﻿Additional scan result of Farbar Recovery Scan Tool (x64) Version:11-07-2015
Ran by misa at 2015-07-12 17:59:33
Running from C:\Users\misa\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-4105595590-322866820-2549149084-500 - Administrator - Disabled)
Guest (S-1-5-21-4105595590-322866820-2549149084-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4105595590-322866820-2549149084-1003 - Limited - Enabled)
misa (S-1-5-21-4105595590-322866820-2549149084-1001 - Administrator - Enabled) => C:\Users\misa

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-4105595590-322866820-2549149084-1001\...\uTorrent) (Version: 3.4.2.37248 - BitTorrent Inc.)
Aerosoft's - Aerosoft Launcher (HKLM-x32\...\{EE11CFFC-898C-4875-8A63-8B732A9AD43B}) (Version: 1.2.0.3 - Aerosoft)
A-Train 8 (HKLM-x32\...\Steam App 249930) (Version:  - Degica)
AutoHotkey 1.1.21.03 (HKLM\...\AutoHotkey) (Version: 1.1.21.03 - Lexikos)
Banished 1.0 (HKLM-x32\...\Banished 1.0) (Version: 1.0 - Cat-A-Cat)
BLINK Version 1.0 (HKLM-x32\...\{388D1CE9-E248-4741-BC08-D9D00FE5F7AE}_is1) (Version:  - DigiPen Institute of Technology)
Blocks That Matter (HKLM-x32\...\Steam App 111800) (Version:  - Swing Swing Submarine)
Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version:  - Colossal Order Ltd.)
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
Cubeman Alpha (HKU\S-1-5-21-4105595590-322866820-2549149084-1001\...\Cubeman Alpha) (Version:  - )
Dolní Kounice v2.0 (HKLM-x32\...\Dolní Kounice v2.0) (Version:  - )
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
GooTool (HKLM-x32\...\GooTool) (Version: 1.0.3.441 - goofans.com)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Java(TM) 6 Update 17 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216017FF}) (Version: 6.0.170 - Sun Microsystems, Inc.)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
Little Inferno (HKLM-x32\...\Steam App 221260) (Version:  - Tomorrow Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{86CE1746-9EFF-3C9C-8755-81EA8903AC34}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Mini Metro (HKLM-x32\...\Steam App 287980) (Version:  - Dinosaur Polo Club)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9.2 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
OMSI 2 (HKLM-x32\...\Steam App 252530) (Version:  - MR-Software GbR)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Opera Stable 30.0.1835.88 (HKLM-x32\...\Opera 30.0.1835.88) (Version: 30.0.1835.88 - Opera Software)
Orcs Must Die (HKLM-x32\...\Orcs Must Die_is1) (Version:  - Orcs Must Die)
Orcs Must Die! Demo (HKLM-x32\...\Steam App 102610) (Version:  - Robot Entertainment)
Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.86.89.0 - Overwolf Ltd.)
Plants vs. Zombies Demo (HKLM-x32\...\Steam App 3592) (Version:  - PopCap Games, Inc.)
Portal (HKLM-x32\...\Steam App 400) (Version:  - Valve)
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
PVZ Garden Warfare (HKLM-x32\...\{A5AC7D7B-C1D5-4AF9-8829-993DA335BE1B}) (Version: 1.0.3.0 - Electronic Arts)
ROBLOX Player for misa (HKU\S-1-5-21-4105595590-322866820-2549149084-1001\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version:  - ROBLOX Corporation)
Rock of Ages (HKLM-x32\...\Steam App 22230) (Version:  - ACE Team)
SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.86.0859 - Electronic Arts)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)
Spiral Knights (HKLM-x32\...\Steam App 99900) (Version:  - Three Rings)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Super Meat Boy (HKLM-x32\...\Steam App 40800) (Version:  - Team Meat)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.41459 - TeamViewer)
Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)
Thinking with Time Machine (HKLM-x32\...\Steam App 286080) (Version:  - Stridemann)
TrackMania United (HKLM-x32\...\Steam App 7200) (Version:  - Nadeo)
Trine 2 (HKLM-x32\...\Steam App 35720) (Version:  - Frozenbyte)
Trine 3: The Artifacts of Power (HKLM-x32\...\Steam App 319910) (Version:  - Frozenbyte)
Ultimate Tic-Tac-Toe (HKLM-x32\...\Steam App 360870) (Version:  - Tigerish Games)
Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WinSplit Revolution (v11.04) (HKLM-x32\...\WinSplit Revolution) (Version: 11.04 - Raphael Lencrerot)
World of Goo (HKLM-x32\...\Steam App 22000) (Version:  - 2D BOY)
YouTube Statistics 2 (HKLM-x32\...\{2613AD9C-511F-48E2-BC4D-F5D6AB3B5096}) (Version: 2.2.0 - SEL)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-4105595590-322866820-2549149084-1001_Classes\CLSID\{DEE03C2B-0C0C-41A9-9877-FD4B4D7B6EA3}\InprocServer32 -> C:\Users\misa\AppData\Local\Roblox\Versions\version-8c5c6ce7499b4544\RobloxProxy64.dll (ROBLOX Corporation)

