﻿Additional scan result of Farbar Recovery Scan Tool (x64) Version:18-11-2015
Ran by Vilo (2015-11-19 11:59:44)
Running from C:\Users\Vilo\Desktop
Windows 8.1 (X64) (2014-04-08 15:56:09)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-973648956-3309636155-3697473859-500 - Administrator - Disabled)
Guest (S-1-5-21-973648956-3309636155-3697473859-501 - Limited - Disabled)
Vilo (S-1-5-21-973648956-3309636155-3697473859-1001 - Administrator - Enabled) => C:\Users\Vilo

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.12 - Adobe Systems)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.190 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.12) - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.0.162 - Adobe Systems, Inc.)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version:  - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version:  - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version:  - Microsoft)
Aktualizácie NVIDIA 2.4.3.22 (Version: 2.4.3.22 - NVIDIA Corporation) Hidden
Alicia (HKLM-x32\...\Alicia) (Version: 1.0.0.0 - NtreevSoft)
All jumpscares five nights at freddy`s (HKU\S-1-5-21-973648956-3309636155-3697473859-1001\...\All jumpscares five nights at freddy`s) (Version:  - )
ASUS Boot Setting (HKLM-x32\...\{7AAE9187-C24F-4073-A951-36C370E7A3A5}) (Version: 1.00.17 - ASUSTeK Computer Inc.)
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 3.8.5187 - DsNET Corp)
Bandicam (HKLM-x32\...\Bandicam) (Version: 2.1.3.757 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - Bandisoft.com)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.66.1075 - AB Team, d.o.o.)
Camtasia Studio 8 (HKLM-x32\...\{A2A41B60-D51F-4C04-BC94-B4C94F7B6DC0}) (Version: 8.6.0.2054 - TechSmith Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.10 - Piriform)
Classic Shell (HKLM\...\{023F92C9-AB10-4C54-BF09-C550AEC37917}) (Version: 4.0.6 - IvoSoft)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DLL Suite 2013 (HKLM-x32\...\{885843E7-6CAC-4791-B7BF-1CD516017954}_is1) (Version:  - )
FNAF (HKU\S-1-5-21-973648956-3309636155-3697473859-1001\...\FNAF) (Version:  - )
Fotogaléria (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Gametree Launcher (HKLM-x32\...\GTL) (Version: 3.0.26.0 - NtreevSoft)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.86 - Spoločnosť Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.410 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.410 - LogMeIn, Inc.) Hidden
Mafia (HKLM-x32\...\{C72D7008-266D-4DD8-BF3C-296B736127F6}) (Version: 1.02 - )
Microsoft AppLocale (HKLM-x32\...\{394BE3D9-7F57-4638-A8D1-1D88671913B7}) (Version: 1.0.0 - MS)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Windows Application Compatibility Database (HKLM\...\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb) (Version:  - )
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Minecraft Tweaker for Minecraft 1.7.10, ver. 1.7.10_10.5 (HKLM-x32\...\{6428D19C-67AF-44FB-9496-E255C5D1E553}_is1) (Version:  - Michal Charvát)
Minecraft1.7.2 (HKLM-x32\...\Minecraft1.7.2) (Version:  - )
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
My Horse and Me Demo (HKLM-x32\...\{433D843A-62FC-4C81-B002-DDB563852E92}) (Version: 1.00.0000 - Atari)
Need for Speed™ Most Wanted (HKLM-x32\...\{FB0127F3-985B-44CE-AE29-378CAF60B361}) (Version: 1.0.0.0 - Electronic Arts)
NVIDIA 3D Vision radič ovládača 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 337.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.3.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.3.22 - NVIDIA Corporation)
NVIDIA Grafický ovládač 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)
NVIDIA Ovládač 3D Vision 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 337.88 - NVIDIA Corporation)
NVIDIA Ovládač zvuku HD 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Softvér systému s podporou technológie PhysX 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.5.20.5318 - Electronic Arts, Inc.)
Ovládací panel NVIDIA 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7071 - Realtek Semiconductor Corp.)
RegClean-Pro (HKLM-x32\...\RegClean-Pro_is1) (Version: 6.21 - systweak.com) <==== ATTENTION
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.3.22 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation)
Skype™ 7.13 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.13.101 - Skype Technologies S.A.)
Sony Mobile Update Engine (HKLM-x32\...\Update Engine) (Version: 2.15.13.201509231442 - Sony Mobile Communications Inc.)
Sony PC Companion 2.10.289 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.289 - Sony)
Star Stable (HKLM-x32\...\{2B03B553-4983-4005-99C4-31DFC25B4BB9}) (Version: 1.00.0000 - Star Stable Entertainment AB)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.26.89 - Electronic Arts)
The Sims™ 3 Pets (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.50 - Ghisler Software GmbH)
Total Uninstall 6.6.0 (HKLM\...\Total Uninstall 6_is1) (Version: 6.6.0 - Gavrila Martau)
Transformice (HKLM-x32\...\Transformice) (Version: 1.0.0 - UNKNOWN)
