﻿Additional scan result of Farbar Recovery Scan Tool (x64) Version:27-01-2016
Ran by Karel (2016-02-06 19:46:06)
Running from C:\Users\Karel\Desktop
Windows 10 Home (X64) (2015-12-01 20:56:01)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1913615606-2693778795-1332792874-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1913615606-2693778795-1332792874-503 - Limited - Disabled)
Guest (S-1-5-21-1913615606-2693778795-1332792874-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1913615606-2693778795-1332792874-1003 - Limited - Enabled)
Karel (S-1-5-21-1913615606-2693778795-1332792874-1001 - Administrator - Enabled) => C:\Users\Karel

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: AVG AntiVirus Free Edition 2015 (Disabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2015 (Disabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

8GadgetPack (HKLM-x32\...\{D328A547-552F-4B3D-AF00-6E1D2BE62702}) (Version: 13.0.0 - Helmut Buhler)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3013 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8107 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8105 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3004 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3004 - Acer Incorporated)
Ad-Aware Web Companion (x32 Version: 2.1.1095.2272 - Lavasoft) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 20.0.0.233 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.286 - Adobe Systems Incorporated)
Advanced SystemCare 8 (HKLM-x32\...\Advanced SystemCare 8_is1) (Version: 8.4.0 - IObit)
Aktualizace NVIDIA 2.9.1.22 (Version: 2.9.1.22 - NVIDIA Corporation) Hidden
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Astroburn Lite (HKLM-x32\...\Astroburn Lite) (Version: 1.8.0.0183 - Disc Soft Ltd)
Autodesk DWG TrueView 2014 (HKLM\...\DWG TrueView 2014) (Version: 19.1.18.0 - Autodesk)
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.6176 - AVG Technologies CZ, s.r.o.)
AVG 2015 (Version: 15.0.4522 - AVG Technologies CZ, s.r.o.) Hidden
AVG 2015 (Version: 15.0.6176 - AVG Technologies CZ, s.r.o.) Hidden
AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.2.5.441 - AVG Technologies)
CyberLink PowerDVD 13 (HKLM-x32\...\InstallShield_{3CFDF154-7E60-4E98-A8DF-C693A4F8E6B6}) (Version: 13.0.3313.58 - CyberLink Corp.)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.46.1.0327 - DT Soft Ltd)
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.6.3.1 - Dolby Laboratories Inc)
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)
DVR Widget (HKLM-x32\...\{FCEE0D0E-FF8D-4552-A6C5-67ECE0F82EF9}) (Version: 1.0.11 - Foscam)
DWG TrueView 2014 (Version: 19.1.18.0 - Autodesk) Hidden
Dying Light (HKLM-x32\...\Dying Light_is1) (Version: 1.2.0.0 - Techland)
Dying Light Update v1.4.0 (HKLM-x32\...\RHlpbmdMaWdodA==_is1) (Version: 1 - )
EaseUS Partition Master 10.2 (HKLM-x32\...\EaseUS Partition Master_is1) (Version:  - EaseUS)
FFmpeg v0.6.2 for Audacity (HKLM-x32\...\FFmpeg for Audacity_is1) (Version:  - )
Foxit PhantomPDF Business (HKLM-x32\...\{62BCDCA9-7686-4DD9-BC3D-944842759209}) (Version: 7.2.0.722 - Foxit Software Inc.)
Google Drive (HKLM-x32\...\{EF61675D-9BBC-4EC7-B906-F13BE8D3BD20}) (Version: 1.27.1227.2094 - Google, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.103 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Intel Driver Update Utility (HKLM-x32\...\{fe92d390-13ee-4660-a2f8-39a066fdffe0}) (Version: 2.2.0.5 - Intel)
Intel(R) Driver Update Utility 2.2.0.5 (x32 Version: 2.2.0.1 - Intel) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1156 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4248 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{B991A1BC-DE0F-41B3-9037-B2F948F706EC}) (Version: 3.1.1228 - Intel Corporation)
Intel® Chipset Device Software (x32 Version: 10.1.1.8 - Intel(R) Corporation) Hidden
Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.3.0.118 - IObit)
IPCameraTool (HKLM\...\{3442293B-19C5-416C-BE86-D02638EA83C1}_is1) (Version: 1.1.2.4 - xinghuaan)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version:  - )
jetAudio Plus (HKLM-x32\...\{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}) (Version: 8.1.0 - COWON)
K-Lite Codec Pack 11.5.6 Standard (HKLM-x32\...\KLiteCodecPack_is1) (Version: 11.5.6 - )
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
LavasoftTcpService (x32 Version: 2.3.4.2 - Lavasoft) Hidden
LavasoftTcpService (x32 Version: 2.3.4.7 - Lavasoft) Hidden
Mad Max (HKLM-x32\...\Mad Max_is1) (Version:  - )
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
MKVCleaver x64 (HKLM\...\{1256E11A-B91F-4869-9DC3-EBCC7466314C}) (Version: 6.0.7 - Ilia Bakhmoutski)
MKVToolNix 8.0.0 (64bit) (HKLM-x32\...\MKVToolNix) (Version: 8.0.0 - Moritz Bunkus)
Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version:  - Native Instruments)
Native Instruments Guitar Rig 5 (HKLM-x32\...\Native Instruments Guitar Rig 5) (Version: 5.2.0.2770 - Native Instruments)
Native Instruments Guitar Rig Mobile IO Driver (HKLM-x32\...\Native Instruments Guitar Rig Mobile IO Driver) (Version:  - Native Instruments)
Native Instruments Guitar Rig Session IO Driver (HKLM-x32\...\Native Instruments Guitar Rig Session IO Driver) (Version:  - Native Instruments)
Native Instruments Rig Kontrol 3 Driver (HKLM-x32\...\Native Instruments Rig Kontrol 3 Driver) (Version:  - Native Instruments)
NVIDIA GeForce Experience 2.9.1.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.9.1.22 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 361.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.75 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{C560D6E7-E40A-435D-8B71-62CBCF1701B2}) (Version: 4.11.9775 - Apache Software Foundation)
OttPlayer (HKLM-x32\...\{F4980547-1C20-4D6B-8658-F939D7196629}) (Version: 1.0.4 - OttPlayer)
Ovládací panel NVIDIA 361.75 (Version: 361.75 - NVIDIA Corporation) Hidden
