﻿Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-08-2016 01
Ran by Tomáš (2016-08-14 12:21:29)
Running from C:\Users\Tomáš\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2015-09-11 15:19:00)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3176385675-1044772427-3118369927-500 - Administrator - Disabled) => C:\Users\Administrator
Guest (S-1-5-21-3176385675-1044772427-3118369927-501 - Limited - Enabled)
Tomáš (S-1-5-21-3176385675-1044772427-3118369927-1000 - Administrator - Enabled) => C:\Users\Tomáš

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

«Portal 2»  2.0.0.1 (HKLM-x32\...\Portal 2_is1) (Version: 2.0.0.1 - VALVE)
7-Zip 15.14 (x64) (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov)
Adobe Photoshop CS6 (HKLM-x32\...\{5D0428D2-B5EA-46C8-B678-5F0485BC1DA1}_is1) (Version: 13.0.1.0 - Adobe)
AMD Catalyst Install Manager (HKLM\...\{3FAEEEBE-48F4-84C1-2B49-96AE73E67E3E}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Application Insights Tools for Visual Studio 2015 (x32 Version: 3.3 - Microsoft Corporation) Hidden
Arduino (HKLM-x32\...\Arduino) (Version: 1.6.6 - Arduino LLC)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.13 - Michael Tippach)
asiomulti (HKLM-x32\...\{84DDEB49-F50B-4C47-BD93-8DDCC5B5C642}) (Version: 1.0.0 - vidance)
Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.2 - Atheros)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.2.2262 - AVAST Software)
Azure AD Authentication Connected Service (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
AzureTools.Notifications (x32 Version: 2.7.30611.1601 - Microsoft Corporation) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
BS.Player PRO (HKLM-x32\...\BSPlayerp) (Version: 2.70.1080 - AB Team, d.o.o.)
CCleaner (HKLM\...\CCleaner) (Version: 5.09 - Piriform)
Cok Free Auto Clicker 2.0 (HKLM-x32\...\Cok Free Auto Clicker_is1) (Version: 2.0 - Cok Software)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Creativerse (HKLM\...\Steam App 280790) (Version:  - Playful Corporation)
Dotfuscator and Analytics Community Edition 5.18.1 (x32 Version: 5.18.1.2898 - PreEmptive Solutions) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 7.4.30 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.27.37 - Dropbox, Inc.) Hidden
EZdrummer 2 64-bit (HKLM\...\{B9217824-0EBE-49C7-98A0-A76CC46BBB7D}) (Version: 2.0.0 - Toontrack)
EZdrummer 2 64-bit Update (HKLM\...\{11CC8964-9CB0-46E6-9218-CD39ED4A554D}) (Version: 2.1.1 - Toontrack)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Grim Dawn (HKLM-x32\...\1449651388_is1) (Version: 2.0.0.5 - GOG.com)
Guitar Pro 6 (HKLM-x32\...\{14A487F2-1259-4E6C-AE3C-3C888DDBCB60}_is1) (Version:  - Arobas Music)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
IK Multimedia Authorization Manager version 1.0.15 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.15 - IK Multimedia)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.1.209 - Intel Corporation)
iolo technologies' System Mechanic (HKLM-x32\...\{55FD1D5A-7AEF-4DA3-8FAF-A71B2A52FFC7}_is1) (Version: 12.5.0 - iolo technologies, LLC)
IrfanView 64 (remove only) (HKLM\...\IrfanView64) (Version: 4.41 - Irfan Skiljan)
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
KMSnano 24 (HKLM\...\KMSnano 24_is1) (Version: KMSnano 24 - )
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{B941AFB4-8851-33A1-9E72-0C33D463C41C}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.6 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (ENU) (HKLM-x32\...\{3D3CEBE6-40EA-4C48-97FD-73828281AB4A}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.23107 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SQL Server 2014 Express LocalDB  (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Transact-SQL ScriptDom  (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 T-SQL Language Service  (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{68BA34E8-9B9D-4A74-83F0-7D366B532D75}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{718FFB65-F6E4-4D62-861F-ED10ED32C936}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{4549ceb8-695a-42eb-a183-4820d542a15f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual Studio Enterprise 2015 (HKLM-x32\...\{a60a492e-b5eb-4218-a9e6-f38d18a7dbaf}) (Version: 14.0.23107.10 - Microsoft Corporation)
