﻿Additional scan result of Farbar Recovery Scan Tool (x64) Version:18-10-2015
Ran by Aleš (2015-10-20 21:30:18)
Running from C:\Users\Aleš\Desktop
Windows 8.1 (X64) (2015-10-20 13:29:52)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3102665617-2184491791-1047382452-500 - Administrator - Disabled)
Aleš (S-1-5-21-3102665617-2184491791-1047382452-1002 - Administrator - Enabled) => C:\Users\Aleš
Guest (S-1-5-21-3102665617-2184491791-1047382452-501 - Limited - Disabled)
UpdatusUser (S-1-5-21-3102665617-2184491791-1047382452-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: AVG AntiVirus Free Edition (Disabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition (Disabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer Backup Manager (HKLM-x32\...\InstallShield_{9DDDF20E-9FD1-4434-A43E-E7889DBC9420}) (Version: 4.0.0.0059 - NTI Corporation)
Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3007 - Acer Incorporated)
Acer Instant Update Service (HKLM\...\{8215A318-CC27-435E-B3EA-2E3443C8998C}) (Version: 1.00.3013 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3006 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3011 - Acer Incorporated)
AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.00.3201 - Acer Incorporated)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 15.009.20071 - Adobe Systems Incorporated)
Adobe Flash Player 19 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
AVG (Version: 16.4.7163 - AVG Technologies) Hidden
AVG 2016 (Version: 16.0.4450 - AVG Technologies) Hidden
AVG Protection (HKLM\...\AVG) (Version: 2016.4.7163 - AVG Technologies)
AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.1.8.599 - AVG Technologies)
Backup Manager v4 (x32 Version: 4.0.0.0059 - NTI Corporation) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Broadcom Card Reader Driver Installer (HKLM\...\{F0A7DF2F-0BE0-470F-B137-D7A19F977189}) (Version: 15.4.7.1 - Broadcom Corporation)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.01.3108 - Acer Incorporated)
Curse Client (HKU\S-1-5-21-3102665617-2184491791-1047382452-1002\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.13 - Dolby Laboratories Inc)
ETDWare PS/2-X64 11.6.8.001_WHQL (HKLM\...\Elantech) (Version: 11.6.8.001 - ELAN Microelectronic Corp.)
FMW 1 (Version: 1.22.2 - AVG Technologies) Hidden
FreeLanguageTranslator 3.4 (HKLM-x32\...\{607D6C12-915A-4ACD-8049-3E3728F609C7}) (Version: 3.4 - Decebal Mihailescu)
Google Drive (HKLM-x32\...\{7159FB02-B77E-41E6-B7BF-75431631864B}) (Version: 1.25.0468.5720 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3004 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.5 - Acer Inc.)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3004 - Acer Incorporated)
Microsoft Office 2010 pro podnikatele (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version:  - Microsoft)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mumble 1.2.10 (HKLM-x32\...\{24A2B2AA-3E68-4618-80E0-D5568B03CDD7}) (Version: 1.2.10 - Thorvald Natvig)
MyWinLocker (Version: 4.0.14.35 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.35 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.24 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.24 - Egis Technology Inc.) Hidden
NVIDIA Ovladače grafiky 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.0613 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0613 - NVIDIA Corporation)
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.01.3200 - Acer)
Opera Stable 32.0.1948.69 (HKLM-x32\...\Opera 32.0.1948.69) (Version: 32.0.1948.69 - Opera Software)
Ovládací panel NVIDIA 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden
PC Translator 2007 DEMO (HKLM-x32\...\PC Translator 2007 DEMO) (Version:  - )
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.206 - Qualcomm Atheros Communications)
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.05 - Qualcomm Atheros)
Razer Surround (HKLM-x32\...\Razer Surround) (Version: 1.05.18 - Razer Inc.)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.27599 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6657 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skype™ 7.12 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.12.101 - Skype Technologies S.A.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
World of Warcraft Classic (HKU\S-1-5-21-3102665617-2184491791-1047382452-1002\...\{D55ED80F-FAFD-40E1-99FC-89AF8614A9B5}_is1) (Version: 1.12.1.5875 - Blizzard Entertainment)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3102665617-2184491791-1047382452-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0AB290EE-CA57-4E74-BB90-46C2B480760E} - System32\Tasks\Opera scheduled Autoupdate 1444764712 => C:\Program Files (x86)\Opera\launcher.exe [2015-09-25] (Opera Software)
Task: {1F069D73-D2DA-4AAF-A370-6B1C036D7A3D} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: {22BA0CB7-039D-456A-A5FE-9DB82F5D2120} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-14] (Google Inc.)
Task: {3B04812C-632E-440A-9B5B-B3AEF5B353AF} - System32\Tasks\iuEmailOutlookAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe [2012-08-23] ()
Task: {5F844B49-FB36-4B9B-8AB3-476747C77884} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated)
Task: {6FF5FEDB-4627-45D2-BE02-F5CCF0140003} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-10-02] (Microsoft Corporation)