Transformice (x32 Version: 1.0.0 - UNKNOWN) Hidden
Unity Web Player (HKU\S-1-5-21-973648956-3309636155-3697473859-1001\...\UnityWebPlayer) (Version: 4.6.3f1 - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Win8 DVD Player 1.4.0.0 (HKLM-x32\...\Win8 DVD Player) (Version: 1.4.0.0 - Win8)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.01 (64-bitová verzia) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {01EA8792-39AB-4E06-8442-E08785DA9039} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-13] (Adobe Systems Incorporated)
Task: {39109662-258A-4C39-ABBD-9EA1E3DD54EB} - System32\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-1-7 => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-1-7.exe <==== ATTENTION
Task: {4095AB93-22EE-4ACB-AD5C-9161BF731BDD} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {4B720356-029E-4DF0-AAC8-F6048F5EBEC6} - System32\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-6 => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-6.exe <==== ATTENTION
Task: {63280C89-68AA-4588-8A8E-08CE7658E0F9} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-07-28] (Microsoft Corporation)
Task: {66D4CB4A-F897-4BF0-8F63-4273E7449503} - System32\Tasks\Yahoo! Search Updater => C:\Users\Vilo\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrsetup.exe <==== ATTENTION
Task: {6A871880-A35F-4586-B973-DEFE7B4800DB} - System32\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-5_user => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-5.exe <==== ATTENTION
Task: {6CCAE543-32CF-4CB1-999E-369F6F46C2A0} - System32\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-5 => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-5.exe <==== ATTENTION
Task: {73955264-BFB9-4A95-B8D6-CD9ECD12DD7C} - System32\Tasks\{58BE2622-B9A4-4F11-BD97-7225D61F8A87} => Chrome.exe hxxp://ui.skype.com/ui/0/6.22.59.107/sk/abandoninstall?page=tsProgressBar
Task: {73EC1F39-0C57-4244-A7CA-18281577D433} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION
Task: {74617012-4077-4C82-815E-356D4CDCAD5B} - System32\Tasks\{358F1B5F-BC85-4E6E-BFCF-05C573412EBE} => pcalua.exe -a "C:\Program Files (x86)\Cenega Czech\Mafia\Game.exe" -d "C:\Program Files (x86)\Cenega Czech\Mafia"
Task: {778389C3-F633-4A5A-92AC-FBB6724B376F} - System32\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-10_user => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-10.exe <==== ATTENTION
Task: {7B1189A7-D21F-4D71-8416-20CAD16DDE19} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {7D2CB2BC-6562-4FCA-9E54-50170DA609A6} - System32\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-11 => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-11.exe <==== ATTENTION
Task: {82EA4B9E-AFEA-42AF-91E8-2C8AB5E7A1C6} - System32\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-1-6 => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-1-6.exe <==== ATTENTION
Task: {A74C089A-2801-43D0-9B5F-D44B3A82C2B9} - System32\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-7 => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-7.exe <==== ATTENTION
Task: {A94D7D35-CF1B-4222-9EBC-3B8C3840808D} - System32\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-4 => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-4.exe <==== ATTENTION
Task: {C605D4B6-BF57-4ED0-AEE2-016A2764424C} - System32\Tasks\Total Form => Rundll32.exe "C:\Users\Vilo\AppData\Local\Total Form\Bin\TotalForm.dll",#3 <==== ATTENTION
Task: {CB5B3445-BD11-4AA8-99FD-E82C1DC446C8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {F015CADD-0B52-4C9C-8440-03A97F0EF39A} - System32\Tasks\PaintTool SAI => C:\Users\Vilo\AppData\Local\Temp\is-D1FPP.tmp\prsetup.exe <==== ATTENTION
Task: {F0315E11-9252-488E-9AE3-49E2EF635AD8} - System32\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-3 => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-3.exe <==== ATTENTION
Task: {F482C241-1674-44A4-B5EB-22775FA96F35} - System32\Tasks\Norton Product InstallerIdle => C:\Windows\SysWOW64\Adobe\Shockwave 12\SymInstallStub.exe
Task: {F5766E2B-0C74-4DB3-8FFE-7228C651D28B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-09-16] (Piriform Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-1-6.job => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-1-7.job => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-10_user.job => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-11.job => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-3.job => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-4.job => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-5.job => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-5_user.job => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-6.job => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\5bec9f3e-4b77-444d-985e-82e6ff890720-7.job => C:\Program Files (x86)\GoHD\5bec9f3e-4b77-444d-985e-82e6ff890720-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Norton Product InstallerIdle.job => C:\Windows\SysWOW64\Adobe\Shockwave 12\SymInstallStub.exe