MiniTool Partition Wizard Free 9.1 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version:  - MiniTool Solution Ltd.)
Multi-Device Hybrid Apps using C# - Templates - ENU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version:  - Native Instruments)
Native Instruments Guitar Rig 5 (HKLM-x32\...\Native Instruments Guitar Rig 5) (Version:  - Native Instruments)
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.4.4.1428 - Native Instruments)
Origin (HKLM-x32\...\Origin) (Version: 9.12.1.43352 - Electronic Arts, Inc.)
PowerISO (HKLM-x32\...\PowerISO) (Version: 6.3 - Power Software Ltd)
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
PSPad editor (HKLM-x32\...\PSPad editor_is1) (Version: 4.5.8.2500 - Jan Fiala)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.88.617.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6559 - Realtek Semiconductor Corp.)
REAPER (x64) (HKLM\...\REAPER) (Version:  - )
Roslyn Language Services - x86 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
SafeZone Stable 1.48.2066.101 (x32 Version: 1.48.2066.101 - Avast Software) Hidden
Samsung AllShare (HKLM-x32\...\InstallShield_{DF47ACA3-7C78-4C08-8007-AC682563C9F1}) (Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.)
Samsung AllShare (x32 Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
Skype™ 7.10 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.10.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-3176385675-1044772427-3118369927-1000\...\Spotify) (Version: 1.0.21.143.g76c19bcd - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SUPER © v2016.Build.69+3D+Recorder (2016/04/02) version v2016.B (HKLM-x32\...\{CB93965C-C24C-437D-839B-285188F22F11}_is1) (Version: v2016.Build.69+3D+Recorder - eRightSoft)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.38.2 - Synaptics Incorporated)
Team Explorer for Microsoft Visual Studio 2015 (x32 Version: 14.0.23102 - Microsoft Corporation) Hidden
Team Fortress 2 (HKLM\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
Test Tools for Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
TOSHIBA Battery Check Utility (HKLM-x32\...\{5468E297-7EF8-4CB3-A091-F8714147793F}) (Version: 1.00.01.01 - Toshiba Corporation)
TOSHIBA Function Key (HKLM\...\{16562A90-71BC-41A0-B890-D91B0C267120}) (Version: 1.1.0001.6400 - Toshiba Corporation)
TOSHIBA Media Controller (HKLM-x32\...\{C7A4F26F-F9B0-41B2-8659-99181108CDE3}) (Version: 1.0.87.4 - TOSHIBA CORPORATION)
TOSHIBA Resolution+ Plug-in for Windows Media Player (HKLM-x32\...\{6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}) (Version: 1.1.2004 - TOSHIBA Corporation)
TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 2.0.3.33 - TOSHIBA Corporation)
Total Commander 64-bit (Remove or Repair) (HKLM-x32\...\Totalcmd64) (Version: 8.52 - Ghisler Software GmbH)
Universal Adb Driver (HKLM-x32\...\{D9C4202E-6D51-4B06-A8F1-22316E654BCA}) (Version: 1.0.0 - ClockworkMod)
Universal CRT Extension SDK (x32 Version: 10.0.10150 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (x32 Version: 10.0.10150 - Microsoft Corporation) Hidden
Universal CRT Redistributable (x32 Version: 10.0.10150 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (Version: 10.0.10150 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (x32 Version: 10.0.10150 - Microsoft Corporation) Hidden
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
WCF Data Services 5.6.4 Runtime (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3176385675-1044772427-3118369927-1000_Classes\CLSID\{ED90173A-3B4C-4E7E-B9CF-79714425D4B5}\InprocServer32 -> C:\Program Files (x86)\PSPad editor\pspshellx64.dll ()

