﻿Additional scan result of Farbar Recovery Scan Tool (x86) Version:05-03-2016 01
Ran by Adam (2016-03-27 20:46:09)
Running from C:\Users\Adam\Desktop
Microsoft Windows 10 Home Version 1511 (X86) (2015-11-19 23:20:25)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Adam (S-1-5-21-3409903947-2537725115-4003705135-1000 - Administrator - Enabled) => C:\Users\Adam
Administrator (S-1-5-21-3409903947-2537725115-4003705135-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3409903947-2537725115-4003705135-503 - Limited - Disabled)
Guest (S-1-5-21-3409903947-2537725115-4003705135-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET Smart Security 9.0.318.22 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 9.0.374.1 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personálny firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Slovak (HKLM\...\{AC76BA86-7AD7-1051-7B44-AC0F074E4100}) (Version: 15.010.20060 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 21.0.0.197 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM\...\Adobe Shockwave Player) (Version: 12.2.2.172 - Adobe Systems, Inc.)
AIMP (HKLM\...\AIMP) (Version: v4.01.1705, 18.03.2016 - AIMP DevTeam)
Aktualizácie NVIDIA 17.12.8 (Version: 17.12.8 - NVIDIA Corporation) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.15 - Piriform)
Defraggler (HKLM\...\Defraggler) (Version: 2.21 - Piriform)
ESET Smart Security (HKLM\...\{EDD088BE-E6F8-40A6-9B79-BC40F70B03EB}) (Version: 9.0.318.22 - ESET, spol. s r.o.)
Java 8 Update 73 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)
LG PC Suite (HKLM\...\LG PC Suite) (Version: 5.3.25.20150529 - LG Electronics)
LG United Mobile Drivers (HKLM\...\{4DE95ED9-0A29-4C4F-8463-35857CF9BA36}) (Version: 3.14.1 - LG Electronics)
Microsoft ASP.NET MVC 4 Runtime (HKLM\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Mozilla Firefox 45.0.1 (x86 sk) (HKLM\...\Mozilla Firefox 45.0.1 (x86 sk)) (Version: 45.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 45.0.1.5918 - Mozilla)
NVIDIA 3D Vision radič ovládača 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)
NVIDIA Grafický ovládač 341.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.95 - NVIDIA Corporation)
NVIDIA Ovládač 3D Vision 341.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.95 - NVIDIA Corporation)
NVIDIA Softvér systému s podporou technológie PhysX 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
Ovládací panel NVIDIA 341.95 (Version: 341.95 - NVIDIA Corporation) Hidden
SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TP-LINK TL-WN721N_TL-WN722N Driver (HKLM\...\{86A7EED0-02D0-4D91-8183-8D2F23F5E6AE}) (Version: 1.3.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Universal Media Server (HKLM\...\Universal Media Server) (Version: 6.2.0 - Universal Media Server)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WinRAR 5.11 (32-bitová verzia) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {00DD308B-822F-4090-BAFB-EECB4A9FA7A1} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {0701E2B7-71DB-4AF2-A75E-86BC4D43B485} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {131C06B8-14F3-41A1-8CDD-A43328DB4ABC} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {14E3DF6B-1C82-4C76-ADB7-2C9F6DA1C5D4} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {15F81952-00C0-4259-BF1F-07E339EE2A72} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {184A4656-2D65-44E5-8655-BFAFEB12CBBA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {2223E858-70C4-4445-BB2E-4ADDF3883BA6} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {22F5437E-531D-4E79-9BD7-72E090728C0C} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {29F92B93-76C6-479D-8F8B-3E017DE689FA} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {2AFA9EDD-124B-4A5F-A034-295FD5B0B793} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2CB4AC1A-B148-401F-BFBF-B54266DF14BE} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {32D9595F-CF79-44A3-8CB2-7C35C999DE5A} - System32\Tasks\Driver Booster SkipUAC (Adam) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe
Task: {35EC43FF-6459-4B09-8ACB-0E2B7BE5C070} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {39E767CB-5A54-46CC-B2EC-AD8238BFD7C7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-02-12] (Piriform Ltd)
Task: {3E1764C9-A583-4DC6-93A0-903FC3F0EB10} - System32\Tasks\{F9103839-0420-4FD9-A678-532B012F9FEF} => pcalua.exe -a "C:\Program Files\SimpleFiles\Uninstall.exe"
Task: {3E9CB745-0B3A-4995-8690-1298281B37F1} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {41A1ED0C-C219-46A7-8F98-6C62A258DAD1} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {45D86E9D-B990-414B-B6A9-4F35680BE022} - System32\Tasks\SmartShare => C:\Program Files\LG Software\LG Smart Share\SmartShareStart.exe
