Prosím o kontrolu logu Vyřešeno

[FooDMasteR]

To odinstalování ComboFixu nějak nefunguje. No teď, když tady sedím tak ten swchost.exe zabírá 42-50% CPU. Může to být těmi aktualizacemi Windowsu, jak jsem někde četl?

DelFix

# DelFix v1.013 - Logfile created 12/06/2016 at 22:08:14
# Updated 17/04/2016 by Xplode
# Username : Aleš - NOTEBOOK
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)

~ Removing disinfection tools ...

Deleted : C:\Qoobox
Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\RegBackup
Deleted : C:\zoek-results.log
Deleted : C:\Users\Aleš\Desktop\CFScript.txt
Deleted : C:\Users\Aleš\Desktop\JRT.exe
Deleted : C:\Users\Aleš\Desktop\HijackThis.exe
Deleted : C:\Users\Aleš\Desktop\hijackthis.log
Deleted : C:\Users\Aleš\Desktop\MBR.dat
Deleted : C:\Users\Aleš\Desktop\RogueKillerX64.exe
Deleted : C:\Users\Aleš\Desktop\TFC.exe
Deleted : C:\Users\Aleš\Desktop\zoek.exe
Deleted : C:\Users\Aleš\Downloads\ComboFix.exe
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe
Deleted : HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASWMBR

~ Cleaning system restore ...

Deleted : RP #447 [zoek.exe restore point | 05/14/2016 20:38:18]
Deleted : RP #448 [ComboFix created restore point | 05/18/2016 15:53:06]
Deleted : RP #449 [Removed GTA San Andreas | 05/18/2016 17:05:21]
Deleted : RP #450 [ComboFix created restore point | 05/22/2016 07:09:36]
Deleted : RP #452 [Instalace balíčku ovladače zařízení: Avast Síťová služba | 05/28/2016 21:48:28]

New restore point created !

########## - EOF - ##########

[Reklama]

[jaro3]

použil si OTC?

Stáhni si OTL by OldTimer
na plochu. Ujisti se , že máš zavřena všechna ostatní okna a poklepej na ikonu OTL.Nahoře v okně pod Výstup klikni na minimální výstup.Pod Běžné registry změň na Vše. Zatrhni Kontrola na havěť “LOP“ a Kontrola na havěť “ Purity“ . Klikni na Prohledat. Všechny ostatní nastavení ponech jak jsou. Sken může trvat dlouho, až skončí otevřou se dva logy:
OTL.Txt
Extras.Txt
Jsou uloženy ve stejném místě jako OTL. Oba logy sem prosím zkopíruj.

[FooDMasteR]

OTL.txt

OTL logfile created on: 30.6.2016 22:26:14 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Aleš\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18230)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,00 Gb Total Physical Memory | 1,38 Gb Available Physical Memory | 46,21% Memory free
5,99 Gb Paging File | 4,48 Gb Available in Paging File | 74,86% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 221,62 Gb Total Space | 76,26 Gb Free Space | 34,41% Space Free | Partition Type: NTFS
Drive D: | 244,04 Gb Total Space | 151,03 Gb Free Space | 61,89% Space Free | Partition Type: NTFS

Computer Name: NOTEBOOK | User Name: Aleš | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Aleš\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\AVAST Software\Avast\avastui.exe (AVAST Software)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe (National Instruments Corporation)
PRC - C:\Windows\SysWOW64\lktsrv.exe (National Instruments Corporation)
PRC - C:\Windows\SysWOW64\lkads.exe (National Instruments Corporation)
PRC - C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation)
PRC - C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation)
PRC - C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe (National Instruments Corporation)
PRC - C:\Program Files (x86)\National Instruments\Shared\NI Error Reporting\nierserver.exe (National Instruments Corporation)
PRC - C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation)
PRC - C:\Program Files (x86)\National Instruments\Shared\Tagger\tagsrv.exe (National Instruments Corporation)
PRC - C:\Program Files (x86)\National Instruments\MAX\nimxs.exe (National Instruments Corporation)
PRC - C:\Windows\SysWOW64\lkcitdl.exe (National Instruments, Inc.)
PRC - C:\Windows\SysWOW64\fsproflt.exe (FSPro Labs)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Windows\PLFSetI.exe ()


========== Modules (No Company Name) ==========

MOD - C:\Program Files\AVAST Software\Avast\ffl2.dll ()
MOD - C:\Program Files\AVAST Software\Avast\log.dll ()
MOD - C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll ()
MOD - C:\Program Files\AVAST Software\Avast\libcef.dll ()
MOD - C:\Program Files (x86)\National Instruments\Shared\NI Error Reporting\niwsrp.dll ()
MOD - C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\xerces-depdom_2_6.dll ()
MOD - C:\Windows\PLFSetI.exe ()


========== Services (SafeList) ==========

SRV:64bit: - (avast! Antivirus) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV:64bit: - (IEEtwCollectorService) -- C:\Windows\SysNative\IEEtwCollector.exe (Microsoft Corporation)
SRV:64bit: - (DiagTrack) -- C:\Windows\SysNative\diagtrack.dll (Microsoft Corporation)
SRV:64bit: - (NIApplicationWebServer64) -- C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (NIDomainService) -- C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe (National Instruments Corporation)
SRV - (lkTimeSync) -- C:\Windows\SysWOW64\lktsrv.exe (National Instruments Corporation)
SRV - (lkClassAds) -- C:\Windows\SysWOW64\lkads.exe (National Instruments Corporation)
SRV - (NISystemWebServer) -- C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation)
SRV - (NIApplicationWebServer) -- C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation)
SRV - (NiSvcLoc) -- C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe (National Instruments Corporation)
SRV - (nimDNSResponder) -- C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation)
SRV - (NITaggerService) -- C:\Program Files (x86)\National Instruments\Shared\Tagger\tagsrv.exe (National Instruments Corporation)
SRV - (mxssvr) -- C:\Program Files (x86)\National Instruments\MAX\nimxs.exe (National Instruments Corporation)
SRV - (AtherosSvc) -- C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Atheros Commnucations)
SRV - (LkCitadelServer) -- C:\Windows\SysWOW64\lkcitdl.exe (National Instruments, Inc.)
SRV - (NILM License Manager) -- C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\lmgrd.exe (Macrovision Corporation)
SRV - (fsproflt) -- C:\Windows\SysWOW64\fsproflt.exe (FSPro Labs)
SRV - (IAANTMON) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (aswSP) -- C:\Windows\SysNative\drivers\aswSP.sys (AVAST Software)
DRV:64bit: - (aswVmm) -- C:\Windows\SysNative\drivers\aswVmm.sys (AVAST Software)
DRV:64bit: - (aswStm) -- C:\Windows\SysNative\drivers\aswStm.sys (AVAST Software)
DRV:64bit: - (aswRvrt) -- C:\Windows\SysNative\drivers\aswRvrt.sys (AVAST Software)
DRV:64bit: - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:64bit: - (aswRdr) -- C:\Windows\SysNative\drivers\aswRdr2.sys (AVAST Software)
DRV:64bit: - (aswHwid) -- C:\Windows\SysNative\drivers\aswHwid.sys (AVAST Software)
DRV:64bit: - (aswSnx) -- C:\Windows\SysNative\drivers\aswSnx.sys (AVAST Software)
DRV:64bit: - (aswKbd) -- C:\Windows\SysNative\drivers\aswKbd.sys (AVAST Software)
DRV:64bit: - (HssDRV6) -- C:\Windows\SysNative\drivers\hssdrv6.sys (AnchorFree Inc.)
DRV:64bit: - (usbser) -- C:\Windows\SysNative\drivers\usbser.sys (Microsoft Corporation)
DRV:64bit: - (taphss6) -- C:\Windows\SysNative\drivers\taphss6.sys (Anchorfree Inc.)
DRV:64bit: - (taphss) -- C:\Windows\SysNative\drivers\taphss.sys (AnchorFree Inc)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (CH341SER_A64) -- C:\Windows\SysNative\drivers\CH341S64.SYS (www.winchiphead.com)
DRV:64bit: - (netr7364) -- C:\Windows\SysNative\drivers\netr7364.sys (Ralink Technology, Corp.)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (BtFilter) -- C:\Windows\SysNative\drivers\btfilter.sys (Atheros)
DRV:64bit: - (BTATH_A2DP) -- C:\Windows\SysNative\drivers\btath_a2dp.sys (Atheros)
DRV:64bit: - (BTATH_HCRP) -- C:\Windows\SysNative\drivers\btath_hcrp.sys (Atheros)
DRV:64bit: - (BTATH_RCP) -- C:\Windows\SysNative\drivers\btath_rcp.sys (Atheros)
DRV:64bit: - (BTATH_LWFLT) -- C:\Windows\SysNative\drivers\btath_lwflt.sys (Atheros)
DRV:64bit: - (AthBTPort) -- C:\Windows\SysNative\drivers\btath_flt.sys (Atheros)
DRV:64bit: - (BTATH_BUS) -- C:\Windows\SysNative\drivers\btath_bus.sys (Atheros)
DRV:64bit: - (ATHDFU) -- C:\Windows\SysNative\drivers\AthDfu.sys (Windows (R) Win 7 DDK provider)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (FSProFilter) -- C:\Windows\SysNative\drivers\FSPFltd.sys (FSPro Labs)
DRV:64bit: - (athur) -- C:\Windows\SysNative\drivers\athurx.sys (Atheros Communications, Inc.)
DRV:64bit: - (ALIWEHCD) -- C:\Windows\SysNative\drivers\mfpec.sys (None)
DRV:64bit: - (WUSBVBus) -- C:\Windows\SysNative\drivers\mfpvbus.sys (None)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (BthMtpEnum) -- C:\Windows\SysNative\drivers\BthMtpEnum.sys (Microsoft Corporation)
DRV:64bit: - (msloop) -- C:\Windows\SysNative\drivers\loop.sys (Microsoft Corporation)
DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (L1C) -- C:\Windows\SysNative\drivers\L1C62x64.sys (Atheros Communications, Inc.)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (hamachi) -- C:\Windows\SysNative\drivers\hamachi.sys (LogMeIn, Inc.)
DRV:64bit: - (DgiVecp) -- C:\Windows\SysNative\drivers\DgivEcp.sys (Samsung Electronics Co., Ltd.)
DRV:64bit: - (SSPORT) -- C:\Windows\SysNative\drivers\SSPORT.SYS (Samsung Electronics)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SYSTEM32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}: "URL" = http://www.google.com/search?q={searchTerms}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\5053EA3083BFAEE0C571DB56EE42FBF4: "URL" = http://www.firmy.cz/phr/{searchTerms}
IE - HKCU\..\SearchScopes\78FCF58B6CADD3894B8B12DCB8EA432F: "URL" = http://www.mapy.cz/?sourceid=quicksearch_6826&query={searchTerms}
IE - HKCU\..\SearchScopes\7F4A904CE5010AFFC1307C8225106ECC: "URL" = http://www.zbozi.cz/?sourceid=quicksearch_6826&q={searchTerms}
IE - HKCU\..\SearchScopes\9089391178E60702DE5C0373A64C5424: "URL" = http://videa.seznam.cz/?q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.countryCode: "CZ"
FF - prefs.js..browser.search.isUS: false
FF - prefs.js..browser.search.region: "CZ"
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:47.0
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_192.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_192.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.91.2: C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.91.2: C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF [2016.06.20 05:43:38 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2016.06.20 05:43:38 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\sp@avast.com: C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016.06.20 05:43:38 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 47.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 47.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 47.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 47.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2012.02.22 21:37:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Aleš\AppData\Roaming\Mozilla\Extensions
[2016.05.06 22:42:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profiles\wydz2a5j.default\extensions
[2013.09.15 10:39:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profilesbf01bvlk.default\extensions
[2013.09.15 10:39:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profilesbf01bvlk.default\extensions\staged
[2016.05.06 22:42:05 | 000,025,051 | ---- | M] () (No name found) -- C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profiles\wydz2a5j.default\extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi
[2016.03.20 10:29:06 | 000,025,278 | ---- | M] () (No name found) -- C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profiles\wydz2a5j.default\extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi
[2016.06.21 23:04:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions

O1 HOSTS File: ([2016.05.18 18:13:14 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Pomocná služba pro přihlášení ke službě Windows Live ID) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4:64bit: - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations)
O4:64bit: - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Communications)
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.dll (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [PLFSetI] C:\Windows\PLFSetI.exe ()
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [MFP Manager] C:\Program Files (x86)\AirLive MFP Server Utilities\MFPAgent.exe (Edimax Technology Co., Ltd.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Oracle Corporation)
O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
O4 - HKCU..\Run: [Skype] C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O4 - Startup: C:\Users\Aleš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tat_and_mam_panel.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8:64bit: - Extra context menu item: SmarThru4 Capture Selection - C:\Program Files (x86)\SmarThru 4\WEBCapture.dll2.htm ()
O8:64bit: - Extra context menu item: SmarThru4 Save as HTML - C:\Program Files (x86)\SmarThru 4\WEBCapture.dll1.htm ()
O8:64bit: - Extra context menu item: SmarThru4 Save Selected Text - C:\Program Files (x86)\SmarThru 4\WEBCapture.dll.htm ()
O8:64bit: - Extra context menu item: SmarThru4 Web Capture - C:\Program Files (x86)\SmarThru 4\WebCapture.dll ()
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: SmarThru4 Capture Selection - C:\Program Files (x86)\SmarThru 4\WEBCapture.dll2.htm ()
O8 - Extra context menu item: SmarThru4 Save as HTML - C:\Program Files (x86)\SmarThru 4\WEBCapture.dll1.htm ()
O8 - Extra context menu item: SmarThru4 Save Selected Text - C:\Program Files (x86)\SmarThru 4\WEBCapture.dll.htm ()
O8 - Extra context menu item: SmarThru4 Web Capture - C:\Program Files (x86)\SmarThru 4\WebCapture.dll ()
O9:64bit: - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000001 [] - C:\Windows\SysNative\nlaapi.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000002 [] - C:\Windows\SysNative\NapiNSP.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000003 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000004 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Windows\SysNative\winrnr.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Windows\SysNative\wshbth.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll (National Instruments Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000011 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64\nlaapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Windows\SysWOW64\wshbth.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll (National Instruments Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O16:64bit: - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.46.172.37 213.46.172.36
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E8F044EC-5670-40E9-8E5B-017649FDC667}: DhcpNameServer = 213.46.172.37 213.46.172.36
O18:64bit: - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysNative\inetcomm.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files (x86)\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\SYSTEM32\Userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O29:64bit: - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
O30:64bit: - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (kerberos) - C:\Windows\SysNative\kerberos.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (schannel) - C:\Windows\SysNative\schannel.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (wdigest) - C:\Windows\SysNative\wdigest.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (tspkg) - C:\Windows\SysNative\tspkg.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (livessp) - C:\Windows\SysNative\livessp.dll (Microsoft Corp.)
O30 - LSA: Security Packages - (kerberos) - C:\Windows\SysWow64\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\Windows\SysWow64\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\Windows\SysWow64\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (tspkg) - C:\Windows\SysWow64\tspkg.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (livessp) - C:\Windows\SysWow64\livessp.dll (Microsoft Corp.)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKCU\...com [@ = ComFile] -- Reg Error: Key error. File not found
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2016.06.30 22:20:43 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Aleš\Desktop\OTL.exe
[2016.06.26 13:26:44 | 000,000,000 | ---D | C] -- C:\Users\Aleš\Desktop\soubory od grafotyp
[2016.06.23 22:59:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Arduino
[2016.06.23 22:31:05 | 000,000,000 | ---D | C] -- C:\Users\Aleš\.jssc
[2016.06.23 19:47:44 | 000,000,000 | ---D | C] -- C:\Users\Aleš\Desktop\sketch_jun23a
[2016.06.23 19:43:50 | 000,000,000 | ---D | C] -- C:\Users\Aleš\Documents\Arduino
[2016.06.23 19:43:48 | 000,000,000 | ---D | C] -- C:\Users\Aleš\AppData\Local\Arduino15
[2016.06.23 19:31:44 | 000,058,368 | ---- | C] (www.winchiphead.com) -- C:\Windows\SysNative\drivers\CH341S64.SYS
[2016.06.23 19:31:44 | 000,006,712 | ---- | C] (www.winchiphead.com) -- C:\Windows\SysWow64\CH341PT.DLL
[2016.06.23 19:31:44 | 000,000,000 | ---D | C] -- C:\Users\Aleš\Desktop\CH341SER
[2016.06.21 23:03:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2016.06.20 05:43:39 | 000,398,152 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2016.06.15 19:12:22 | 000,000,000 | ---D | C] -- C:\Users\Aleš\Desktop\recovery
[2016.06.15 17:14:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
[2016.06.15 17:14:33 | 000,000,000 | ---D | C] -- C:\Program Files\Recuva
[2016.06.15 16:24:09 | 000,000,000 | ---D | C] -- C:\Users\Aleš\AppData\Local\RStudio-Desktop
[2016.06.15 16:21:32 | 000,000,000 | ---D | C] -- C:\Program Files\RStudio
[2016.06.12 21:50:17 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2016.06.12 21:48:00 | 006,893,008 | ---- | C] (Piriform Ltd) -- C:\Users\Aleš\Desktop\ccsetup518.exe
[2016.06.12 20:32:06 | 000,000,000 | ---D | C] -- C:\Users\Aleš\Desktop\oslava_fotky
[2016.06.11 20:37:03 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2016.06.11 20:37:00 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2016.06.11 19:13:39 | 000,000,000 | ---D | C] -- C:\Users\Aleš\Documents\eagle
[2016.06.10 23:46:19 | 000,000,000 | ---D | C] -- C:\Users\Aleš\Documents\FOTKY
[2016.06.10 23:42:56 | 000,000,000 | ---D | C] -- C:\Users\Aleš\Documents\VSE
[2016.06.10 23:42:10 | 000,000,000 | ---D | C] -- C:\Users\Aleš\Documents\CHMATÁKOV VŠE