==================== Restore Points =========================

09-07-2015 08:11:53 Windows Update
12-07-2015 17:18:32 zoek.exe restore point

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2015-07-12 17:18 - 00000753 ____A C:\Windows\system32\Drivers\etc\hosts
 
127.0.0.1       localhost 

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {5BA64A8B-108D-497F-B0E4-69B90CD0F10E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-06-10] (Microsoft Corporation)
Task: {6C63280F-FA64-4FEE-B05F-B91AE50F5646} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2015-06-21] (Overwolf LTD)
Task: {915AA7E3-8218-4A27-AFF4-05AC4635DB32} - \ModuleEdit No Task File <==== ATTENTION
Task: {9A028C21-32C6-4C83-A694-F2E91B9DDC8B} - System32\Tasks\Opera scheduled Autoupdate 1429186738 => C:\Program Files (x86)\Opera\launcher.exe [2015-06-19] (Opera Software)
Task: C:\Windows\Tasks\ModuleEdit.job => c:\programdata\{cbaaf589-c58f-2d11-cbaa-af589c58d627}\852092035534208890b.exe <==== ATTENTION

==================== Loaded Modules (Whitelisted) ==============

2015-03-22 01:43 - 2011-03-31 08:47 - 00023040 _____ () C:\Windows\System32\xrhk2alm.dll
2015-03-22 01:43 - 2011-05-12 17:15 - 15072256 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\xrhk2aRC.DLL
2014-07-04 22:33 - 2014-07-04 22:33 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2013-07-26 07:59 - 2013-07-26 07:59 - 00814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2013-07-26 07:59 - 2013-07-26 07:59 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2014-07-04 22:33 - 2014-07-04 22:33 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2015-04-15 22:13 - 2015-04-15 22:13 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2014-07-04 22:33 - 2014-07-04 22:33 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2015-06-21 13:31 - 2015-06-21 13:31 - 40555008 _____ () C:\Program Files (x86)\Overwolf\0.86.89.0\libcef.DLL
2015-06-21 13:30 - 2015-06-21 13:30 - 00985088 _____ () C:\Program Files (x86)\Overwolf\0.86.89.0\ffmpegsumo.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4105595590-322866820-2549149084-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 10.10.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4105595590-322866820-2549149084-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-4105595590-322866820-2549149084-1001\...\StartupApproved\Run: => "Steam"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{7533FFC2-B0A4-4D1C-8B40-B38122AA4657}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6777FB42-2E36-4613-AC45-1BDDD4FC36A7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{2F233ABE-7F6D-4EF0-B0FC-E89C0C1C1D00}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{50472CCA-55FE-41CA-919E-5249443E7CFA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8160B454-31AB-4A3A-8ADE-2AA9400B1AC5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal\hl2.exe
FirewallRules: [{FE5CEDB5-8E61-4D00-9FA8-D73F1126AF5D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal\hl2.exe
FirewallRules: [{D938607B-6B5B-4E2F-A74B-273B1757A597}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{A56975CA-B0F5-4E4D-A43B-8D0EE1C977D3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{AC920CF5-908C-4E8D-9FD9-54B3237AEF28}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Terraria\Terraria.exe
FirewallRules: [{2A6AB21E-D57B-4AC2-8BEB-70805D992535}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Terraria\Terraria.exe
FirewallRules: [{613ABF2F-F13B-4D57-8C5C-6927DEC259A3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\World of Goo\WorldOfGoo.exe
FirewallRules: [{B6798B16-98C3-409B-A7D3-C7C6F90D04AF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\World of Goo\WorldOfGoo.exe
FirewallRules: [{16D9C4D4-484C-42B7-9301-3C04DE8B2B1A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Blocks That Matter\BTM_launcher_win.exe
FirewallRules: [{D7468C7B-D6BC-4BBF-A586-FA7D14440235}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Blocks That Matter\BTM_launcher_win.exe
FirewallRules: [{D66DABCB-50DD-43A6-A813-8C03277AADB3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Little Inferno Beta\Little Inferno.exe
FirewallRules: [{A5D04A80-3937-48C2-AEE0-9DD6CA4D0908}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Little Inferno Beta\Little Inferno.exe
FirewallRules: [{2F57AF97-0485-4A13-9762-CBAEB1C33524}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{E1D00F6A-8653-42C3-8E9C-D439E2425D7A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [TCP Query User{A28FDFD3-A2C6-4335-8A4F-65C11BB83679}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
FirewallRules: [UDP Query User{53CA8EBD-9E62-4951-BC53-6FA93BDAFF4C}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
FirewallRules: [{3FC217DC-3F40-490C-A7CE-2A4652564213}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
FirewallRules: [{9DA8AB9E-6075-4A84-A120-6DF62D726ED8}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