Task: {49B067E8-26A1-4AEC-B9F7-CB856D1A9292} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {56E05C1C-ECEC-4F53-8CA6-D0D7A947B60B} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {5E9FD623-05AF-4A7B-9AA7-0D850B65C456} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {5FF38D98-5D1A-474E-8AFB-4385B9194315} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {67998E00-F2AA-43E1-81FB-7140B5BD5B23} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {73515558-37D5-4804-BA6F-5FE3D8318C46} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {79AC3F9A-D0F0-4185-8A91-7B2DF2C10EEB} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {87024A1D-AB7B-4309-B7FA-BB9C4F966693} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {8850BE78-B72F-4216-ADBB-5752E267F12E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated)
Task: {8E242192-9B79-4DBF-A6D6-F9A8D4B3645A} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {A4A4AD4B-F81A-4602-B8DC-F89B25FF2FBC} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {ABD77015-73EE-4578-9912-4B9E9FF0A79E} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {B08E76CD-48EC-48C4-BECE-D4DACA673DC5} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {B09DFC11-653C-4EDC-8D67-92B6E83586CE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {BD07AF13-D52C-4ED1-AE87-75379991585A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {C8D0A076-9E90-4A71-BB10-953E26C02A02} - System32\Tasks\{F7C09E45-1389-4D8B-B6A0-EAE00EEE281A} => pcalua.exe -a "C:\Program Files\Outlook Express Attachment Extractor\Epe.exe" -d "C:\Program Files\Outlook Express Attachment Extractor"
Task: {D66A180E-674D-46FA-8B9F-7D643198B7D2} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D696C286-63CB-4CC2-886B-B51234A395E5} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D7168B37-8944-4887-91A2-BC687DA7A2B8} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {D823D09A-06A3-435B-B09A-AB9E0EF9E1C4} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E0AC3ED3-BD3C-4FD4-A267-385A22279A37} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E5776D4C-A8D0-4C80-B45E-B1AC922240B2} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {EE28B868-0512-477B-B258-4F244111E595} - System32\Tasks\{C8E899BC-92E2-4EB4-9B96-7111594ADA27} => pcalua.exe -a "C:\Users\Adam\Desktop\Need for Speed Underground 2\eauninstall.exe" -d "C:\Users\Adam\Desktop\Need for Speed Underground 2"
Task: {F4C84DBF-9043-4840-BB7F-0523CD9BBE43} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-23] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2016-02-28 23:01 - 2015-12-28 14:49 - 00629536 _____ () C:\Program Files\IObit\LiveUpdate\ProductStatistics.dll
2015-10-30 07:44 - 2015-10-30 07:44 - 00149504 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-11-20 00:44 - 2016-01-29 12:14 - 00121792 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2016-03-01 21:07 - 2016-02-23 12:34 - 01859960 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-03-01 21:07 - 2016-02-23 12:34 - 01859960 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-12-19 12:01 - 2015-12-07 06:11 - 00070656 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-03-01 21:07 - 2016-02-23 09:48 - 00316416 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-03-01 21:06 - 2016-02-23 09:49 - 00428032 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\MtcUvc.dll
2016-02-19 14:26 - 2016-01-05 03:23 - 05340672 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-02-19 14:26 - 2016-01-05 03:19 - 00471552 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-02-19 14:26 - 2016-01-16 07:06 - 02366464 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-02-19 14:26 - 2016-01-16 07:09 - 02656768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2016-01-04 02:13 - 00002786 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost
0.0.0.0 statsfe2.update.microsoft.com.akadns.net 
0.0.0.0 fe2.update.microsoft.com.akadns.net 
0.0.0.0 s0.2mdn.net 
0.0.0.0 survey.watson.microsoft.com 
0.0.0.0 view.atdmt.com 
0.0.0.0 watson.microsoft.com 
0.0.0.0 watson.ppe.telemetry.microsoft.com 
0.0.0.0 vortex.data.microsoft.com 
0.0.0.0 vortex-win.data.microsoft.com 
0.0.0.0 telecommand.telemetry.microsoft.com 
0.0.0.0 telecommand.telemetry.microsoft.com.nsatc.net 
0.0.0.0 oca.telemetry.microsoft.com 
0.0.0.0 sqm.telemetry.microsoft.com 
0.0.0.0 sqm.telemetry.microsoft.com.nsatc.net 
0.0.0.0 watson.telemetry.microsoft.com 
0.0.0.0 watson.telemetry.microsoft.com.nsatc.net 
0.0.0.0 redir.metaservices.microsoft.com 
0.0.0.0 choice.microsoft.com 
0.0.0.0 choice.microsoft.com.nsatc.net 
0.0.0.0 wes.df.telemetry.microsoft.com 
0.0.0.0 services.wes.df.telemetry.microsoft.com 
0.0.0.0 sqm.df.telemetry.microsoft.com 
0.0.0.0 telemetry.microsoft.com 
0.0.0.0 telemetry.appex.bing.net 
0.0.0.0 telemetry.urs.microsoft.com 
0.0.0.0 settings-sandbox.data.microsoft.com 
0.0.0.0 watson.live.com 
0.0.0.0 statsfe2.ws.microsoft.com 
0.0.0.0 corpext.msitadfs.glbdns2.microsoft.com 