Task: {83DB379D-0936-45C0-B4C3-D6C3A64A2AD4} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2012-08-23] (Acer Incorporated)
Task: {85C67B13-38C1-4CA2-8500-90E86C76C659} - System32\Tasks\Microsoft\Windows\SetupSQMTask => C:\WINDOWS\SYSTEM32\OOBE\SETUPSQM.EXE [2014-11-21] (Microsoft Corporation)
Task: {A8B00D79-8CF9-41AD-B6D0-0A0BC4C759A2} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2012-07-31] (Acer Incorporated)
Task: {C29914B2-FB69-4A6D-ADCA-C1C36A633DD5} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-08-30] ()
Task: {CEDAB060-F54A-42B8-BFD4-65CDCA82D8CE} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: {DD54120E-5CC4-4F4E-B3D3-FFC68FE11952} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_226_pepper.exe [2015-10-18] (Adobe Systems Incorporated)
Task: {E1B232EC-44E8-4A4C-974B-D2ECB59CF591} - System32\Tasks\iuBrowserIEAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe [2012-08-23] ()
Task: {E3A2E92C-8A5E-469E-83FB-DFCC1F111F33} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-22] ()
Task: {FDD014D1-1BF5-47BF-A87F-107AFB9D122C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-14] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_226_pepper.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2013-09-05 02:36 - 2013-09-05 02:36 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2015-10-13 22:46 - 2015-10-13 22:46 - 01205136 ____N () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
2015-06-23 21:11 - 2015-06-23 21:11 - 00187048 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2012-06-22 03:12 - 2012-06-22 03:12 - 01407568 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll
2015-07-08 08:58 - 2015-07-08 08:58 - 00292352 _____ () C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
2012-08-11 04:28 - 2012-08-11 04:28 - 00384128 _____ () C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll
2012-08-23 00:04 - 2012-08-23 00:04 - 00044176 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
2012-08-23 00:04 - 2012-08-23 00:04 - 00025232 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
2012-08-23 08:26 - 2012-08-23 08:26 - 00465384 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2012-08-23 08:25 - 2012-08-23 08:25 - 00125504 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2012-08-23 08:26 - 2012-08-23 08:26 - 00155712 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\VolumeSnapshot.dll
2012-08-23 08:25 - 2012-08-23 08:25 - 00118336 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\Online.dll
2012-08-23 08:25 - 2012-08-23 08:25 - 01081408 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2012-08-23 08:25 - 2012-08-23 08:25 - 00052288 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OsSettingPort.dll
2012-08-23 08:26 - 2012-08-23 08:26 - 00727616 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OutlookShadow.dll
2015-10-20 19:22 - 2015-10-20 19:22 - 00098816 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\win32api.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00110080 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\pywintypes27.dll
2015-10-20 19:22 - 2015-10-20 19:22 - 00364544 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\pythoncom27.dll
2015-10-20 19:22 - 2015-10-20 19:22 - 00046080 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\_socket.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 01208320 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\_ssl.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00320512 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\win32com.shell.shell.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00776704 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\_hashlib.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 01176576 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\wx._core_.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00806400 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\wx._gdi_.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00816128 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\wx._windows_.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 01067008 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\wx._controls_.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00733184 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\wx._misc_.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00682496 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\pysqlite2._sqlite.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00088064 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\_ctypes.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00119808 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\win32file.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00108544 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\win32security.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00007168 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\hashobjs_ext.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00070144 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\usb_ext.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00167936 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\win32gui.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00018432 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\win32event.