FirewallRules: [{F9D4F0EB-5158-4D84-B1C4-9AA439DE348B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rock of Ages\Binaries\Win32\RoA.exe
FirewallRules: [{E6E9D048-3D40-471B-BEE8-A42E1F678341}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rock of Ages\Binaries\Win32\RoA.exe
FirewallRules: [{E1CA53D9-8088-43AC-8D1F-C5583E18A6A4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TrackMania United\TmForever.exe
FirewallRules: [{EE6BF208-ACEE-4197-ADFA-916DE5C3C163}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TrackMania United\TmForever.exe
FirewallRules: [{A27DF492-5922-4B8E-A200-2A333F1169CF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TrackMania United\TmForeverLauncher.exe
FirewallRules: [{1194A6EF-7CBA-4B04-944E-2E07722CEA51}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TrackMania United\TmForeverLauncher.exe
FirewallRules: [{4C0D0FCA-6808-4DC0-8B1C-2B9B4865D842}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MiniMetro\MiniMetro.exe
FirewallRules: [{A96BAE81-6FA1-4CA3-8777-6552BF0C50A9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MiniMetro\MiniMetro.exe
FirewallRules: [{9962C239-AB38-4270-915A-0C2DBE53B7E5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exe
FirewallRules: [{24ECCDAC-04D4-4A00-9C62-EF30EBCE5FFF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exe
FirewallRules: [{1E76E73C-3ADD-4B87-B65E-9D7508B0A8B7}] => (Allow) C:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe
FirewallRules: [{73DE7734-16B5-4C82-A4FB-41FC2068DF82}] => (Allow) C:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe
FirewallRules: [TCP Query User{21648D3D-2609-4101-A94C-D61CCAB3635F}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{1E174CBB-FFB2-48A8-BA77-D74F54E1B4FB}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{B8F2F83D-59E0-4D32-9AE0-D3745044C12D}C:\users\misa\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\misa\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{1488027B-8673-45F2-B1C9-D6A42871ABF0}C:\users\misa\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\misa\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{3A625C99-D2E5-4A16-BEAA-47026512C8C1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Plants Vs Zombies\PlantsVsZombies.exe
FirewallRules: [{024E06E7-3175-442A-99AC-DC1140B1363C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Plants Vs Zombies\PlantsVsZombies.exe
FirewallRules: [{D8E6765E-B3A5-4075-9CA9-D726F6432568}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\A-Train8DL\A-Train8DL.exe
FirewallRules: [{42FE6CCC-7D16-4C10-91B2-8E3A9183A017}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\A-Train8DL\A-Train8DL.exe
FirewallRules: [{96890226-929B-42CA-8DB1-8BF4B18F5180}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\A-Train8DL\A-Train8ConfigDL.exe
FirewallRules: [{EAADBCE0-3393-4272-A85A-5E333C205679}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\A-Train8DL\A-Train8ConfigDL.exe
FirewallRules: [{343ABDE0-DE2A-4645-9158-4D755F86E3C4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Super Meat Boy\SuperMeatBoy.exe
FirewallRules: [{40E79179-D70D-4FC7-B5BE-9B799B848842}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Super Meat Boy\SuperMeatBoy.exe
FirewallRules: [{3B2C9B95-409E-4E94-BF4A-3FFDF49B299F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{36BC8029-1C02-4F37-9489-868164F0C1A9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [TCP Query User{EF69682C-2EBB-4D7F-9F40-B9F4AD5DAAFA}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [UDP Query User{78917939-9970-4D65-96BD-F77D63478B5F}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [{C03A25D8-2443-49EB-94B2-05478A870C9E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Thinking with Time Machine\TWTM.exe
FirewallRules: [{394759E9-8208-4AD4-96CC-F7A59CD94095}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Thinking with Time Machine\TWTM.exe
FirewallRules: [{11ED5700-2232-4567-B630-431C43DAEBD2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Thinking with Time Machine\bin\SDKLauncher.exe
FirewallRules: [{BBA9C47D-1C49-413B-AF7B-83DA0C704D8E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Thinking with Time Machine\bin\SDKLauncher.exe
FirewallRules: [{C02D69BE-6DD4-443D-9ADF-1AD9FE3DCA82}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Spiral Knights\java_vm\bin\javaw.exe
FirewallRules: [{E5971973-4946-40EE-AB37-B257272F2C1A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Spiral Knights\java_vm\bin\javaw.exe
FirewallRules: [{FCFF1419-49A3-4D3A-A85D-A616EA778B4A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Orcs Must Die!\build\release\OrcsMustDie.exe
FirewallRules: [{1FAB75F6-DEE6-4256-8295-C99C87D7A05C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Orcs Must Die!\build\release\OrcsMustDie.exe
FirewallRules: [TCP Query User{C409AF08-718A-4CB0-B2E7-597ADE496387}C:\users\misa\appdata\local\temp\rar$exa0.514\orcs-must-die!\orcs must die!\build\release\orcsmustdie.exe] => (Allow) C:\users\misa\appdata\local\temp\rar$exa0.514\orcs-must-die!\orcs must die!\build\release\orcsmustdie.exe
