﻿Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by Beda (2016-03-23 14:58:09)
Running from C:\Users\Beda\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2012-08-23 16:28:23)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-332784963-1637011244-2087319766-500 - Administrator - Disabled)
Beda (S-1-5-21-332784963-1637011244-2087319766-1005 - Administrator - Enabled) => C:\Users\Beda
Guest (S-1-5-21-332784963-1637011244-2087319766-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-332784963-1637011244-2087319766-1003 - Limited - Enabled)
UpdatusUser (S-1-5-21-332784963-1637011244-2087319766-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG AntiVirus Free Edition (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.24 - GIGABYTE)
15354 Webcam Live (HKLM-x32\...\{3AC11667-B4DD-4984-AD0B-B2D4E40AB573}) (Version: 1.2.0.0 - )
ACDSee (HKLM-x32\...\ACDSee) (Version:  - )
Adobe Acrobat 6.0 CE Professional (HKLM-x32\...\{AC76BA86-1033-C470-7760-CE0000000001}) (Version: 006.000.000 - Adobe Systems)
Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.182 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.182 - Adobe Systems Incorporated)
Adobe Photoshop CS (HKLM-x32\...\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}) (Version: CS - Adobe Systems, Inc.)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Aktualizace NVIDIA 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
Any Video Converter 2.6.7 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
Ashampoo GetBack Photo v.1.0.1 (HKLM-x32\...\Ashampoo GetBack Photo_is1) (Version: 1.0.1 - Ashampoo GmbH & Co. KG)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.4.4 - Atheros Communications Inc.)
Audio Record Wizard (HKLM-x32\...\Audio Record Wizard) (Version: 6.92 - NowSmart)
AutoGreen B12.0206.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE)
AutoGreen B12.0206.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
AVG (Version: 16.51.7497 - AVG Technologies) Hidden
AVG 2016 (Version: 16.0.4545 - AVG Technologies) Hidden
AVG Protection (HKLM\...\AVG) (Version: 2016.51.7497 - AVG Technologies)
Avi to Dvd Free Converter v6.7.0.225 (HKLM-x32\...\Avi to Dvd Free Converter_is1) (Version:  - AviToDvdFree.com Inc.)
AVS Video Editor 6.5 (HKLM-x32\...\AVS Video Editor_is1) (Version: 6.5.1.246 - Online Media Technologies Ltd.)
Balíček ovladače systému Windows - Nokia Modem  (02/25/2011 4.7) (HKLM\...\E0AC723A3DE3A04256288CADBBB011B112AED454) (Version: 02/25/2011 4.7 - Nokia)
Balíček ovladače systému Windows - Nokia Modem  (02/25/2011 7.01.0.9) (HKLM\...\72A50F48CC5601190B9C4E74D81161693133E7F7) (Version: 02/25/2011 7.01.0.9 - Nokia)
Balíček ovladače systému Windows - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
CCleaner (HKLM\...\CCleaner) (Version: 5.15 - Piriform)
ConvertHelper 3.1.1 (HKLM\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF52}}_is1) (Version:  - DownloadHelper)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Easy Thumbnails (Remove only) (HKLM-x32\...\Easy Thumbnails_is1) (Version: 2.9 - Fookes Software)
Easy Tune 6 B12.0402.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B12.0402.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Express Burn Disc Burning Software (HKLM-x32\...\ExpressBurn) (Version: 4.76 - NCH Software)
FMW 1 (Version: 1.62.2 - AVG Technologies) Hidden
FormatFactory 3.2.1.0 (HKLM-x32\...\FormatFactory) (Version: 3.2.1.0 - Free Time)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Free Video Flip and Rotate version 2.1.5.1212 (HKLM-x32\...\Free Video Flip and Rotate_is1) (Version: 2.1.5.1212 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.87 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.7210.1528 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
HP LaserJet Pro MFP M125-M126 (HKLM-x32\...\{c65448bc-e467-4ec7-b4a5-246697f52957}) (Version: 8.0.14087.1054 - Hewlett-Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
hpbDSService (x32 Version: 002.002.07399 - Hewlett-Packard) Hidden
hpbM126DSService (x32 Version: 001.001.08254 - Hewlett-Packard) Hidden
HPDXP (x32 Version: 3.0.26.59 - HP) Hidden
HPLJDXPHelper (x32 Version: 060.048.005 - HP) Hidden
HPLJProMFPM125M126 (HKLM-x32\...\{B2894225-82C7-4006-B243-6272589993B2}) (Version: 1.00.0000 - Hewlett-Packard)
HPLJUTCore (x32 Version: 008.000.0001 - HP) Hidden
HPLJUTM125_126 (x32 Version: 008.000.0001 - HP) Hidden
hppLaserJetService (x32 Version: 009.033.00905 - Hewlett-Packard) Hidden
hppM125LaserJetService (x32 Version: 001.032.00682 - Hewlett-Packard) Hidden
hpStatusAlerts (x32 Version: 080.040.00171 - Hewlett Packard) Hidden
hpStatusAlertsM125-M126 (x32 Version: 080.046.00113 - Hewlett-Packard) Hidden
ICQ7M (HKLM-x32\...\{781B39EC-2E18-41FC-9B00-B84E4FFCA85F}) (Version: 7.8 - ICQ)
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1342.2) (HKLM\...\{302600C1-6BDF-4FD1-1311-148929CC1385}) (Version: 3.1.1311.0402 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)
LJDXPHelperUI (x32 Version: 060.048.005 - HP) Hidden
Microsoft .NET Framework 4.5.2 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 2016 pro domácnosti - cs-cz (HKLM\...\HomeStudentRetail - cs-cz) (Version: 16.0.6568.2036 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2012 (HKLM-x32\...\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}) (Version: 11.0.51108 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 45.0.1 (x86 cs) (HKLM-x32\...\Mozilla Firefox 45.0.1 (x86 cs)) (Version: 45.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.0.1.5918 - Mozilla)