========== Files - Modified Within 30 Days ==========

[2016.06.30 22:20:48 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Aleš\Desktop\OTL.exe
[2016.06.30 22:14:19 | 000,027,376 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2016.06.30 22:14:19 | 000,027,376 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2016.06.30 22:13:49 | 000,000,952 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2016.06.30 22:06:16 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2016.06.30 22:01:52 | 000,000,035 | ---- | M] () -- C:\Users\Public\Documents\AtherosServiceConfig.ini
[2016.06.30 22:01:36 | 000,000,948 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2016.06.30 22:01:14 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2016.06.30 22:00:49 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2016.06.30 22:00:39 | 2411,929,600 | -HS- | M] () -- C:\hiberfil.sys
[2016.06.28 14:56:26 | 654,663,082 | R--- | M] () -- C:\Users\Aleš\Desktop\Turbulence-2-cz.dabing.AX.avi
[2016.06.26 13:28:12 | 000,481,189 | ---- | M] () -- C:\Users\Aleš\Desktop\Jídelní a nápojový lístek- Anglicky.pdf
[2016.06.26 13:26:26 | 001,584,554 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2016.06.26 13:26:26 | 000,669,116 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2016.06.26 13:26:26 | 000,654,464 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2016.06.26 13:26:26 | 000,141,744 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2016.06.26 13:26:26 | 000,122,336 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2016.06.23 23:01:39 | 000,000,995 | ---- | M] () -- C:\Users\Public\Desktop\Arduino.lnk
[2016.06.20 05:46:23 | 000,001,882 | ---- | M] () -- C:\Users\Public\Desktop\Avast Free Antivirus.lnk
[2016.06.17 21:06:25 | 000,796,352 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2016.06.17 21:06:25 | 000,142,528 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2016.06.15 17:14:35 | 000,001,618 | ---- | M] () -- C:\Users\Public\Desktop\Recuva.lnk
[2016.06.12 22:00:57 | 000,797,760 | ---- | M] () -- C:\Users\Aleš\Desktop\delfix_1.013.exe
[2016.06.12 21:50:18 | 000,000,782 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2016.06.12 21:48:07 | 006,893,008 | ---- | M] (Piriform Ltd) -- C:\Users\Aleš\Desktop\ccsetup518.exe
[2016.06.12 21:47:23 | 000,020,904 | ---- | M] () -- C:\Users\Aleš\Desktop\1.png
[2016.06.12 20:46:07 | 295,708,070 | ---- | M] () -- C:\Users\Aleš\Desktop\oslava_fotky.rar
[2016.06.10 21:48:37 | 000,117,760 | ---- | M] () -- C:\Users\Aleš\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2016.06.01 20:34:11 | 000,585,560 | ---- | M] () -- C:\Users\Aleš\Desktop\Jídelní a nápojový lístek – Česky.pdf

========== Files Created - No Company Name ==========

[2016.06.28 13:46:00 | 654,663,082 | R--- | C] () -- C:\Users\Aleš\Desktop\Turbulence-2-cz.dabing.AX.avi
[2016.06.26 13:28:10 | 000,481,189 | ---- | C] () -- C:\Users\Aleš\Desktop\Jídelní a nápojový lístek- Anglicky.pdf
[2016.06.23 23:01:39 | 000,001,007 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arduino.lnk
[2016.06.23 23:01:39 | 000,000,995 | ---- | C] () -- C:\Users\Public\Desktop\Arduino.lnk
[2016.06.20 05:46:23 | 000,001,882 | ---- | C] () -- C:\Users\Public\Desktop\Avast Free Antivirus.lnk
[2016.06.15 17:14:34 | 000,001,618 | ---- | C] () -- C:\Users\Public\Desktop\Recuva.lnk
[2016.06.12 22:00:55 | 000,797,760 | ---- | C] () -- C:\Users\Aleš\Desktop\delfix_1.013.exe
[2016.06.12 21:50:18 | 000,000,782 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2016.06.12 21:47:23 | 000,020,904 | ---- | C] () -- C:\Users\Aleš\Desktop\1.png
[2016.06.12 20:43:40 | 295,708,070 | ---- | C] () -- C:\Users\Aleš\Desktop\oslava_fotky.rar
[2016.06.11 19:36:14 | 732,780,544 | ---- | C] () -- C:\Users\Aleš\Desktop\Rambo-2-CZ.avi
[2016.06.11 19:36:09 | 850,975,940 | ---- | C] () -- C:\Users\Aleš\Desktop\RAMBO-1-CZ.avi
[2016.06.01 20:34:11 | 000,585,560 | ---- | C] () -- C:\Users\Aleš\Desktop\Jídelní a nápojový lístek – Česky.pdf
[2015.04.16 18:05:06 | 000,417,792 | ---- | C] () -- C:\Windows\SysWow64\MFPBot.dll
[2015.04.16 18:05:06 | 000,245,760 | ---- | C] () -- C:\Windows\SysWow64\InstallMFPPS.dll
[2015.04.16 18:05:06 | 000,229,376 | ---- | C] () -- C:\Windows\SysWow64\Install98MFPPS.dll
[2015.04.16 18:05:06 | 000,151,552 | ---- | C] () -- C:\Windows\SysWow64\ddschk.dll
[2015.04.16 18:05:06 | 000,000,235 | ---- | C] () -- C:\Windows\SysWow64\Config.ini
[2015.04.09 15:13:35 | 000,000,207 | ---- | C] () -- C:\Windows\tweaking.com-regbackup-NOTEBOOK-Windows-7-Professional-(64-bit).dat
[2015.02.25 20:44:36 | 000,000,600 | ---- | C] () -- C:\Users\Aleš\AppData\Roaming\winscp.rnd
[2014.09.14 09:19:27 | 000,000,408 | ---- | C] () -- C:\Users\Aleš\AppData\Roaming\CamShapes.ini
[2014.09.14 09:19:27 | 000,000,408 | ---- | C] () -- C:\Users\Aleš\AppData\Roaming\CamLayout.ini
[2014.09.14 09:19:27 | 000,000,102 | ---- | C] () -- C:\Users\Aleš\AppData\Roaming\Camdata.ini
[2014.09.13 23:56:22 | 000,000,096 | ---- | C] () -- C:\Users\Aleš\AppData\Roaming\version2.xml
[2013.10.13 14:21:13 | 000,001,505 | ---- | C] () -- C:\Users\Aleš\.recently-used.xbel
[2013.09.14 14:40:43 | 000,004,250 | ---- | C] () -- C:\Users\Aleš\.jmf-resource
[2013.09.14 11:03:05 | 000,000,062 | ---- | C] () -- C:\Users\Aleš\AppData\Roaming\WB.CFG
[2012.08.22 21:44:18 | 000,009,184 | ---- | C] () -- C:\Users\Aleš\Ryby po rozřezání.png
[2012.08.22 21:44:18 | 000,005,025 | ---- | C] () -- C:\Users\Aleš\Komplet itemů které jsou možné vylovit pomocí obyčejného prutu.png
[2012.08.22 21:44:18 | 000,003,823 | ---- | C] () -- C:\Users\Aleš\Set ryb vylovených pomocí vylepšeného prutu.png
[2012.07.22 20:27:50 | 000,006,150 | ---- | C] () -- C:\Users\Aleš\proGobrin.rar
[2012.07.22 20:27:44 | 257,192,337 | ---- | C] () -- C:\Users\Aleš\Nový objekt - WinRAR archiv (2).rar
[2012.07.22 20:27:44 | 000,010,767 | ---- | C] () -- C:\Users\Aleš\jabkoviny_offline.rar
[2012.07.22 20:25:59 | 000,005,318 | ---- | C] () -- C:\Users\Aleš\Záznam (17).amr
[2012.07.22 20:25:58 | 022,385,766 | ---- | C] () -- C:\Users\Aleš\Záznam (12).amr
[2012.07.22 20:25:57 | 028,963,814 | ---- | C] () -- C:\Users\Aleš\Záznam (11).amr
[2012.07.22 20:25:57 | 014,500,358 | ---- | C] () -- C:\Users\Aleš\skola 16-4-2012.amr
[2012.07.22 20:25:57 | 000,246,860 | ---- | C] () -- C:\Users\Aleš\Fotografie-0121.jpg
[2012.07.22 20:25:57 | 000,006,342 | ---- | C] () -- C:\Users\Aleš\martinůvprdd.amr
[2012.07.22 20:25:57 | 000,000,251 | ---- | C] () -- C:\Users\Aleš\user.js
[2012.07.15 02:42:49 | 001,109,044 | ---- | C] () -- C:\Users\Aleš\2012-07-15_02.39.54.png
[2012.07.15 02:42:49 | 000,796,904 | ---- | C] () -- C:\Users\Aleš\2012-07-15_02.40.36.png
[2012.07.15 02:42:49 | 000,608,915 | ---- | C] () -- C:\Users\Aleš\2012-07-15_02.40.50.png
[2012.07.15 02:42:49 | 000,561,633 | ---- | C] () -- C:\Users\Aleš\2012-07-15_02.40.22.png
[2012.07.15 02:42:49 | 000,488,044 | ---- | C] () -- C:\Users\Aleš\2012-07-15_02.41.21.png
[2012.07.15 02:42:49 | 000,443,279 | ---- | C] () -- C:\Users\Aleš\2012-07-15_02.41.06.png
[2012.07.04 00:26:42 | 000,039,203 | ---- | C] () -- C:\Users\Aleš\xD2.png
[2012.07.04 00:26:42 | 000,013,389 | ---- | C] () -- C:\Users\Aleš\xD3.png
[2012.07.04 00:26:42 | 000,012,978 | ---- | C] () -- C:\Users\Aleš\xD1.png
[2012.06.09 22:13:18 | 000,420,284 | ---- | C] () -- C:\Users\Aleš\srac.png
[2012.06.09 22:13:18 | 000,418,785 | ---- | C] () -- C:\Users\Aleš\marketka.png
[2012.06.09 22:13:18 | 000,416,407 | ---- | C] () -- C:\Users\Aleš\marketa.png
[2012.06.02 15:27:40 | 000,290,813 | ---- | C] () -- C:\Users\Aleš\zábava xDDDDDDDDDD.png
[2012.06.02 15:27:40 | 000,290,574 | ---- | C] () -- C:\Users\Aleš\zábavička xDDDD.png
[2012.06.02 15:27:40 | 000,289,914 | ---- | C] () -- C:\Users\Aleš\zááábavaaa.png
[2012.05.20 22:17:49 | 000,328,933 | ---- | C] () -- C:\Users\Aleš\frezy.PNG
[2012.05.20 22:17:49 | 000,209,586 | ---- | C] () -- C:\Users\Aleš\freezy2.PNG
[2012.05.20 22:17:49 | 000,201,144 | ---- | C] () -- C:\Users\Aleš\frezy5.PNG
[2012.05.20 22:17:49 | 000,199,891 | ---- | C] () -- C:\Users\Aleš\freezy3.PNG
[2012.05.20 22:17:49 | 000,199,143 | ---- | C] () -- C:\Users\Aleš\freezy4.PNG
[2012.04.29 00:06:37 | 007,879,734 | ---- | C] () -- C:\Users\Aleš\Nový rastrový obrázek (8).bmp
[2012.04.29 00:06:37 | 007,879,734 | ---- | C] () -- C:\Users\Aleš\Nový rastrový obrázek (7).bmp
[2012.04.29 00:06:37 | 007,879,734 | ---- | C] () -- C:\Users\Aleš\Nový rastrový obrázek (6).bmp
[2012.04.29 00:06:37 | 007,879,734 | ---- | C] () -- C:\Users\Aleš\Nový rastrový obrázek (5).bmp
[2012.04.29 00:06:37 | 007,879,734 | ---- | C] () -- C:\Users\Aleš\Nový rastrový obrázek (4).bmp
[2012.04.29 00:06:37 | 007,879,734 | ---- | C] () -- C:\Users\Aleš\Nový rastrový obrázek (3).bmp
[2012.04.29 00:06:37 | 000,000,000 | ---- | C] () -- C:\Users\Aleš\Nový rastrový obrázek (10).bmp
[2012.04.14 23:04:02 | 000,376,387 | ---- | C] () -- C:\Users\Aleš\2.png
[2012.04.14 23:04:02 | 000,369,267 | ---- | C] () -- C:\Users\Aleš\1.png
[2012.04.06 17:21:24 | 000,117,760 | ---- | C] () -- C:\Users\Aleš\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.03.06 10:51:59 | 000,007,601 | ---- | C] () -- C:\Users\Aleš\AppData\Local\Resmon.ResmonCfg
[2012.03.04 16:19:00 | 000,064,880 | ---- | C] () -- C:\Users\Aleš\j.prn
[2012.03.04 16:18:01 | 000,064,880 | ---- | C] () -- C:\Users\Aleš\j
[2012.03.04 15:05:17 | 000,011,394 | ---- | C] () -- C:\Users\Aleš\AppData\Roaming\SmarThruOptions.xml

========== ZeroAccess Check ==========

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2016.01.22 08:19:58 | 014,179,840 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2016.01.22 08:05:58 | 012,877,824 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013.11.20 20:49:51 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\.minecraft
[2016.06.12 21:57:03 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\AIMP3
[2016.04.27 21:23:38 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\Audacity
[2013.11.04 18:11:36 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\AVAST Software
[2014.06.29 22:58:08 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\AVG
[2012.02.21 15:06:12 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\AVG2012
[2014.09.25 22:14:20 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\CadSoft
[2013.06.10 13:39:08 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\Canon
[2014.08.19 10:37:57 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\Clickteam
[2016.06.12 21:57:03 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\DAEMON Tools Lite
[2013.12.25 16:10:58 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\Dropbox
[2012.12.23 10:01:05 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\E-Cam
[2014.05.09 23:39:31 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\esmska
[2014.06.29 23:09:12 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\EverSoft
[2014.01.31 00:39:22 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\FileZilla
[2013.10.26 16:29:22 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\FreeAudioPack
[2012.02.24 22:51:48 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\GHISLER
[2012.11.06 17:18:10 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\gtk-2.0
[2012.05.16 16:17:27 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\HYL
[2012.11.21 19:55:38 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\ICQ
[2014.08.19 10:38:16 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\iSpy
[2012.04.07 11:19:08 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\Minecraft Skin Viewer
[2014.10.02 15:05:46 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\National Instruments
[2015.04.25 10:28:01 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\Nokia
[2014.08.19 10:50:20 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\Notepad++
[2014.09.22 16:43:29 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\OpenOffice
[2012.04.21 20:47:21 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\Opera
[2014.09.13 18:19:30 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\Opera Software
[2015.04.25 10:28:02 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\PC Suite
[2012.06.30 00:26:02 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\PhotoFiltre 7
[2016.06.12 21:57:03 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\PhotoScape
[2013.01.06 11:30:26 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\River Past G5
[2012.07.11 20:39:04 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\Screenshoter
[2012.03.04 15:05:19 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\SmarThru4
[2016.06.12 21:57:03 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\TeamViewer
[2012.03.27 15:06:54 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\Tific
[2012.08.01 15:51:39 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\Ulozto File Manager
[2013.11.09 22:09:09 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\uTorrent
[2013.04.02 17:36:06 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\VitySoft
[2014.11.18 16:40:58 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\WebCam Recorder
[2012.11.27 18:52:37 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\Windows Live Writer
[2015.04.09 21:42:18 | 000,000,000 | ---D | M] -- C:\Users\Aleš\AppData\Roaming\Yandex

========== Purity Check ==========



< End of report >

[FooDMasteR]

Extras.txt

OTL Extras logfile created on: 30.6.2016 22:26:14 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Aleš\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18230)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,00 Gb Total Physical Memory | 1,38 Gb Available Physical Memory | 46,21% Memory free
5,99 Gb Paging File | 4,48 Gb Available in Paging File | 74,86% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 221,62 Gb Total Space | 76,26 Gb Free Space | 34,41% Space Free | Partition Type: NTFS
Drive D: | 244,04 Gb Total Space | 151,03 Gb Free Space | 61,89% Space Free | Partition Type: NTFS

Computer Name: NOTEBOOK | User Name: Aleš | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = Opera.HTML] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1"
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1"

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.bat [@ = batfile] -- Reg Error: Key error. File not found
.cmd [@ = cmdfile] -- Reg Error: Key error. File not found
.com [@ = ComFile] -- Reg Error: Key error. File not found
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.pif [@ = piffile] -- Reg Error: Key error. File not found
.vbs [@ = VBSFile] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DefaultOutboundAction" = 0
"DefaultInboundAction" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DisableUnicastResponsesToMulticastBroadcast" = 0
"DefaultOutboundAction" = 0
"DefaultInboundAction" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DefaultOutboundAction" = 0
"DefaultInboundAction" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\River Past\Cam Do\CamDo.exe" = C:\Program Files\River Past\Cam Do\CamDo.exe:*:Enabled:River Past Cam Do
"C:\Program Files\River Past\Cam Do\CamDo.exe" = C:\Program Files\River Past\Cam Do\CamDo.exe:*:Enabled:River Past Cam Do