There are 43 more lines.


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3409903947-2537725115-4003705135-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Adam\AppData\Roaming\Microsoft\Windows Photo Viewer\Tapeta programu Windows Photo Viewer.jpg
DNS Servers: 192.168.16.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TVMOBiLiArtworkManager.lnk => C:\Windows\pss\TVMOBiLiArtworkManager.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Universal Media Server.lnk => C:\Windows\pss\Universal Media Server.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Adam^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^ConnectAir.lnk => C:\Windows\pss\ConnectAir.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AirDroid 3 => C:\Program Files\AirDroid\AirDroid.exe /start
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
MSCONFIG\startupreg: NvBackend => "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: Plex Media Server => "C:\Program Files\Plex\Plex Media Server\Plex Media Server.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: uTorrent => "C:\Users\Adam\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
HKLM\...\StartupApproved\StartupFolder: => "TP-LINK Wireless Configuration Utility.lnk"
HKLM\...\StartupApproved\StartupFolder: => "O&O Defrag Tray.lnk"
HKLM\...\StartupApproved\Run: => "RtHDVCpl"
HKLM\...\StartupApproved\Run: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run: => "Nero MediaHome 4"
HKLM\...\StartupApproved\Run: => "rmdir "C:\Users\NeroMediaHomeUser.4""
HKLM\...\StartupApproved\Run: => "CleanSetup"
HKLM\...\StartupApproved\Run: => "OODefragTray"
HKU\S-1-5-21-3409903947-2537725115-4003705135-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3409903947-2537725115-4003705135-1000\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-3409903947-2537725115-4003705135-1000\...\StartupApproved\Run: => "PC Remote Server"
HKU\S-1-5-21-3409903947-2537725115-4003705135-1000\...\StartupApproved\Run: => "SpybotPostWindows10UpgradeReInstall"
HKU\S-1-5-21-3409903947-2537725115-4003705135-1000\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-3409903947-2537725115-4003705135-1000\...\StartupApproved\Run: => "Nero MediaHome 4"
HKU\S-1-5-21-3409903947-2537725115-4003705135-1000\...\StartupApproved\Run: => "Advanced SystemCare 9"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-32bit] => (Allow) LPort=808
FirewallRules: [{6D5F103E-8F4D-4A54-A427-39DEFD895AD2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{94EA4C3D-ED3A-4081-AB3E-74B8B9E0267E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{7F625F99-65FA-4D6A-AEF1-1FAF8DCB6B8C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{3CDEFB05-184F-4228-90F8-D16D5335AC76}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{039D3FC5-8F28-45A8-8F90-7634E6A637AC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{A004E952-5923-41EB-9C2E-3EA92E5DD4F7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{74A2ABED-9979-4EE0-B23D-EA0F4B4B3A48}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{D6700C0A-E2AB-4E46-AF81-19D249C6FCE1}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{0CD65270-4F0C-4F54-AF16-5096D96D5460}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{FB6E0EA6-4CEE-44FC-B506-2982817B20CD}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{C7EB191C-254A-43BA-A8E5-52F7A3058BD7}] => (Block) C:\Windows\explorer.exe
FirewallRules: [{ED6A94FD-9F02-44BE-A3BF-D9C238912139}] => (Allow) C:\Program Files\Winamp\winamp.exe
FirewallRules: [{AD785492-B376-4553-A16D-0018ADE7D3A1}] => (Allow) C:\Program Files\Winamp\winamp.exe
FirewallRules: [TCP Query User{42641F2C-F844-4C0D-AC66-6A1FBDF7A364}C:\program files\java\jre1.8.0_73\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_73\bin\javaw.exe
FirewallRules: [UDP Query User{A26A75E0-2189-4852-8336-8D188C0FDA43}C:\program files\java\jre1.8.0_73\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_73\bin\javaw.exe
FirewallRules: [TCP Query User{2C6F3D34-1813-45C9-A836-3F314F8A8D9C}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{3B290EA6-3E86-4F04-B980-C6C6AC5BB5D7}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe

==================== Restore Points =========================

19-03-2016 19:47:30 Removed Bonjour
21-03-2016 21:58:24 Installed jetAudio Basic

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/27/2016 08:35:56 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (03/27/2016 07:58:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Adam-PC)
Description: Aktivácia aplikácie Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI zlyhala pre chybu: -2144927149 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.