Mozilla Thunderbird 38.6.0 (x86 cs) (HKLM-x32\...\Mozilla Thunderbird 38.6.0 (x86 cs)) (Version: 38.6.0 - Mozilla)
Mp3 Knife 3.5 (HKLM-x32\...\Mp3 Knife_is1) (Version:  - )
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Nero 7 Ultra Edition (HKLM-x32\...\{D98C0C51-F9BB-4EE4-B791-22BF6EE31029}) (Version: 7.02.8633 - Nero AG)
Nokia Connectivity Cable Driver (HKLM-x32\...\{A57025CC-5F2E-4D01-B387-06DB10500D43}) (Version: 7.1.78.0 - Nokia)
Nokia PC Suite (HKLM-x32\...\Nokia PC Suite) (Version: 7.1.180.94 - Nokia)
Nokia PC Suite (x32 Version: 7.1.180.94 - Nokia) Hidden
Nokia Software Updater (HKLM-x32\...\{7130468A-F53F-4698-8C09-A339EA3B05E6}) (Version: 3.0.655 - Nokia Corporation)
NVIDIA Ovladač 3D Vision 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.2.23.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.2.23.3 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 280.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 280.19 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6528.1017 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.6528.1017 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6528.1017 - Microsoft Corporation) Hidden
ON_OFF Charge B11.1102.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
Ontrack EasyRecovery Professional (HKLM-x32\...\{668CC71A-C2AD-4D56-866D-CF300BD1D5BE}_is1) (Version: 11.0.2.0 - Kroll Ontrack Inc.)
Ovládací panel NVIDIA 311.06 (Version: 311.06 - NVIDIA Corporation) Hidden
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - PTB (Version: 11.0.51108 - Microsoft Corporation) Hidden
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB (x32 Version: 11.0.51108 - Microsoft Corporation) Hidden
Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC)
PC Connectivity Solution (HKLM-x32\...\{644F4910-E812-49AD-93EC-86828CB81A0D}) (Version: 12.0.27.0 - Nokia)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Photo to Sketch 4.0 (HKLM-x32\...\{42CC40A6-332E-4F53-8FB8-BD6D77D764FB}_is1) (Version:  - Thinker Software, Inc.)
PhotoShop Cs6 2015 PRO Cs6 2015 (HKLM-x32\...\PhotoShop Cs6 2015 PRO Cs6 2015) (Version:  - )
Pin It (HKLM-x32\...\Pin It_is1) (Version: 0.0.4 - Pinterest)
PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version:  - )
POP Peeper (HKLM-x32\...\POP Peeper) (Version:  - Mortal Universe)
PrimoPDF -- brought to you by Nitro PDF Software (HKLM-x32\...\PrimoPDF) (Version: 5 - Nitro PDF Software)
PSPad editor (HKLM-x32\...\PSPad editor_is1) (Version:  - Jan Fiala)
QuickTime (HKLM-x32\...\QuickTime) (Version:  - )
RajcePhotoDownloader (HKLM-x32\...\RajcePhotoDownloader_is1) (Version: verze - Rajce.net)
rajče průvodce verze 1.59.42.257 (HKLM-x32\...\rajče.net_is1) (Version:  - rajče.net)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6554 - Realtek Semiconductor Corp.)
RecordPad Sound Recorder (HKLM-x32\...\Recordpad) (Version: 5.28 - NCH Software)
Recuva (HKLM\...\Recuva) (Version: 1.40 - Piriform)
Samsung Digital Camera (HKLM-x32\...\{8B79684C-6DAC-438C-8F30-10DF65C2068F}) (Version:  - )
Samsung Master (HKLM-x32\...\{AEC0CEBC-0FC7-4716-8222-1C4A742719B1}) (Version: 1.0.43 - Samsung)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.112 - Skype Technologies S.A.)
Splashtop Connect for Firefox (HKLM-x32\...\{EF25F71D-F3E8-42A3-8B5A-DBF83C4B942F}) (Version: 2.0.5.2 - Splashtop Inc.)
Splashtop Connect for IE (HKLM-x32\...\{E2B086BD-75A9-45D1-A675-151624B259A1}) (Version: 2.0.5.1 - Splashtop Inc.)
SSD Fresh (HKLM-x32\...\SSD Fresh_is1) (Version: 2015 - Abelssoft)
Sweet Home 3D version 1.5.1 (HKLM-x32\...\Sweet Home 3D_is1) (Version:  - eTeks)
TeamViewer 5 (HKLM-x32\...\TeamViewer 5) (Version: 5.1.13999  - TeamViewer GmbH)
Total Commander 64-bit (Remove or Repair) (HKLM-x32\...\Totalcmd64) (Version: 8.52a - Ghisler Software GmbH)
Ulead GIF Animator 5 (HKLM-x32\...\{8AF3E926-ED59-11D4-A44B-0000E86D2305}) (Version:  - )
Unlocker 1.9.1-x64 (HKLM\...\Unlocker) (Version: 1.9.1 - Cedrick Collomb)
VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 3.24 - NCH Software)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VueScan (HKLM\...\VueScan) (Version:  - )
WavePad Sound Editor (HKLM-x32\...\WavePad) (Version: 6.02 - NCH Software)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Movie Maker (HKLM\...\Windows Movie Maker) (Version: 6.0.6002.18005 - Microsoft Corporation)
Windows Movie Maker 2.6 (HKLM-x32\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version:  - )
WinZip (HKLM-x32\...\WinZip) (Version:  10.0  (6698) - WinZip Computing LP)
XAMPP 1.8.1 (HKLM-x32\...\xampp) (Version:  - )
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x64) - RUS (Version: 11.0.51108 - Microsoft Corporation) Hidden
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS (x32 Version: 11.0.51108 - Microsoft Corporation) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {10A3E9AE-611C-4FA0-8486-306988264805} - System32\Tasks\{F960936F-99FA-4864-9D7F-E8E59327B0DF} => pcalua.exe -a "C:\Program Files (x86)\Adobe\Acrobat 6.0 CE\Acrobat\Acrobat.exe" -d C:\Windows\system32
Task: {1A1A7673-427A-4F0B-A0BB-90E89A2C3C06} - System32\Tasks\{526289ED-4436-4616-8C50-F6EC2D029368} => C:\xampplite\xampp-control.exe
Task: {2338C66D-F548-43CD-8071-5D153D153E2C} - System32\Tasks\{F29D9CB9-AA93-457E-B3C8-BB5055F5B529} => C:\Program Files (x86)\Shai Raiten\Bluetooth Radar\Blue Radar.exe