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02C50865-880D-44D0-91BF-E984C100AEEF}" = lport=14135 | protocol=17 | dir=in | name=server application |
"{075E4614-5406-4E8C-8B32-784ED7A0CE27}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{1D54BED3-DB04-4547-9BC8-D5343BF79197}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{1DE013F8-76C1-4A64-A741-526E8DEB2490}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{2DE5EF32-DC37-4A00-B89B-61FA7F1A77A7}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{3BCBC975-E183-4C23-84CE-2BCBC9D5F82B}" = lport=13621 | protocol=17 | dir=in | name=mfp setup wizard |
"{47A6D701-340E-436C-B414-0C001C6B47AA}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{562F8170-5FC1-428B-82F0-CE692B0E0873}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{57E2A91A-B9F2-447B-B29F-15D36861DBB0}" = rport=10243 | protocol=6 | dir=out | app=system |
"{64EBC62B-AAF3-466A-BE8B-588C9D0EB2C2}" = lport=69 | protocol=17 | dir=in | name=mfp server manager tftp |
"{6DEF85C2-C12E-4EBD-B058-A4405CD325DA}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{6E7B1259-D5B6-487B-BF87-1579E915A794}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{8A3BB187-468E-4D84-9792-02A814D0A23C}" = lport=3580 | protocol=17 | dir=in | app=c:\program files (x86)\national instruments\shared\nisvcloc\nisvcloc.exe |
"{8ACD0626-08AB-4FD3-BD5F-D5BAE11B77B2}" = lport=14135 | protocol=6 | dir=in | name=server application |
"{8E31BEA4-2455-48C8-9F54-8B0C2CCDB158}" = lport=13878 | protocol=17 | dir=in | name=mfp manager |
"{934AC8FA-073A-448C-8E3D-8FEF3F0FE9D4}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{95499A40-6A94-4A11-A9E5-DDA8147EEEA6}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{9BF592FF-5D91-4288-8F99-357138635806}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{A4D19BE9-BD90-4D04-9835-3162A975D3BC}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{A9C2A7E2-75FE-4C61-8B15-6FCD44513AE3}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\national instruments\shared\mdns responder\nimdnsresponder.exe |
"{B1AA3D5A-EB51-4A2C-B45B-241740EC36C8}" = lport=10243 | protocol=6 | dir=in | app=system |
"{C5224A7D-D200-4DEA-973D-177243CB8FCB}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C658FBB5-54F8-4972-BA28-F34F7F17075C}" = lport=2869 | protocol=6 | dir=in | app=system |
"{C7E4F740-340E-4BE5-9D2F-9FF0DE0CC7B6}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{CD4A55A3-AC69-4910-B11D-11764353D2A1}" = lport=3581-3582 | protocol=17 | dir=in | app=c:\program files (x86)\national instruments\shared\ni webserver\systemwebserver.exe |
"{CDDA3F15-23CE-4E30-960F-6EE84D32D604}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DF58609B-7294-4D7B-8E9A-A4EABA727F0B}" = lport=3580 | protocol=6 | dir=in | app=c:\program files (x86)\national instruments\shared\nisvcloc\nisvcloc.exe |
"{DF67E8DC-1D6E-45A9-BF4D-D6F06EB7C38C}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{E59DA950-8055-4B3C-886A-0FFE303C89A0}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{E800350C-0EAA-4971-B7FE-3D73D4483CB8}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{E98A3AF4-9960-40B8-83A6-4E57CDD9B084}" = lport=13364 | protocol=17 | dir=in | name=mfp server manager |
"{E9F3CA92-CAD3-46F6-BDA4-C9D733553497}" = lport=3581-3582 | protocol=6 | dir=in | app=c:\program files (x86)\national instruments\shared\ni webserver\systemwebserver.exe |
"{FE0D5246-1643-492F-A841-CA55368220C0}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{016DA990-7EC1-48BD-859F-8FD67F3709FD}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{02EA0010-6072-4020-B16B-C85845CF8C84}" = protocol=6 | dir=in | app=c:\program files (x86)\deskshare\webcam monitor 6.0\webcam monitor.exe |
"{05195CA9-0498-40B8-82DF-8FE1E9E1F620}" = protocol=6 | dir=in | app=c:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\chmat serverside\chmatakov.exe |
"{051C7A8E-2DF0-4B2B-B6E9-9934AF5B1A5E}" = protocol=6 | dir=in | app=c:\program files (x86)\webcamxp 5\wlite.exe |
"{0636667A-31A0-4B52-A36A-01B729AC919A}" = protocol=6 | dir=in | app=c:\program files (x86)\wlite\wlite.exe |
"{0E98E695-126E-41DA-AB45-AAACFBE9AD0A}" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (8).exe |
"{13B01BB8-4A44-43B5-B220-78C406B51CFB}" = protocol=17 | dir=in | app=c:\program files (x86)\hyl\mountblueklient\mountblue.exe |
"{13B70EF5-2C95-4BED-84C3-6FA38F9B6300}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgmfapx.exe |
"{1430E800-E142-4508-9535-5C7B6C6D6E4B}" = protocol=6 | dir=in | app=c:\program files (x86)\wlite\wservice.exe |
"{1496BA1E-C68F-4A12-B5D3-C6D2FA6EFC4F}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgemca.exe |
"{155AA6A9-A8B9-4F80-8618-E99CA3C91327}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{1841E482-7815-4E4A-9BB2-74BC87296ED3}" = protocol=6 | dir=in | app=c:\program files (x86)\cerberus llc\cerberus ftp server\cerberusgui.exe |
"{1CB94A66-9E7F-4157-953B-E6D3240639F9}" = protocol=6 | dir=in | app=c:\users\aleš\documents\chmatakov15.exe |
"{1E9B28F6-BC5F-41BF-BCBD-D9349196A3FA}" = protocol=17 | dir=in | app=c:\program files (x86)\wlite\wservice.exe |
"{22EC3136-CADE-4416-9D77-F40268D55AD2}" = protocol=6 | dir=in | app=c:\program files (x86)\national instruments\shared\ni webserver\applicationwebserver.exe |
"{25222D85-6E80-468C-9F5E-0A197A63B7FD}" = protocol=17 | dir=in | app=c:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\chmat serverside\server01.exe |
"{275BED6D-9242-4EA1-B781-4E728123CBC4}" = protocol=6 | dir=out | app=system |
"{28AD926A-0176-4753-A70B-EA2CA9A6E533}" = protocol=17 | dir=in | app=c:\users\aleš\documents\server\chmatakov15.exe |
"{2B183EB0-88A4-42E7-9017-DAC2966459FC}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{2CEBC721-BDC3-4834-9046-72135F3C469B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{30E37465-DB54-4C32-A612-6D77244DEBA3}" = protocol=6 | dir=in | app=c:\users\aleš\desktop\chmatofík\nová složka\chmatakov15.exe |
"{31DAFA84-CAC9-4D28-9CBA-BB75E0F864E7}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{32713AA6-A03D-4145-BE46-DA1C502E5442}" = protocol=6 | dir=in | app=c:\users\aleš\documents\server\server01.exe |
"{33952BEC-571A-4D9B-81B8-6EE43C1E5BAC}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{33A6450C-4E92-4993-B2C2-50475329F70F}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{33B8A633-3814-4C47-A72F-41E6D6A610F8}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe |
"{37E98EE8-4DDC-4491-A14A-136279EA8838}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{38E0917D-B210-4E7B-A1B8-354337E31815}" = protocol=17 | dir=in | app=c:\users\aleš\desktop\chmatofík\nová složka\chmatakov15.exe |
"{3B848BF1-A2CB-49D8-BEDD-6E15C4BDB929}" = protocol=17 | dir=in | app=c:\program files (x86)\national instruments\shared\ni webserver\applicationwebserver.exe |
"{3D60A248-C219-4128-ADE0-D9C8719E1478}" = protocol=17 | dir=in | app=c:\program files (x86)\filezilla server\filezilla server interface.exe |
"{3DCC59CF-7F8C-464D-ACEA-E3F7AC8C44FD}" = dir=in | app=c:\users\aleš\appdata\local\torch\plugins\torrent\torchtorrent.exe |
"{3EF6D5D5-1946-4C94-8A26-1AE3AD893DD6}" = protocol=17 | dir=in | app=c:\program files (x86)\deskshare\webcam monitor 6.0\webcam monitor.exe |
"{471888CF-242A-4897-972F-BDB09A747F29}" = protocol=17 | dir=in | app=c:\program files (x86)\wlite\wlite.exe |
"{482005B5-DF14-41A6-AED3-2890D24F8784}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{4F08CF52-B016-4A68-944C-1304C9C0BE35}" = protocol=6 | dir=in | app=c:\program files\national instruments\shared\ni webserver\applicationwebserver.exe |
"{5520CAB1-5733-45FB-84F8-5659C4A94424}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\pluginwrapper\opera_plugin_wrapper.exe |
"{5DBEFFEB-02B1-4D66-AF58-A77D4FE6F6CA}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgmfapx.exe |
"{639D74FC-B110-41D8-89E6-57562ACC9EF1}" = protocol=6 | dir=in | app=c:\program files (x86)\wlite\wlite.exe |
"{6B4B5EEA-5DE9-4BB1-9B85-AC59A8A94279}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
"{6C723B9F-A275-478A-86C3-B371666C101E}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\pluginwrapper\opera_plugin_wrapper.exe |
"{6D0B1BE8-C813-47F2-AC09-13905D66FA8F}" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15.exe |
"{6DB34ECE-8ABB-4381-8AEC-2F3FE7BD2FAB}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft games\zoo tycoon 2\zt.exe |
"{6FF0E736-0249-46FD-B0DF-F628DA5842DF}" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15.exe |
"{72F23A4F-710D-48F2-9EB3-5B0451E3FDF3}" = protocol=17 | dir=in | app=c:\program files (x86)\wlite\wlite.exe |
"{7D06D692-0319-4B08-ABC7-B76AD3A560DE}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{7D9A504E-61B1-4968-8545-C5C4B2C618A2}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{7EA155F6-3179-4B09-9389-3BA5145ED02F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{7F7D0809-860D-4C6D-8197-0AC71AD32496}" = protocol=17 | dir=in | app=c:\users\aleš\appdata\roaming\dropbox\bin\dropbox.exe |
"{82D6F8AB-1839-45AC-88E5-BC1F745D4476}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{844AF82C-ADDC-4C0B-9012-A660FC5AC921}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgnsa.exe |
"{869300D3-B227-49D0-BDCF-3DF7C998995B}" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"{86999873-B3E0-4B8F-8AC0-7F5E4F853152}" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15_hruzka.exe |
"{8C950517-9578-4E15-894F-B180AE26E7BB}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{8D26C1EB-686A-4489-9E4F-C4F23BDDB9F5}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe |
"{8E3F9C40-AF54-4663-AA5E-0032F71D710D}" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15_hruzka.exe |
"{91FFD4D8-3E16-4A14-99DF-BCF78DBC3A02}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgdiagex.exe |
"{940F1CA8-B6EF-483C-BA51-866D5E67B9F6}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{95CA1185-AD43-4281-8248-FF4942D591A5}" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (8).exe |
"{99A2B843-B0EC-4E6B-BA05-833DA021704B}" = protocol=17 | dir=in | app=c:\program files (x86)\webcamxp 5\wservice.exe |
"{99F95384-F32D-4C47-B548-A3B37CA706D8}" = dir=in | app=c:\users\aleš\appdata\local\torch\plugins\hola\hola_plugin_x64.exe |
"{9BC2BF07-D6AF-4BAB-AFE9-0A1A986D7BE7}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe |
"{9E0EB40A-EC45-4B8B-B55D-799B06A42167}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{9FC60477-DF9B-4BB0-BEBE-7099AF5B3D63}" = protocol=17 | dir=in | app=c:\program files (x86)\wlite\wservice.exe |
"{A0B4EEAD-A75A-43B4-8D63-ABDCD1E06C43}" = protocol=6 | dir=in | app=c:\users\aleš\desktop\chmatofík\nová složka\cho-ofík.exe |
"{A4124B66-B4C1-4041-97AC-886F04203FC9}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{A526405C-015E-4694-8924-8E9C173D694D}" = protocol=6 | dir=in | app=c:\program files (x86)\hyl\mountblueklient\mountblue.exe |
"{A5DB0BB9-7857-4933-94F0-D26E1EAE3F23}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{A5E700CF-F267-4E08-A5F4-F5AEEA760CF6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A797652D-015D-40E3-AD09-1F124668A537}" = protocol=6 | dir=in | app=c:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\chmat serverside\server01.exe |
"{A9BDD0D3-DF4C-4B66-B4C2-DC601EDF128C}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{A9F7F11E-1218-4CDB-AB4B-2CF834743C08}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AA0D81B6-0044-47A4-A48B-90D563583EEB}" = protocol=6 | dir=in | app=c:\users\aleš\appdata\roaming\dropbox\bin\dropbox.exe |
"{B28014EE-DA94-4CBD-B364-2802E875F1BA}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{B52855B2-5BA4-4E57-8303-F711543235FB}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe |
"{BED814F7-8C6D-4845-8A2E-448FC09194D8}" = protocol=6 | dir=in | app=c:\program files (x86)\wlite\wservice.exe |
"{C220C69C-C64D-4E3D-AAE0-4F83C779E699}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft games\zoo tycoon 2\zt.exe |
"{C229CA86-D1D2-4089-A45B-2E31E803BAF1}" = protocol=17 | dir=in | app=c:\program files\national instruments\shared\ni webserver\applicationwebserver.exe |
"{C29837A0-4582-47ED-8BF6-F28FEB7A9349}" = protocol=17 | dir=in | app=c:\users\aleš\documents\server\server01.exe |
"{C646366E-2B33-4167-BF04-99AA5A2F0D1B}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{C95A1AD3-B5CB-4E22-982C-194E8F413D82}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{CBFA48B9-ED07-413E-A738-FE96A1B2FD5E}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{CD5F9CBF-3EF5-4A4C-89FB-A6E84DE48C97}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgnsa.exe |
"{CF9D16DA-DA8A-4428-9E43-3E731E7CB1A2}" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"{D3E1521A-7164-4BDE-A593-98A90D567D17}" = protocol=58 | dir=in | app=system |
"{D6B2880F-0FD0-4AFD-830F-F45D1A4AA1D6}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{D81C4B0F-76D9-4A41-AEAC-8C5F235C2638}" = protocol=17 | dir=in | app=c:\program files (x86)\webcamxp 5\wlite.exe |
"{E0C11475-0D9C-4BA4-9477-2845FD15BD4F}" = protocol=6 | dir=in | app=c:\program files (x86)\filezilla server\filezilla server interface.exe |
"{E68B1FD9-BD20-4356-9A57-1FA8E4FA0FF8}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgdiagex.exe |
"{ECDA709F-6A1F-48A9-A750-1836091A74D2}" = protocol=6 | dir=in | app=c:\program files (x86)\webcamxp 5\wservice.exe |
"{EEABB9D8-D13E-407B-8F6D-79F0F7D35DB2}" = protocol=17 | dir=in | app=c:\program files (x86)\cerberus llc\cerberus ftp server\cerberusgui.exe |
"{EEB8AB96-E9DA-4000-8CCE-7D62BFF2424E}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgemca.exe |
"{EF2F4973-5E18-4976-ACAD-202B7B6C3C0D}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{EF696188-BEF6-4C77-9D5B-DF22AE428D36}" = protocol=17 | dir=in | app=c:\users\aleš\desktop\chmatofík\nová složka\cho-ofík.exe |
"{F12E9730-9986-47AD-B8C0-64DB674F1FA6}" = protocol=17 | dir=in | app=c:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\chmat serverside\chmatakov.exe |
"{F6FC256A-3A3A-466C-99D5-38D616ECD68A}" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15.exe |
"TCP Query User{008750F3-D3CC-46F0-A4A6-17E8BCCD1C8B}C:\users\aleš\downloads\chmatakov15(12).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(12).exe |
"TCP Query User{049987BA-F392-4F3C-A148-AFF85AE680BB}C:\users\aleš\desktop\chmatofík\chmatakov15.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\chmatofík\chmatakov15.exe |
"TCP Query User{04EEF7E6-FF92-45EF-BE6E-10844F8E1CC1}C:\users\aleš\downloads\chmatakov15(10).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(10).exe |
"TCP Query User{0695F747-E14E-4517-9F43-364CB9280F2E}C:\users\aleš\desktop\chmatofík\cho-ofík.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\chmatofík\cho-ofík.exe |
"TCP Query User{0CD1C632-935B-48A8-A476-28112BF0EABE}C:\users\aleš\appdata\local\opera\opera\temporary_downloads\chmatakov15 (1).exe" = protocol=6 | dir=in | app=c:\users\aleš\appdata\local\opera\opera\temporary_downloads\chmatakov15 (1).exe |
"TCP Query User{1733DF35-CB35-4203-AB8D-01B6914E7661}C:\users\aleš\downloads\chmatnex.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatnex.exe |
"TCP Query User{1A74D534-B877-46D1-ADB5-6C16B7B4C63C}C:\program files (x86)\smart port forwarding\spf.exe" = protocol=6 | dir=in | app=c:\program files (x86)\smart port forwarding\spf.exe |
"TCP Query User{1EBBE283-D7CD-45A7-8462-2206C6E6BB8B}C:\users\aleš\desktop\moje data\ctt\server01.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\moje data\ctt\server01.exe |
"TCP Query User{2069AAA2-E338-46B0-82B7-095E4D22DBA7}C:\users\aleš\downloads\chmatakov15(8).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(8).exe |
"TCP Query User{20ABDD01-CEC5-483C-B907-374597C56DC4}C:\users\aleš\downloads\chmatakov15 (1).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (1).exe |
"TCP Query User{23102259-C2BA-41B7-842E-8AF2A684EB3A}C:\users\aleš\downloads\chmatakov15(3).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(3).exe |
"TCP Query User{250ADC06-795A-452D-BD16-49C2D9A6407E}C:\users\aleš\downloads\chmatakov15(9).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(9).exe |
"TCP Query User{2646AD76-5D6A-4BA2-BBEB-74B1688FFE66}C:\xampp\mercurymail\mercury.exe" = protocol=6 | dir=in | app=c:\xampp\mercurymail\mercury.exe |
"TCP Query User{27AE4BE6-9207-4383-8095-D72B1E604A3D}C:\users\aleš\downloads\chmatakov15_hruzka(2).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15_hruzka(2).exe |
"TCP Query User{283C1EA8-251D-4252-9C31-87024FE03244}C:\users\aleš\downloads\chmatakov15(2).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(2).exe |
"TCP Query User{2BD0B559-DC79-42F9-B5E5-07E44F568594}C:\users\aleš\downloads\chmatjabko.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatjabko.exe |
"TCP Query User{2DC39081-13BB-4088-8B53-9DA06F0D3D85}C:\users\aleš\downloads\chmatakov15(17).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(17).exe |
"TCP Query User{2E789006-5633-4C56-BD50-B03FDFBE3833}C:\users\aleš\downloads\chmatakov15 (7).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (7).exe |
"TCP Query User{35BFE8F2-A29D-45B6-9CED-E67D2F17EDBD}C:\users\aleš\downloads\chmatakov15(14).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(14).exe |
"TCP Query User{37ADEC35-1F72-4E87-9431-BEC5E54F5C7E}C:\users\aleš\downloads\chmatakov15 (2).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (2).exe |
"TCP Query User{37E3EFA7-F19D-40BD-A112-A94DE2285CE5}C:\users\aleš\downloads\chmatakov15 (5).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (5).exe |
"TCP Query User{3895071A-E96E-4FDA-925D-51A3F88142C7}C:\users\aleš\downloads\chmatakov15 (3).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (3).exe |
"TCP Query User{3A10F5DC-2010-46A1-B1C3-87B8C35DC7DD}C:\users\aleš\downloads\1013.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\1013.exe |
"TCP Query User{3A4494CD-0CDF-4252-895A-13BE012DA600}C:\users\aleš\downloads\chfuture.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chfuture.exe |
"TCP Query User{3CDCF763-6AC2-48F2-91F7-909FCF371103}C:\users\aleš\desktop\ch server - síť\chmatákov server - síť.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\ch server - síť\chmatákov server - síť.exe |
"TCP Query User{3CFE39C2-A80F-496E-9676-4B809EB77954}C:\users\aleš\downloads\chmatakov15_hruzka(4).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15_hruzka(4).exe |
"TCP Query User{3DDE17AB-87D9-49D7-B6AC-FA9BF6DFA004}C:\users\aleš\downloads\1013(1).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\1013(1).exe |
"TCP Query User{3ECD9292-B621-4FD4-BBFB-7711BDBB42B7}C:\users\aleš\downloads\chmatakov15 (10).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (10).exe |
"TCP Query User{40128F97-FE34-4422-AF3D-2CA01A0740E5}C:\users\aleš\downloads\chmatakov15(5).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(5).exe |
"TCP Query User{428915E2-80CF-411C-A272-0A04C93FCF8D}C:\users\aleš\appdata\local\opera\opera\temporary_downloads\chmatakov15.exe" = protocol=6 | dir=in | app=c:\users\aleš\appdata\local\opera\opera\temporary_downloads\chmatakov15.exe |
"TCP Query User{4420F6C8-890F-440C-BC2C-71972DEC1708}C:\users\aleš\appdata\local\temp\rar$exa0.369\1013\1013.exe" = protocol=6 | dir=in | app=c:\users\aleš\appdata\local\temp\rar$exa0.369\1013\1013.exe |
"TCP Query User{4897AA6F-0D4D-49B8-8EE4-918594D81DE2}C:\users\aleš\downloads\server\chmatakov15.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\server\chmatakov15.exe |
"TCP Query User{4CF7431C-10E4-4E5E-9675-FA186E0EC35A}C:\users\aleš\downloads\chmatakov15(6).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(6).exe |
"TCP Query User{4EC49309-6F7C-4B18-ABB2-514B3E31663C}C:\users\aleš\downloads\chmatnex (1).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatnex (1).exe |
"TCP Query User{4EFFD50E-048F-43FD-A8D0-11BA84E9B79A}C:\users\aleš\downloads\chmatakov15(5).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(5).exe |
"TCP Query User{4FB96CEE-C35A-479A-AFCA-D80756073CB6}C:\users\aleš\downloads\chmat(1).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmat(1).exe |
"TCP Query User{535A28BF-2C49-44A3-B359-8579F9DDC17D}C:\users\aleš\downloads\chmatakov15.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15.exe |
"TCP Query User{562F8ECA-5785-468A-AD37-A07BD420D711}C:\users\aleš\downloads\chmatakov15 (12).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (12).exe |
"TCP Query User{585947FC-3BC3-4CDC-AE20-CA1ECCEF9E5B}C:\users\aleš\downloads\chmatakov15 (12).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (12).exe |
"TCP Query User{5C0D1049-19A0-4A10-AE8D-EA79C3684DD5}C:\users\aleš\downloads\server\chmatakov15.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\server\chmatakov15.exe |
"TCP Query User{5CF43A17-B6B0-473B-BDAE-1AD047827756}C:\users\aleš\downloads\chmatakov15vc.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15vc.exe |
"TCP Query User{5CF8B3A6-3E71-4ACF-A56D-96A106FD4C5A}C:\users\aleš\downloads\chmatlife.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatlife.exe |
"TCP Query User{5D8C6E40-12D3-4B5B-8992-D106F38A9050}C:\users\aleš\desktop\server01.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\server01.exe |
"TCP Query User{5DA1E59C-4AE8-4D3A-99AD-43D4537E07AC}C:\users\aleš\downloads\chmatjabko.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatjabko.exe |
"TCP Query User{5E162C22-13CB-4037-B607-AE80E41270F3}C:\users\aleš\downloads\chmatakov15(12).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(12).exe |
"TCP Query User{5F3A9815-35B7-483D-A252-045675EDB25F}C:\users\aleš\appdata\local\temp\rar$exa0.020\chmatlife.exe" = protocol=6 | dir=in | app=c:\users\aleš\appdata\local\temp\rar$exa0.020\chmatlife.exe |
"TCP Query User{61486583-914E-45FC-945C-7B843B2EFBB7}C:\users\aleš\downloads\chmatakov15 (11).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (11).exe |
"TCP Query User{6185EE69-3CDC-4B44-954D-ACE17526547A}C:\users\aleš\downloads\chmat(2).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmat(2).exe |
"TCP Query User{62C90654-F190-436B-8EE4-06461BF56B2C}C:\users\aleš\desktop\chmatjabko data\chmatjabko 930 klient\chmatjabko.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\chmatjabko data\chmatjabko 930 klient\chmatjabko.exe |
"TCP Query User{66A01FD3-30B0-419C-AEAA-33117C52D26E}C:\users\aleš\desktop\chmatjabko data\chmatjabko 930 klient\chmatjabko.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\chmatjabko data\chmatjabko 930 klient\chmatjabko.exe |
"TCP Query User{68303293-1A40-4D30-85FC-229DD9B85E47}C:\users\aleš\downloads\chmatakov15neoficialni.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15neoficialni.exe |
"TCP Query User{6886A865-2E66-471B-AE5E-C742FCD51C54}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe |
"TCP Query User{6AAF94B1-E432-44AA-AA39-5FC0F2AE73C8}C:\users\aleš\downloads\chmatakov15 (3).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (3).exe |
"TCP Query User{6BC80851-0E27-4C50-BEAD-3EC450360978}C:\users\aleš\downloads\chmatakov15_hruzka.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15_hruzka.exe |
"TCP Query User{71840BAD-69B9-4559-8CAB-3D40004CD07D}C:\users\aleš\downloads\chmatakov15jh.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15jh.exe |
"TCP Query User{720FCD5C-24F2-4634-952A-7FAD1A3F0B24}C:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\bugování a cheaty\nová složka\chmatakov15.exe.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\bugování a cheaty\nová složka\chmatakov15.exe.exe |
"TCP Query User{77C5D676-0076-41F4-A076-B97282EC1403}C:\users\aleš\desktop\nová složka (2)\downloads\chmatjabko.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\nová složka (2)\downloads\chmatjabko.exe |
"TCP Query User{77FEABDB-2004-4EDF-BAD5-161C588C0FA7}C:\users\aleš\downloads\chmatakov.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov.exe |
"TCP Query User{783836F2-A416-48CE-A211-3F94FA43ADFB}C:\users\aleš\downloads\chmatakov15(16).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(16).exe |
"TCP Query User{78E1895A-00CA-4765-B167-CE033EF87F68}C:\users\aleš\downloads\chmatakov15 (4).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (4).exe |
"TCP Query User{7B48F584-B602-4CDC-880C-C4D53834AC76}C:\users\aleš\downloads\chmatakov15(4).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(4).exe |
"TCP Query User{7CF5C381-18AE-485B-8818-78103627E962}C:\users\aleš\appdata\local\temp\rar$exa0.690\webkamera.exe" = protocol=6 | dir=in | app=c:\users\aleš\appdata\local\temp\rar$exa0.690\webkamera.exe |
"TCP Query User{7FDCA90C-7BF2-4C1A-8322-E30BCF04813A}C:\program files (x86)\1clickdownload\1clickdownload.exe" = protocol=6 | dir=in | app=c:\program files (x86)\1clickdownload\1clickdownload.exe |
"TCP Query User{84396EB2-BC3D-48F1-9588-4FEB3AA8DD1A}C:\users\aleš\desktop\chmatofík\nová složka\chmatakov15.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\chmatofík\nová složka\chmatakov15.exe |
"TCP Query User{848F2F45-8565-4A71-B9BC-A72519A56532}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe |
"TCP Query User{84EA6CE3-539D-4AF9-A008-F26C7D7C6155}C:\users\aleš\downloads\server\server01.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\server\server01.exe |
"TCP Query User{88C9ABCA-08A9-4700-8848-14A00D9A3F87}C:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\bugování a cheaty\nová složka\chmatakov15.exe.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\bugování a cheaty\nová složka\chmatakov15.exe.exe |
"TCP Query User{88E9CD1B-59FB-4A3F-ABCE-D0062AB2AFC4}C:\users\aleš\downloads\chmatakov15 (7).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (7).exe |
"TCP Query User{891C516A-4F6D-4BF8-8A69-95225FEEA484}C:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\chmat serverside\server01.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\chmat serverside\server01.exe |
"TCP Query User{898295C5-4189-4062-ABE2-7BEC29A57558}C:\users\aleš\downloads\chmatakov15(4).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(4).exe |
"TCP Query User{8F54E1FD-8E1B-4A23-BF01-80C62553661C}C:\users\aleš\documents\server\chmatakov15(1).exe" = protocol=6 | dir=in | app=c:\users\aleš\documents\server\chmatakov15(1).exe |
"TCP Query User{8F69E2A1-78F1-4A6B-82EC-3182BC0ABAFA}C:\users\aleš\downloads\server\server01.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\server\server01.exe |
"TCP Query User{901C7A7C-E4D4-443C-8544-CEF33355F032}C:\users\aleš\downloads\chmatakov15(7).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(7).exe |
"TCP Query User{90C4B72B-43A7-4DE7-8737-F0CEFD7F223D}C:\users\aleš\appdata\local\temp\rar$exa0.050\webcam2web.exe" = protocol=6 | dir=in | app=c:\users\aleš\appdata\local\temp\rar$exa0.050\webcam2web.exe |
"TCP Query User{92925CB7-2C34-4E45-9CB5-BF8CE92FE18B}C:\users\aleš\downloads\chmatakov15jh(2).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15jh(2).exe |
"TCP Query User{9385106B-8BF6-4304-A769-C18C445FA367}C:\users\aleš\desktop\ncpsrv.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\ncpsrv.exe |
"TCP Query User{966B9FE7-6F8C-49C4-88A5-EAE7C4CCCE40}C:\users\aleš\downloads\chmatlife.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatlife.exe |
"TCP Query User{96A3F7D7-DBCE-4FFB-A937-3098907F2936}C:\users\aleš\downloads\chfuture.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chfuture.exe |
"TCP Query User{98B497C3-5484-4142-B972-FDFF1E81704D}C:\users\aleš\downloads\chmatakov15 (6).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (6).exe |
"TCP Query User{9CCC7586-4BE1-4CFA-A82E-2B77799BA3BC}C:\users\aleš\documents\chmatakov15.exe" = protocol=6 | dir=in | app=c:\users\aleš\documents\chmatakov15.exe |
"TCP Query User{9D739127-3281-447F-86B6-9769EDB7E696}C:\users\aleš\downloads\chmatakov15(13).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(13).exe |
"TCP Query User{9DFA6DE2-449C-46E0-9761-7AC15F908135}C:\users\aleš\desktop\chmatofík\server01.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\chmatofík\server01.exe |
"TCP Query User{9EA2C0C1-C607-449F-A08D-62C1CB430031}C:\program files (x86)\arduino\java\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\arduino\java\bin\javaw.exe |
"TCP Query User{A065F611-4E21-4908-B35A-AB0C4F4824C9}C:\users\aleš\appdata\local\temp\rar$exa0.279\ncpsrv.exe" = protocol=6 | dir=in | app=c:\users\aleš\appdata\local\temp\rar$exa0.279\ncpsrv.exe |
"TCP Query User{A0BAEBEB-EE6C-4EB2-B7FD-2DE3148E6C0A}C:\users\aleš\downloads\chmatakov15jh(2).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15jh(2).exe |
"TCP Query User{A6E52D8E-BA7C-4598-AA2E-4C198ED02731}C:\users\aleš\appdata\local\opera\opera\temporary_downloads\chmatakov15 (1).exe" = protocol=6 | dir=in | app=c:\users\aleš\appdata\local\opera\opera\temporary_downloads\chmatakov15 (1).exe |
"TCP Query User{A88FF245-175B-4587-888B-B660EF6FECC2}C:\users\aleš\downloads\chmatakov15 (4).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (4).exe |
"TCP Query User{A9AF9CB8-79D7-4DB1-BDDA-3BC8D947A2C4}C:\users\aleš\downloads\chmatakov15(9).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(9).exe |
"TCP Query User{A9B19535-CCCE-4944-B207-61CB5D71EC13}C:\users\aleš\downloads\chmatakov15vc(1).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15vc(1).exe |
"TCP Query User{A9C53913-C71A-4191-B29F-07D25F4C9305}C:\users\aleš\downloads\chmatnex (1).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatnex (1).exe |