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00128512 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\_elementtree.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00127488 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\pyexpat.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00013824 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\common.time34.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00036864 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\_psutil_windows.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00038912 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\win32inet.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00011264 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\win32crypt.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00077312 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\wx._html2.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00027136 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\_multiprocessing.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00020480 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\_yappi.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00035840 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\win32process.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00686080 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\unicodedata.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00123392 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\wx._wizard.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00024064 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\win32pipe.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00010240 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\select.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00025600 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\win32pdh.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00525640 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\windows._lib_cacheinvalidation.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00017408 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\win32profile.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00022528 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\win32ts.pyd
2015-10-20 19:22 - 2015-10-20 19:22 - 00078848 _____ () C:\Users\ALE~1\AppData\Local\Temp\_MEI37442\wx._animate.pyd
2015-10-13 21:54 - 2015-10-13 21:53 - 40500224 _____ () C:\Program Files (x86)\AVG\UiDll\2171\libcef.dll
2015-09-05 03:42 - 2015-09-05 03:42 - 00137728 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
2015-10-14 08:37 - 2014-11-26 03:12 - 40622592 _____ () C:\Users\Aleš\AppData\Local\razer\InGameEngine\cache\RzSynapse\cef\libcef.dll
2012-11-13 10:52 - 2012-06-25 19:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-10-16 07:20 - 2014-11-26 03:12 - 40622592 _____ () C:\Users\Aleš\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libcef.dll
2015-10-16 07:20 - 2014-11-26 03:12 - 00911360 _____ () C:\Users\Aleš\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libglesv2.dll
2015-10-16 07:20 - 2014-11-26 03:12 - 00134144 _____ () C:\Users\Aleš\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libegl.dll
2015-10-14 08:37 - 2014-11-26 03:12 - 00911360 _____ () C:\Users\Aleš\AppData\Local\razer\InGameEngine\cache\RzSynapse\cef\libglesv2.dll
2015-10-14 08:37 - 2014-11-26 03:12 - 00134144 _____ () C:\Users\Aleš\AppData\Local\razer\InGameEngine\cache\RzSynapse\cef\libegl.dll
2015-10-13 21:37 - 2015-10-13 21:38 - 26065408 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6233\libcef.dll
2015-10-13 21:37 - 2015-10-13 21:38 - 00739840 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6233\libGLESv2.dll
2015-10-13 21:37 - 2015-10-13 21:38 - 00909312 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6233\platforms\qwindows.dll
2015-10-13 21:37 - 2015-10-13 21:38 - 00130048 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6233\libEGL.dll
2015-10-13 21:37 - 2015-10-13 21:37 - 00020992 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6233\imageformats\qgif.dll
2015-10-13 21:37 - 2015-10-13 21:37 - 00021504 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6233\imageformats\qico.dll
2015-10-13 21:37 - 2015-10-13 21:37 - 00205312 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6233\imageformats\qjpeg.dll
2015-10-13 21:37 - 2015-10-13 21:37 - 00225792 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6233\imageformats\qmng.dll
2015-10-13 21:37 - 2015-10-13 21:37 - 00015872 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6233\imageformats\qsvg.dll
2015-10-13 21:37 - 2015-10-13 21:37 - 00312832 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6233\imageformats\qtiff.dll
2015-10-13 21:37 - 2015-10-13 21:38 - 00010240 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6233\qml\QtQuick.2\qtquick2plugin.dll
2015-10-13 21:37 - 2015-10-13 21:38 - 00054272 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6233\qml\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-10-13 21:37 - 2015-10-13 21:38 - 00010240 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6233\qml\QtQml\Models.2\modelsplugin.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Aleš\OneDrive:ms-properties