Error: (03/27/2016 07:58:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Adam-PC)
Description: Aktivácia aplikácie Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App zlyhala pre chybu: -2144927149 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.

Error: (03/27/2016 07:55:13 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Adam-PC)
Description: Aktivácia aplikácie Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App zlyhala pre chybu: -2144927149 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.

Error: (03/27/2016 07:49:48 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Adam-PC)
Description: Aktivácia aplikácie Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App zlyhala pre chybu: -2144927149 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.

Error: (03/27/2016 07:49:02 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Adam-PC)
Description: Aktivácia aplikácie Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI zlyhala pre chybu: -2144927149 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.

Error: (03/26/2016 07:25:19 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Adam-PC)
Description: Aktivácia aplikácie Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI zlyhala pre chybu: -2144927149 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.

Error: (03/26/2016 07:25:14 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Adam-PC)
Description: Aktivácia aplikácie Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI zlyhala pre chybu: -2144927149 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.

Error: (03/26/2016 07:25:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Adam-PC)
Description: Aktivácia aplikácie Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI zlyhala pre chybu: -2144927149 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.

Error: (03/26/2016 07:20:45 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Adam-PC)
Description: Aktivácia aplikácie Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI zlyhala pre chybu: -2144927149 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.


System errors:
=============
Error: (03/26/2016 08:55:49 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Počas čakania na pripojenie služby Sync Host_2bd30c bol dosiahnutý časový limit (30000 ms).

Error: (03/26/2016 08:55:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Sync Host_2bd30c sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 10000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (03/26/2016 07:25:03 PM) (Source: usbehci) (EventID: 4) (User: )
Description: A timeout occurred while waiting for the EHCI host controller Interrupt on Async Advance Doorbell response.

Error: (03/26/2016 06:48:14 PM) (Source: usbehci) (EventID: 4) (User: )
Description: A timeout occurred while waiting for the EHCI host controller Interrupt on Async Advance Doorbell response.

Error: (03/26/2016 04:29:36 PM) (Source: usbehci) (EventID: 4) (User: )
Description: A timeout occurred while waiting for the EHCI host controller Interrupt on Async Advance Doorbell response.

Error: (03/26/2016 03:59:52 PM) (Source: usbehci) (EventID: 4) (User: )
Description: A timeout occurred while waiting for the EHCI host controller Interrupt on Async Advance Doorbell response.

Error: (03/25/2016 04:50:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Sync Host_202801 sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 10000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (03/25/2016 12:06:08 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Sync Host_223f2 sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 10000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (03/24/2016 06:44:33 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby NetTcpPortSharing, od ktorej závisí služba NetTcpActivator, zlyhalo kvôli nasledujúcej chybe: 
%%1058

Error: (03/24/2016 06:44:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby luafv zlyhalo kvôli nasledujúcej chybe: 
%%1275


CodeIntegrity:
===================================
  Date: 2016-03-24 17:45:00.659
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\Drivers\ehdrv\ehdrv.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-24 17:45:00.626
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\Drivers\ehdrv\ehdrv.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-24 17:45:00.564
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eelam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-24 17:45:00.527
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eelam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-24 17:45:00.490
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\Drivers\eelam\eelam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-24 17:45:00.466
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\Drivers\eelam\eelam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-23 20:00:05.907
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\Drivers\ehdrv\ehdrv.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-23 20:00:05.869
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\Drivers\ehdrv\ehdrv.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-23 20:00:05.812
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eelam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-03-23 20:00:05.759
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eelam.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info =========================== 

Processor: AMD Athlon(tm) 64 Processor 3200+
Percentage of memory in use: 73%
Total physical RAM: 1023.24 MB
Available physical RAM: 269.1 MB
Total Virtual: 2751.24 MB
Available Virtual: 1199.42 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:49.48 GB) (Free:27.3 GB) NTFS
Drive d: (ARCHIV) (Fixed) (Total:139.89 GB) (Free:86.01 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 189.9 GB) (Disk ID: 19D719D7)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=49.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
Partition 4: (Not Active) - (Size=139.9 GB) - (Type=OF Extended)

==================== End of Addition.txt ============================