[FooDMasteR]

"TCP Query User{ACFC1E8E-3907-4AD7-8C92-4B5C3F9B32C6}C:\users\aleš\appdata\local\temp\mrtfa07.tmp\stdrt.exe" = protocol=6 | dir=in | app=c:\users\aleš\appdata\local\temp\mrtfa07.tmp\stdrt.exe |
"TCP Query User{AD392C89-CDED-4575-BBE5-6F9C3C33AAB7}C:\windows\syswow64\javaw.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\javaw.exe |
"TCP Query User{AE55A9C3-5ACD-4BBF-A017-A215624A8388}C:\program files (x86)\hyl\mountblueklient\mountblue.exe" = protocol=6 | dir=in | app=c:\program files (x86)\hyl\mountblueklient\mountblue.exe |
"TCP Query User{AEF2AD69-3371-4940-B544-C5A35D0AAF03}C:\users\aleš\downloads\chmatakov15 (2).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (2).exe |
"TCP Query User{AF542471-B423-47E8-98FA-47A514B2971A}C:\program files (x86)\deskshare\webcam monitor 5\webcam monitor.exe" = protocol=6 | dir=in | app=c:\program files (x86)\deskshare\webcam monitor 5\webcam monitor.exe |
"TCP Query User{AF80BCF9-114A-4B65-B297-D3566997EBE7}C:\users\aleš\downloads\chmat (2).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmat (2).exe |
"TCP Query User{AFA1F3F3-B5B6-4A3E-A102-C6BB24D80A6E}C:\users\aleš\documents\server\nová složka\spf.exe" = protocol=6 | dir=in | app=c:\users\aleš\documents\server\nová složka\spf.exe |
"TCP Query User{B17EB9D5-4D08-40F3-9B78-C0CF6416989F}C:\users\aleš\appdata\local\temp\rar$exa0.215\1013\1013.exe" = protocol=6 | dir=in | app=c:\users\aleš\appdata\local\temp\rar$exa0.215\1013\1013.exe |
"TCP Query User{B30B73ED-BFFE-4884-A9D1-CBCA7F3CF9E2}C:\xampp\mysql\bin\mysqld.exe" = protocol=6 | dir=in | app=c:\xampp\mysql\bin\mysqld.exe |
"TCP Query User{B4889BB5-0345-44CB-ACD5-9815DC54A93C}C:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\chmat serverside\chmatakov.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\chmat serverside\chmatakov.exe |
"TCP Query User{B50320DC-B366-445B-BFEE-40A4131F4A04}C:\users\aleš\desktop\nová složka (2)\downloads\chmatjabko919.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\nová složka (2)\downloads\chmatjabko919.exe |
"TCP Query User{B7508BDA-6FBD-48E1-B30F-97D1507DA484}C:\users\aleš\downloads\chmat (1).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmat (1).exe |
"TCP Query User{B7E208C9-F79C-4ECA-AEE3-59EE8D4C6ADE}C:\program files (x86)\willing webcam lite\wwlite.exe" = protocol=6 | dir=in | app=c:\program files (x86)\willing webcam lite\wwlite.exe |
"TCP Query User{B9334923-2AAF-47BC-8DC1-A19D2AB6ECE6}C:\users\aleš\downloads\chmatnex (2).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatnex (2).exe |
"TCP Query User{BE3D83E1-4299-49E2-9BA8-0BED8341C476}C:\users\aleš\appdata\local\temp\rar$exa0.545\chmatlife.exe" = protocol=6 | dir=in | app=c:\users\aleš\appdata\local\temp\rar$exa0.545\chmatlife.exe |
"TCP Query User{C07BCF1B-8C28-4E57-88EA-D40B1E2A2E1D}C:\totalcmd\totalcmd.exe" = protocol=6 | dir=in | app=c:\totalcmd\totalcmd.exe |
"TCP Query User{C0933865-6741-4AD9-BA77-8378DB6B1E34}C:\users\aleš\downloads\chmatakov15(14).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(14).exe |
"TCP Query User{C1A1C319-A401-48CF-91B5-964902F31C88}C:\program files\ispy\ispy (64 bit)\ispy.exe" = protocol=6 | dir=in | app=c:\program files\ispy\ispy (64 bit)\ispy.exe |
"TCP Query User{C1E872AC-4025-47E6-96D7-2ACAF8606069}C:\users\aleš\appdata\local\temp\mrt640f.tmp\stdrt.exe" = protocol=6 | dir=in | app=c:\users\aleš\appdata\local\temp\mrt640f.tmp\stdrt.exe |
"TCP Query User{C37EFAF1-9877-4175-A499-95C683C43B60}C:\users\aleš\documents\server\chmatakov15.exe" = protocol=6 | dir=in | app=c:\users\aleš\documents\server\chmatakov15.exe |
"TCP Query User{C7EA0A90-C65F-4317-8C65-A3E393AEC668}C:\users\aleš\downloads\chmatakov15(2).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(2).exe |
"TCP Query User{CBCE6866-24B0-4FF4-A87F-0324E7910C28}C:\users\aleš\downloads\chmatakov15(6).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(6).exe |
"TCP Query User{CFFC515A-9A19-4090-B21C-052D0E8E2DC3}C:\program files (x86)\webcamxp 5\wlite.exe" = protocol=6 | dir=in | app=c:\program files (x86)\webcamxp 5\wlite.exe |
"TCP Query User{D0EA075D-998E-438B-BD8F-92585571944E}C:\users\aleš\downloads\chmatakov15jh(1).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15jh(1).exe |
"TCP Query User{D2B248D6-E9F3-4CDB-A0F6-37A78A047570}C:\windows\syswow64\javaw.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\javaw.exe |
"TCP Query User{D59C5659-10D2-4FCD-B648-4EB042B4669F}C:\users\aleš\desktop\chmatjabko data\chmatjabko 930 klient\chj-930.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\chmatjabko data\chmatjabko 930 klient\chj-930.exe |
"TCP Query User{D5EED3F9-BCEA-4C88-874F-26826BBC4CDC}C:\users\aleš\downloads\chmat.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmat.exe |
"TCP Query User{D76BB664-85E8-41EA-9A95-D81DE54FFE5C}C:\users\aleš\desktop\chmatofík\nová složka\cho-ofík.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\chmatofík\nová složka\cho-ofík.exe |
"TCP Query User{D77E0FE9-1C2B-4E34-BA5F-0414CCE145A1}C:\program files\ispy\ispy (64 bit)\ispy.exe" = protocol=6 | dir=in | app=c:\program files\ispy\ispy (64 bit)\ispy.exe |
"TCP Query User{D897BD37-7E6B-4D5A-A0B1-E5848A06F532}C:\users\aleš\downloads\chmatakov15(1).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(1).exe |
"TCP Query User{DA6C3826-C4E5-4EBD-AF7A-EBF7F588B527}C:\users\aleš\desktop\chmatjabko.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\chmatjabko.exe |
"TCP Query User{DBD07260-0849-470E-AFD1-A6EB252AB971}C:\users\aleš\desktop\chmatakov15.exe.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\chmatakov15.exe.exe |
"TCP Query User{DEF49AAA-FFDD-4128-8872-3E94D2B05B87}C:\users\aleš\downloads\chmatakov15 (11).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (11).exe |
"TCP Query User{DEFD1A98-C5FB-4877-B483-76170580131C}C:\users\aleš\downloads\chmatakov15(15).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(15).exe |
"TCP Query User{DF9C080D-094E-4121-B91F-C8001094AF5C}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"TCP Query User{E196C756-C243-43C2-A987-BD84814D7DAA}C:\users\aleš\downloads\chmatnex.exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatnex.exe |
"TCP Query User{E34B5371-ED20-4972-A8E6-4E76B8AD1933}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"TCP Query User{E5D94B50-9E17-4AB5-8822-3CFCBC669F37}C:\users\aleš\downloads\chmatakov15(11).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(11).exe |
"TCP Query User{E8AB81DF-788C-4436-8703-3AB873C160B1}C:\program files (x86)\opera\opera.exe" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"TCP Query User{EE1F61EC-3CC6-49DE-8F74-FF4110C2DBCA}C:\users\aleš\downloads\chmatakov15 (6).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (6).exe |
"TCP Query User{EE839362-483C-4B3D-A7E2-33D3697B8DF4}C:\users\aleš\appdata\local\temp\mrt16ff.tmp\stdrt.exe" = protocol=6 | dir=in | app=c:\users\aleš\appdata\local\temp\mrt16ff.tmp\stdrt.exe |
"TCP Query User{F093A551-A112-45BF-A092-3544BC83E217}C:\users\aleš\downloads\chmatakov15 (8).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (8).exe |
"TCP Query User{F201E059-C6E1-4E7D-B02F-99E2330E9306}C:\users\aleš\downloads\chmatakov15 (1).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (1).exe |
"TCP Query User{F54447DD-D33D-40B2-8A4B-B6183C22FE9E}C:\users\aleš\desktop\moje data\ctt\chmatakov15.exe" = protocol=6 | dir=in | app=c:\users\aleš\desktop\moje data\ctt\chmatakov15.exe |
"TCP Query User{F835F480-FAAB-42FA-AA38-26C0E20A6771}C:\users\aleš\downloads\chmatakov15 (13).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (13).exe |
"TCP Query User{F9F09442-F573-488D-BA37-C13D7CF618E6}C:\users\aleš\documents\server\server01.exe" = protocol=6 | dir=in | app=c:\users\aleš\documents\server\server01.exe |
"TCP Query User{FF7A3977-E1B3-44A3-9C69-DE10D98175D9}C:\users\aleš\downloads\chmatakov15(3).exe" = protocol=6 | dir=in | app=c:\users\aleš\downloads\chmatakov15(3).exe |
"UDP Query User{04E0BA9A-8645-416C-ABF6-4EEE640851E5}C:\users\aleš\downloads\chmat.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmat.exe |
"UDP Query User{06CC3F3E-2D5F-4D09-A8A7-9C2A0501FF8C}C:\users\aleš\downloads\chmatakov15 (6).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (6).exe |
"UDP Query User{08828CCB-C692-4118-9930-A59F143CCFDF}C:\users\aleš\desktop\chmatjabko data\chmatjabko 930 klient\chj-930.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\chmatjabko data\chmatjabko 930 klient\chj-930.exe |
"UDP Query User{08E9C5CC-549F-4229-8C19-268E7BA78CEE}C:\users\aleš\downloads\chfuture.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chfuture.exe |
"UDP Query User{0A457908-4BE7-41CC-A2B8-BC4B1214E41A}C:\users\aleš\downloads\chmatakov15 (13).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (13).exe |
"UDP Query User{0C425821-91CB-4C30-8BCF-9C86F7BADDA4}C:\users\aleš\downloads\chmatakov15 (4).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (4).exe |
"UDP Query User{0C4A0E1D-0FFD-4024-B2DF-B9164BE53F11}C:\users\aleš\desktop\nová složka (2)\downloads\chmatjabko919.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\nová složka (2)\downloads\chmatjabko919.exe |
"UDP Query User{0DC21694-A845-45C4-B8FC-E8CCB9939F58}C:\users\aleš\downloads\chmatakov15jh.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15jh.exe |
"UDP Query User{0E90371C-9E85-4C4C-B40E-EA567205D898}C:\users\aleš\downloads\chmatnex (2).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatnex (2).exe |
"UDP Query User{128B5161-C331-466A-8C3D-E1453B913F2E}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe |
"UDP Query User{134D986B-7586-4EDF-AFAF-8D3616CAB6C7}C:\users\aleš\downloads\chmatakov15(9).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(9).exe |
"UDP Query User{1BC3BEFB-6368-458C-9CCA-D3C57268E732}C:\users\aleš\appdata\local\temp\mrt640f.tmp\stdrt.exe" = protocol=17 | dir=in | app=c:\users\aleš\appdata\local\temp\mrt640f.tmp\stdrt.exe |
"UDP Query User{1D800D20-3E07-4DC7-A787-5B4A7DA6FC1A}C:\users\aleš\downloads\chmatnex (1).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatnex (1).exe |
"UDP Query User{1F012102-3204-4AF3-B64E-C397A4138758}C:\users\aleš\downloads\chfuture.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chfuture.exe |
"UDP Query User{1F0C0DEC-A759-4D2A-8BA5-42D12D898D5D}C:\users\aleš\downloads\chmatakov15 (6).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (6).exe |
"UDP Query User{1FFEFF69-CF74-438E-B89A-B95FFFEC0CC3}C:\users\aleš\appdata\local\temp\rar$exa0.279\ncpsrv.exe" = protocol=17 | dir=in | app=c:\users\aleš\appdata\local\temp\rar$exa0.279\ncpsrv.exe |
"UDP Query User{21FBBBD0-7DF6-47DF-AAB1-DB39DAAD2BFC}C:\xampp\mysql\bin\mysqld.exe" = protocol=17 | dir=in | app=c:\xampp\mysql\bin\mysqld.exe |
"UDP Query User{22028AEA-42AB-4B15-94FE-EA5E7914DA78}C:\users\aleš\downloads\chmatakov15.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15.exe |
"UDP Query User{225F1E49-A6EF-4BD8-988E-1665F0E4B21E}C:\users\aleš\downloads\chmatakov15(13).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(13).exe |
"UDP Query User{23604D6C-9D9D-4F3D-B6F5-67B86B0AB13D}C:\users\aleš\downloads\chmatlife.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatlife.exe |
"UDP Query User{267BF7C4-0358-4FC8-B934-EC3E78A77C76}C:\users\aleš\downloads\chmatnex.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatnex.exe |
"UDP Query User{2680C3AD-6A3B-4973-9796-F70D236BC1B8}C:\users\aleš\downloads\chmatakov15(15).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(15).exe |
"UDP Query User{26DEE784-16DB-4E32-9854-9C73846C542B}C:\users\aleš\downloads\chmatakov15(4).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(4).exe |
"UDP Query User{2E2512A3-C72A-482D-B015-211742AB750F}C:\users\aleš\documents\server\server01.exe" = protocol=17 | dir=in | app=c:\users\aleš\documents\server\server01.exe |
"UDP Query User{2EF8FE9F-6AB2-43A2-AA85-B9848DCD58E4}C:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\chmat serverside\chmatakov.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\chmat serverside\chmatakov.exe |
"UDP Query User{2F0BE5BB-4AF7-4178-B832-7429DFF64C4F}C:\users\aleš\desktop\chmatjabko data\chmatjabko 930 klient\chmatjabko.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\chmatjabko data\chmatjabko 930 klient\chmatjabko.exe |
"UDP Query User{3756161E-63F9-4BC9-990B-C5225EE73BE7}C:\users\aleš\downloads\chmatakov15_hruzka(2).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15_hruzka(2).exe |
"UDP Query User{39CF5EA5-8E09-4451-BD44-45140D7D95BF}C:\users\aleš\appdata\local\temp\rar$exa0.020\chmatlife.exe" = protocol=17 | dir=in | app=c:\users\aleš\appdata\local\temp\rar$exa0.020\chmatlife.exe |
"UDP Query User{3AAB38B6-A3B3-4DCA-A56C-DF44053ED3BD}C:\users\aleš\desktop\chmatjabko.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\chmatjabko.exe |
"UDP Query User{3B280B9E-EF52-4AB9-AFCB-776DE8FE5E3A}C:\users\aleš\appdata\local\opera\opera\temporary_downloads\chmatakov15 (1).exe" = protocol=17 | dir=in | app=c:\users\aleš\appdata\local\opera\opera\temporary_downloads\chmatakov15 (1).exe |
"UDP Query User{3C5CF49B-084F-4478-A90B-50EC0B7A7312}C:\users\aleš\desktop\nová složka (2)\downloads\chmatjabko.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\nová složka (2)\downloads\chmatjabko.exe |
"UDP Query User{3C98EC11-F5F2-49AC-8450-5BF25F4DC13B}C:\windows\syswow64\javaw.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\javaw.exe |
"UDP Query User{3F268833-5976-473E-BE0C-509A73E0434E}C:\users\aleš\downloads\chmatakov15(3).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(3).exe |
"UDP Query User{413A6454-162B-4A7D-9AC8-0EAF2FC1695F}C:\users\aleš\documents\server\chmatakov15(1).exe" = protocol=17 | dir=in | app=c:\users\aleš\documents\server\chmatakov15(1).exe |
"UDP Query User{41C593E2-A791-4E98-8C10-76843C71C815}C:\users\aleš\appdata\local\temp\rar$exa0.690\webkamera.exe" = protocol=17 | dir=in | app=c:\users\aleš\appdata\local\temp\rar$exa0.690\webkamera.exe |
"UDP Query User{43FB71C6-D927-48DC-9B50-81B84BC94ED6}C:\users\aleš\downloads\chmatakov15(1).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(1).exe |
"UDP Query User{454E6647-DBD2-4516-958E-B19122449590}C:\users\aleš\downloads\chmatakov15(11).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(11).exe |
"UDP Query User{460E3E33-9525-4118-A7E3-3CE9C9A393B0}C:\users\aleš\documents\server\nová složka\spf.exe" = protocol=17 | dir=in | app=c:\users\aleš\documents\server\nová složka\spf.exe |
"UDP Query User{48659D49-8702-4628-9637-7003CF565FBA}C:\users\aleš\downloads\chmatakov15 (1).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (1).exe |
"UDP Query User{499238B1-98B5-489E-A7BD-1570204D574E}C:\program files\ispy\ispy (64 bit)\ispy.exe" = protocol=17 | dir=in | app=c:\program files\ispy\ispy (64 bit)\ispy.exe |
"UDP Query User{4A70EBB4-6B54-41E9-9456-BFF7163302B8}C:\users\aleš\downloads\chmatakov15 (10).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (10).exe |
"UDP Query User{4ADC0364-777F-4F36-8EC8-8FF231418DD8}C:\users\aleš\downloads\chmatakov15(6).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(6).exe |
"UDP Query User{4AE62AEC-DF19-4DC3-8384-704BE226773C}C:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\bugování a cheaty\nová složka\chmatakov15.exe.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\bugování a cheaty\nová složka\chmatakov15.exe.exe |
"UDP Query User{4C3B2E1E-874E-451B-8E0F-FFC5CDAEF64C}C:\users\aleš\appdata\local\temp\rar$exa0.215\1013\1013.exe" = protocol=17 | dir=in | app=c:\users\aleš\appdata\local\temp\rar$exa0.215\1013\1013.exe |
"UDP Query User{4E5F58DF-A8A2-49EC-9E84-F539BEC1D1A5}C:\program files (x86)\hyl\mountblueklient\mountblue.exe" = protocol=17 | dir=in | app=c:\program files (x86)\hyl\mountblueklient\mountblue.exe |
"UDP Query User{4EC9BAC2-8920-46B1-9360-EF4E24D4C4E2}C:\users\aleš\desktop\moje data\ctt\chmatakov15.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\moje data\ctt\chmatakov15.exe |
"UDP Query User{51088D39-45D0-4E76-9C2A-6B0DE8C976A3}C:\users\aleš\downloads\chmatakov15(2).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(2).exe |
"UDP Query User{52032B22-C555-4F65-9CF4-79EE78D6A26E}C:\users\aleš\downloads\chmatakov15(14).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(14).exe |
"UDP Query User{549069AA-3BCF-4624-8F03-B3AF3D0F9782}C:\users\aleš\downloads\chmatakov15 (2).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (2).exe |
"UDP Query User{549458BB-BD76-46AE-9093-BABBDACD1397}C:\users\aleš\downloads\chmatakov15(3).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(3).exe |
"UDP Query User{554E7BA3-5D4B-4EFB-9923-D33DC3AC3D8D}C:\program files\ispy\ispy (64 bit)\ispy.exe" = protocol=17 | dir=in | app=c:\program files\ispy\ispy (64 bit)\ispy.exe |
"UDP Query User{55DA7CE2-C55C-425E-8671-AB33D1905DF8}C:\users\aleš\downloads\chmatakov15vc.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15vc.exe |
"UDP Query User{5640ABD9-86F8-4486-BAAB-5AB42287AD0F}C:\users\aleš\appdata\local\temp\mrtfa07.tmp\stdrt.exe" = protocol=17 | dir=in | app=c:\users\aleš\appdata\local\temp\mrtfa07.tmp\stdrt.exe |
"UDP Query User{57E1FE96-F709-4825-861D-CB95E1550C0D}C:\program files (x86)\willing webcam lite\wwlite.exe" = protocol=17 | dir=in | app=c:\program files (x86)\willing webcam lite\wwlite.exe |
"UDP Query User{59647D38-EEAC-4312-8326-0C423EECCC8F}C:\users\aleš\downloads\chmatakov15_hruzka(4).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15_hruzka(4).exe |
"UDP Query User{5AA542B6-CD22-407D-85D4-5A30E3352763}C:\users\aleš\desktop\chmatofík\chmatakov15.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\chmatofík\chmatakov15.exe |
"UDP Query User{5BC253A3-1657-42AE-93A9-7E7D7D773ADD}C:\users\aleš\downloads\chmatakov15(12).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(12).exe |
