSW) [File not signed]
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [9729272 2016-08-11] ()
S2 SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe [156928 2016-11-17] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10945776 2017-12-15] (TeamViewer GmbH)
R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248736 2015-05-11] () [File not signed]
S3 USER_ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
R2 Wave Authentication Manager Service; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe [1600000 2011-07-01] (Wave Systems Corp.) [File not signed]
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-12-02] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [308088 2016-01-14] (Western Digital Technologies, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S4 AcronisOSSReinstallSvc; "C:\Program Files (x86)\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe" [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 cmnxusbser; C:\Windows\System32\DRIVERS\cmnxusbser.sys [146424 2015-11-24] (Wireless Data Device)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [213416 2012-07-10] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [179920 2012-07-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [152136 2012-03-29] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [194848 2012-03-29] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [38288 2012-03-29] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [63008 2012-03-29] (ESET)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [375136 2017-01-19] (Acronis International GmbH)
S3 fortiapd; C:\Windows\System32\drivers\fortiapd.sys [18000 2016-11-10] (Fortinet Inc)
R1 FortiFilter; C:\Windows\System32\DRIVERS\FortiFilter.sys [25312 2014-12-11] (Fortinet Inc)
S1 FortiFW; C:\Windows\System32\drivers\FortiFW2.sys [37456 2016-11-10] (Fortinet Inc)
S3 Fortips; C:\Windows\System32\drivers\fortips.sys [147536 2016-11-10] (Fortinet Inc)
S3 fortisniff; C:\Windows\System32\drivers\fortisniff2.sys [40528 2016-11-10] (Fortinet Inc)
R3 ft_vnic; C:\Windows\System32\DRIVERS\ftvnic.sys [16928 2011-03-21] (Fortinet Inc.)
S3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [215608 2016-08-22] (GenesysLogic)
S3 IntcAzAudAddService; C:\Windows\System32\drivers\RTDVHD64.sys [1980648 2010-10-04] (Realtek Semiconductor Corp.)
S3 massfilter_hs; C:\Windows\System32\drivers\massfilter_hs.sys [18456 2011-03-07] (HandSet Incorporated)
R0 oaFile; C:\Windows\System32\Drivers\oaFile.sys [61832 2016-04-03] (SODATSW)
R3 pppop; C:\Windows\System32\DRIVERS\pppop64.sys [54344 2016-03-29] (Fortinet Inc.)
R3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2016-10-18] ()
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1267544 2017-01-19] (Acronis International GmbH)
R2 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [212320 2017-01-19] (Acronis International GmbH)
S3 tnd; C:\Windows\System32\DRIVERS\tnd.sys [687968 2017-01-19] (Acronis International GmbH)
R2 virtual_file; C:\Windows\System32\DRIVERS\virtual_file.sys [331104 2017-01-19] (Acronis International GmbH)
S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64_prewin8.sys [23200 2016-01-14] (Western Digital Technologies)
R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [130320 2013-03-19] (CyberLink Corp.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-02-11 13:40 - 2018-02-11 21:27 - 000000000 ____D C:\AdwCleaner
2018-02-11 12:49 - 2018-02-11 12:49 - 000045713 _____ C:\ComboFix.txt
2018-02-11 12:11 - 2011-06-26 07:45 - 000256000 _____ C:\Windows\PEV.exe
2018-02-11 12:11 - 2010-11-07 18:20 - 000208896 _____ C:\Windows\MBR.exe
2018-02-11 12:11 - 2009-04-20 05:56 - 000060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000098816 _____ C:\Windows\sed.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000080412 _____ C:\Windows\grep.exe
2018-02-11 12:11 - 2000-08-31 01:00 - 000068096 _____ C:\Windows\zip.exe
2018-02-11 12:10 - 2018-02-11 12:49 - 000000000 ____D C:\Qoobox
2018-02-11 12:10 - 2018-02-11 12:47 - 000000000 ____D C:\Windows\erdnt