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {01527BE3-8BA7-45B1-9861-310BC2789CE8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-11] (Google Inc.)
Task: {1641B1CF-4F0E-463F-9F06-D7619F123A08} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-11] (Google Inc.)
Task: {62479AAC-6178-4AFB-B6FD-CD11657AA6A4} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-06-05] (AVAST Software)
Task: {6EE29058-B8F2-4D59-BD82-4A2026EEB3D2} - System32\Tasks\wifi => netsh [Argument = wlan start hostednetwork]
Task: {8BC6CA4E-4F38-4E4F-B28D-D8B1B85AC76F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => %SystemRoot%\ehome\mcupdate [Argument = $(Arg0)]
Task: {8E6E51E6-1C4C-4E2B-9E37-3D72C1927419} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {A1B6AB12-157B-42F6-865E-6FDB01EC1743} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-10-10] (Dropbox, Inc.)
Task: {B4474055-AA56-4E70-9720-4941CFD2B287} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-05-13] (AVAST Software)
Task: {B91B3385-F8AA-41CC-8851-6548E7E2E090} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => %SystemRoot%\ehome\ehrec [Argument = /RestartRecording]
Task: {C3F85B51-5DDA-4E86-9D3B-5DC295F3CBA7} - System32\Tasks\Trigger KMS Activation => C:\Program Files\KMSnano\TriggerKMS.exe [2013-01-26] ()
Task: {C5ADF67A-046F-436D-8650-96CC6DC24D6E} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-10-10] (Dropbox, Inc.)
Task: {CB5B4C2A-AEB6-4E55-BC1A-15B46E1097E5} - System32\Tasks\SafeZone scheduled Autoupdate 1463215166 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe
Task: {E278EA70-E47B-4AED-9A83-BF3F921BCAF8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-08-20] (Piriform Ltd)
Task: {F2B6C398-988A-4BE7-AC37-A7F9D418126E} - System32\Tasks\iolo Process Governor => C:\Program Files (x86)\iolo\System Mechanic\iologovernor64.exe [2013-12-03] (iolo technologies, LLC)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Spouštěč aplikací Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\Tomáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Spouštěč aplikací Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list