"UDP Query User{5F94AA6A-2003-42C5-9FF8-E14A65D85B9D}C:\users\aleš\downloads\server\chmatakov15.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\server\chmatakov15.exe |
"UDP Query User{621538AC-3315-4D58-AE0B-D36937BA9A3B}C:\program files (x86)\arduino\java\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\arduino\java\bin\javaw.exe |
"UDP Query User{6975F03D-AB22-4E1C-9AE2-CBE4FB2AA866}C:\users\aleš\downloads\chmatakov15(2).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(2).exe |
"UDP Query User{6ADEE00D-9568-4B5A-98A8-9AEEB2924DAC}C:\users\aleš\appdata\local\opera\opera\temporary_downloads\chmatakov15.exe" = protocol=17 | dir=in | app=c:\users\aleš\appdata\local\opera\opera\temporary_downloads\chmatakov15.exe |
"UDP Query User{6F82883B-DB7A-4C23-9D62-4CAD4F1A112E}C:\xampp\mercurymail\mercury.exe" = protocol=17 | dir=in | app=c:\xampp\mercurymail\mercury.exe |
"UDP Query User{7180E315-99DC-45CB-AEED-349A0E81EF5E}C:\program files (x86)\deskshare\webcam monitor 5\webcam monitor.exe" = protocol=17 | dir=in | app=c:\program files (x86)\deskshare\webcam monitor 5\webcam monitor.exe |
"UDP Query User{72F541F7-3B41-4227-9A07-4FAF33C05D2A}C:\users\aleš\downloads\chmatjabko.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatjabko.exe |
"UDP Query User{73128860-A195-4B2C-A06F-E57CFB1F2D0E}C:\users\aleš\downloads\chmatakov15(9).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(9).exe |
"UDP Query User{7354CB92-9F39-4BF0-AFE5-A847D304B9A5}C:\users\aleš\desktop\ncpsrv.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\ncpsrv.exe |
"UDP Query User{7463DCCC-BA7C-4194-9B39-4AC665EF6026}C:\users\aleš\downloads\chmatakov15 (11).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (11).exe |
"UDP Query User{746C5870-B91D-45C6-AB4C-F6D950D9F396}C:\users\aleš\appdata\local\temp\mrt16ff.tmp\stdrt.exe" = protocol=17 | dir=in | app=c:\users\aleš\appdata\local\temp\mrt16ff.tmp\stdrt.exe |
"UDP Query User{74A6CC0A-6C7B-4910-A0BB-F7F1EE8FEB96}C:\users\aleš\downloads\chmatakov15 (7).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (7).exe |
"UDP Query User{76090F11-CFE5-4AF1-A9DA-B9A47ED0446B}C:\users\aleš\downloads\chmatakov15_hruzka.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15_hruzka.exe |
"UDP Query User{7B60A75B-46DA-4734-A5C9-1EF1820B0144}C:\users\aleš\downloads\chmatakov15(7).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(7).exe |
"UDP Query User{7B86BF1C-5A05-4844-A21A-B7AC0572173E}C:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\chmat serverside\server01.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\chmat serverside\server01.exe |
"UDP Query User{7C5A707F-EACB-4905-AD38-D313B4940998}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"UDP Query User{7F3A3412-0020-4EE0-93A1-CFD229EE5B46}C:\users\aleš\downloads\chmatjabko.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatjabko.exe |
"UDP Query User{815BCF75-299A-402B-9AD8-F3187BCB86A0}C:\users\aleš\desktop\moje data\ctt\server01.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\moje data\ctt\server01.exe |
"UDP Query User{844C6649-B58E-4994-98B6-B2C36774A54D}C:\users\aleš\downloads\chmatakov15 (2).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (2).exe |
"UDP Query User{8495B900-F787-4161-94C6-95B55BE19151}C:\users\aleš\desktop\chmatofík\server01.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\chmatofík\server01.exe |
"UDP Query User{86929471-990F-48BF-A424-A62900FBA95D}C:\users\aleš\downloads\chmatakov15(14).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(14).exe |
"UDP Query User{897A26C8-20CB-4AC7-BD26-43A7AC496D5A}C:\users\aleš\downloads\chmatakov15 (3).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (3).exe |
"UDP Query User{8B73C4E0-9BFD-46B6-99F5-4688E6ADCC38}C:\totalcmd\totalcmd.exe" = protocol=17 | dir=in | app=c:\totalcmd\totalcmd.exe |
"UDP Query User{8C2E8682-B30D-429F-B8CD-09207B0E75B0}C:\program files (x86)\webcamxp 5\wlite.exe" = protocol=17 | dir=in | app=c:\program files (x86)\webcamxp 5\wlite.exe |
"UDP Query User{918BAB56-73A6-4144-B479-38C5D33FD595}C:\windows\syswow64\javaw.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\javaw.exe |
"UDP Query User{938D90E0-22FC-44FC-A160-29FD9259E285}C:\users\aleš\desktop\chmatofík\cho-ofík.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\chmatofík\cho-ofík.exe |
"UDP Query User{9683D9FA-28B1-4001-ACAE-16B01D6A43F3}C:\users\aleš\desktop\server01.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\server01.exe |
"UDP Query User{96E29ACF-7832-4056-AEDF-F1E0E7CF7382}C:\users\aleš\downloads\chmatakov15(6).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(6).exe |
"UDP Query User{974A9B1C-29F5-4733-BA73-7F54981E55D4}C:\users\aleš\downloads\chmatakov15 (8).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (8).exe |
"UDP Query User{98938583-2113-4375-ADCD-B526BC51B7CB}C:\users\aleš\appdata\local\temp\rar$exa0.545\chmatlife.exe" = protocol=17 | dir=in | app=c:\users\aleš\appdata\local\temp\rar$exa0.545\chmatlife.exe |
"UDP Query User{9F236CDD-B493-468F-B6F8-2C784F613C92}C:\users\aleš\downloads\chmatakov15(8).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(8).exe |
"UDP Query User{A0D96787-C519-4E67-ADAF-41DC92ACA309}C:\users\aleš\appdata\local\temp\rar$exa0.369\1013\1013.exe" = protocol=17 | dir=in | app=c:\users\aleš\appdata\local\temp\rar$exa0.369\1013\1013.exe |
"UDP Query User{AADA1B85-879F-40BA-A317-78D051628E97}C:\users\aleš\desktop\chmatakov15.exe.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\chmatakov15.exe.exe |
"UDP Query User{AB212984-F01D-4128-938C-5A2DAADE9644}C:\users\aleš\downloads\chmatakov15(12).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(12).exe |
"UDP Query User{ABADB069-9B5B-4B6D-B910-B2579767204E}C:\users\aleš\downloads\chmatakov15(10).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(10).exe |
"UDP Query User{ACCB5773-B1EC-4290-88BE-890740D794CF}C:\users\aleš\downloads\chmatlife.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatlife.exe |
"UDP Query User{ADB91214-E714-416D-BECF-3A8FEE71B14E}C:\users\aleš\downloads\chmatnex.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatnex.exe |
"UDP Query User{AEAA6FDE-2824-4256-983B-3063C7171422}C:\users\aleš\downloads\chmatakov15jh(2).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15jh(2).exe |
"UDP Query User{AF6476D7-FE46-4BFE-99C7-74C467214AEC}C:\users\aleš\desktop\chmatofík\nová složka\chmatakov15.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\chmatofík\nová složka\chmatakov15.exe |
"UDP Query User{B1549036-CC50-41AC-B2CA-819EE2EFA781}C:\users\aleš\downloads\chmatakov15jh(2).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15jh(2).exe |
"UDP Query User{B4EE1CC6-8FEE-4DA7-AABD-74F5DC6E63A9}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"UDP Query User{B58BD2AE-64BC-436E-8FA8-D84176FCF33F}C:\users\aleš\downloads\chmatakov15 (12).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (12).exe |
"UDP Query User{B6A6A08B-5911-473F-83A9-640698C9561A}C:\users\aleš\downloads\chmatakov15 (3).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (3).exe |
"UDP Query User{B75CE025-9458-457F-9742-831FE9EC97B4}C:\users\aleš\downloads\chmatakov15 (4).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (4).exe |
"UDP Query User{BAF71EC2-1914-4F67-81E2-414617C19BB6}C:\users\aleš\downloads\1013(1).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\1013(1).exe |
"UDP Query User{BDF2A9F7-8090-4513-8233-376F9EC2FFC7}C:\users\aleš\downloads\chmatakov15jh(1).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15jh(1).exe |
"UDP Query User{C0146401-12BE-4262-AE22-9CEBB413825E}C:\users\aleš\downloads\chmat(1).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmat(1).exe |
"UDP Query User{C0C9E3EA-5740-4B79-842B-E1A73FCFCCDC}C:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\bugování a cheaty\nová složka\chmatakov15.exe.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\nová složka (2)\desktop\nová složka (2)\bugování a cheaty\nová složka\chmatakov15.exe.exe |
"UDP Query User{C4A4A5B5-192B-49D6-B235-483903B4193C}C:\users\aleš\downloads\chmatakov15(17).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(17).exe |
"UDP Query User{C9D373AF-7B64-40AC-A897-A3B9E110E8D1}C:\users\aleš\downloads\chmatakov15 (7).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (7).exe |
"UDP Query User{CEDAB2DE-7D76-45BC-ADAF-53256A77286D}C:\users\aleš\downloads\chmatakov15(5).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(5).exe |
"UDP Query User{D41805C5-636B-463D-A7DB-7AA6BC8C6672}C:\users\aleš\downloads\server\server01.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\server\server01.exe |
"UDP Query User{D6CC0EFE-178F-48AF-8882-22B134A09E4E}C:\users\aleš\downloads\chmatakov.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov.exe |
"UDP Query User{DBA1447B-AF19-41DB-9D2B-FF3952E26679}C:\users\aleš\downloads\chmatakov15vc(1).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15vc(1).exe |
"UDP Query User{DBAA67E8-2BF4-46C7-B0BE-3380D173ADD9}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe |
"UDP Query User{DED26F1E-728B-4155-A8D9-A94D79552A9F}C:\users\aleš\downloads\chmatakov15(16).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(16).exe |
"UDP Query User{DEE75D18-B491-47DE-AFFD-912A981B60D9}C:\users\aleš\downloads\chmat (2).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmat (2).exe |
"UDP Query User{DF791184-519C-43B3-A08A-1910F33FD9B1}C:\users\aleš\appdata\local\opera\opera\temporary_downloads\chmatakov15 (1).exe" = protocol=17 | dir=in | app=c:\users\aleš\appdata\local\opera\opera\temporary_downloads\chmatakov15 (1).exe |
"UDP Query User{DFA28663-6620-415A-9701-1730E2235FD8}C:\users\aleš\desktop\ch server - síť\chmatákov server - síť.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\ch server - síť\chmatákov server - síť.exe |
"UDP Query User{E5898EF2-3686-4D2B-A23E-784D0F8D3E95}C:\program files (x86)\opera\opera.exe" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"UDP Query User{E71D697F-77C0-450B-A69E-49403BDDAAFE}C:\users\aleš\downloads\server\server01.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\server\server01.exe |
"UDP Query User{E78A97B6-6466-4C24-B37F-4E190C260FA5}C:\users\aleš\downloads\chmatakov15 (5).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (5).exe |
"UDP Query User{E7C4E017-0EF9-4149-AB76-6BC30A99E5D9}C:\users\aleš\downloads\1013.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\1013.exe |
"UDP Query User{EB7B35F0-01AA-43B4-91E3-4EAD378FF04F}C:\users\aleš\downloads\chmatakov15 (12).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (12).exe |
"UDP Query User{EC196B00-0186-45BF-BC18-E5B0246E71A4}C:\users\aleš\downloads\chmatnex (1).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatnex (1).exe |
"UDP Query User{ECA4A004-F9A9-45A2-89F1-020AEEDF5162}C:\users\aleš\downloads\chmat (1).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmat (1).exe |
"UDP Query User{ECA87220-45F2-4BA5-B432-E2536EE8BA72}C:\users\aleš\downloads\chmatakov15neoficialni.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15neoficialni.exe |
"UDP Query User{ECAE4CA8-7207-476D-A489-1DB36D7C007B}C:\users\aleš\documents\chmatakov15.exe" = protocol=17 | dir=in | app=c:\users\aleš\documents\chmatakov15.exe |
"UDP Query User{ED216254-D85B-46AD-BE12-5F494641C57B}C:\users\aleš\downloads\chmat(2).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmat(2).exe |
"UDP Query User{EF7CBFA4-3FC0-41D0-A465-9F281D46381C}C:\users\aleš\documents\server\chmatakov15.exe" = protocol=17 | dir=in | app=c:\users\aleš\documents\server\chmatakov15.exe |
"UDP Query User{EFED0134-A7D0-495E-AE3A-97B57E4E502E}C:\users\aleš\desktop\chmatjabko data\chmatjabko 930 klient\chmatjabko.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\chmatjabko data\chmatjabko 930 klient\chmatjabko.exe |
"UDP Query User{F062E899-3A77-42D5-9E5B-55CD6A5C7D96}C:\users\aleš\downloads\chmatakov15 (11).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (11).exe |
"UDP Query User{F08B9794-E45E-44E0-84D8-F346B92EDEEA}C:\users\aleš\downloads\chmatakov15(4).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(4).exe |
"UDP Query User{F1B465F2-2A84-4B1A-80DC-DC50FA7422B5}C:\users\aleš\appdata\local\temp\rar$exa0.050\webcam2web.exe" = protocol=17 | dir=in | app=c:\users\aleš\appdata\local\temp\rar$exa0.050\webcam2web.exe |
"UDP Query User{F4D83C24-AD1C-4C39-BCF0-AA720E513578}C:\users\aleš\downloads\chmatakov15(5).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15(5).exe |
"UDP Query User{F75EC2B8-5746-4660-B4B2-62878ADC0C09}C:\users\aleš\downloads\chmatakov15 (1).exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\chmatakov15 (1).exe |
"UDP Query User{F80A8346-AC3A-4433-8387-A216E2309E4A}C:\program files (x86)\smart port forwarding\spf.exe" = protocol=17 | dir=in | app=c:\program files (x86)\smart port forwarding\spf.exe |
"UDP Query User{F9BFC70D-C2C7-461F-BC3F-126640728377}C:\users\aleš\desktop\chmatofík\nová složka\cho-ofík.exe" = protocol=17 | dir=in | app=c:\users\aleš\desktop\chmatofík\nová složka\cho-ofík.exe |
"UDP Query User{FB0349B1-A7D0-4D88-B3BA-A7EB0878CB23}C:\users\aleš\downloads\server\chmatakov15.exe" = protocol=17 | dir=in | app=c:\users\aleš\downloads\server\chmatakov15.exe |
"UDP Query User{FCFA977C-4A20-4834-B9E9-2DF046E97F72}C:\program files (x86)\1clickdownload\1clickdownload.exe" = protocol=17 | dir=in | app=c:\program files (x86)\1clickdownload\1clickdownload.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{001671BD-307C-4907-8EFA-B98752C1AB3C}" = NI LabWindows/CVI 2013 Network Variable Library (64-bit)
"{00D12A70-7B79-4A14-80B5-F12626237DE7}" = NI GMP Windows 64-bit Installer 13.0.0
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{07E00E94-7A78-40FA-9BEF-71C190E98041}" = NI VC2008MSMs x64
"{0D8CE7D9-884A-4DF1-B459-E910CF34EE5C}" = NI USI 2.0.1 64-Bit
"{0EA4894B-C99B-48E4-976A-94B55CB89239}" = NI MXS 5.3.0 for 64 Bit Windows
"{0EE4746B-B1D6-443D-AC72-08ACF777E8FD}" = NI LabWindows/CVI SxS Run-Time Engine 2013 Patch 1 (64-bit)
"{112D8201-03A2-43B2-861B-EB3FCB855547}" = Math Kernel Libraries (64-bit)
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ2414" = CanoScan LiDE 110 Scanner Driver
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{230D1595-57DA-4933-8C4E-375797EBB7E1}" = ASUS Bluetooth Suite
"{24007B13-2F2E-490E-93CC-B38416EB62A0}" = NI LabWindows/CVI 2013 Network Streams Library (64-bit)
"{25D7E1D4-6E56-47D6-90CC-9A235A661EF5}" = NI LabWindows/CVI 2013 Patch 1 SxS NS Library (64-bit)
"{28324488-BF50-488F-BE40-6ED3CFA40C26}" = NI Variable Engine (64-bit)
"{2BF63B6D-6B44-46D5-8F2C-5BFBC78D9593}" = NI Authentication 13.0.0 (64-bit)
"{3A6898F6-9B23-40DE-9B2D-617DBDEFDBF9}" = NI mDNS Responder 2.2 for Windows 64-bit
"{3ABCF186-64DE-439C-8B66-CC31B8513D8C}" = NI TDM Streaming 2.5 (64-bit)
"{3C38CA01-7933-31E7-A1F6-EAA1DF9BEDF3}" = Microsoft .NET Framework 4.6.1 (CSY)
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{44AB13BE-EEFE-4A8D-AFD9-92EFA430F738}" = NI LabWindows/CVI 2013 Patch 1 SxS NV Library (64-bit)
"{44D4F76B-F8AE-4441-919E-B796B815E71B}" = NI LabWindows/CVI 2013 Patch 1 SxS TDMS Library (64-bit)
"{4768A660-5962-491F-8B1D-9A3FA35819A6}" = NI MAX Remote Configuration 64-bit Installer 5.5
"{5082931D-0578-4032-88C0-AB64278E444A}" = NI LabWindows/CVI 2013 Analysis Library (64-bit)
"{50B2D9D8-87B6-49EE-BC5C-874119FD6B7B}" = NI Xerces Delay Load 2.7.3 64-bit
"{52697603-3D36-4BDD-A700-86667A40BA95}" = NI Update Service 2014 (64-bit)
"{56B02DF2-C570-43E0-A16A-C6A1CE4AD7FB}" = Math Kernel Libraries (64-bit)
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{62126BD1-8107-48A1-9889-FA16F064893C}" = NI Web Application Server 13.0 (64-bit)
"{63B6ADAB-AB1B-4542-911D-C15FFBD5E1BE}" = NI ActiveX Container (64-bit)
"{6662C75A-9A77-4959-9853-F4A2AF15C4B8}" = NI System API Windows 64-bit 5.5.0
"{68319FE7-1E06-4156-BC00-8D24828B5084}" = NI System State Publisher (64-bit)
"{6E751A6B-5FE2-45E2-8F15-5EAE81C83B17}" = NI LabWindows/CVI 2013 Patch 1 SxS .NET Library (64-bit)
"{817746FE-367D-4BA3-9ABF-D2214D0E5E33}" = NI Error Reporting Interface Installer 5.5 for Windows 64-bit
"{86A13148-C5C4-494D-8A72-101FCAEAE179}" = NI LabWindows/CVI 2013 .NET Library (64-bit)
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0405-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Czech) 2007
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029" = Microsoft .NET Framework 4.6.1 (čeština)
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.6.1
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A0133B57-1D4B-4D89-A0EF-1453ECECA58A}" = NI System Web Server Base 13.0.0 (64-bit)
"{A3154334-4692-449E-8836-3CCD28D0B1D7}" = NI Logos64 XT Support
"{A6E0DCE3-A917-4234-B401-6D630E869FB3}" = NI SSL Support (64-bit)
"{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64
"{AFC5A844-CA3A-4566-89E7-3E24E6AFF9A3}" = NI VC2010SP1MSMs x64
"{B1153914-2CA8-4FFE-855E-FAC61EFD9C0D}" = NI-RPC 4.4.0f0 for 64 Bit Windows
"{B2149E16-A01C-458E-A6E5-B9DC96EAD1AA}" = NI Logos 5.5 (64-bit)
"{BD6F5371-DAC1-30F0-9DDE-CAC6791E28C3}" = Microsoft .NET Framework 4.6.1
"{C41DC5A9-A14A-4C3D-BF49-325E87C9878B}" = NI LabWindows/CVI Shared Run-Time Engine 2013 (64-bit)
"{C9D77F9A-C637-4FBA-AF34-B4859F60C2B6}" = NI LabWindows/CVI 2013 TDMS Library (64-bit)
"{D43C46AB-57CC-48E4-83B1-514CDBF148A5}" = NI-Mesa
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DA83B4AC-EC3C-4F13-A867-CB0C24A8E1D5}" = NI Trace Engine (64-bit)
"{DDAAADDD-C57E-4731-A29C-133191587488}" = NI Help Assistant 2.0 (64bit)
"{E3E3E625-8F74-44CE-A6D2-C31CB43DA23D}" = NI VC2005MSMs x64
"{E957A395-E199-4B35-B06A-FF7CBA66B953}" = NI Curl 13.0.0 (64-bit)
"{FBAFD99A-3F3D-4F36-9985-E1BFF0000287}" = NI LabWindows/CVI 2013 Patch 1 SxS Analysis Library (64-bit)
"CCleaner" = CCleaner
"CPUID HWMonitor_is1" = CPUID HWMonitor 1.22
"My Lockbox_is1" = My Lockbox 2.9.8
"NVIDIA Drivers" = NVIDIA Drivers
"Recuva" = Recuva