2018-02-11 11:30 - 2018-02-11 11:30 - 000000000 ____D C:\rsit
2018-02-11 11:30 - 2018-02-11 11:30 - 000000000 ____D C:\Program Files\trend micro
2018-02-09 21:24 - 2018-01-22 00:50 - 000136424 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-02-09 21:24 - 2018-01-22 00:40 - 000654336 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 001994752 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2018-02-09 21:24 - 2018-01-19 15:05 - 001569280 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000604672 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000450048 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000378880 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2018-02-09 21:24 - 2018-01-19 15:05 - 000236544 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2018-02-09 21:10 - 2018-02-09 21:10 - 000002173 _____ C:\Users\Public\Desktop\Autodesk Inventor Professional 2017.lnk
2018-02-09 21:03 - 2018-02-09 21:03 - 000000000 ____D C:\Users\tatulinek\Downloads\2BD0BAA3-7634-46FE-AF24-1F40002289DA
2018-02-08 20:38 - 2018-02-08 20:38 - 000001045 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 13.lnk
2018-02-08 20:38 - 2018-02-08 20:38 - 000001033 _____ C:\Users\Public\Desktop\TeamViewer 13.lnk
2018-02-08 20:38 - 2018-02-08 20:38 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-02-08 18:48 - 2018-01-07 16:47 - 000631680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-02-08 18:48 - 2018-01-07 16:45 - 005581544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-02-08 18:48 - 2018-01-07 16:45 - 000708328 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-02-08 18:48 - 2018-01-07 16:45 - 000262376 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-02-08 18:48 - 2018-01-07 16:45 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-02-08 18:48 - 2018-01-07 16:45 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-02-08 18:48 - 2018-01-07 16:42 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:34 - 001665384 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-02-08 18:48 - 2018-01-07 16:27 - 004013800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-02-08 18:48 - 2018-01-07 16:27 - 003959016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-02-08 18:48 - 2018-01-07 16:25 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 16:12 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-02-08 18:48 - 2018-01-07 16:12 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-02-08 18:48 - 2018-01-07 16:12 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-02-08 18:48 - 2018-01-07 16:11 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-02-08 18:48 - 2018-01-07 16:08 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-02-08 18:48 - 2018-01-07 16:07 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-02-08 18:48 - 2018-01-07 16:04 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-02-08 18:48 - 2018-01-07 16:03 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-02-08 18:48 - 2018-01-07 16:03 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-02-08 18:48 - 2018-01-07 16:03 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-02-08 18:48 - 2018-01-07 16:03 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-02-08 18:48 - 2018-01-07 16:03 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-02-08 18:48 - 2018-01-07 15:59 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-02-08 18:48 - 2018-01-07 15:59 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-02-08 18:48 - 2018-01-07 15:59 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-02-08 18:48 - 2018-01-07 15:59 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-02-08 18:48 - 2018-01-07 15:58 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-02-08 18:48 - 2018-01-07 15:58 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 15:58 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 15:58 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-02-08 18:48 - 2018-01-07 15:58 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 001484288 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000218112 