==================== Loaded Modules (Whitelisted) ==============

2010-01-30 02:40 - 2010-01-30 02:40 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-03-24 21:38 - 2010-03-24 21:38 - 08794976 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2015-09-24 17:12 - 2014-11-02 17:45 - 00029184 _____ () C:\Program Files (x86)\PSPad editor\pspshellx64.dll
2016-06-27 20:08 - 2016-06-27 20:19 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2012-07-18 18:38 - 2012-07-18 18:38 - 00020904 _____ () C:\Program Files\TOSHIBA\Hotkey\SmoothView.dll
2015-08-24 20:28 - 2015-08-24 20:28 - 00047104 _____ () C:\Program Files\CCleaner\lang\lang-1029.dll
2016-07-12 10:05 - 2016-06-30 04:25 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2016-08-05 22:14 - 2016-06-30 04:25 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2016-08-05 22:14 - 2016-06-30 04:26 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
2016-08-05 22:14 - 2016-06-30 04:25 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2016-07-12 10:05 - 2016-06-30 04:25 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2016-07-12 10:05 - 2016-06-30 04:25 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2016-07-12 10:05 - 2016-08-01 23:27 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2016-07-12 10:05 - 2016-06-30 04:25 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2016-08-05 22:14 - 2016-08-01 23:26 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2016-07-12 10:05 - 2016-06-30 04:26 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2016-08-05 22:14 - 2016-08-01 23:26 - 01682760 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2016-08-05 22:14 - 2016-08-01 23:26 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 00021312 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2016-07-12 10:05 - 2016-06-30 04:27 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2016-08-05 22:14 - 2016-06-30 04:25 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2016-08-05 22:14 - 2016-06-30 04:27 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2016-07-12 10:05 - 2016-06-30 04:27 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2016-07-12 10:05 - 2016-06-30 04:27 - 00114640 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2016-07-12 10:05 - 2016-08-01 23:27 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2016-07-12 10:05 - 2016-06-30 04:27 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 00025424 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2016-07-12 10:05 - 2016-06-30 04:27 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2016-07-12 10:05 - 2016-06-30 04:27 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2016-07-12 10:05 - 2016-06-30 04:27 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2016-07-12 10:05 - 2016-06-30 04:27 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2016-07-12 10:05 - 2016-06-30 04:27 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2016-07-12 10:05 - 2016-06-30 04:27 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2016-07-12 10:05 - 2016-06-30 04:27 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2016-08-05 22:13 - 2016-08-01 23:26 - 00246592 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
2016-07-12 10:05 - 2016-06-30 04:27 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2016-07-12 10:05 - 2016-08-01 23:27 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-07-12 10:05 - 2016-08-01 23:27 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror._winffi_winerror.pyd
2016-07-12 10:05 - 2016-08-01 23:27 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet._winffi_wininet.pyd
2016-07-12 10:05 - 2016-06-30 04:25 - 00144848 _____ () C:\Program Files (x86)\Dropbox\Client\_elementtree.pyd
2016-08-05 22:14 - 2016-06-30 04:26 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd
2016-08-05 22:14 - 2016-08-01 23:26 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2016-07-12 10:05 - 2016-08-01 23:27 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2016-07-12 10:05 - 2016-06-30 04:27 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2016-07-12 10:05 - 2016-08-01 23:27 - 00022352 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2016-08-05 22:14 - 2016-06-30 04:28 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2016-08-05 22:14 - 2016-08-01 23:27 - 00084280 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2016-08-05 22:14 - 2016-08-01 23:27 - 01826096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2016-07-12 10:05 - 2016-06-30 04:26 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 03929392 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 01972016 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 00531248 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 00132912 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 00224056 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 00020288 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32._winffi_user32.pyd