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{06897ACD-84E1-4F9E-8848-3E3BF27D2D99}" = NI LabVIEW 2012 SP1 Run-Time Engine Non-English Support.
"{08505CC2-EA7F-4818-9C45-B74EDA7227F8}" = NI Visual C++ 2008 Redistributable Package
"{0ACDC0EE-6CD2-4BF1-BE31-F99889062AB8}" = NI LabVIEW 2012 SP1 Deployable License
"{0AF8A008-7141-40DD-BB99-10B7F0C4769A}" = NI GMP Windows 32-bit Installer 13.0.0
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0DEB89CF-6DBC-42E4-8603-B657E7898D27}" = NI LabWindows/CVI 2013 Patch 1 SxS TDMS Library
"{0DEEF8A0-A14B-4058-96E2-59B00C581A42}" = NI LabWindows/CVI 2013 Low-Level Driver (Updated)
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{14D08502-FEE4-40E5-90D3-8A967A1D8BA2}" = Readiris Pro 10
"{1C3B75E1-DA30-404C-B2C2-9BD31AB64909}" = NI Visual C++ 2010 Redistributable Package
"{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}" = Windows Live UX Platform Language Pack
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1F7F5330-D1C5-49D8-85A3-75E29C2434FE}" = NI mDNS Responder 2.2.0
"{1FEA556D-E27E-46BD-9598-BCE14DAC9193}" = NI EulaDepot
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{2026DAA3-FFEA-4815-9318-1B219B030077}" = NI Multisim LabVIEW Interoperability Support 13.0
"{20FAB10E-E9B1-4E0A-882B-1C8ED5CEE2C4}" = NI Uninstaller
"{23180501-7886-47B6-AB6E-5ABFB1848012}" = NI Service Locator 13.0
"{26A24AE4-039D-4CA4-87B4-2F83218091F0}" = Java 8 Update 91
"{27367777-A95D-4014-B73B-18D4838E54A4}" = NI TDM Streaming 2.5
"{2931F00C-6417-4BFE-B3C5-26D90ABE8189}" = NI LabVIEW Run-Time Engine Interop 2013
"{2DD33997-3C3E-4517-9D98-0CC5802D6D53}" = NI Curl 13.0.0
"{3C717C2C-A9F4-4236-A539-89592B0652A7}" = NI LabVIEW 2012 Run-Time Engine Web Server
"{4098334C-5D36-48EA-B734-80F6B3F106CD}" = NI LabWindows/CVI 2013 Network Variable Library
"{4845B7A3-DDC3-44F9-A7DB-C50C94017129}" = NI Web Application Server 13.0
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A1BCB81-2F91-451D-BEC6-59FAB0ADB8F0}" = NI Example Finder 13.0
"{4B877FC6-F44C-4B39-B0B6-CE15ADC63997}" = NI VC2005MSMs x86
"{4EE7E947-1E5E-4314-970E-68B91AA18D38}" = NI LabWindows/CVI 2013 Patch 1 SxS .NET Library
"{53606225-A1A8-4A74-BA4B-00206F38DB60}" = NI ActiveX Container
"{58189B98-1A43-453D-A3FA-A6283735DE02}" = NI Launcher
"{5A073702-D6E0-4D28-B43B-4C4D5DFB752D}" = NI MAX Remote Configuration Installer 5.5
"{5CC95D76-A798-4722-AE76-E494D9664907}" = NI .NET Framework 4.0
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{63495F25-850C-4127-8BA6-1DFD5144723C}" = NI Trace Engine
"{64AC136D-2DA3-43D6-ADB1-BBE21191B283}" = NI LabVIEW Run-Time Engine Interop 2012 SP1
"{68044F4C-00EA-44D0-84E6-AC29FC5FAA12}" = NI LabVIEW Run-Time Engine 2012 SP1 f5
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6894C972-A9DC-4535-B260-73E693D0B0B2}" = NI LabWindows/CVI Run-Time Engine 2013 (Updated)
"{69D447B3-1B3F-42A9-9605-A8533BE06D17}" = NI System Web Server Base 13.0.0
"{6CB3DA3D-C753-423D-AB3B-670C5C2FE6C4}" = NI Authentication 13.0.0
"{70400242-737B-4BB1-A951-4FACC011A5D9}" = NI LabWindows/CVI 2013 Low-Level Driver (Original)
"{709316AD-161C-4D5C-9AE7-0B3A822DA271}" = Google Drive
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{740B3E52-D666-404F-9DC2-8AB54F0601C3}" = NI MDF Support
"{7760D94E-B1B5-40A0-9AA0-ABF942108755}" = Acer Crystal Eye Webcam
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{7B3E802F-10E8-47D1-92EF-E343754AE0CF}" = NI LabWindows/CVI Shared Run-Time Engine 2013
"{7F93F26A-E5F7-4AE1-840F-F88DFE2DE3A5}" = NI-Mesa
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{843AA365-C682-4540-9E7C-9B9A10C6A539}" = NI Error Reporting Interface Installer 5.5
"{87392509-BFBD-4780-9170-E0106DB472DF}" = NI SSL Support
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0012-0000-0000-0000000FF1CE}" = Microsoft Office Standard 2007
"{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_STANDARD_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_STANDARD_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_STANDARD_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_STANDARD_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_STANDARD_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_STANDARD_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_STANDARD_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_STANDARD_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_STANDARD_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0405-1000-0000000FF1CE}_STANDARD_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_STANDARD_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90F1943D-EA4A-4460-B59F-30023F3BA69A}" = SmarThru 4
"{9125CF98-08A9-41AA-96B9-A7A7A255E3DC}" = NI-RPC 4.4.0f0
"{94AEAB3C-36E5-4CB7-BEE3-2B7C3C78E9E6}" = AirLive MFP Server Utilities
"{96A5A9B4-30CC-466F-9111-4EF18AABFDC7}" = NI Circuit Design Suite Master Database
"{96F342D9-C361-4976-9DFF-7B07FB71E090}" = NI LabWindows/CVI 2013 Patch 1 SxS NV Library
"{96F8514D-1673-47AE-BD16-A8E22EF0A6FD}" = NI LabWindows/CVI 2013 Network Streams Library
"{9BA381D6-F63D-4C03-BE13-940F39068E01}" = NI LabVIEW 2013 Run-Time Engine Non-English Support.
"{9BA528A0-F33B-4162-993A-538CF56A005E}" = Math Kernel Libraries
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9DD60D2E-18C6-448C-A443-EF703A035013}" = NI LabWindows/CVI 2013 Patch 1 SxS Analysis Library
"{A05EFB3F-19E2-4F9E-8380-BE095CCF0BE4}" = NI Logos XT Support
"{A8490B70-08B4-40F8-84FE-CCE239901EA1}" = NI License Manager
"{A8779088-85BA-4CC0-8205-1C7AF40FCDBD}" = NI System API Windows 32-bit 5.5.0
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{AC76BA86-0804-1033-1959-001824184103}" = Adobe Refresh Manager
"{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.16)
"{ADC16943-45BD-4E47-89CD-A9CA790DE09C}" = NI LabVIEW 2013 Run-Time Engine Web Server
"{AE20D525-5D10-475F-9115-963DB67D49DF}" = NI System State Publisher
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B3137CC2-0CC4-4763-B38A-AC0ACEE27740}" = NI-RPC 4.3.0f0 for Phar Lap ETS
"{B3DAF54F-DB25-4586-9EF1-96D24BB14088}" = Windows Movie Maker 2.6
"{B4A772D4-ED42-4484-8C0E-663A52D07A2F}" = NI LabVIEW 2012 Real-Time NBFifo
"{B4D7F809-ED68-49FD-A1A0-1C77FC956965}" = NI MXS 5.3.0
"{BD267361-DA07-4D0B-B476-1AA62E19B4EE}" = NI LabWindows/CVI 2013 Patch 1 SxS NS Library
"{BF324FB5-4C39-4FDC-B023-19AEFFAE116A}" = NI SSL LabVIEW RTE 2013 Support
"{C0446EC0-D69F-44C3-B3AD-E04EA7FAE72B}" = NI LabVIEW Run-Time Engine 2013
"{C28AF083-50E5-4099-AF48-1D65DF08AAD0}" = NI MetaSuite Installer
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{C9A0D47F-9A68-4917-868C-79E384E4DEE6}" = NI Help Assistant 2.0
"{CA533BA0-E6F9-4349-B0EC-ABDEB0481E77}" = NI Logos 5.5
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DB2C5648-700D-4AEF-83E1-70C72F0C34FA}" = NI Math Kernel Libraries
"{DCA53D09-472F-48FB-9670-0AC2614B9F04}" = NI LabWindows/CVI 2013 .NET Library
"{DCF54484-DC2B-4DD9-ABD4-9FB4B01FA6F6}" = NI LabWindows/CVI 2013 TDMS Library
"{DF549FB9-B94F-4B8D-B007-39281EDB9A52}" = NI Error Reporting 2013
"{DF6619FE-D05B-4FFC-8B19-36F2749B69A3}" = NI Circuit Design Suite 13.0 Education
"{DFEB5AEC-611E-466F-A072-956751A66880}" = NI SSL LabVIEW RTE 2012 SP1 Support
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E434B798-0B82-456C-B802-6B2B3FECA3B4}" = NI Update Service 2014
"{E6068691-1FBC-4EF0-87E8-609CDB32038A}" = NI Xerces Delay Load 2.7.3
"{E71784F9-5B67-4052-A5FC-55C038396936}" = Math Kernel Libraries
"{E84997A1-4D6F-4C0B-B60D-F85B360D2666}" = NI VC2008MSMs x86
"{EA9650DD-039A-4D72-8967-0FEEFDFB36B0}" = NI Variable Engine 2.6.0
"{EE372D3C-8CDE-4141-8DE9-05A0734B63E4}" = NI LabVIEW 2013 Deployment Framework
"{EEDB0927-3BD8-4349-856E-425A146CC680}" = NI LabVIEW 2012 Real-Time NBFifo
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F2273FA7-117C-43D7-BD59-00B025535442}" = NI VC2010SP1MSMs x86
"{F278392D-547E-4E67-AD1C-2576C2852B50}" = NI Measurement Studio ComponentWorks 3D Graph
"{F2C35605-B41A-4139-93FE-9052FD30BD8B}" = NI LabWindows/CVI 2013 Analysis Library
"{F5F0BFAE-3F87-40BA-9279-DE7621579CF8}" = NI OPC Support
"{F74874F6-778D-473B-8A04-00D9750D24F9}" = NI Circuit Design Suite 13.0 Edu Licenses
"{F84B1D74-CC60-48AC-9C77-8D53F3EA0B8A}" = NI LabWindows/CVI Side-By-Side Run-Time Engine 2013 Patch 1
"{FC45C756-6CD9-4ECA-9956-9F499EB63252}" = NI Circuit Design Suite 13.0 Core
"{FC59A893-A510-411A-A71C-60A06D2C9BF2}" = NI System Web Server 13.0
"{FC965A47-4839-40CA-B618-18F486F042C6}" = Skype™ 7.25
"{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}" = Visual Studio 2008 x64 Redistributables
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"{FE82D7AF-0A22-40E8-B7A5-9D7615296BA6}" = NI USI 2.0.1
"Adobe Flash Player ActiveX" = Adobe Flash Player 22 ActiveX
"Adobe Flash Player NPAPI" = Adobe Flash Player 22 NPAPI
"AIMP3" = AIMP3
"Arduino" = Arduino
"Audacity_is1" = Audacity 2.1.0
"Avast" = Avast Free Antivirus
"CamStudio" = CamStudio
"EAGLE 7.1.0" = EAGLE 7.1.0
"HD Tune_is1" = HD Tune 2.55
"LAME_is1" = LAME v3.99.3 (for Windows)
"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware verze 2.2.1.1043
"Mozilla Firefox 47.0 (x86 cs)" = Mozilla Firefox 47.0 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MP Navigator EX 4.0" = Canon MP Navigator EX 4.0
"NI Uninstaller" = National Instruments Software
"PhotoScape" = PhotoScape
"SafeZone 1.48.2066.101" = SafeZone Stable 1.48.2066.101
"STANDARD" = Microsoft Office Standard 2007
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR 4.11 (32-bit)
"WMV9_VCM" = Microsoft Windows Media Video 9 VCM