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2018-02-08 18:48 - 2017-12-05 18:36 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 001176576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 000179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 000135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2018-02-08 18:48 - 2017-12-05 18:08 - 000106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2018-02-08 18:48 - 2017-12-05 17:04 - 000404992 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2018-02-03 15:18 - 2018-02-03 15:18 - 000000000 ____D C:\Users\tatulinek\Downloads\8FC4AFF7-E85B-45CC-8AD8-267F3B450F0F
2018-02-02 21:27 - 2018-02-02 21:27 - 000468929 _____ C:\Users\tatulinek\Documents\Umíte česky_ Tohle jsou nejčastější chyby, které Češi dělají.pdf
2018-01-29 19:39 - 2018-01-29 19:39 - 000003460 _____ C:\Windows\System32\Tasks\AdobeGCInvoker-1.0-mojko-tatulinek
2018-01-17 16:04 - 2018-02-11 21:19 - 000008192 _____ C:\Windows\SysWOW64\WDPABKP.dat
2018-01-15 23:04 - 2018-01-15 23:04 - 000002954 _____ C:\Windows\System32\Tasks\BlockchainResearchTools
2018-01-15 23:04 - 2018-01-15 23:04 - 000002948 _____ C:\Windows\System32\Tasks\BlockchainResearchToolsSvc
2018-01-15 23:04 - 2018-01-15 23:04 - 000000000 ____D C:\Program Files (x86)\BRTSvc
2018-01-15 15:56 - 2018-01-15 15:56 - 000151988 ____N C:\Windows\apresult.xml
2018-01-15 15:54 - 2018-01-15 15:54 - 000000161 _____ C:\Windows\system32\autopart.opt
2018-01-15 15:54 - 2018-01-15 15:54 - 000000000 ____D C:\Windows\Acronis
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-02-11 21:31 - 2015-05-24 20:08 - 000000000 ____D C:\FRST
2018-02-11 21:28 - 2016-12-09 04:43 - 000000000 ____D C:\Users\tatulinek\AppData\LocalLow\Mozilla
2018-02-11 21:27 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\tracing
2018-02-11 21:25 - 2013-02-15 20:04 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2018-02-11 21:24 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-02-11 21:18 - 2012-10-26 10:02 - 000000000 ____D C:\Program Files (x86)\ABBYY FineReader 9.0
2018-02-11 20:45 - 2014-06-26 15:28 - 000007681 _____ C:\Users\tatulinek\AppData\Local\resmon.resmoncfg
2018-02-11 20:18 - 2009-07-14 05:45 - 000035040 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-02-11 20:18 - 2009-07-14 05:45 - 000035040 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-02-11 14:01 - 2012-08-25 11:04 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-02-11 12:53 - 2017-11-12 22:06 - 000000000 ____D C:\Users\tatulinek\AppData\Local\ElevatedDiagnostics
2018-02-11 12:53 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2018-02-11 12:51 - 2016-12-08 15:57 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-02-11 12:42 - 2009-07-14 03:34 - 000000215 _____ C:\Windows\system.ini
2018-02-11 12:31 - 2009-07-14 03:34 - 210239488 _____ C:\Windows\system32\config\software.bak
2018-02-11 12:31 - 2009-07-14 03:34 - 028311552 _____ C:\Windows\system32\config\system.bak
2018-02-11 12:31 - 2009-07-14 03:34 - 002883584 _____ C:\Windows\system32\config\default.bak
2018-02-11 12:31 - 2009-07-14 03:34 - 000262144 _____ C:\Windows\system32\config\security.bak
2018-02-11 12:31 - 2009-07-14 03:34 - 000262144 _____ C:\Windows\system32\config\sam.bak
2018-02-11 12:30 - 2009-07-14 06:32 - 000000000 ____D C:\Windows\Downloaded Program Files
2018-02-11 11:19 - 2014-06-19 20:56 - 000000000 ____D C:\Users\tatulinek\AppData\Local\Adobe
2018-02-09 22:36 - 2013-04-13 15:50 - 000000000 ____D C:\Users\tatulinek\AppData\Roaming\vlc
2018-02-09 21:36 - 2009-07-14 06:08 - 000032570 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-02-09 21:34 - 2014-12-11 08:15 - 000000000 ____D C:\Windows\system32\appraiser
2018-02-09 21:31 - 2011-02-15 08:08 - 001559268 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-02-09 21:31 - 2010-11-21 10:27 - 000668866 _____ C:\Windows\system32\perfh005.dat
2018-02-09 21:31 - 2010-11-21 10:27 - 000141526 _____ C:\Windows\system32\perfc005.dat
2018-02-09 21:31 - 2009-07-14 06:13 - 001559268 _____ C:\Windows\system32\PerfStringBackup.INI