2016-07-12 10:05 - 2016-06-30 04:27 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 00546096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 00168248 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2016-08-05 22:14 - 2016-08-01 23:27 - 00042808 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2016-05-13 14:57 - 2016-05-13 14:57 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-05-13 14:55 - 2016-05-13 14:55 - 00123344 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2016-05-13 14:55 - 2016-05-13 14:55 - 00135816 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-05-13 14:55 - 2016-05-13 14:55 - 00479680 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 01135616 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMSWrap.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00656896 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ContentDirectoryPresenter.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00105472 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\DCMCDP.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00098816 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\FolderCDP.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00077312 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\MetadataFramework.dll
2012-01-05 23:40 - 2012-01-05 23:40 - 00520234 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\sqlite3.dll
2012-01-05 23:40 - 2012-01-05 23:40 - 00450560 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\MoodExtractor.dll
2012-01-05 23:40 - 2012-01-05 23:40 - 05717504 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\DCMImgExtractor.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00029184 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AutoChaptering.dll
2012-01-05 23:40 - 2012-01-05 23:40 - 00147456 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libexpat.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00012288 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoThumb.dll
2012-01-05 23:40 - 2012-01-05 23:40 - 04671488 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avcodec-52.dll
2012-01-05 23:40 - 2012-01-05 23:40 - 00070656 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avutil-50.dll
2012-01-05 23:40 - 2012-01-05 23:40 - 00686080 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avformat-52.dll
2012-01-05 23:40 - 2012-01-05 23:40 - 00152064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\swscale-0.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00027648 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AudioExtractor.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00063488 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ID3Driver.dll
2012-01-05 23:40 - 2012-01-05 23:40 - 00366592 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\tag.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00289792 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libThumbnail.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00023040 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\RichInfoDriver.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00017920 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoExtractor.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00017920 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ThumbnailMaker.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00133120 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoMetadataDriver.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00290304 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libKeyFrame.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00024064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\SECMetaDriver.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00012288 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ImageExtractor.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00024064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\photoDriver.dll
2012-01-05 23:40 - 2012-01-05 23:40 - 00399826 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libexif-12.dll.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00013824 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\TextExtractor.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00031232 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\Autobackup.dll
2012-02-22 17:46 - 2012-02-22 17:46 - 00054784 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\RosettaAllShare.dll
2012-01-05 23:40 - 2012-01-05 23:40 - 00044032 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\us.dll
2010-01-30 02:41 - 2010-01-30 02:41 - 04254560 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-03-24 21:17 - 2010-03-24 21:17 - 08794464 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2016-08-09 09:19 - 2016-08-03 02:24 - 01771336 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll
2016-08-09 09:19 - 2016-08-03 02:23 - 00094024 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Windows:{4B9A1497-0817-47C4-9612-D6A1C53ACF57} [26]
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ioloSystemService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3176385675-1044772427-3118369927-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Tomáš\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.255.255.10 - 10.255.255.20