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3102665617-2184491791-1047382452-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Aleš\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\tapeta programu windows prohlížeč fotografií.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [UDP Query User{E54B7B83-0B99-4C51-A209-278A348954BC}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{F0BB59A9-F2AC-4DBD-B840-68240BCF07A7}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{872480D2-11B1-4F73-A593-4F2A3960CF14}C:\program files (x86)\heroes of the storm\versions\base38500\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base38500\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{E93731E8-233C-4CC6-84A7-175326227F97}C:\program files (x86)\heroes of the storm\versions\base38500\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base38500\heroesofthestorm_x64.exe
FirewallRules: [{89095B6A-B73D-435D-9C2F-E27B810CD6C5}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe
FirewallRules: [{1A3FBA10-DD58-4BF4-BAB0-CD4A29DAB133}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe
FirewallRules: [{1E3C85F1-A3DE-4FC4-89AC-CA1D87D745EF}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe
FirewallRules: [{9C00D61B-AAD9-4C67-98F7-932A54C7739E}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe
FirewallRules: [{8DBB2B79-B1CB-47BB-A583-8DDFB037AF21}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe
FirewallRules: [{D96F45D7-9321-4B1C-9CE4-8CDD88EC02AA}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe
FirewallRules: [UDP Query User{7CB13381-0AD0-4D89-9035-72F5E9748E46}C:\program files (x86)\heroes of the storm\versions\base38236\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base38236\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{6D7F1B7C-DE85-4567-AA56-B2901F42A8E6}C:\program files (x86)\heroes of the storm\versions\base38236\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base38236\heroesofthestorm_x64.exe
FirewallRules: [{61CA919E-7D44-42DF-A506-178B483C120C}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{D343D658-49A1-4344-9E2A-97CA058EE788}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [UDP Query User{A279F830-4D2A-4DDA-8DA2-7C6F8DE8B9CC}C:\users\aleš\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\aleš\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{9B861EEB-B658-4122-B692-D521B1FB3011}C:\users\aleš\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\aleš\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{6AF3BC8B-F055-4E99-9785-463469F47D87}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\ccd.exe
FirewallRules: [{7421B9C4-86DF-4F0B-9523-46DB9CEA4A4C}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\ccd.exe
FirewallRules: [{66343904-9F3F-4DAA-9830-A55F25F51328}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe
FirewallRules: [{231C006C-979A-4979-949E-509701CBD495}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe
FirewallRules: [{47C0BAA3-9B29-4554-8F62-704D66C2CE85}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe
FirewallRules: [{3DE1FFE8-44F4-46B6-9991-0C722AA2859A}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe
FirewallRules: [{ABFAEA18-1FC3-4664-A995-F3DC16A3BF66}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK21\Video\MusicPlayer.exe
FirewallRules: [{A15BD442-BD34-4DE1-9E85-80787B146F84}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK21\Video\VideoPlayer.exe
FirewallRules: [{98D4485E-9D9E-4D18-9BCF-77E1A7273E25}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe
FirewallRules: [{7837F8C3-2670-4A95-B996-4B78FBF90746}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe
FirewallRules: [{DE8438F7-CE93-40C1-ADC7-098525A17496}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe
FirewallRules: [{D0BF22C0-AEC3-4CF7-A7C8-D98777D54068}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe
FirewallRules: [{663FBD47-DC47-446C-82D0-E912BB09D20F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{8DEC1CC1-5E4F-45AE-8A9C-93B1329FE590}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{9ED8892F-32C5-4306-A148-CC369E67D464}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{6C55DEB8-391C-4397-A8A7-8F62A9CC4370}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{281114BB-88DC-4970-B757-F6D404C80772}] => (Allow) C:\Program Files (x86)\NTI\Acer Backup Manager\FileExplorer.exe
FirewallRules: [{CC5035AA-DF2F-4B96-B683-DA8AC3A66F48}] => (Allow) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
FirewallRules: [{27BAFC03-21A3-47A9-A91D-6DCB035EDA1B}] => (Allow) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManager.exe