==================== Loaded Modules (Whitelisted) ==============

2014-04-08 11:07 - 2014-05-20 02:25 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-04-08 11:25 - 2012-06-01 10:42 - 00920736 ____R () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
2015-08-01 14:14 - 2015-06-10 10:13 - 00113024 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
2015-09-16 20:33 - 2015-09-16 20:33 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1051.dll
2014-04-08 11:26 - 2015-11-19 11:26 - 00026112 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\PEbiosinterface32.dll
2014-04-08 11:25 - 2010-06-29 03:58 - 00104448 ____R () C:\Program Files (x86)\ASUS\AXSP\1.00.19\ATKEX.dll
2015-05-18 13:57 - 2015-05-01 17:52 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-08-01 14:14 - 2012-04-30 10:57 - 00039936 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll
2015-08-01 14:14 - 2014-12-04 14:18 - 00241152 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll
2013-06-11 08:31 - 2013-06-11 08:31 - 00090112 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\CalEngine.dll
2011-01-05 14:01 - 2011-01-05 14:01 - 00053248 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PimNotes.dll
2011-07-07 13:54 - 2011-07-07 13:54 - 00233984 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\Report.dll
2015-08-01 14:14 - 2015-04-21 12:22 - 00053248 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\VObject.dll
2012-04-04 13:33 - 2012-04-04 13:33 - 00139776 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\CAgdLNotes.dll
2015-07-09 09:51 - 2015-07-09 09:51 - 00163840 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\CAgdOutlook.dll
2012-07-26 10:51 - 2012-07-26 10:51 - 00208896 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\VistaCalendar.dll
2015-08-01 14:14 - 2013-05-20 11:58 - 00620718 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\sqlite3.dll
2015-03-23 18:19 - 2015-03-23 18:19 - 02620416 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\libxt.dll
2015-07-23 08:21 - 2015-07-23 08:21 - 00802304 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PhoneUpdate.dll
2012-09-23 19:44 - 2012-09-23 19:44 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\sk_sk\acrotray.sky
2015-06-29 14:43 - 2015-06-29 14:43 - 00031744 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Locale\sk_sk\AcroIEFavClient.SKY
2014-04-08 11:25 - 2013-09-16 11:17 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-973648956-3309636155-3697473859-1001\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.0.2 - 192.168.0.3
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{2D58B9EB-11BB-4347-8DF0-30F669DD1087}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5AF7107C-F321-4493-A219-98F7CFCAFE10}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{061A2FFD-4218-4AFF-9497-E4A06E2C562A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{E79DCE8D-20AF-4120-A00A-230A141311C6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{6DC0F81D-E2E3-4597-AEE1-628FE553C7F6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{8CD102BE-CE37-4BCD-91A7-C4D532FEDB8C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5DDEF255-7082-41B5-8ACA-DE7D37282631}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{FFDDC4BC-8209-4180-BFF0-AC7C54F33B62}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [UDP Query User{8B9A2DC7-3EB7-43C8-9D4B-5A409BEEAF2C}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [{C121FDA3-C688-417B-AA66-68B468F1E916}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{6F116D7E-E099-42A9-8A88-AA8759FC47E7}] => (Allow) LPort=2869
FirewallRules: [{BDAD37B6-6479-425D-9CAD-E3C39C2107D3}] => (Allow) LPort=1900
FirewallRules: [TCP Query User{387D4898-E993-4D76-A0D7-9E17696AB41D}C:\program files (x86)\java\jre1.8.0_40\bin\java.exe] => (Block) C:\program files (x86)\java\jre1.8.0_40\bin\java.exe
FirewallRules: [UDP Query User{3E0CB74E-C8C4-46AD-95DE-592D64B8109E}C:\program files (x86)\java\jre1.8.0_40\bin\java.exe] => (Block) C:\program files (x86)\java\jre1.8.0_40\bin\java.exe
FirewallRules: [{CB751724-FB06-4A9B-9220-59B1100D16E3}] => (Allow) %ProgramFiles%\Zune\Zune.exe
FirewallRules: [{DBECCF77-6A6A-4265-BC73-E743552A1CC3}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{A6B646F9-766A-4ADB-8D54-B30AF740EFE6}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{A09D7834-9E5C-47CE-8188-B511F78071EF}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{C2CA01DF-4E44-4B3D-BEDC-7E63184ABD7E}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{07C48E8F-616C-4538-B9D1-61235431B43B}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{7077641B-82DE-4807-9B40-BD504FAE338B}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{43FF269D-C558-40EE-92DA-6C95D85B0542}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{967E5843-7C9E-474C-89C8-B3CC4F8CE838}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{393853E3-77DD-4238-AB67-855EC6FA491A}] => (Allow) C:\Program Files (x86)\EA Games\Need for Speed(TM) Most Wanted\NFS13.exe
FirewallRules: [{9F78B9DF-E834-47F0-B521-EC01D8F852C5}] => (Allow) C:\Program Files (x86)\EA Games\Need for Speed(TM) Most Wanted\NFS13.exe
FirewallRules: [{E080BB97-B6FF-4817-8D4D-D65B15FDAB68}] => (Allow) C:\Users\Vilo\AppData\Local\Gametree\Alicia\Alicia.exe
FirewallRules: [{FFDF40AD-12E0-4C79-8923-C234A5BD07B3}] => (Allow) C:\Users\Vilo\AppData\Local\Gametree\Alicia\Alicia.exe
FirewallRules: [{74426A4E-7035-45DC-9955-DA3FC811E7E2}] => (Allow) C:\Program Files (x86)\Sony Mobile\Update Engine\Sony Mobile Update Engine.exe
FirewallRules: [{AEAE25EE-8783-474C-A6B5-037CF51A34A5}] => (Allow) C:\Program Files (x86)\Sony Mobile\Update Engine\Sony Mobile Update Engine.exe
FirewallRules: [{5503D4C0-A6E7-4560-8185-6D999DF32B7F}] => (Allow) LPort=8317
FirewallRules: [{A49B79D5-3503-40C1-9043-7C5A7BD972DE}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{1AC76CE9-1A46-4BA1-8287-3758429ED3E2}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{4BAACF95-52A5-41C3-8FE5-2C5C49A53DD8}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{531DB77D-E99C-493A-B075-C188BE798BCD}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{826CC5CA-BDDD-40A6-BF75-7B45AED7323A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/17/2015 07:28:54 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program StarStableOnlineLauncher.exe version 1.0.0.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: ac8