========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 15.6.2016 10:52:07 | Computer Name = Notebook | Source = System Restore | ID = 8210
Description =

Error - 15.6.2016 11:07:02 | Computer Name = Notebook | Source = System Restore | ID = 8210
Description =

Error - 15.6.2016 11:28:09 | Computer Name = Notebook | Source = MsiInstaller | ID = 1041
Description =

Error - 17.6.2016 13:43:24 | Computer Name = Notebook | Source = NI Domain Service | ID = 0
Description =

Error - 17.6.2016 13:44:26 | Computer Name = Notebook | Source = NI Variable Engine | ID = 0
Description =

Error - 17.6.2016 13:44:35 | Computer Name = Notebook | Source = NI Variable Engine | ID = 0
Description =

Error - 17.6.2016 13:44:35 | Computer Name = Notebook | Source = NI Variable Engine | ID = 0
Description =

Error - 19.6.2016 23:43:57 | Computer Name = Notebook | Source = MsiInstaller | ID = 1041
Description =

Error - 21.6.2016 16:56:16 | Computer Name = Notebook | Source = ESENT | ID = 490
Description = Windows (4636) Windows: Pokus o otevření souboru C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chk
pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 32 (0x00000020): Proces
nemá přístup k souboru, neboť jej právě využívá jiný proces. . Operace otevření
souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).

Error - 21.6.2016 16:56:16 | Computer Name = Notebook | Source = ESENT | ID = 439
Description = Windows (4636) Windows: Pro soubor C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chk
nelze zapsat stínové záhlaví. Chyba -1032

[ OSession Events ]
Error - 18.11.2015 12:00:19 | Computer Name = Notebook | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6735.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 30
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 26.6.2016 7:03:17 | Computer Name = Notebook | Source = Service Control Manager | ID = 7000
Description = Služba DgiVecp neuspěla při spuštění v důsledku následující chyby:
%%20

Error - 26.6.2016 7:10:39 | Computer Name = Notebook | Source = Schannel | ID = 36888
Description = Byla vygenerována následující výstraha o závažné chybě: 10. Stav interní
chyby: 10

Error - 28.6.2016 7:30:50 | Computer Name = Notebook | Source = Service Control Manager | ID = 7000
Description = Služba MFP Server Enhanced Controller neuspěla při spuštění v důsledku
následující chyby: %%1058

Error - 28.6.2016 7:31:12 | Computer Name = Notebook | Source = Service Control Manager | ID = 7000
Description = Služba DgiVecp neuspěla při spuštění v důsledku následující chyby:
%%20

Error - 28.6.2016 7:37:55 | Computer Name = Notebook | Source = Service Control Manager | ID = 7022
Description = Služba Windows Update přestala během spouštění reagovat.

Error - 28.6.2016 7:41:50 | Computer Name = Notebook | Source = Schannel | ID = 36888
Description = Byla vygenerována následující výstraha o závažné chybě: 10. Stav interní
chyby: 10

Error - 30.6.2016 16:00:50 | Computer Name = Notebook | Source = Service Control Manager | ID = 7000
Description = Služba MFP Server Enhanced Controller neuspěla při spuštění v důsledku
následující chyby: %%1058

Error - 30.6.2016 16:01:13 | Computer Name = Notebook | Source = Service Control Manager | ID = 7000
Description = Služba DgiVecp neuspěla při spuštění v důsledku následující chyby:
%%20

Error - 30.6.2016 16:06:55 | Computer Name = Notebook | Source = Service Control Manager | ID = 7022
Description = Služba Windows Update přestala během spouštění reagovat.

Error - 30.6.2016 16:11:46 | Computer Name = Notebook | Source = Schannel | ID = 36888
Description = Byla vygenerována následující výstraha o závažné chybě: 10. Stav interní
chyby: 10


< End of report >

[jaro3]

Odinstaluj:
AVG
Yandex
pokud najdeš..


Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/opravy do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}: "URL" = http://www.google.com/search?q={searchTerms}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\5053EA3083BFAEE0C571DB56EE42FBF4: "URL" = http://www.firmy.cz/phr/{searchTerms}
IE - HKCU\..\SearchScopes\78FCF58B6CADD3894B8B12DCB8EA432F: "URL" = http://www.mapy.cz/?sourceid=quicksearch_6826&query={searchTerms}
IE - HKCU\..\SearchScopes\7F4A904CE5010AFFC1307C8225106ECC: "URL" = http://www.zbozi.cz/?sourceid=quicksearch_6826&q={searchTerms}
IE - HKCU\..\SearchScopes\9089391178E60702DE5C0373A64C5424: "URL" = http://videa.seznam.cz/?q={searchTerms}
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:47.0
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_192.dll File not found
[2012.02.22 21:37:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Aleš\AppData\Roaming\Mozilla\Extensions
[2016.05.06 22:42:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profiles\wydz2a5j.default\extensions
[2013.09.15 10:39:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profilesbf01bvlk.default\extensions
[2013.09.15 10:39:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profilesbf01bvlk.default\extensions\staged
[2016.05.06 22:42:05 | 000,025,051 | ---- | M] () (No name found) -- C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profiles\wydz2a5j.default\extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi
[2016.03.20 10:29:06 | 000,025,278 | ---- | M] () (No name found) -- C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profiles\wydz2a5j.default\extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9:64bit: - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - Reg Error: Value error. File not found
O13 - gopher Prefix: missing
O16:64bit: - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O37 - HKCU\...com [@ = ComFile] -- Reg Error: Key error. File not found

:Files
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\System32\dllcache\*.tmp
C:\WINDOWS\system32\SET*.tmp
C:\WINDOWS\system32\DUMP*.tmp
c:\windows\Tasks\*.job /s
C:\*.tmp
C:\WINDOWS\System32\drivers\*.tmp
C:\Program Files\*.tmp
C:\Documents and Settings\All Users\Data aplikací\*.tmp
C:\Windows\SysNative\drivers\*.tmp
C:\Windows\SysWow64\drivers\*.tmp
C:\Program Files (x86)\*.tmp
C:\Windows\SysWow64\*.tmp
C:\Windows\SysNative\*.tmp
C:\Program Files (x86)\*.tmp
C:\Users\Aleš\AppData\Roaming\AVG
C:\Users\Aleš\AppData\Roaming\AVG2012
C:\Users\Aleš\AppData\Roaming\Yandex

:Reg
:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]


Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.