PDFConverter Printer Driver (HKLM-x32\...\{74669C8B-4D0A-4237-997F-3E1C92331F7D}) (Version:  - )
PDFConverter Printer Driver version 2.00 (HKLM-x32\...\PDFConverter Printer Driver_is1) (Version: 2.00 - PDF-Convert, Inc.)
Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer (HKLM-x32\...\{3241744A-BA36-41F0-B4AA-EF3946D00632}) (Version: 11.0.0.619A - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.31213 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7553 - Realtek Semiconductor Corp.)
RICOH SP 210 Series LAN TWAIN (HKLM-x32\...\{49A73C8C-C5B5-4A9D-8094-A5CED2AEAE6B}) (Version: 1.01.0.0 - Ricoh)
SHIELD Streaming (Version: 4.1.0260 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.9.1.22 - NVIDIA Corporation) Hidden
Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.109 - Skype Technologies S.A.)
Smart Organizing Monitor for SP 210 Series (HKLM-x32\...\{D1EC71F7-E534-4A54-A75A-DCDCCAD77BF7}) (Version: 1.00 - RICOH)
SOMA (HKLM\...\U09NQQ==_is1) (Version: 1 - )
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
SRWare Iron 12.0.750.0 (HKLM-x32\...\{C59CF2CE-B302-4833-AA35-E0E07D8EBC52}_is1) (Version:  - SRWare)
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
The Witcher 3: Wild Hunt (Not-cracked Repack) (HKLM-x32\...\The Witcher 3: Wild Hunt (Not-cracked Repack)_is1) (Version:  - )
Tom Clancys Rainbow Six Siege (HKLM-x32\...\Tom Clancys Rainbow Six Siege_is1) (Version:  - )
Viber (HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\Viber) (Version: 5.2.0.2546 - Viber Media Inc)
VIDEOBOARD iBoard+ verze 1.3.9 (HKLM-x32\...\{8257DB8E-C043-46B2-A8C8-7CC4911F0301}_is1) (Version: 1.3.9 - VIDEOBOARD)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VMware Workstation (HKLM-x32\...\VMware_Workstation) (Version: 11.1.0 - VMware, Inc)
VMware Workstation (Version: 11.1.0 - VMware, Inc.) Hidden
web control version 1.0.0.2 (HKLM-x32\...\{7DEBACD4-13DE-46DF-974F-F3F264D1E897}_is1) (Version: 1.0.0.2 - )
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WYSIWYG Web Builder 9  (HKLM-x32\...\WYSIWYG_Web_Builder_9) (Version:  - )
Zan Image Printer (HKLM\...\zvprt50) (Version:  - )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001_Classes\CLSID\{0B7AD8D3-094A-44DE-A348-83C6C3FA347C}\InprocServer32 -> C:\Users\Karel\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Clipboarder.gadget\Release\Clipboarder64.dll (Helmut Buhler)
CustomCLSID: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\InprocServer32 -> C:\Users\Karel\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Sidebar7.gadget\Release\Sidebar7.64.dll (Helmut Buhler)
CustomCLSID: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2014\en-US\dwgviewrficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\DWG TrueView 2014\dwgviewr.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Karel\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {04F3ED13-4B10-4122-9092-CA4B3DC9100F} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {0CFE2E40-6A97-48C5-9F38-DE82315CF1B0} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {1903952A-0295-43E4-9C51-F20D2835E14F} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {25AD5D19-B3BD-4FE4-B5A6-4CBCF9D7F064} - System32\Tasks\SpyHunter4Startup => C:\Program Files (x86)\Enigma Software Group\SpyHunter\SpyHunter4.exe [2015-04-18] (Enigma Software Group USA, LLC.)
Task: {2BA7FAAE-6C6F-4E81-B867-7431211C5903} - System32\Tasks\ASC8_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe [2015-08-12] (IObit)
Task: {2CA410D5-2E9C-424E-B717-F0669C010E82} - \Safer-Networking\Spybot - Search and Destroy\Scan the system -> No File <==== ATTENTION
Task: {36D22495-ADB2-486D-8AC7-23D7036027E2} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2015-10-16] ()
Task: {39D97735-8023-4414-A0A7-9637C96C2F98} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-03] (Google Inc.)
Task: {3BD005EF-59AC-4BE6-96E5-C4B36FB92756} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {488BC2AA-FF96-4209-89BD-B8BD6477FABF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {4C40B7B7-11DF-42A3-B947-234284D331D1} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {518EC2E1-3EE7-4BED-8CC7-FCF0A75C16B4} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {54473A1F-27C5-4AB9-B9D3-578A9E96AE48} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-20] (Adobe Systems Incorporated)
Task: {5E1581F5-E1E9-4386-8D46-3979BE252574} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {63285A73-7914-4CA3-9407-D8B8E4E9F12E} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {68A50B09-08F9-41D7-89E2-92B7959A6D84} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {72FBC7C8-A04E-4120-93B0-4718F0E7EA5D} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-06-12] (Acer Incorporated)
Task: {73F8A905-FB79-412D-B85A-6BF3F21F8266} - \Safer-Networking\Spybot - Search and Destroy\Check for updates -> No File <==== ATTENTION
Task: {7414FE7F-37E5-49EB-846C-869E71EA0199} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {75331E84-2EC5-4067-A2C2-74F6CD823B07} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
Task: {7CAD3B19-4820-4D58-806E-B2D5BEE8EA92} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {813E018B-0E62-484E-AFB1-06663B6742A9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-03] (Google Inc.)
Task: {819D7F9B-30D7-4542-978C-87605248A56C} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {83B1344D-E63E-4A35-BD11-DE43F9800ACC} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {866321C3-6482-4EDA-80F9-B875317497C2} - System32\Tasks\ASC8_SkipUac_Karel => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe [2015-08-17] (IObit)
Task: {9B117225-B61F-43FE-9AEC-715AE211B45D} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-06-10] (Acer Incorporate)
Task: {B46F5375-23B1-498A-A213-3E139A56D042} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {CBAE3BAA-D553-4944-9555-3A8087093B57} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