2018-02-09 21:31 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2018-02-09 20:59 - 2012-12-25 13:56 - 000000000 ____D C:\Users\tatulinek\AppData\Roaming\AVS4YOU
2018-02-09 20:48 - 2009-07-14 05:45 - 005302536 _____ C:\Windows\system32\FNTCACHE.DAT
2018-02-09 00:08 - 2012-08-25 10:17 - 000234840 _____ C:\Users\tatulinek\AppData\Local\GDIPFONTCACHEV1.DAT
2018-02-08 22:36 - 2012-08-28 22:13 - 000002336 ____H C:\Users\tatulinek\Documents\Default.rdp
2018-02-07 01:53 - 2012-08-27 20:45 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-02-07 01:53 - 2012-08-27 20:45 - 000004396 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-02-07 01:53 - 2012-08-27 20:45 - 000000000 ____D C:\Windows\system32\Macromed
2018-02-07 01:53 - 2011-11-16 22:40 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-02-07 01:53 - 2011-11-16 22:40 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-02-07 00:40 - 2014-06-16 10:34 - 000002226 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-02-07 00:40 - 2014-06-16 10:34 - 000002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-02-06 16:45 - 2012-12-06 20:59 - 000000000 ____D C:\Users\tatulinek\Documents\Soubory aplikace Outlook
2018-02-06 15:16 - 2016-09-17 19:17 - 000000000 ____D C:\Users\Public\Documents\.forever
2018-02-03 15:32 - 2014-02-18 19:07 - 000000000 ____D C:\ProgramData\Package Cache
2018-02-03 15:30 - 2017-11-09 20:40 - 000002173 _____ C:\Users\Public\Desktop\Autodesk Inventor Professional 2018.lnk
2018-01-29 19:39 - 2012-08-25 10:37 - 000000000 ____D C:\Users\tatulinek\AppData\Roaming\Adobe
2018-01-23 16:25 - 2013-10-16 19:32 - 000000000 ____D C:\ProgramData\Oracle
2018-01-23 15:33 - 2014-12-07 16:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-01-23 15:33 - 2014-11-17 21:46 - 000000000 ____D C:\Program Files (x86)\Java
2018-01-23 15:30 - 2014-12-07 16:08 - 000097344 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2018-01-23 01:03 - 2012-09-19 21:07 - 000000000 ____D C:\Users\tatulinek\AppData\Local\CrashDumps
2018-01-21 13:19 - 2012-11-09 22:59 - 000000000 ____D C:\Users\tatulinek\Documents\Inventor
2018-01-21 12:07 - 2013-08-07 12:06 - 000000000 ____D C:\Users\tatulinek\AppData\Roaming\dvdcss
2018-01-15 23:04 - 2017-11-12 22:38 - 000002922 _____ C:\Windows\System32\Tasks\oCamTask
2018-01-15 23:04 - 2017-11-12 22:38 - 000000953 _____ C:\Users\Public\Desktop\oCam.lnk
2018-01-15 23:04 - 2015-02-23 19:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\oCam
2018-01-15 23:04 - 2015-02-23 19:23 - 000000000 ____D C:\Program Files (x86)\oCam
==================== Files in the root of some directories =======
2016-07-01 13:32 - 2016-06-30 01:32 - 000000040 ____H () C:\Program Files (x86)\c1ff8de6.tmp
2013-11-01 00:11 - 2013-11-01 00:15 - 000000100 _____ () C:\Users\tatulinek\AppData\Roaming\Camdata.ini
2013-11-01 00:11 - 2013-11-01 00:15 - 000000408 _____ () C:\Users\tatulinek\AppData\Roaming\CamLayout.ini
2013-11-01 00:11 - 2013-11-01 00:15 - 000000408 _____ () C:\Users\tatulinek\AppData\Roaming\CamShapes.ini
2013-10-31 23:45 - 2013-11-01 00:15 - 000004519 _____ () C:\Users\tatulinek\AppData\Roaming\CamStudio.cfg
2014-02-11 21:30 - 2014-02-11 21:55 - 000060265 _____ () C:\Users\tatulinek\AppData\Roaming\Hodnoty oddělené čárkami (Windows).ADR
2013-02-01 18:19 - 2017-07-21 10:07 - 000003367 _____ () C:\Users\tatulinek\AppData\Roaming\MOJKO.MTBF.txt
2012-08-25 11:01 - 2015-05-08 18:19 - 000000600 _____ () C:\Users\tatulinek\AppData\Roaming\winscp.rnd
2013-02-01 18:20 - 2017-07-21 13:05 - 000002714 _____ () C:\Users\tatulinek\AppData\Roaming\__AvidCloudManager.log
2013-02-01 18:20 - 2017-07-21 11:08 - 000006972 _____ () C:\Users\tatulinek\AppData\Roaming\__AvidCloudManagerPrevious.log
2013-02-01 22:13 - 2015-08-18 19:25 - 000005120 _____ () C:\Users\tatulinek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-06-26 15:28 - 2018-02-11 20:45 - 000007681 _____ () C:\Users\tatulinek\AppData\Local\resmon.resmoncfg
2013-11-04 17:27 - 2013-11-04 17:28 - 000001064 _____ () C:\Users\tatulinek\AppData\Local\SRDownloader.nast