Stáhni si Memtest:

Políčko , ve kterém je napsáno:
All unused RAM -ponech , jak je.
-dej Start , nech nejméně 2h běžet , pokud bude po 2h stále 0 errors , jsou v pořádku.


Ještě zkontrolovat HDD na chyby ,popř. zkusit jeho defragmentaci ..


Stáhni si CrystalDiskInfo
Spusť program a klikni na Úpravy-Kopírovat. Poté sem vlož pomocí Ctrl+V obsah logu.

[FooDMasteR]

Zdravím. Nenašel jsem ani AVG ani Yandex.

OTL

All processes killed
========== OTL ==========
No active process named explorer.exe was found!
No active process named firefox.exe was found!
Service SkypeUpdate stopped successfully!
Service SkypeUpdate deleted successfully!
C:\Program Files (x86)\Skype\Updater\Updater.exe moved successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{012E1000-F331-11DB-8314-0800200C9A66}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{searchTerms}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{searchTerms}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{searchTerms}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{searchTerms}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{searchTerms}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{searchTerms}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{searchTerms}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{searchTerms}\ not found.
Prefs.js: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:47.0 removed from extensions.enabledAddons
64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@adobe.com/FlashPlayer\ deleted successfully.
C:\Users\Aleš\AppData\Roaming\Mozilla\Extensions folder moved successfully.
C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profiles\wydz2a5j.default\extensions folder moved successfully.
C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profilesbf01bvlk.default\extensions\staged\WebSiteRecommendation@weliketheweb.com folder moved successfully.
C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profilesbf01bvlk.default\extensions\staged folder moved successfully.
C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profilesbf01bvlk.default\extensions folder moved successfully.
Folder C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profilesbf01bvlk.default\extensions\staged\ not found.
File C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profiles\wydz2a5j.default\extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi not found.
File C:\Users\Aleš\AppData\Roaming\Mozilla\Firefox\Profiles\wydz2a5j.default\extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi not found.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableCAD deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableCAD not found.
Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{7815BE26-237D-41A8-A98F-F7BD75F71086}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7815BE26-237D-41A8-A98F-F7BD75F71086}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
Starting removal of ActiveX control {D27CDB6E-AE6D-11CF-96B8-444553540000}
C:\Windows\Downloaded Program Files\swflash64.inf not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ deleted successfully.
File Protocol\Handler\wlmailhtml - No CLSID value found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry key HKEY_CURRENT_USER\Software\Classes\.com\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Classes\ComFile\ not found.
HKEY_LOCAL_MACHINE\Software\Classes\.com\\|comfile /E : value set successfully!
========== FILES ==========
File\Folder C:\WINDOWS\System32\*.tmp not found.
File\Folder C:\WINDOWS\*.tmp not found.
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
File\Folder C:\WINDOWS\System32\dllcache\*.tmp not found.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
File\Folder C:\WINDOWS\system32\DUMP*.tmp not found.
c:\windows\Tasks\Adobe Flash Player Updater.job moved successfully.
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
File\Folder C:\*.tmp not found.
File\Folder C:\WINDOWS\System32\drivers\*.tmp not found.
File\Folder C:\Program Files\*.tmp not found.
File\Folder C:\Documents and Settings\All Users\Data aplikací\*.tmp not found.
File\Folder C:\Windows\SysNative\drivers\*.tmp not found.
File\Folder C:\Windows\SysWow64\drivers\*.tmp not found.
File\Folder C:\Program Files (x86)\*.tmp not found.
File\Folder C:\Windows\SysWow64\*.tmp not found.
File\Folder C:\Windows\SysNative\*.tmp not found.
File\Folder C:\Program Files (x86)\*.tmp not found.
C:\Users\Aleš\AppData\Roaming\AVG\AWL2014\TuningIndex folder moved successfully.
C:\Users\Aleš\AppData\Roaming\AVG\AWL2014\StartUp Manager folder moved successfully.
C:\Users\Aleš\AppData\Roaming\AVG\AWL2014\Dashboard folder moved successfully.
C:\Users\Aleš\AppData\Roaming\AVG\AWL2014\Backups folder moved successfully.
C:\Users\Aleš\AppData\Roaming\AVG\AWL2014 folder moved successfully.
C:\Users\Aleš\AppData\Roaming\AVG folder moved successfully.
C:\Users\Aleš\AppData\Roaming\AVG2012\cfgall folder moved successfully.
C:\Users\Aleš\AppData\Roaming\AVG2012 folder moved successfully.
C:\Users\Aleš\AppData\Roaming\Yandex folder moved successfully.
========== REGISTRY ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: Aleš
->Temp folder emptied: 15968730 bytes
->Temporary Internet Files folder emptied: 2666501 bytes
->Java cache emptied: 50015 bytes
->FireFox cache emptied: 172209702 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 1198 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Nová složka
->Temp folder emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

User: test
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: test.Notebook
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 128 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 41112403 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 1704220763 bytes

Total Files Cleaned = 1 847,00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 07142016_142219

Files\Folders moved on Reboot...
File move failed. C:\Users\Aleš\AppData\Local\Temp\FXSAPIDebugLogFile.txt scheduled to be moved on reboot.
File move failed. C:\Users\Aleš\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
File move failed. C:\Windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\safezone_installer_20160615165659.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\safezone_installer_20160615165702.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\safezone_installer_20160615165710.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\safezone_installer_20160620054531.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\safezone_installer_20160620054532.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\safezone_installer_20160620054542.log scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Memtest
Pustil jsem to, asi po 1 hod a 45 min jsem se podíval 0 chyb.
Přišel jsem za 20 min a měl jsem spadlej systém a modrou smrt nevím proč..

CrystalDiskInfo

----------------------------------------------------------------------------
CrystalDiskInfo 7.0.0 (C) 2008-2016 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Professional SP1 [6.1 Build 7601] (x64)
Date : 2016/07/16 11:07:21

-- Controller Map ----------------------------------------------------------
+ Intel(R) ICH9M-E/M SATA AHCI Controller [ATA]
- WDC WD5000BEVT-22ZAT0
- Slimtype DVD A DS8A3S

-- Disk List ---------------------------------------------------------------
(1) WDC WD5000BEVT-22ZAT0 : 500,1 GB [0/0/0, pd1] - wd

----------------------------------------------------------------------------
(1) WDC WD5000BEVT-22ZAT0
----------------------------------------------------------------------------
Model : WDC WD5000BEVT-22ZAT0
Firmware : 01.01A01
Serial Number : WD-WX10A89A1028
Disk Size : 500,1 GB (8,4/137,4/500,1/500,1)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : 5400 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : ---- | SATA/300
Power On Hours : 13122 hod.
Power On Count : 6736 krát
Temperature : 29 C (84 F)
Health Status : Pozor
Features : S.M.A.R.T., APM, AAM, 48bit LBA, NCQ
APM Level : 0080h [ON]
AAM Level : 80FEh [OFF]
Drive Letter : C: D:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 196 185 _51 000000016200 Počet chyb čtení
03 184 176 _21 0000000006EF Čas na roztočení ploten
04 _87 _87 __0 00000000336D Počet spuštění/zastavení
05 200 200 140 000000000000 Počet přemapovaných sektorů
07 100 253 __0 000000000000 Počet chybných hledání
09 _83 _83 __0 000000003342 Hodin v činnosti
0A 100 100 _51 000000000000 Počet opakovaných pokusů o roztočení ploten
0B 100 100 __0 000000000000 Počet pokusů o překalibrování
0C _94 _94 __0 000000001A50 Počet cyklů zapnutí zařízení
C0 200 200 __0 000000000224 Počet vypnutí disku
C1 160 160 __0 00000001D847 Počet cyklů načítání/vymazání
C2 118 _92 __0 00000000001D Teplota
C4 200 200 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 200 200 __0 000000000003 Počet podezřelých sektorů
C6 100 253 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 100 253 _51 000000000000 Počet chyb při zápisu sektorů

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 427A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2057 442D 5758 3130 4138 3941 3130 3238
020: 0000 4000 0032 3031 2E30 3141 3031 5744 4320 5744
030: 3530 3030 4245 5654 2D32 325A 4154 3020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4001 0000 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 1F06 0000 004C 004C
080: 01FE 0000 746B 7F09 6163 7469 BC09 6163 407F 0041
090: 0041 0080 FFFE 0000 80FE 0000 0000 0000 0000 0000
100: 6030 3A38 0000 0000 0000 0000 0000 0000 5001 4EE2
110: 5890 9E7B 0000 0000 0000 0000 0000 0000 0000 4018
120: 4018 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 16B7 0000 0000 0000 0000 0000 0000
140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 303F 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 1518 0000 0000
220: 0000 0000 101E 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 1000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 E7A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 C4 B9 00 62 01 00 00 00 00 03 27
010: 00 B8 B0 EF 06 00 00 00 00 00 04 32 00 57 57 6D
020: 33 00 00 00 00 00 05 33 00 C8 C8 00 00 00 00 00
030: 00 00 07 2E 00 64 FD 00 00 00 00 00 00 00 09 32
040: 00 53 53 42 33 00 00 00 00 00 0A 33 00 64 64 00
050: 00 00 00 00 00 00 0B 32 00 64 64 00 00 00 00 00
060: 00 00 0C 32 00 5E 5E 50 1A 00 00 00 00 00 C0 32
070: 00 C8 C8 24 02 00 00 00 00 00 C1 32 00 A0 A0 47
080: D8 01 00 00 00 00 C2 22 00 76 5C 1D 00 00 00 00
090: 00 00 C4 32 00 C8 C8 00 00 00 00 00 00 00 C5 32
0A0: 00 C8 C8 03 00 00 00 00 00 00 C6 30 00 64 FD 00
0B0: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00
0C0: 00 00 C8 09 00 64 FD 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 EC 31 01 7B
170: 03 00 01 00 02 95 05 00 00 00 00 00 00 00 00 00
180: 00 00 01 04 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 85

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 33 C8 C8 C8 C4 00 00 00 00 00 00 03 15
010: 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00
020: 00 00 00 00 00 00 05 8C 00 00 00 00 00 00 00 00
030: 00 00 07 00 64 64 64 64 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 33 00 00 00 00
050: 00 00 00 00 00 00 0B 00 00 00 00 00 00 00 00 00
060: 00 00 0C 00 00 00 00 00 00 00 00 00 00 00 C0 00
070: 00 00 00 00 00 00 00 00 00 00 C1 00 00 00 00 00
080: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
090: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
0A0: 00 00 00 00 00 00 00 00 00 00 C6 00 00 00 00 00
0B0: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
0C0: 00 00 C8 33 00 00 00 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 AB

[jaro3]

Spusť OTL a klikni na Vyčisti.

0000000006EF Čas na roztočení ploten
000000000003 Počet podezřelých sektorů

Ten Ti odchází..zazálohuj si potřebné , za čas se do disku nemusíš dostat.
Zadej si téma do této sekce:
viewforum.php?f=118
i když to může být tím diskem.

Tak to uzavřeme , viry to není.

[FooDMasteR]

Zdravím. Moc děkuji za pomoc. Tam je toho potřeba teda docela hodně dodat kolem té BSOD .
Jestli se ještě můžu zeptat, ať nezakládám zbytečně téma jinde. Níže je výpis z jediného externího HDD, který vlastním. Můžu mu ještě věřit natolik, abych mu svěřil docela důležitá data z PC, nebo si mám koupit nový externí HDD? Co si myslíte o zálohování fotek třeba službou Google Drive, je to bezpečné?
----------------------------------------------------------------------------
(2) TOSHIBA MQ01ABD075
----------------------------------------------------------------------------
Enclosure : ADATA HD710 USB Device (V=125F, P=A15A, sa1)
Model : TOSHIBA MQ01ABD075
Firmware : AX003J
Serial Number : 92U5S2SDS
Disk Size : 750,1 GB (8,4/137,4/750,1/750,1)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 1465149168
Rotation Rate : 5400 RPM
Interface : USB (Serial ATA)
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : SATA/300 | SATA/600
Power On Hours : 2115 hod.
Power On Count : 215 krát
Temperature : 26 C (78 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 0001h [ON]
AAM Level : ----
Drive Letter : F:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _50 000000000000 Počet chyb čtení
02 100 100 _50 000000000000 Průchodnost disku
03 100 100 __1 000000000792 Čas na roztočení ploten
04 100 100 __0 000000000B4E Počet spuštění/zastavení
05 100 100 _50 000000000000 Počet přemapovaných sektorů
07 100 100 _50 000000000000 Počet chybných hledání
08 100 100 _50 000000000000 Čas potřebný na vyhledání
09 _95 _95 __0 000000000843 Hodin v činnosti
0A 157 100 _30 000000000000 Počet opakovaných pokusů o roztočení ploten
0C 100 100 __0 0000000000D7 Počet cyklů zapnutí zařízení
BF 100 100 __0 000000000000 Počet udalostí zaznamenaných otřesovým senzorem
C0 100 100 __0 00000000002E Počet vypnutí disku
C1 100 100 __0 000000000C67 Počet cyklů načítání/vymazání
C2 100 100 __0 0030000D001A Teplota
C4 100 100 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
DC 100 100 __0 000000000000 Posunutí disku vůči ose
DE 100 100 __0 0000000000AA Počet hodin zalažení budoucího mechanismu magnetických hlav
DF 100 100 __0 000000000000 Zatížení budiče magnetických hlav způsobené opakovanými úkony
E0 100 100 __0 000000000000 Zatížení budiče magnetických hlav způsobené napětím mechanických částí
E2 100 100 __0 00000000010A Celkový čas zatížení budiče magnetických hlav
F0 100 100 __1 000000000000 Čas nastavování hlaviček - v hodinách

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0040 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 2039 3255 3553 3253 4453
020: 0000 4000 0000 4158 3030 334A 2020 544F 5348 4942
030: 4120 4D51 3031 4142 4430 3735 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0200 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0007 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F EF0E 0004 004C 0040
080: 01F8 0000 746B 7D09 6163 7469 BC09 6163 203F 0059
090: 0059 0001 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 66F0 5754 0000 0000 0000 0000 6003 0000 5000 0394
110: 4580 AE14 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0021 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1518 0000 0000
220: 0000 0000 103F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0080 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 74A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 0B 00 64 64 00 00 00 00 00 00 00 02 05
010: 00 64 64 00 00 00 00 00 00 00 03 27 00 64 64 92
020: 07 00 00 00 00 00 04 32 00 64 64 4E 0B 00 00 00
030: 00 00 05 33 00 64 64 00 00 00 00 00 00 00 07 0B
040: 00 64 64 00 00 00 00 00 00 00 08 05 00 64 64 00
050: 00 00 00 00 00 00 09 32 00 5F 5F 43 08 00 00 00
060: 00 00 0A 33 00 9D 64 00 00 00 00 00 00 00 0C 32
070: 00 64 64 D7 00 00 00 00 00 00 BF 32 00 64 64 00
080: 00 00 00 00 00 00 C0 32 00 64 64 2E 00 00 00 00
090: 00 00 C1 32 00 64 64 67 0C 00 00 00 00 00 C2 22
0A0: 00 64 64 1A 00 0D 00 30 00 00 C4 32 00 64 64 00
0B0: 00 00 00 00 00 00 C5 32 00 64 64 00 00 00 00 00
0C0: 00 00 C6 30 00 64 64 00 00 00 00 00 00 00 C7 32
0D0: 00 C8 C8 00 00 00 00 00 00 00 DC 02 00 64 64 00
0E0: 00 00 00 00 00 00 DE 32 00 64 64 AA 00 00 00 00
0F0: 00 00 DF 32 00 64 64 00 00 00 00 00 00 00 E0 22
100: 00 64 64 00 00 00 00 00 00 00 E2 26 00 64 64 0A
110: 01 00 00 00 00 00 F0 01 00 64 64 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 5B
170: 03 00 01 00 02 BF 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 D0

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 32 00 00 00 00 00 00 00 00 00 00 02 32
010: 00 00 00 00 00 00 00 00 00 00 03 01 00 00 00 00
020: 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00
030: 00 00 05 32 00 00 00 00 00 00 00 00 00 00 07 32
040: 00 00 00 00 00 00 00 00 00 00 08 32 00 00 00 00
050: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
060: 00 00 0A 1E 00 00 00 00 00 00 00 00 00 00 0C 00
070: 00 00 00 00 00 00 00 00 00 00 BF 00 00 00 00 00
080: 00 00 00 00 00 00 C0 00 00 00 00 00 00 00 00 00
090: 00 00 C1 00 00 00 00 00 00 00 00 00 00 00 C2 00
0A0: 00 00 00 00 00 00 00 00 00 00 C4 00 00 00 00 00
0B0: 00 00 00 00 00 00 C5 00 00 00 00 00 00 00 00 00
0C0: 00 00 C6 00 00 00 00 00 00 00 00 00 00 00 C7 00
0D0: 00 00 00 00 00 00 00 00 00 00 DC 00 00 00 00 00
0E0: 00 00 00 00 00 00 DE 00 00 00 00 00 00 00 00 00
0F0: 00 00 DF 00 00 00 00 00 00 00 00 00 00 00 E0 00
100: 00 00 00 00 00 00 00 00 00 00 E2 00 00 00 00 00
110: 00 00 00 00 00 00 F0 01 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36

[jaro3]

Google Drive --- zadej si téma do odpovídající sekce , tam budou vědět lépe.

ext. disk: vcelku OK , až na tento údaj:
000000000792 Čas na roztočení ploten
Spin Up Time
Čas potřebný k roztočení ploten. S časem se zhoršuje, avšak poměrně pomalu. Náhlá změna značí poškození motorku otáčejícího plotny.
zkus si občas CDI , pokud se údaj ( hexadecimální kod) bude stále zvyšovat ( třeba každý den) platí napsané výše.