FirewallRules: [UDP Query User{2F04278D-8C66-4961-83C4-F349607098DB}C:\users\misa\appdata\local\temp\rar$exa0.514\orcs-must-die!\orcs must die!\build\release\orcsmustdie.exe] => (Allow) C:\users\misa\appdata\local\temp\rar$exa0.514\orcs-must-die!\orcs must die!\build\release\orcsmustdie.exe
FirewallRules: [TCP Query User{9B86D4B8-C40D-42A0-97E9-6F36CEF1B329}C:\users\misa\downloads\orcs-must-die!\orcs must die!\build\release\orcsmustdie.exe] => (Allow) C:\users\misa\downloads\orcs-must-die!\orcs must die!\build\release\orcsmustdie.exe
FirewallRules: [UDP Query User{D1667F8D-CDF5-4139-B02B-B30798CCF4AC}C:\users\misa\downloads\orcs-must-die!\orcs must die!\build\release\orcsmustdie.exe] => (Allow) C:\users\misa\downloads\orcs-must-die!\orcs must die!\build\release\orcsmustdie.exe
FirewallRules: [TCP Query User{A39EF995-BDFF-4CF6-9870-177C861583DF}C:\users\misa\downloads\orcs-must-die!\orcs-must-die!\orcs must die!\build\release\orcsmustdie.exe] => (Allow) C:\users\misa\downloads\orcs-must-die!\orcs-must-die!\orcs must die!\build\release\orcsmustdie.exe
FirewallRules: [UDP Query User{D632C35A-3DE6-410D-A415-3F7679A25327}C:\users\misa\downloads\orcs-must-die!\orcs-must-die!\orcs must die!\build\release\orcsmustdie.exe] => (Allow) C:\users\misa\downloads\orcs-must-die!\orcs-must-die!\orcs must die!\build\release\orcsmustdie.exe
FirewallRules: [{4F3C0D23-6648-4199-BE79-33144F240893}] => (Allow) C:\Users\misa\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{37F840CE-31E1-424D-A645-63953363E61D}] => (Allow) C:\Users\misa\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{910E1748-6781-42AD-AC4D-FFD9060D0F1B}C:\game\orcs must die\build\release\orcsmustdie.exe] => (Allow) C:\game\orcs must die\build\release\orcsmustdie.exe
FirewallRules: [UDP Query User{B00E87A3-E058-407F-880E-02405BE9744F}C:\game\orcs must die\build\release\orcsmustdie.exe] => (Allow) C:\game\orcs must die\build\release\orcsmustdie.exe
FirewallRules: [{90FCF768-93B6-4C1F-B8F1-51DA24E91253}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned.exe
FirewallRules: [{097467B6-1C19-4C03-836F-D1FB90F9FAF3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned.exe
FirewallRules: [TCP Query User{A54F7D5F-37A6-4217-8430-F6516A19B039}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
FirewallRules: [UDP Query User{87D02F6F-5F2F-4DAA-AB52-D9477E5AA37C}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
FirewallRules: [TCP Query User{10C18AF2-DF24-4AB8-9BA8-1AD63D52A85D}C:\users\misa\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\misa\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{3BDB40FD-EC8E-4234-92B6-48D0B883696B}C:\users\misa\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\misa\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{9686C9C9-E9B4-44B5-99E6-517A9F9BB9C4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trine 2\trine2_launcher.exe
FirewallRules: [{D08A9C87-6E81-48F8-8DD1-DFA3DE12E55C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trine 2\trine2_launcher.exe
FirewallRules: [{D715645C-1813-4CEF-87D3-4EF196B79B79}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trine 3\trine3_launcher.exe
FirewallRules: [{C909578F-3561-4CCE-AEA4-3AAF851AF199}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trine 3\trine3_launcher.exe
FirewallRules: [{F7090ECA-46E6-4A6E-897B-DD383B7FC54C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Ultimate Tic-Tac-Toe\UltimTicTacToe.exe
FirewallRules: [{3EE8C04B-E44C-46FE-AB16-7CD273D0C0CE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Ultimate Tic-Tac-Toe\UltimTicTacToe.exe
FirewallRules: [{9BBBCC94-F22D-41BC-B0F8-49B0E76FCAD4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{27B2AECF-DF20-43CA-9391-C15609A8359B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{AC7B1674-1B11-4F48-A3A9-B51C5AA8DA5C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{E3462043-DF4B-4F4E-B081-65B0C32A6393}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [TCP Query User{3E06B63B-505D-4D1B-93CE-F29CAFBD1FEB}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{C1F87AF8-22B0-49F6-B546-5116718D739D}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{D696B3CA-C07F-4126-B548-A964ED8A2067}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{8CE188D1-AF18-4544-A10C-E1F45592D0D5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{8A2C418E-3F8A-4C8D-909A-1DEB963C38BC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{4DD7BD11-CF8D-4AA2-941C-80BE9BF4EE7C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{1A06918E-8C60-4674-B9B4-470DA80F7C67}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{520D23CB-76DD-49B6-AF87-67A77FD91ECA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{4D87A476-47A8-4380-BEF3-D80DCF54B448}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/12/2015 05:38:42 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (07/12/2015 05:38:42 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač