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-01-08 19:21
==================== End of FRST.txt ============================
- Přílohy
-
- Addition.rar
- (30.93 KiB) Staženo 69 x
-
Rudy
- Site Admin
- Příspěvky: 119429
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: zpomaléné PC, nejdou stránky pog chrome
Otevřte poznámkový blok a zkopírujte do něj:
Uložte do D:\0000 jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle Corporation)
GroupPolicy: Restriction <==== ATTENTION
SearchScopes: HKLM -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL =
SearchScopes: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL =
FF Extension: (Bing Search) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\bingsearch.full@microsoft.com [2015-05-10] [Legacy] [not signed]
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM ... PARAM__&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxp://www.bing.com/osjson.aspx?FORM=__ ... M__&query={searchTerms}
C:\Program Files (x86)\c1ff8de6.tmp
C:\Users\tatulinek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
EmptyTemp:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
milanstransky77
- Návštěvník
- Příspěvky: 14
- Registrován: 11 úno 2018 11:44
Re: zpomaléné PC, nejdou stránky pog chrome
Dobrý den,
děkuji moc a zasílám log.
Martin
Fix result of Farbar Recovery Scan Tool (x64) Version: 10.02.2018 02
Ran by tatulinek (11-02-2018 22:07:57) Run:1
Running from D:\0000
Loaded Profiles: tatulinek (Available Profiles: tatulinek & huhu)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle Corporation)
GroupPolicy: Restriction <==== ATTENTION
SearchScopes: HKLM -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL =
SearchScopes: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL =
FF Extension: (Bing Search) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\bingsearch.full@microsoft.com [2015-05-10] [Legacy] [not signed]
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM ... PARAM__&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxp://www.bing.com/osjson.aspx?FORM=__ ... M__&query={searchTerms}
C:\Program Files (x86)\c1ff8de6.tmp
C:\Users\tatulinek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
EmptyTemp:
End
*****************
Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched" => removed successfully
C:\Windows\system32\GroupPolicy\Machine => moved successfully
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removed successfully
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8}" => removed successfully
HKLM\Software\Classes\CLSID\{3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} => key not found
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8}" => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} => key not found
"HKU\S-1-5-21-3053704680-1182070124-146156013-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
"HKU\S-1-5-21-3053704680-1182070124-146156013-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8}" => removed successfully
HKLM\Software\Classes\CLSID\{3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} => key not found
C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\bingsearch.full@microsoft.com => moved successfully
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => removed successfully
"Chrome DefaultSearchURL" => removed successfully
"Chrome DefaultSearchKeyword" => removed successfully
"Chrome DefaultSuggestURL" => removed successfully
C:\Program Files (x86)\c1ff8de6.tmp => moved successfully
C:\Users\tatulinek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 67639934 B
Java, Flash, Steam htmlcache => 11953 B
Windows/system/drivers => 9375021 B
Edge => 0 B
Chrome => 1033594491 B
Firefox => 458981267 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 42337178 B
systemprofile32 => 76720 B
LocalService => 82612 B
NetworkService => 15676388 B
tatulinek => 287221369 B
huhu => 11626723 B
RecycleBin => 0 B
EmptyTemp: => 1.8 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 22:11:04 ====
děkuji moc a zasílám log.