Task: {2BD1970F-A108-4D7C-9EF7-59B94C04E226} - System32\Tasks\{D939A442-ADFF-41C8-8AA5-3985439E57EF} => pcalua.exe -a E:\DECKO\download\ivt2.6\setup_.exe -d e:\DECKO\download\ivt2.6
Task: {2DFA0D27-9E1B-4556-877B-F3561739644F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {32790EA5-1DD8-4D25-B482-8F17136586EB} - System32\Tasks\{F5860B7D-827F-4176-AC3F-2F0E73D59142} => pcalua.exe -a D:\Software\Win64\instmsiw.exe -d D:\Software\Win64
Task: {37372499-4F7F-4F9F-882C-7389451CD55D} - System32\Tasks\{FE8FAAFA-71ED-478A-9DB5-FDC7B7A7FEE9} => pcalua.exe -a "C:\Program Files\totalcmd\TOTALCMD.EXE" -d "C:\Program Files\totalcmd"
Task: {3B6C3985-23A1-4DD0-BACF-BE64C0767572} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {3BD125A8-DF51-4195-954B-2F642AD0CEE3} - System32\Tasks\{4E39091A-FD7E-4ED6-9408-0AEA3C10E58B} => C:\Program Files (x86)\Shai Raiten\Bluetooth Radar\Blue Radar.exe
Task: {4932AFB8-4F79-42AC-89E0-9E4C6FD41F68} - System32\Tasks\PinItAutoUpdate => C:\Program Files (x86)\Pinterest\Pin It\AutoUpdater.exe [2013-10-17] ()
Task: {4FB20027-5982-41E6-8BDC-BD5F6236A5ED} - System32\Tasks\{ED66DB40-35C5-4363-ADA1-8B3612F61060} => pcalua.exe -a D:\Software\setup.exe -d D:\Software
Task: {5E547704-E50D-4286-A1BC-F67BF2AD6633} - System32\Tasks\{3EBDD4FA-A222-4488-9743-56B3D94B8DD2} => pcalua.exe -a "C:\Program Files\totalcmd\tcuninst.exe"
Task: {63470F75-5830-4B20-9B64-B7B73C62802E} - System32\Tasks\{51B48FED-EE84-43BA-9E9E-77665D0A7BEE} => C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleil.exe
Task: {82078B98-4732-47BC-AB47-9412BEA768F2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-332784963-1637011244-2087319766-1000UA => C:\Users\oem\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {871E9492-D650-4F78-AE61-27B22055AFF4} - System32\Tasks\{7CC2DC21-CCA5-4CAA-8A96-6E2BD4D8A6B0} => pcalua.exe -a D:\Software\Win64\Inst.exe -d D:\Software\Win64
Task: {91C5141D-F23D-4163-8CF6-A92CD5D563BE} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-02-28] (Microsoft Corporation)
Task: {93A1B341-6DBA-456E-9F9E-D263F6A0E96B} - System32\Tasks\{3E680800-548C-4269-B0DE-F5E11BDAFF43} => pcalua.exe -a D:\Software\Win64\instmsia.exe -d D:\Software\Win64
Task: {AFEDC2C2-1BCF-4F9D-8EEA-7FAC046A95D5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {B197FE0D-A804-4808-A38D-A21A4B8C819F} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe
Task: {B697F5BB-E281-4D0B-96FE-68F70268F940} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-332784963-1637011244-2087319766-1000Core => C:\Users\oem\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {C63A3707-7DA7-4DB1-8B2B-5903C23716CD} - System32\Tasks\1215avUpdateInfo => C:\ProgramData\Avg_Update_1215av\1215av_AVG-Secure-Search-Update.exe
Task: {C80FB4E0-2B6D-4A7C-8574-25FE4DC23E7F} - System32\Tasks\{679222B4-34F0-4452-B272-4A16EC9E1FB0} => pcalua.exe -a "C:\Program Files\totalcmd\TOTALCMD.EXE"
Task: {D9BE4571-C3D4-483F-9E8A-6C4D8F9922C8} - System32\Tasks\HPLJCustParticipation => C:\Program Files (x86)\HP\HPLJUT\HPLJUTSCH.exe [2013-01-28] (Hewlett Packard)
Task: {E4A2835F-AFFE-451E-AE9A-4B43368A7492} - System32\Tasks\{9F9AEBA5-EB03-45C8-BEBB-9F06967D703E} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleil.exe"
Task: {E6E68923-9F55-48F6-BFAA-AE7A0019A1ED} - System32\Tasks\0316avUpdateInfo => C:\ProgramData\Avg_Update_0316av\0316av_AVG-Secure-Search-Update.exe
Task: {E9F8E318-2139-4D1F-BB30-C08AC3818631} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-12] (Adobe Systems Incorporated)
Task: {ECBD36B5-85E9-4BAF-9DAE-2E9C1770DF47} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-02-12] (Piriform Ltd)
Task: {ED257F3B-93AE-4D32-B73F-B0640E3F2E4D} - System32\Tasks\KMS Activation for Office => C:\Windows\KMSAct.exe
Task: {F8BC7266-4B68-4283-99B1-18717292D58A} - System32\Tasks\{E6B555E9-6027-41A3-992B-B4C515FEE89F} => C:\xampplite\xampp-control.exe
Task: {FB627E19-9F3E-40F0-A0A0-82B650E65B65} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-02-28] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\0316avUpdateInfo.job => C:\ProgramData\Avg_Update_0316av\0316av_AVG-Secure-Search-Update.exe
Task: C:\Windows\Tasks\1215avUpdateInfo.job => C:\ProgramData\Avg_Update_1215av\1215av_AVG-Secure-Search-Update.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-332784963-1637011244-2087319766-1000Core.job => C:\Users\oem\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-332784963-1637011244-2087319766-1000UA.job => C:\Users\oem\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Beda\Desktop\iexplorer.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> "hxxp://trustedsurf.com/?ssid=1458582297&a=1040860&src=sh&uuid=0598314b-edbe-4fc9-82de-09b8686d4637"
ShortcutWithArgument: C:\Users\Beda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> "hxxp://trustedsurf.com/?ssid=1458582297&a=1040860&src=sh&uuid=0598314b-edbe-4fc9-82de-09b8686d4637"
ShortcutWithArgument: C:\Users\Beda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> "hxxp://trustedsurf.com/?ssid=1458582297&a=1040860&src=sh&uuid=0598314b-edbe-4fc9-82de-09b8686d4637"
ShortcutWithArgument: C:\Users\Beda\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> "hxxp://trustedsurf.com/?ssid=1458582297&a=1040860&src=sh&uuid=0598314b-edbe-4fc9-82de-09b8686d4637"
ShortcutWithArgument: C:\Users\Beda\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> "hxxp://trustedsurf.com/?ssid=1458582297&a=1040860&src=sh&uuid=0598314b-edbe-4fc9-82de-09b8686d4637"