Task: {D9573790-7BC2-46F0-A5F8-FD6BCA4E4AF6} - System32\Tasks\Uninstaller_SkipUac_Karel => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-05-03] (IObit)
Task: {EBEC3AAE-C890-409D-848A-3472F102A6B1} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {ED3A5667-4008-4397-B481-CC107700681A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {EFCBD984-5021-40D9-8D31-83029F3C963B} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {F15422F7-E6FB-49AA-A01A-870CBCB628D2} - \Safer-Networking\Spybot - Search and Destroy\Refresh immunization -> No File <==== ATTENTION
Task: {F4DD0AB2-E284-479F-A754-927599EBAF2E} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {F5BD056C-D9F4-4C1F-9EE0-7C8124585459} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {F6051586-2E11-4F9D-849C-444A0066C570} - System32\Tasks\{D07791D5-8D5E-4BFC-B730-98EEAABD908F} => pcalua.exe -a D:\Downloads\zvprt5.exe -d D:\Downloads
Task: {F8A8B794-4A17-440A-8FC1-B0D2E261BEDB} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\ASC8_SkipUac_Karel.job => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Karel.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-02-02 08:53 - 2016-02-02 08:53 - 01205832 _____ () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
2016-02-02 16:37 - 2016-01-23 02:01 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-10-09 01:13 - 2005-03-12 08:07 - 00087040 _____ () C:\WINDOWS\System32\pdfmonnt.dll
2015-05-19 08:11 - 2015-05-19 08:11 - 00007680 _____ () C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
2016-02-02 16:25 - 2016-01-12 05:43 - 00291264 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2015-12-04 18:52 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-01-22 10:03 - 2016-01-22 10:04 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-12-04 18:52 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-10-14 22:09 - 2015-10-14 22:09 - 00415128 _____ () C:\WINDOWS\system32\igfxTray.exe
2015-12-18 16:21 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-12-18 16:21 - 2015-12-07 05:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-01-12 20:53 - 2016-01-05 02:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-01-12 20:53 - 2016-01-05 02:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-01-28 10:17 - 2016-01-16 06:10 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-01-28 10:17 - 2016-01-16 06:13 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-11-15 19:07 - 2015-11-09 11:26 - 51657424 _____ () C:\Users\Karel\AppData\Local\Viber\Viber.exe
2015-04-23 13:37 - 2014-11-18 13:44 - 00255072 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\TrayTipAgentE.exe
2016-01-19 00:53 - 2015-11-30 17:38 - 00074752 _____ () C:\Program Files (x86)\IBOARD\VBSScz\VBSS.exe
2015-02-06 18:40 - 2015-02-06 18:40 - 01301696 _____ () C:\Program Files (x86)\VMware\VMware Workstation\libxml2.dll
2015-03-03 18:40 - 2015-03-03 18:40 - 00622880 _____ () C:\Program Files (x86)\IObit\LiveUpdate\ProductStatistics.dll
2016-01-22 10:03 - 2016-01-22 10:04 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-01-22 10:03 - 2016-01-22 10:04 - 22330368 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2015-03-31 09:51 - 2016-01-12 05:43 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-02-06 19:34 - 2016-02-06 19:34 - 00098816 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\win32api.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00110080 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\pywintypes27.dll
2016-02-06 19:34 - 2016-02-06 19:34 - 00364544 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\pythoncom27.dll
2016-02-06 19:34 - 2016-02-06 19:34 - 00320512 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\win32com.shell.shell.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00776704 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\_hashlib.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 01176576 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\wx._core_.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00806400 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\wx._gdi_.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00816128 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\wx._windows_.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 01067008 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\wx._controls_.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00733184 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\wx._misc_.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00682496 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\pysqlite2._sqlite.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00088064 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\_ctypes.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00119808 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\win32file.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00108544 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\win32security.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00007168 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\hashobjs_ext.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00017920 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\thumbnails_ext.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00088064 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\usb_ext.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00167936 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\win32gui.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00018432 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\win32event.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00046080 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\_socket.