==================== Faulty Device Manager Devices =============

Name: Virtual Bluetooth Support (Include Audio)
Description: Virtual Bluetooth Support (Include Audio)
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: AthBTPort
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (10/20/2015 03:54:22 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program Explorer.EXE verze 6.3.9600.17667 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: c4c

Čas spuštění: 01d10b3b74c0b7a3

Čas ukončení: 0

Cesta k aplikaci: C:\WINDOWS\Explorer.EXE

ID hlášení: be36cb61-7731-11e5-8250-a417312292a2

Úplný název chybujícího balíčku: 

ID aplikace související s chybujícím balíčkem:

Error: (10/20/2015 09:11:31 AM) (Source: ETDService) (EventID: 0) (User: )
Description: ETDServiceCreateInteractiveProcess failed w/err 0x000003f0

Error: (10/19/2015 01:49:06 PM) (Source: ETDService) (EventID: 0) (User: )
Description: ETDServiceCreateInteractiveProcess failed w/err 0x000003f0

Error: (10/19/2015 12:31:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc000041d
Posun chyby: 0xafc1e902
ID chybujícího procesu: 0x1314
Čas spuštění chybující aplikace: 0xutorrent.exe0
Cesta k chybující aplikaci: utorrent.exe1
Cesta k chybujícímu modulu: utorrent.exe2
ID zprávy: utorrent.exe3
Úplný název chybujícího balíčku: utorrent.exe4
ID aplikace související s chybujícím balíčkem: utorrent.exe5

Error: (10/19/2015 10:59:04 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: APC)
Description: Aplikaci microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos se nepovedlo aktivovat, protože došlo k chybě: -2144927142. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (10/19/2015 10:59:04 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: APC)
Description: Aplikace microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos se nespustila ve stanovenou dobu.

Error: (10/19/2015 07:23:17 AM) (Source: ETDService) (EventID: 0) (User: )
Description: ETDServiceCreateInteractiveProcess failed w/err 0x000003f0

Error: (10/18/2015 05:34:53 PM) (Source: MsiInstaller) (EventID: 1024) (User: APC)
Description: Aktualizaci {AC76BA86-7AD7-0000-2550-AC0F094E6700} produktu Adobe Acrobat Reader DC - Czech nebylo možné nainstalovat. Kód chyby: 1625. Instalační služba systému Windows může vytvořit soubor protokolu s informacemi, které usnadní řešení potíží při instalaci softwaru. Další informace naleznete na webu na adrese http://go.microsoft.com/fwlink/?LinkId=23127

Error: (10/18/2015 05:08:55 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program ts3client_win64.exe verze 3.0.18.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 24b8

Čas spuštění: 01d109b6880a2def

Čas ukončení: 9

Cesta k aplikaci: C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe

ID hlášení: 20025022-75aa-11e5-be78-b888e3a7b980

Úplný název chybujícího balíčku: 

ID aplikace související s chybujícím balíčkem:

Error: (10/18/2015 10:16:08 AM) (Source: ETDService) (EventID: 0) (User: )
Description: ETDServiceCreateInteractiveProcess failed w/err 0x000003f0


System errors:
=============
Error: (10/20/2015 07:22:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba NVIDIA Update Service Daemon neuspěla při spuštění v důsledku následující chyby: 
%%1069

Error: (10/20/2015 07:22:54 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Služba nvUpdatusService se nemohla přihlásit jako .\UpdatusUser s aktuálně konfigurovaným heslem z důvodu následující chyby:
%%1326

Chcete-li zajistit správnou konfiguraci služby, použijte modul snap-in Služby konzoly Microsoft Management Console (MMC).

Error: (10/20/2015 07:18:20 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Systémová aplikace modelu COM+ byla nečekaně ukončena. Stalo se to 2 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.

Error: (10/20/2015 07:18:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Office Software Protection Platform byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (10/20/2015 07:18:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba ePower Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (10/20/2015 07:18:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Presentation Foundation Font Cache 3.0.0.0 byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (10/20/2015 07:18:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (10/20/2015 07:18:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba AVG WatchDog byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (10/20/2015 07:18:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Management and Security Application User Notification Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (10/20/2015 07:18:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Systémová aplikace modelu COM+ byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 1000 milisekund: Restartovat službu.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz
Percentage of memory in use: 24%
Total physical RAM: 8007.27 MB
Available physical RAM: 6081.21 MB
Total Virtual: 9927.27 MB
Available Virtual: 7575.98 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:912.75 GB) (Free:812.75 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: FA4A8C95)

Partition: GPT.

==================== End of Addition.txt ============================