==================== Loaded Modules (Whitelisted) ==============

2012-11-18 20:19 - 2013-01-18 16:00 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-09-12 11:44 - 2011-02-28 23:37 - 00095008 _____ () C:\Windows\System32\Primomonnt.dll
2016-03-04 11:34 - 2016-02-28 02:20 - 00173248 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
2012-06-26 12:11 - 2012-06-26 12:11 - 02302040 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\QtCore4.dll
2012-06-26 12:11 - 2012-06-26 12:11 - 08197208 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\QtGui4.dll
2012-06-26 12:11 - 2012-06-26 12:11 - 00345688 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\QtXml4.dll
2012-06-26 12:10 - 2012-06-26 12:10 - 00202328 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\imageformats\qjpeg4.dll
2012-06-26 12:10 - 2012-06-26 12:10 - 00027736 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\imageformats\qsvg4.dll
2012-06-26 12:11 - 2012-06-26 12:11 - 00282200 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\QtSvg4.dll
2015-10-22 08:32 - 2015-10-22 08:24 - 40500224 _____ () C:\Program Files (x86)\AVG\UiDll\2171\libcef.dll
2012-08-23 11:46 - 2011-12-16 09:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2016-03-15 19:00 - 2016-03-08 03:48 - 01676440 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.87\libglesv2.dll
2016-03-15 19:00 - 2016-03-08 03:48 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.87\libegl.dll
2016-03-10 20:49 - 2016-03-08 12:16 - 17541312 _____ () C:\Users\Beda\AppData\Local\Google\Chrome\User Data\PepperFlash\21.0.0.182\pepflashplayer.dll
2016-03-12 01:00 - 2016-03-12 01:00 - 19397824 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_182.dll
2015-09-09 18:57 - 2004-02-03 09:47 - 00708608 _____ () C:\Program Files (x86)\Adobe\Photoshop CS\WRServices.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:054B9966 [254]
AlternateDataStreams: C:\ProgramData\TEMP:DBC416F8 [128]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-332784963-1637011244-2087319766-1005\...\100sexlinks.com -> 100sexlinks.com

There are 4788 more sites.