Start Time: 01d12162c8f01195

Termination Time: 4294967295

Application Path: C:\Users\Public\StarStableOnline\StarStableOnlineLauncher.exe

Report Id: 0af5212d-8d59-11e5-8599-e03f4919da6b

Faulting package full name: 

Faulting package-relative application ID:

Error: (11/17/2015 02:28:34 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed continue stopping. [6]

Error: (11/17/2015 00:11:04 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed continue stopping. [0]

Error: (11/16/2015 10:19:17 AM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed continue stopping. [0]

Error: (11/15/2015 06:07:24 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]

Error: (11/15/2015 05:25:55 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed continue stopping. [6]

Error: (11/15/2015 02:57:23 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed continue stopping. [6]

Error: (11/15/2015 02:22:03 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed continue stopping. [6]

Error: (11/15/2015 00:20:58 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed continue stopping. [6]

Error: (11/15/2015 08:27:11 AM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed continue stopping. [6]


System errors:
=============
Error: (11/19/2015 10:59:28 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 20:47:09 on ‎17.‎11.‎2015 was unexpected.

Error: (11/19/2015 10:58:58 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 32212256844793252222928632

Error: (11/17/2015 06:47:19 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba LogMeIn Hamachi Tunneling Engine je označená ako interaktívna služba. Systém je však nakonfigurovaný tak, aby nepovolil interaktívne služby. Služba pravdepodobne nebude pracovať správne.

Error: (11/17/2015 06:44:57 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 16:27:54 on ‎17.‎11.‎2015 was unexpected.

Error: (11/17/2015 06:44:33 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 32212256844793252222928632

Error: (11/17/2015 10:18:53 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 19:48:26 on ‎16.‎11.‎2015 was unexpected.

Error: (11/17/2015 10:18:30 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 32212256844793252222928632

Error: (11/14/2015 07:36:52 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 32212256844793252222928632

Error: (11/14/2015 07:37:17 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 20:19:39 on ‎13.‎11.‎2015 was unexpected.

Error: (11/13/2015 01:31:16 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 32212256844793252222928632


CodeIntegrity:
===================================
  Date: 2015-11-17 15:52:11.960
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-17 15:52:11.665
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-17 15:52:11.188
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-17 15:52:10.113
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-17 15:52:09.845
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-17 15:52:09.536
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-17 15:52:09.229
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-17 15:52:08.981
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-17 15:51:38.514
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-17 15:51:38.288
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i3-4340 CPU @ 3.60GHz
Percentage of memory in use: 22%
Total physical RAM: 8130.36 MB
Available physical RAM: 6283.79 MB
Total Virtual: 9410.36 MB
Available Virtual: 7473.42 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:198.88 GB) (Free:93.68 GB) NTFS
Drive d: (Nový zväzok) (Fixed) (Total:732.29 GB) (Free:725.31 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 5D0948BE)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=198.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=732.3 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================