Error: (07/12/2015 04:27:00 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (07/12/2015 04:27:00 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač

Error: (07/12/2015 12:56:04 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (07/12/2015 12:56:04 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač

Error: (07/12/2015 06:56:04 AM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (07/12/2015 06:56:04 AM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač

Error: (07/12/2015 12:56:04 AM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (07/12/2015 12:56:04 AM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač


System errors:
=============
Error: (07/12/2015 05:34:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Google Update (gupdate) neuspěla při spuštění v důsledku následující chyby: 
%%2

Error: (07/12/2015 05:32:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Icy Stay neuspěla při spuštění v důsledku následující chyby: 
%%2

Error: (07/12/2015 05:26:19 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (07/12/2015 05:26:19 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (07/12/2015 05:26:19 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (07/12/2015 05:26:18 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (07/12/2015 05:26:18 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (07/12/2015 04:05:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Google Update (gupdate) neuspěla při spuštění v důsledku následující chyby: 
%%2

Error: (07/12/2015 04:02:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba Windows Media Player Network Sharing závisí na službě Windows Search, která neuspěla při spuštění v důsledku následující chyby: 
%%1069

Error: (07/12/2015 04:02:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Windows Search neuspěla při spuštění v důsledku následující chyby: 
%%1069


Microsoft Office:
=========================
Error: (07/12/2015 05:38:42 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (07/12/2015 05:38:42 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač

Error: (07/12/2015 04:27:00 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (07/12/2015 04:27:00 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač

Error: (07/12/2015 12:56:04 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (07/12/2015 12:56:04 PM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač

Error: (07/12/2015 06:56:04 AM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (07/12/2015 06:56:04 AM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač

Error: (07/12/2015 12:56:04 AM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Instance této služby je již spuštěna

Error: (07/12/2015 12:56:04 AM) (Source: OverwolfUpdater) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač


==================== Memory info =========================== 

Processor: AMD FX(tm)-4300 Quad-Core Processor 
Percentage of memory in use: 20%
Total physical RAM: 6108.66 MB
Available physical RAM: 4829.16 MB
Total Virtual: 7132.66 MB
Available Virtual: 5434.11 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:924.92 GB) (Free:772.47 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End of log ============================