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2015-01-30 08:57 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-332784963-1637011244-2087319766-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\Beda\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 213.46.172.36 - 213.46.172.37
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: ServiceLayer => 3
MSCONFIG\Services: TeamViewer5 => 2
MSCONFIG\startupreg: BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} => "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: NSU_agent => "C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe"
MSCONFIG\startupreg: PAC7302_Monitor => C:\Windows\PixArt\PAC7302\Monitor.exe
MSCONFIG\startupreg: PC Suite Tray => "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
MSCONFIG\startupreg: STCAgent => "C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe"
MSCONFIG\startupreg: ZyngaGamesAgent => "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{87A635B0-5E67-4971-9FAE-D224796CC495}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{02CE43D8-A3D2-412B-AF7D-E2A557C855A9}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{C18B58FC-DFF0-4096-8658-6484B1707C9D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{1BC83AB4-ACB2-4525-9776-229176D0A944}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{A4C41CB7-9AA3-4F4A-89DD-6F04D608D731}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [TCP Query User{7B96D803-6BA9-4590-AC9E-1E0632CFE07E}C:\program files\totalcmd\totalcmd.exe] => (Allow) C:\program files\totalcmd\totalcmd.exe
FirewallRules: [UDP Query User{7945B713-DB7C-49CC-B97B-EC71BD03ED96}C:\program files\totalcmd\totalcmd.exe] => (Allow) C:\program files\totalcmd\totalcmd.exe
FirewallRules: [TCP Query User{BBCFAF90-4AAD-4E32-A358-C0D0527E04D8}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{CA51FF37-8160-4C31-A6D2-30BE062664AB}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{31332610-5F75-4B08-AFA0-490D26F15C61}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{8BFDB699-6E92-4292-BD9A-8B050188CCB5}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [TCP Query User{50D96520-44F7-432F-B8D6-D0AE987AE7BF}C:\xampp\filezillaftp\filezillaserver.exe] => (Allow) C:\xampp\filezillaftp\filezillaserver.exe
FirewallRules: [UDP Query User{CB5B4826-57CB-4BDB-8C92-20A89B3193F1}C:\xampp\filezillaftp\filezillaserver.exe] => (Allow) C:\xampp\filezillaftp\filezillaserver.exe
FirewallRules: [TCP Query User{0F307ADB-7612-4F67-A218-6EB4C2A6368F}C:\wamp\bin\apache\apache2.2.21\bin\httpd.exe] => (Allow) C:\wamp\bin\apache\apache2.2.21\bin\httpd.exe
FirewallRules: [UDP Query User{52AF21A5-DB67-4498-B71A-5BBB59EFD10F}C:\wamp\bin\apache\apache2.2.21\bin\httpd.exe] => (Allow) C:\wamp\bin\apache\apache2.2.21\bin\httpd.exe
FirewallRules: [TCP Query User{6827D66F-97E2-4AAF-95D3-E9BC5B2E0583}C:\xampplite\apache\bin\httpd.exe] => (Allow) C:\xampplite\apache\bin\httpd.exe
FirewallRules: [UDP Query User{A1084A03-8BA4-48C1-B86F-E2D3EFEC2EBA}C:\xampplite\apache\bin\httpd.exe] => (Allow) C:\xampplite\apache\bin\httpd.exe
FirewallRules: [{1279A542-717F-4632-BD80-BB53F5FE3435}] => (Allow) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer.exe
FirewallRules: [{61F75D68-F7A6-4CB6-9166-7B3D7F963EBE}] => (Allow) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer.exe
FirewallRules: [{25128289-1D92-42EC-AA25-56CEBFA4D67D}] => (Allow) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
FirewallRules: [{55807B71-13BC-4015-BBA1-1C1C22C0F6EC}] => (Allow) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
FirewallRules: [{3BD49DA4-E131-4C1F-9919-B5C8F0CA9E37}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{7FFB9EBB-D0AC-4BA7-AA05-6CDEC9259949}] => (Allow) LPort=2869
FirewallRules: [{9FB9E3C3-BD4F-42ED-9B78-3ED70924BB35}] => (Allow) LPort=1900
FirewallRules: [{CC2589B4-72F4-4242-9123-E429BC2775FB}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{F596343C-91B2-484A-810F-204E1505238E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{583CA384-0662-4FE8-92E7-41732D2AAB7C}] => (Allow) C:\Program Files (x86)\ICQ7M\ICQ.exe
FirewallRules: [{9358D7FA-2055-46C9-B243-610372393AC2}] => (Allow) C:\Program Files (x86)\ICQ7M\ICQ.exe
FirewallRules: [{B55BA1C4-F175-46D1-B5B0-46D51D2683AB}] => (Allow) C:\Program Files (x86)\ICQ7M\ICQ.exe
FirewallRules: [{23A61B90-1C3E-4892-8C86-4F26C36DD6B9}] => (Allow) C:\Program Files (x86)\ICQ7M\ICQ.exe
FirewallRules: [VirtualPC-In-UDP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-UDP-2] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-TCP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [TCP Query User{2A2795BF-9AAC-420C-9197-78BA7A6CC4DD}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [UDP Query User{6DAA31BE-E7EB-4D99-A592-4D29BCB152EB}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [TCP Query User{EAD4A945-C6EE-4B1A-AEE5-E44018880C9E}C:\program files (x86)\nero\nero 7\nero home\nerohome.exe] => (Allow) C:\program files (x86)\nero\nero 7\nero home\nerohome.exe