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 01208320 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\_ssl.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00128512 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\_elementtree.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00127488 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\pyexpat.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00013824 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\common.time34.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00036864 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\_psutil_windows.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00038912 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\win32inet.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00525240 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\windows._lib_cacheinvalidation.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00011264 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\win32crypt.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00077312 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\wx._html2.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00027136 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\_multiprocessing.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00020480 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\_yappi.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00035840 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\win32process.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00686080 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\unicodedata.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00078848 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\wx._animate.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00123392 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\wx._wizard.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00024064 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\win32pipe.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00010240 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\select.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00025600 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\win32pdh.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00017408 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\win32profile.pyd
2016-02-06 19:34 - 2016-02-06 19:34 - 00022528 _____ () C:\Users\Karel\AppData\Local\Temp\_MEI75202\win32ts.pyd
2015-08-31 20:03 - 2013-01-15 17:47 - 00893248 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 8\webres.dll
2015-11-15 19:07 - 2015-11-09 11:19 - 00089088 _____ () C:\Users\Karel\AppData\Local\Viber\qfacebook.dll
2015-11-15 19:07 - 2015-11-09 11:19 - 00389632 _____ () C:\Users\Karel\AppData\Local\Viber\imageformats\qsvg.dll
2015-11-15 19:07 - 2015-09-29 02:58 - 00012288 _____ () C:\Users\Karel\AppData\Local\Viber\QtQuick.2\qtquick2plugin.dll
2015-11-15 19:07 - 2015-09-29 15:25 - 00690176 _____ () C:\Users\Karel\AppData\Local\Viber\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-11-15 19:07 - 2015-09-29 15:26 - 00057856 _____ () C:\Users\Karel\AppData\Local\Viber\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-11-15 19:07 - 2015-09-29 02:58 - 00012288 _____ () C:\Users\Karel\AppData\Local\Viber\QtQuick\Window.2\windowplugin.dll
2015-11-15 19:07 - 2015-09-29 03:04 - 00184320 _____ () C:\Users\Karel\AppData\Local\Viber\QtMultimedia\declarative_multimedia.dll
2015-11-15 19:07 - 2015-09-29 02:58 - 00044032 _____ () C:\Users\Karel\AppData\Local\Viber\QtQml\StateMachine\qtqmlstatemachine.dll
2015-11-15 19:07 - 2015-09-29 02:58 - 00012288 _____ () C:\Users\Karel\AppData\Local\Viber\QtQml\Models.2\modelsplugin.dll
2015-11-15 19:07 - 2015-09-29 15:34 - 00425984 _____ () C:\Users\Karel\AppData\Local\Viber\QtLocation\declarative_location.dll
2015-11-15 19:07 - 2015-09-29 03:03 - 00065024 _____ () C:\Users\Karel\AppData\Local\Viber\QtPositioning\declarative_positioning.dll
2016-01-11 10:36 - 2016-01-11 10:36 - 00932032 ____R () C:\Program Files (x86)\Skype\Phone\ssScreenVVS2.dll
2015-04-23 13:37 - 2014-02-13 14:27 - 00222792 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\traynet.dll
2015-04-23 13:37 - 2014-02-13 14:27 - 00275528 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\libcurl.dll
2015-04-23 13:37 - 2014-02-13 14:27 - 00113166 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\zlib1.dll
2015-04-23 13:37 - 2014-02-13 14:27 - 00249928 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\uexper.dll
2016-01-19 00:53 - 2016-01-19 00:53 - 04887216 _____ () c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\WebKit.dll
2016-01-19 00:53 - 2016-01-19 00:53 - 17882288 _____ () c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll
2015-06-01 21:57 - 2013-10-23 06:46 - 00862472 _____ () C:\Program Files (x86)\CyberLink\PowerDVD13\common\UNO\UNO.dll
2015-06-01 21:57 - 2013-05-02 01:06 - 00081920 _____ () C:\Program Files (x86)\CyberLink\PowerDVD13\Common\koan\_ctypes.pyd
2015-06-01 21:57 - 2013-05-02 01:06 - 00053248 _____ () C:\Program Files (x86)\CyberLink\PowerDVD13\Common\Koan\_socket.pyd
2015-06-01 21:57 - 2013-05-02 01:06 - 00655360 _____ () C:\Program Files (x86)\CyberLink\PowerDVD13\Common\Koan\_ssl.pyd
2015-06-01 21:57 - 2013-10-23 06:46 - 00043272 _____ () C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DHProcedure\DHProcedure.dll
2015-07-06 19:36 - 2015-07-06 19:36 - 01243936 _____ () C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-02-05 08:47 - 2016-02-03 08:27 - 01632584 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\libglesv2.dll
2016-02-05 08:47 - 2016-02-03 08:27 - 00087880 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\libegl.dll
2016-02-05 08:47 - 2016-02-03 08:27 - 16799048 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:CB0AACC9