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Tomáš\AppData\Roaming\Spotify\SpotifyWebHelper.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{D52760AB-5950-4018-8698-33A35F338FE7}C:\users\tomáš\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\tomáš\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{6A6094BF-34E1-4DF5-A1F1-314C878FBEC5}C:\users\tomáš\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\tomáš\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{15058D11-2A65-4C28-AA64-CCC315E024A6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B3E50F8B-3337-4952-B54B-FD2D0FBF8588}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{A63F003E-61C3-457E-9879-539E7EE5C064}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{61063A85-0E70-4476-93AA-96BFBC1CF1AC}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D61F4E16-D748-4DA5-83DF-A7F07C226B1F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{B5F3784F-AF9B-454E-A6B2-CF38C609FFEE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{1E563659-9126-4600-9CF3-80D57D106746}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{96E280B9-4829-4A35-8955-24DDBCE4A167}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{5EACF895-1CB8-44BB-8AA4-A5E7E6C0F47E}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [TCP Query User{E18A4011-2AF3-42DA-A4A8-D38BD4211C7F}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [UDP Query User{89102497-0365-4170-831C-423B526F4836}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [{7360F4B3-8E4F-488E-B0BF-E22712A92E69}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{E9EDB0B1-93AB-4446-8F6C-52D2C567DEA1}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{6EA97175-FD7D-42C6-B28C-F925C8413793}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [{013B5165-C2FC-4298-A2A4-D60917E5BB81}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [{98AB9111-DBB7-4C2C-A561-86540348847F}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [{7395E4DE-8C60-482B-9AE1-281DF1D9B82B}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [{37FDD3DA-E1E0-44A1-80F0-8F18A4E0E99D}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [{AE858379-C9B2-406C-9629-6D8974549D9F}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [{7F428F1B-B122-4FE4-A738-DFDA63C7FB85}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [TCP Query User{D1C535F5-76F5-4667-B5B3-65FE011C118C}C:\users\tomáš\appdata\local\apps\2.0\5753pmjv.wzg\cth4wo0h.qrq\repz..tion_14c6f330b0eaf23d_0001.0000_8886553e57008ce5\repzlauncher.exe] => (Allow) C:\users\tomáš\appdata\local\apps\2.0\5753pmjv.wzg\cth4wo0h.qrq\repz..tion_14c6f330b0eaf23d_0001.0000_8886553e57008ce5\repzlauncher.exe
FirewallRules: [UDP Query User{E6B58650-5578-4136-A7A0-AA3039FE47A1}C:\users\tomáš\appdata\local\apps\2.0\5753pmjv.wzg\cth4wo0h.qrq\repz..tion_14c6f330b0eaf23d_0001.0000_8886553e57008ce5\repzlauncher.exe] => (Allow) C:\users\tomáš\appdata\local\apps\2.0\5753pmjv.wzg\cth4wo0h.qrq\repz..tion_14c6f330b0eaf23d_0001.0000_8886553e57008ce5\repzlauncher.exe
FirewallRules: [TCP Query User{808F0389-CAE9-46D5-9A62-B1C4D243ADAE}C:\users\tomáš\desktop\mw2\iw4m.exe] => (Allow) C:\users\tomáš\desktop\mw2\iw4m.exe
FirewallRules: [UDP Query User{B309FC4A-535F-4423-A4E9-1DEB19F713F4}C:\users\tomáš\desktop\mw2\iw4m.exe] => (Allow) C:\users\tomáš\desktop\mw2\iw4m.exe
FirewallRules: [TCP Query User{45F4288C-90CC-4C24-9593-5E0EFB2939D7}C:\users\tomáš\desktop\ \programy\mw2\iw4m.exe] => (Allow) C:\users\tomáš\desktop\ \programy\mw2\iw4m.exe
FirewallRules: [UDP Query User{D3F24F93-6A08-4B37-9839-551ADE017444}C:\users\tomáš\desktop\ \programy\mw2\iw4m.exe] => (Allow) C:\users\tomáš\desktop\ \programy\mw2\iw4m.exe
FirewallRules: [{408ECF46-9D05-47BB-8832-FD26EBC7C02B}] => (Allow) C:\Program Files\KMSnano\qemu-system-i386.exe
FirewallRules: [{BCE5AAE7-358A-49B7-A1B0-0B55C05F629D}] => (Allow) C:\Program Files\KMSnano\qemu-system-i386.exe
FirewallRules: [TCP Query User{13F5FFB3-6A34-417E-A076-91958610BC2A}C:\program files (x86)\arduino\java\bin\javaw.exe] => (Allow) C:\program files (x86)\arduino\java\bin\javaw.exe
FirewallRules: [UDP Query User{16A58D1F-AFF4-4A09-821E-309AF97ACBD7}C:\program files (x86)\arduino\java\bin\javaw.exe] => (Allow) C:\program files (x86)\arduino\java\bin\javaw.exe
FirewallRules: [TCP Query User{7ECE86F8-B00D-4E2D-8109-CA9123FDECBE}C:\users\tomáš\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tomáš\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{F1436532-E956-4155-86A8-C610322A3E05}C:\users\tomáš\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tomáš\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{C5DA8117-4091-4AB4-9F50-DB3B081B9491}C:\users\tomáš\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tomáš\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{F1D0E7E6-0F62-47BA-83A6-C293A8C613B3}C:\users\tomáš\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tomáš\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{36BDE3C0-ADDA-4ED8-94B1-63969B3EDDAF}C:\users\tomáš\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\tomáš\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{CD0CD544-A62D-4C58-BBCF-27A7180CA56E}C:\users\tomáš\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\tomáš\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{DC68A0FF-1C68-4825-A702-5DA288B29E4C}] => (Allow) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
FirewallRules: [{A6862F3B-A3E3-4E69-9450-D2190BDDDC36}] => (Allow) C:\Program Files (x86)\Samsung\AllShare\AllShare.exe
FirewallRules: [{2DD4891B-CFEE-4380-8C62-5A4EDA7CBAE9}] => (Allow) C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
FirewallRules: [TCP Query User{55CBBF13-5124-4B8C-8E5E-C09D7BFE9039}C:\windows\system32\ftp.exe] => (Allow) C:\windows\system32\ftp.exe
FirewallRules: [UDP Query User{13FE2552-32C5-49F0-9F40-88F33A24E496}C:\windows\system32\ftp.exe] => (Allow) C:\windows\system32\ftp.exe
FirewallRules: [{1A91E15D-0C0B-455F-8DF9-D59407777653}] => (Block) C:\windows\system32\ftp.exe
FirewallRules: [{189716E7-AF38-4C0A-BBB0-09FAE459A63A}] => (Block) C:\windows\system32\ftp.exe
FirewallRules: [TCP Query User{68DF2C5E-D3F5-4057-A7F8-4789D77DEDF7}C:\totalcmd\totalcmd64.exe] => (Allow) C:\totalcmd\totalcmd64.exe