FirewallRules: [UDP Query User{5492B9F8-376B-4B73-B7CE-AD8C17FFA9B4}C:\program files (x86)\nero\nero 7\nero home\nerohome.exe] => (Allow) C:\program files (x86)\nero\nero 7\nero home\nerohome.exe
FirewallRules: [{363C5DF0-615C-4E31-9BA6-7D2FD64C18B2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0B27C2F6-2E24-4DD9-9AA3-F8FE50EC8C80}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E316C097-5AD0-494F-AAD1-43D41CE2802C}] => (Allow) C:\Users\oem\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TIUGGTUH\VueScan_(64-bit)_v.9.1.15_keygen_downloader.exe
FirewallRules: [{523C643D-4F9D-4D4B-A380-8501063B2C4B}] => (Allow) C:\Users\oem\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TIUGGTUH\VueScan_(64-bit)_v.9.1.15_keygen_downloader.exe
FirewallRules: [{6386D9D9-9315-416D-B59B-7E1195E9572F}] => (Allow) C:\Program Files (x86)\YourFileDownloader\YourFileDownloader.exe
FirewallRules: [{EAD372CB-0C34-4670-A51D-808386E75109}] => (Allow) C:\Program Files (x86)\YourFileDownloader\YourFileDownloader.exe
FirewallRules: [{8C9DE555-CB20-4087-9AC0-10ED399DE0F3}] => (Allow) C:\Program Files (x86)\YourFileDownloader\Downloader.exe
FirewallRules: [{3A312B93-3C3C-4193-84A3-C12B643FC242}] => (Allow) C:\Program Files (x86)\YourFileDownloader\Downloader.exe
FirewallRules: [TCP Query User{8A0DC20E-DCB9-4BF7-8562-F57328EC73EF}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{5021E7F1-1848-4B9E-9B28-E3AF3DC0EA2A}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{72D948BD-AECA-4CAC-8625-9698593B01D6}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe
FirewallRules: [UDP Query User{50729BB2-7DC8-4279-B8D9-4D030871FED4}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe
FirewallRules: [TCP Query User{C90D0CFD-CD90-44FD-8C69-1C38210811EE}C:\users\oem\appdata\local\temp\kmsact\pack\keygen\keygen.exe] => (Allow) C:\users\oem\appdata\local\temp\kmsact\pack\keygen\keygen.exe
FirewallRules: [UDP Query User{4BB669F2-F842-42E1-A3AB-8ABC04A1AFF5}C:\users\oem\appdata\local\temp\kmsact\pack\keygen\keygen.exe] => (Allow) C:\users\oem\appdata\local\temp\kmsact\pack\keygen\keygen.exe
FirewallRules: [{A4E9E9B5-D579-415E-92C3-93CDED18CAE5}] => (Allow) C:\Users\oem\AppData\Local\Temp\nsn21D5.tmp\Installer-10547780.exe
FirewallRules: [{A7BE4E7E-A5D7-41AA-9EFF-8E2BE7044B2C}] => (Allow) C:\Users\oem\AppData\Local\Temp\nsn21D5.tmp\Installer-10547780.exe
FirewallRules: [{A918030C-45B3-4482-BBB2-D5011DE7BFAE}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{F1BACDB5-863A-4EDD-BFC5-D6C1D1EB8BBD}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{8B73C9CD-7FCF-4A60-925E-5CE5E32484B1}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{4CD7BAD7-5BB9-43A7-BCAE-AB07F9D52CD7}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{6E548D89-BB0E-4A75-AABA-385AEC9CE1DA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BB747E01-EB98-4073-9FAA-AE99491D1B17}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{D57E51E3-45D5-4017-8343-3161D343BFDE}C:\program files (x86)\nero\nero 7\nero showtime\showtime.exe] => (Allow) C:\program files (x86)\nero\nero 7\nero showtime\showtime.exe
FirewallRules: [UDP Query User{A20A8F74-7EA8-467E-AEAB-CBA9DDFF8557}C:\program files (x86)\nero\nero 7\nero showtime\showtime.exe] => (Allow) C:\program files (x86)\nero\nero 7\nero showtime\showtime.exe
FirewallRules: [{CE0A262D-E98C-471D-9DA9-9ECE663A82FF}] => (Allow) C:\Program Files (x86)\HP\HP LaserJet Pro MFP M125-M126\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{5BC8C9F0-4636-4154-9CDC-A6FD5BD087C7}] => (Allow) C:\Program Files (x86)\HP\HP LaserJet Pro MFP M125-M126\bin\EWSProxy.exe
FirewallRules: [{7922E9EA-E2CB-481B-97B0-8F80F91A12E8}] => (Allow) C:\Users\oem\AppData\Local\Temp\7zS030D\HPDiagnosticCoreUI.exe
FirewallRules: [{1A0D49AF-75BC-4EA8-9D45-335ADE9FCFCA}] => (Allow) C:\Users\oem\AppData\Local\Temp\7zS030D\HPDiagnosticCoreUI.exe
FirewallRules: [{5616035D-9028-4D23-9450-EF9C8631CADA}] => (Allow) C:\Users\oem\AppData\Local\Microsoft\OneDrive\OneDrive.exe
FirewallRules: [{DA8C4C12-152E-4624-9961-70EF50438E86}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe
FirewallRules: [{51562B16-5C05-454F-8771-CC3692AD0618}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe
FirewallRules: [{349A57B3-8889-4245-BAF7-FA5C8DD52E5C}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe
FirewallRules: [{2A1DBF7F-498F-4381-81C8-D2F4404A39F0}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe
FirewallRules: [{605BF238-8879-45EB-A777-6AE97D546B40}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe
FirewallRules: [{71DF8BF8-02C3-4DBA-B463-60E4C87F56C6}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe
FirewallRules: [{22FFF7F4-484F-4F92-937B-36824F0158B1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{569E23B7-607F-44BE-BD02-017AE2D464B1}] => (Allow) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleil_.exe
FirewallRules: [{2F55514C-160E-4783-9C12-848823370EDE}] => (Allow) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleil_.exe