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\webcompanion.com -> hxxp://webcompanion.com
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\...\100sexlinks.com -> 100sexlinks.com

There are 4788 more sites.


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2015-04-03 23:49 - 00002291 ____N C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 0.0.0.0.0
127.0.0.1 0.0.0.0.0
127.0.0.1 0.0.0.0.0
127.0.0.1 0.0.0.0.0
127.0.0.1 0.0.0.0.0
127.0.0.1 0.0.0.0.0
127.0.0.1 0.0.0.0.0
127.0.0.1 0.0.0.0.0
127.0.0.1 0.0.0.0.0
127.0.0.1 m.fr.a2dfp.net
127.0.0.1 mfr.a2dfp.net
127.0.0.1 ad.a8.net
127.0.0.1 asy.a8ww.net
127.0.0.1 static.a-ads.com
127.0.0.1 atlas.aamedia.ro
127.0.0.1 abcstats.com
127.0.0.1 ad4.abradio.cz
127.0.0.1 a.abv.bg
127.0.0.1 adserver.abv.bg
127.0.0.1 adv.abv.bg
127.0.0.1 bimg.abv.bg
127.0.0.1 ca.abv.bg
127.0.0.1 www2.a-counter.kiev.ua
127.0.0.1 track.acclaimnetwork.com
127.0.0.1 accuserveadsystem.com
127.0.0.1 www.accuserveadsystem.com
127.0.0.1 achmedia.com
127.0.0.1 csh.actiondesk.com
127.0.0.1 ads.activepower.net
127.0.0.1 app.activetrail.com

There are 48 more lines.