FirewallRules: [UDP Query User{940AF72C-F77C-4D9C-89E5-86CC637F9606}C:\totalcmd\totalcmd64.exe] => (Allow) C:\totalcmd\totalcmd64.exe
FirewallRules: [{4C0040E6-E138-48FA-B07D-B84142AB4E08}] => (Block) C:\totalcmd\totalcmd64.exe
FirewallRules: [{0861154A-9E40-4BC4-99FF-3894537ACA3B}] => (Block) C:\totalcmd\totalcmd64.exe
FirewallRules: [TCP Query User{E0CE9DF4-972B-4590-9603-BA3CC1EB11B2}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{F7232506-BADF-4389-840C-77D6AC4FC301}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [TCP Query User{BD1EE769-36BC-4457-8992-DA4DE5E71DB5}C:\users\tomáš\desktop\ \programy\mw2\iw4mp.exe] => (Allow) C:\users\tomáš\desktop\ \programy\mw2\iw4mp.exe
FirewallRules: [UDP Query User{550D794D-6D16-4D07-9A2E-FEC80FC5E96B}C:\users\tomáš\desktop\ \programy\mw2\iw4mp.exe] => (Allow) C:\users\tomáš\desktop\ \programy\mw2\iw4mp.exe
FirewallRules: [{778C8B93-701B-43DD-8881-BB4BAF3AE3F5}] => (Block) C:\users\tomáš\desktop\ \programy\mw2\iw4mp.exe
FirewallRules: [{C4B7FF1E-0586-4EA9-8579-23284EEF1AA0}] => (Block) C:\users\tomáš\desktop\ \programy\mw2\iw4mp.exe
FirewallRules: [{574510EB-D8AD-4B28-8669-B6A53A3C5EA8}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{022ACF6E-D078-4459-9D2C-65BD2AECD67C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{A4950935-3149-42CF-BFEE-E12D2A53E1EF}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C641BF77-EC8A-45E3-982C-7574B536EFB3}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [TCP Query User{07C7AEAD-8639-4CE3-AFC6-84D03FD758AB}C:\games\assassins creed revelations\acrsp.exe] => (Block) C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [UDP Query User{D3FD474A-0D10-4DE7-966E-EAF3AB604C21}C:\games\assassins creed revelations\acrsp.exe] => (Block) C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [TCP Query User{581E0913-C83D-4D84-8D67-F9CD9CDA2DC8}C:\games\assassins creed revelations\acrpr.exe] => (Block) C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [UDP Query User{300E50E0-016E-4D2B-88ED-D13E7491D240}C:\games\assassins creed revelations\acrpr.exe] => (Block) C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [TCP Query User{E79A464F-7F91-49B7-A793-669F1B6FC8F9}C:\program files (x86)\ea games\kingdoms of amalur reckoning\reckoning.exe] => (Block) C:\program files (x86)\ea games\kingdoms of amalur reckoning\reckoning.exe
FirewallRules: [UDP Query User{87ECFA8E-4F0A-4E46-B933-B17D30A47991}C:\program files (x86)\ea games\kingdoms of amalur reckoning\reckoning.exe] => (Block) C:\program files (x86)\ea games\kingdoms of amalur reckoning\reckoning.exe
FirewallRules: [{806B28E6-8D96-4CE0-8CFB-38B1CE9BA36D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe
FirewallRules: [{C8E36FDC-7B05-4D67-918A-27FE4AED78AA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe
FirewallRules: [TCP Query User{756EDC7B-EF34-4914-844E-8187FDD736F7}C:\games\goat simulator\binaries\win32\goatgame-win32-shipping.exe] => (Allow) C:\games\goat simulator\binaries\win32\goatgame-win32-shipping.exe
FirewallRules: [UDP Query User{A146B5B1-5547-402B-AEF6-41E6BA47A9B1}C:\games\goat simulator\binaries\win32\goatgame-win32-shipping.exe] => (Allow) C:\games\goat simulator\binaries\win32\goatgame-win32-shipping.exe
FirewallRules: [{DC324628-4783-4509-936D-533181642D55}] => (Block) C:\games\goat simulator\binaries\win32\goatgame-win32-shipping.exe
FirewallRules: [{020D5001-BA30-48A5-919A-7CBFD16BD101}] => (Block) C:\games\goat simulator\binaries\win32\goatgame-win32-shipping.exe
FirewallRules: [TCP Query User{0E07C0DD-9724-4B13-A613-42CC08FD9BA7}C:\r.g. catalyst\portal 2\portal2.exe] => (Allow) C:\r.g. catalyst\portal 2\portal2.exe
FirewallRules: [UDP Query User{244DAF47-B5FE-4F4D-8185-CD304D2DD40A}C:\r.g. catalyst\portal 2\portal2.exe] => (Allow) C:\r.g. catalyst\portal 2\portal2.exe
FirewallRules: [{0601930B-7BC1-4303-BA80-D64CAC22498D}] => (Block) C:\r.g. catalyst\portal 2\portal2.exe
FirewallRules: [{2FB6ABBB-29E2-4D1E-9A32-DE0EC95B51A9}] => (Block) C:\r.g. catalyst\portal 2\portal2.exe
FirewallRules: [TCP Query User{D7FE8E1F-8CF5-423B-937E-D94802A01827}C:\program files (x86)\strogino cs portal\qube\binaries\win32\qube.exe] => (Block) C:\program files (x86)\strogino cs portal\qube\binaries\win32\qube.exe
FirewallRules: [UDP Query User{4D8745D5-E376-4278-961E-7F33483C7D5A}C:\program files (x86)\strogino cs portal\qube\binaries\win32\qube.exe] => (Block) C:\program files (x86)\strogino cs portal\qube\binaries\win32\qube.exe
FirewallRules: [{D5159987-395D-4E85-86AA-87695F4D5576}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{6C5B0E9F-C8AA-4FE0-A5CF-95E9C1B4E36D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{1E0AF124-AE3B-4AB7-AE2B-511E676DAF0E}] => (Allow) C:\Users\Tomáš\AppData\Roaming\uTorrent\utorrent.exe
FirewallRules: [{5B3B51AF-FE01-4F6D-876D-D56399077085}] => (Allow) C:\Users\Tomáš\AppData\Roaming\uTorrent\utorrent.exe
FirewallRules: [{03ACAD6C-55D0-47D5-ABD9-A6383CE0ED6F}] => (Allow) C:\Program Files\KMSnano\qemu-system-i386.exe
FirewallRules: [{E72FF694-779B-4D83-8E95-36EB6B3FFD17}] => (Allow) C:\Program Files\KMSnano\qemu-system-i386.exe
FirewallRules: [{7A58203D-9316-4663-9E29-B83274BF8B73}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{CC437835-0679-4D59-B093-1E9D21F08EAA}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{02CD79D0-8373-4969-92A8-D80741D520F5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Creativerse\Creativerse.exe
FirewallRules: [{0346F5C3-6162-4235-860E-2E87D89E09D9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Creativerse\Creativerse.exe