==================== Restore Points =========================

19-03-2016 10:50:09 Installed Bluetooth Radar
19-03-2016 11:13:29 Installed WIDCOMM BTW Development Kit
19-03-2016 11:16:06 Removed Bluetooth Radar
19-03-2016 11:18:53 Installed WIDCOMM BTW Development Kit
19-03-2016 11:35:47 Removed WIDCOMM BTW Development Kit
19-03-2016 11:47:35 Installed Bluetooth Software
19-03-2016 11:48:06 Instalace balíčku ovladače zařízení: Broadcom
19-03-2016 11:48:16 Instalace balíčku ovladače zařízení: Broadcom
19-03-2016 11:48:32 Instalace balíčku ovladače zařízení: Broadcom Porty (COM a LPT)
19-03-2016 11:48:38 Instalace balíčku ovladače zařízení: Broadcom Modemy
19-03-2016 11:48:44 Instalace balíčku ovladače zařízení: Broadcom Modemy
19-03-2016 11:48:54 Instalace balíčku ovladače zařízení: Broadcom Modemy
19-03-2016 11:49:06 Instalace balíčku ovladače zařízení: Broadcom Síťové adaptéry
19-03-2016 11:49:12 Instalace balíčku ovladače zařízení: Broadcom Corp. Řadiče zvuku, videa a her
19-03-2016 11:49:18 Instalace balíčku ovladače zařízení: WIDCOMM Zařízení pro zpracování obrázků
19-03-2016 12:07:08 Removed AirLive BT-201USB /BT-202USB
19-03-2016 12:38:24 Installed Bluetooth Radar
19-03-2016 12:44:19 Installed Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology
19-03-2016 13:09:29 Installed Bluetooth Win7 Suite (64).
20-03-2016 19:00:09 Windows Zálohování
21-03-2016 18:28:20 Installed Bluesoleil2.6.0.8 Release 070517
21-03-2016 19:20:04 Windows Update
21-03-2016 19:20:42 Windows Update
21-03-2016 19:22:23 Removed Bluesoleil2.6.0.8 Release 070517
21-03-2016 19:22:49 Removed Bluetooth Radar
21-03-2016 19:23:06 Removed Bluetooth Win7 Suite (64).