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1913615606-2693778795-1332792874-1001\Control Panel\Desktop\\Wallpaper -> c:\users\karel\appdata\local\microsoft\windows\themes\roamedthemefiles\desktopbackground\img0.jpg
DNS Servers: 192.168.111.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{13028F52-577B-4546-95F5-E4DE4D8355FF}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
FirewallRules: [{ED1745DF-4290-40A5-BAE3-BE675581685C}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
FirewallRules: [{35D594BB-2AD1-4C2B-BB43-560AC51A2FA7}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
FirewallRules: [{2A10ACA3-AD14-4F77-AF81-10F881AE12CE}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
FirewallRules: [{23A4FABE-D666-4126-9FBE-6B0689900121}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
FirewallRules: [{0D167FE0-2619-4932-80E6-EE35B26FE371}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
FirewallRules: [{CACB2E44-000F-41CB-8F8A-8172457835E8}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{7BBEF0E6-0261-4A94-84F8-16966788038A}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{437250B9-DEFB-454C-92F1-A65DF40B8AAF}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
FirewallRules: [{D67FBBA9-39D6-4901-9300-FD010A937F94}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
FirewallRules: [UDP Query User{51507ABA-B122-4184-81E9-342C7B31615B}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{EE3E0CF0-A363-4710-A14E-40D736B2BE47}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [{710F4420-BB16-4F20-8E70-6A5EDEF4F65F}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{0AE7FE3E-4EBF-4BFA-8FE0-00059E9DD60B}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{2966FB4D-C583-476B-89B4-A4AFEAC95935}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{B11BD449-18D9-4221-9BC6-176FC2CBD301}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{CD605437-E2BF-461F-ADB0-EA305410ACDD}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{7560996A-978B-4214-8A31-A0329AAFA277}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\DMCDaemon.exe
FirewallRules: [{B2AB98C8-487C-44E2-931C-C2666E2025A0}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\DMCDaemon.exe
FirewallRules: [{487F86AB-D40A-4F49-A5B9-A931EB4D7CD8}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\WindowsUpnp.exe
FirewallRules: [{9F7BDD29-9CD7-43E9-AD0C-DDF96816085F}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\WindowsUpnp.exe
FirewallRules: [{3B37FC74-86A7-4927-ACA1-4A86456CB1FD}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{127121B5-20E1-4D2C-A2CC-5963635EAB62}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{920C08DA-99D5-404F-9F0C-A7D7280156C2}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{2F02FD09-4CEB-4034-8EE4-5EF63AC814F6}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{D8B75E15-8862-42AA-84CD-277A8AC0D085}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{C17DB363-6237-48C2-BD66-89EBFBEAA0B7}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{532C33A5-6152-447A-8550-15E6A5C38506}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{0C9158A3-695C-4F93-AE37-DDEEE784F08B}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{39F14616-9603-4E66-B377-FD64EB60DB2B}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
FirewallRules: [{0DEA984D-B156-4052-B467-FB5E03013550}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
FirewallRules: [{676F4AD1-C21E-4D49-AD32-A6F9CA9F6E01}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{E8CDA97B-5E00-4FF6-9320-D893DD0FE47C}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{1E6E38EC-89D1-4AEF-BBB5-430C1848598E}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{B0C7DB59-7C90-42E2-9E39-E2A3E0371596}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{5C1DBAB5-1844-4424-8596-5B1D6BD47F83}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
FirewallRules: [{8CF0DA6C-FF67-42F4-9129-8ED7D9AD7E90}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
FirewallRules: [{5E5976A0-F4E7-4F11-BA4D-342798E16F03}] => (Allow) C:\Users\Karel\AppData\Local\Viber\Viber.exe