==================== Restore Points =========================

04-08-2016 11:24:51 Scheduled Checkpoint
04-08-2016 23:23:00 Device Driver Package Install: Microsoft Corporation Alcatel ADB Device
04-08-2016 23:28:23 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
05-08-2016 12:27:39 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
05-08-2016 12:28:30 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
12-08-2016 13:49:27 Scheduled Checkpoint

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/14/2016 11:40:06 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/14/2016 11:38:06 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/14/2016 11:20:21 AM) (Source: ESENT) (EventID: 439) (User: )
Description: Windows (4148) Windows: Unable to write a shadowed header for file C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chk. Error -1032.

Error: (08/14/2016 11:20:21 AM) (Source: ESENT) (EventID: 490) (User: )
Description: Windows (4148) Windows: An attempt to open the file "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chk" for read / write access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ".  The open file operation will fail with error -1032 (0xfffffbf8).

Error: (08/14/2016 11:19:07 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/13/2016 12:30:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NMS.exe, version: 0.1.0.0, time stamp: 0x57ade3e9
Faulting module name: KERNELBASE.dll, version: 6.1.7601.19135, time stamp: 0x56a1c9ac
Exception code: 0xe06d7363
Fault offset: 0x000000000000965d
Faulting process id: 0xe94
Faulting application start time: 0xNMS.exe0
Faulting application path: NMS.exe1
Faulting module path: NMS.exe2
Report Id: NMS.exe3

Error: (08/13/2016 12:28:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NMS.exe, version: 0.1.0.0, time stamp: 0x57ade3e9
Faulting module name: KERNELBASE.dll, version: 6.1.7601.19135, time stamp: 0x56a1c9ac
Exception code: 0xe06d7363
Fault offset: 0x000000000000965d
Faulting process id: 0x1604
Faulting application start time: 0xNMS.exe0
Faulting application path: NMS.exe1
Faulting module path: NMS.exe2
Report Id: NMS.exe3

Error: (08/13/2016 12:26:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NMS.exe, version: 0.1.0.0, time stamp: 0x57ade3e9
Faulting module name: KERNELBASE.dll, version: 6.1.7601.19135, time stamp: 0x56a1c9ac
Exception code: 0xe06d7363
Fault offset: 0x000000000000965d
Faulting process id: 0x1778
Faulting application start time: 0xNMS.exe0
Faulting application path: NMS.exe1
Faulting module path: NMS.exe2
Report Id: NMS.exe3

Error: (08/13/2016 12:21:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NMS.exe, version: 0.1.0.0, time stamp: 0x57ade3e9
Faulting module name: KERNELBASE.dll, version: 6.1.7601.19135, time stamp: 0x56a1c9ac
Exception code: 0xe06d7363
Fault offset: 0x000000000000965d
Faulting process id: 0x1700
Faulting application start time: 0xNMS.exe0
Faulting application path: NMS.exe1
Faulting module path: NMS.exe2
Report Id: NMS.exe3

Error: (08/13/2016 12:20:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NMS.exe, version: 0.1.0.0, time stamp: 0x57ade3e9
Faulting module name: KERNELBASE.dll, version: 6.1.7601.19135, time stamp: 0x56a1c9ac
Exception code: 0xe06d7363
Fault offset: 0x000000000000965d
Faulting process id: 0xefc
Faulting application start time: 0xNMS.exe0
Faulting application path: NMS.exe1
Faulting module path: NMS.exe2
Report Id: NMS.exe3


System errors:
=============
Error: (08/14/2016 12:15:50 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.

Error: (08/14/2016 12:07:39 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (08/14/2016 11:55:32 AM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (08/14/2016 11:47:49 AM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.

Error: (08/14/2016 11:43:32 AM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (08/14/2016 11:40:37 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (08/14/2016 11:40:35 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (08/14/2016 11:38:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Windows Search service failed to start due to the following error: 
%%1069 = The service did not start due to a logon failure.

Error: (08/14/2016 11:38:37 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: The WSearch service was unable to log on as NT AUTHORITY\SYSTEM with the currently configured password due to the following error: 
%%50 = The request is not supported.

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

Error: (08/14/2016 11:38:07 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Samsung AllShare PC service terminated unexpectedly.  It has done this 1 time(s).


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz
Percentage of memory in use: 48%
Total physical RAM: 4047.3 MB
Available physical RAM: 2093.66 MB
Total Virtual: 8092.82 MB
Available Virtual: 5939 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:698.54 GB) (Free:144.34 GB) NTFS ==>[drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 4114E3DC)
Partition 1: (Active) - (Size=698.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================