==================== Faulty Device Manager Devices =============

Name: Adaptér tunelového režimu Microsoft Teredo
Description: Adaptér tunelového režimu Microsoft Teredo
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/23/2016 09:50:58 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/22/2016 07:49:10 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/22/2016 04:10:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/22/2016 12:16:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Photoshop.exe, verze: 8.0.0.0, časové razítko: 0x401f80df
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.19160, časové razítko: 0x56bcd51f
Kód výjimky: 0xc0000005
Posun chyby: 0x0002e1d6
ID chybujícího procesu: 0x14b0
Čas spuštění chybující aplikace: 0xPhotoshop.exe0
Cesta k chybující aplikaci: Photoshop.exe1
Cesta k chybujícímu modulu: Photoshop.exe2
ID zprávy: Photoshop.exe3

Error: (03/22/2016 12:16:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Photoshop.exe, verze: 8.0.0.0, časové razítko: 0x401f80df
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.19160, časové razítko: 0x56bcd51f
Kód výjimky: 0xc0000005
Posun chyby: 0x00033308
ID chybujícího procesu: 0x14b0
Čas spuštění chybující aplikace: 0xPhotoshop.exe0
Cesta k chybující aplikaci: Photoshop.exe1
Cesta k chybujícímu modulu: Photoshop.exe2
ID zprávy: Photoshop.exe3

Error: (03/22/2016 10:09:55 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program RSITx64.exe verze 0.0.0.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 1a90

Čas spuštění: 01d1841a3009feb1

Čas ukončení: 15

Cesta k aplikaci: E:\DECKO\download\RSITx64.exe

ID hlášení:

Error: (03/22/2016 10:09:34 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program RSITx64.exe verze 0.0.0.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: e04

Čas spuštění: 01d1841a1d51a97a

Čas ukončení: 0

Cesta k aplikaci: E:\DECKO\download\RSITx64.exe

ID hlášení:

Error: (03/22/2016 09:50:10 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/21/2016 07:56:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/21/2016 07:44:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (03/23/2016 09:51:17 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba NVIDIA Update Service Daemon neuspěla při spuštění v důsledku následující chyby: 
%%1069

Error: (03/23/2016 09:51:17 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Služba nvUpdatusService se nemohla přihlásit jako .\UpdatusUser s aktuálně konfigurovaným heslem z důvodu následující chyby:
%%1330

Chcete-li zajistit správnou konfiguraci služby, použijte modul snap-in Služby konzoly Microsoft Management Console (MMC).

Error: (03/23/2016 09:49:16 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo: 
BTHidMgr

Error: (03/23/2016 09:49:11 AM) (Source: BTHUSB) (EventID: 5) (User: )
Description: Ovladač Bluetooth očekával událost HCI s určitou velikostí, ale neobdržel ji.

Error: (03/23/2016 09:49:11 AM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: NT AUTHORITY)
Description: Službě Plánovač úloh se při spuštění nepodařilo načíst úlohy. Další údaje: Hodnota chyby: 2147549183

Error: (03/23/2016 09:49:07 AM) (Source: BTHUSB) (EventID: 5) (User: )
Description: Ovladač Bluetooth očekával událost HCI s určitou velikostí, ale neobdržel ji.

Error: (03/23/2016 09:47:35 AM) (Source: BTHUSB) (EventID: 5) (User: )
Description: Ovladač Bluetooth očekával událost HCI s určitou velikostí, ale neobdržel ji.

Error: (03/22/2016 09:17:20 PM) (Source: BTHUSB) (EventID: 5) (User: )
Description: Ovladač Bluetooth očekával událost HCI s určitou velikostí, ale neobdržel ji.

Error: (03/22/2016 08:18:28 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Byla přijata následující výstraha o závažné chybě: 20.

Error: (03/22/2016 08:02:49 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Byla přijata následující výstraha o závažné chybě: 20.


CodeIntegrity:
===================================
  Date: 2016-03-19 12:04:37.847
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\btwusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-19 12:04:37.815
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\btwusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-19 11:58:37.799
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\btkrnl.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-19 11:58:37.752
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\btkrnl.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-19 11:54:40.362
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\btwusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-19 11:54:40.337
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\btwusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-19 11:49:34.092
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\btwusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-19 11:49:34.065
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\btwusb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-19 11:49:25.470
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\btkrnl.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-19 11:49:25.439
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\btkrnl.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-2400 CPU @ 3.10GHz
Percentage of memory in use: 30%
Total physical RAM: 8139.59 MB
Available physical RAM: 5650.41 MB
Total Virtual: 16277.39 MB
Available Virtual: 11622.32 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.59 GB) (Free:36.8 GB) NTFS
Drive e: (Pevný disk) (Fixed) (Total:698.63 GB) (Free:129.43 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 9E7C523B)
Partition 1: (Active) - (Size=203 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.6 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: DB8B4423)
Partition 1: (Not Active) - (Size=698.6 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================