FirewallRules: [TCP Query User{CECDD892-6A43-41D1-A783-127D364B8512}C:\users\karel\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\karel\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{6286E965-084A-4B74-8610-B627C21F1206}C:\users\karel\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\karel\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{15AAA12A-6316-420F-845F-46DEB397084C}] => (Block) C:\users\karel\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{943A4607-19D3-4675-9641-78E5E60B17FA}] => (Block) C:\users\karel\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{B6925749-4207-4111-9D2D-A467EB02B640}D:\games\far cry 4\bin\farcry4.exe] => (Block) D:\games\far cry 4\bin\farcry4.exe
FirewallRules: [UDP Query User{F2DCF84C-ABA2-4A12-8A40-10D2E68DF5A3}D:\games\far cry 4\bin\farcry4.exe] => (Block) D:\games\far cry 4\bin\farcry4.exe
FirewallRules: [TCP Query User{7305D12E-2DA0-4E1A-B27E-4E442433E3E3}D:\games\evolve\bin64_steamretail\evolve.exe] => (Block) D:\games\evolve\bin64_steamretail\evolve.exe
FirewallRules: [UDP Query User{002DFF94-25F3-4ACE-B0FC-319B6941E608}D:\games\evolve\bin64_steamretail\evolve.exe] => (Block) D:\games\evolve\bin64_steamretail\evolve.exe
FirewallRules: [TCP Query User{3EBCAB08-66D6-479D-9727-DB53010CEA3D}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{4FC2A84A-E8B2-4F88-B1B8-B7D677EBFB6F}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{02148957-7E71-4F09-B3F8-DEE9119FAAE9}] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{D98246C5-F8A4-4776-9CD4-E37AD235462A}] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{8A8B115D-5E0A-450E-A975-7EF851E153E8}D:\games\dying light\dyinglightgame.exe] => (Block) D:\games\dying light\dyinglightgame.exe
FirewallRules: [UDP Query User{ED3F3E24-8ACE-45E7-ACF1-82BF5F50A045}D:\games\dying light\dyinglightgame.exe] => (Block) D:\games\dying light\dyinglightgame.exe
FirewallRules: [TCP Query User{8E193FFB-6EF8-481D-86FB-3DA4611B455B}C:\program files (x86)\smart organizing monitor for sp 210 series\sumosp210.exe] => (Allow) C:\program files (x86)\smart organizing monitor for sp 210 series\sumosp210.exe
FirewallRules: [UDP Query User{8EBFCF82-F502-4449-9EDF-971F42524C55}C:\program files (x86)\smart organizing monitor for sp 210 series\sumosp210.exe] => (Allow) C:\program files (x86)\smart organizing monitor for sp 210 series\sumosp210.exe
FirewallRules: [{49DF6032-F91A-4862-8818-CDE353AD18A8}] => (Block) C:\program files (x86)\smart organizing monitor for sp 210 series\sumosp210.exe
FirewallRules: [{A28BAE26-DCF7-40F9-AA07-F69518DAED84}] => (Block) C:\program files (x86)\smart organizing monitor for sp 210 series\sumosp210.exe
FirewallRules: [{0E65AC8A-788F-4DEC-909E-16588B5D782A}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13.exe
FirewallRules: [{5F8848EF-8A84-43F4-947D-615136EFB831}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMR\PowerDVD13DMREngine.exe
FirewallRules: [{57636A3F-0990-4ED3-BD55-4BAF36189A15}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
FirewallRules: [{3CF9FCA1-3B0C-4223-B9B8-654C616CAD3F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe
FirewallRules: [{DA45B58A-E81A-46A4-BE38-34D21B8FC7C6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13ML.exe
FirewallRules: [{984EE64D-F2F9-4DCD-8ACC-C1198ECBE4DF}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD13\Movie\PowerDVD.exe
FirewallRules: [{5EFFF38F-9ABF-4BBE-8865-4480B2D73C59}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD13\Movie\PowerDVD Cinema\PowerDVDCinema13.exe
FirewallRules: [{AD884D32-F331-4E20-B10C-5489FFB339E9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{4D07D5F7-2663-49ED-9FA8-60425BED72DE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{064D7629-E61F-45C8-86D6-AF4F6349EA1D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{43CEE3FB-3C98-4A21-9DF0-5A077918416C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{43A02EE0-8942-4BD7-A825-2575569F4DD1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{CA6815C8-E5DD-41CC-BCAA-196E77269E75}C:\ipcameratool\ipcameratool.exe] => (Allow) C:\ipcameratool\ipcameratool.exe
FirewallRules: [UDP Query User{DE73B975-F3F3-41CE-A577-ED0808A9CC24}C:\ipcameratool\ipcameratool.exe] => (Allow) C:\ipcameratool\ipcameratool.exe
FirewallRules: [TCP Query User{BA7ACB9D-A717-4AB9-AC47-FA2520B8CCE6}C:\ipcameratool\ipcameratool.exe] => (Allow) C:\ipcameratool\ipcameratool.exe
FirewallRules: [UDP Query User{0456380A-4AEE-497A-B00D-8D36C44B5935}C:\ipcameratool\ipcameratool.exe] => (Allow) C:\ipcameratool\ipcameratool.exe
FirewallRules: [{23FFBAEF-A928-4F9B-A615-81B3047E8EAE}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============