Martin
Fix result of Farbar Recovery Scan Tool (x64) Version: 10.02.2018 02
Ran by tatulinek (11-02-2018 22:07:57) Run:1
Running from D:\0000
Loaded Profiles: tatulinek (Available Profiles: tatulinek & huhu)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle Corporation)
GroupPolicy: Restriction <==== ATTENTION
SearchScopes: HKLM -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> DefaultScope {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL =
SearchScopes: HKU\S-1-5-21-3053704680-1182070124-146156013-1000 -> {3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} URL =
FF Extension: (Bing Search) - C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\bingsearch.full@microsoft.com [2015-05-10] [Legacy] [not signed]
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM ... PARAM__&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxp://www.bing.com/osjson.aspx?FORM=__ ... M__&query={searchTerms}
C:\Program Files (x86)\c1ff8de6.tmp
C:\Users\tatulinek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
EmptyTemp:
End
*****************
Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched" => removed successfully
C:\Windows\system32\GroupPolicy\Machine => moved successfully
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removed successfully
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8}" => removed successfully
HKLM\Software\Classes\CLSID\{3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} => key not found
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8}" => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} => key not found
"HKU\S-1-5-21-3053704680-1182070124-146156013-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
"HKU\S-1-5-21-3053704680-1182070124-146156013-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8}" => removed successfully
HKLM\Software\Classes\CLSID\{3E66105A-3ADE-4EFA-BDB6-043ACBC9BFB8} => key not found
C:\Users\tatulinek\AppData\Roaming\Mozilla\Firefox\Profiles\mr66dfm9.default\Extensions\bingsearch.full@microsoft.com => moved successfully
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => removed successfully
"Chrome DefaultSearchURL" => removed successfully
"Chrome DefaultSearchKeyword" => removed successfully
"Chrome DefaultSuggestURL" => removed successfully
C:\Program Files (x86)\c1ff8de6.tmp => moved successfully
C:\Users\tatulinek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 67639934 B
Java, Flash, Steam htmlcache => 11953 B
Windows/system/drivers => 9375021 B
Edge => 0 B
Chrome => 1033594491 B
Firefox => 458981267 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 42337178 B
systemprofile32 => 76720 B
LocalService => 82612 B
NetworkService => 15676388 B
tatulinek => 287221369 B
huhu => 11626723 B
RecycleBin => 0 B
EmptyTemp: => 1.8 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 22:11:04 ====
-
Rudy
- Site Admin
- Příspěvky: 119429
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: zpomaléné PC, nejdou stránky pog chrome
Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
milanstransky77
- Návštěvník
- Příspěvky: 14
- Registrován: 11 úno 2018 11:44
Re: zpomaléné PC, nejdou stránky pog chrome
Dobrý den,
děkuji moc. Zabralo to a funguje to.
Omlouvám se za pozdější odpověď, shořel mi router na internet.
Děkuji
děkuji moc. Zabralo to a funguje to.
Omlouvám se za pozdější odpověď, shořel mi router na internet.
Děkuji
-
Rudy
- Site Admin
- Příspěvky: 119429
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: zpomaléné PC, nejdou stránky pog chrome
Aha, taky hezká lapálie. To jsem rád. Nemáte zač! 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?