Name: Intel(R) 8 Series/C220 Series USB EHCI #1 - 8C26
Description: Intel(R) 8 Series/C220 Series USB EHCI #1 - 8C26
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: Intel
Service: usbehci
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/06/2016 03:32:18 PM) (Source: COM) (EventID: 10031) (User: )
Description: {CDC82860-468D-4D4E-B7E7-C298FF23AB2C}

Error: (02/06/2016 03:32:18 PM) (Source: COM) (EventID: 10031) (User: )
Description: {CDC82860-468D-4D4E-B7E7-C298FF23AB2C}

Error: (02/06/2016 03:29:54 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CHARLES-NB)
Description: Aplikaci Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp se nepovedlo aktivovat, protože došlo k chybě: -2144927148. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (02/06/2016 03:29:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CHARLES-NB)
Description: Aplikaci Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp se nepovedlo aktivovat, protože došlo k chybě: -2144927148. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (02/06/2016 02:21:23 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CHARLES-NB)
Description: Aplikaci Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp se nepovedlo aktivovat, protože došlo k chybě: -2144927148. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (02/06/2016 02:21:23 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CHARLES-NB)
Description: Aplikaci Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp se nepovedlo aktivovat, protože došlo k chybě: -2147023170. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (02/06/2016 11:39:33 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CHARLES-NB)
Description: Aplikaci Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp se nepovedlo aktivovat, protože došlo k chybě: -2144927148. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (02/05/2016 04:40:50 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CHARLES-NB)
Description: Aplikaci Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp se nepovedlo aktivovat, protože došlo k chybě: -2144927148. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (02/05/2016 04:40:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CHARLES-NB)
Description: Aplikaci Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp se nepovedlo aktivovat, protože došlo k chybě: -2144927148. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (02/05/2016 01:10:39 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CHARLES-NB)
Description: Aplikaci Microsoft.WindowsStore_8wekyb3d8bbwe!App se nepovedlo aktivovat, protože došlo k chybě: -2144927142. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.


System errors:
=============
Error: (02/06/2016 07:32:56 PM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Tento počítač je nakonfigurován jako člen pracovní skupiny, nikoliv jako
člen domény. Přihlašovací služba Netlogon nepotřebuje být spuštěna v této
konfiguraci.

Error: (02/06/2016 07:32:30 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Přístup k uživatelským datům_7b361 byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 10000 milisekund: Restartovat službu.

Error: (02/06/2016 07:32:30 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Úložiště uživatelských dat_7b361 byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 10000 milisekund: Restartovat službu.

Error: (02/06/2016 07:32:30 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Data kontaktů_7b361 byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 10000 milisekund: Restartovat službu.

Error: (02/06/2016 07:32:30 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Hostitel synchronizace_7b361 byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 10000 milisekund: Restartovat službu.

Error: (02/06/2016 07:32:30 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: specifické pro aplikaciMístníAktivace{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (pomocí LRPC)Není k dispoziciNení k dispozici

Error: (02/06/2016 05:46:47 PM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Tento počítač je nakonfigurován jako člen pracovní skupiny, nikoliv jako
člen domény. Přihlašovací služba Netlogon nepotřebuje být spuštěna v této
konfiguraci.

Error: (02/06/2016 05:46:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Přístup k uživatelským datům_e0db6 byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 10000 milisekund: Restartovat službu.

Error: (02/06/2016 05:46:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Úložiště uživatelských dat_e0db6 byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 10000 milisekund: Restartovat službu.

Error: (02/06/2016 05:46:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Data kontaktů_e0db6 byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 10000 milisekund: Restartovat službu.


CodeIntegrity:
===================================
  Date: 2016-01-28 12:57:04.372
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-01-15 04:20:59.100
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-01-08 14:46:35.982
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-01-07 04:03:48.317
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-31 00:27:49.943
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-30 20:29:07.098
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-21 03:15:56.254
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-11 10:22:38.785
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-09 15:30:46.708
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-09 10:02:21.116
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-4720HQ CPU @ 2.60GHz
Percentage of memory in use: 37%
Total physical RAM: 8115.27 MB
Available physical RAM: 5076.73 MB
Total Virtual: 10803.27 MB
Available Virtual: 7051.91 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:117.99 GB) (Free:71.62 GB) NTFS
Drive d: (DATA) (Fixed) (Total:914.65 GB) (Free:70.99 GB) NTFS
Drive f: (Tom Clancys Rainbow Six Siege) (CDROM) (Total:13.37 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: CCCB2872)

Partition: GPT.

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: CCCB2803)

Partition: GPT.

==================== End of Addition.txt ============================