Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2017
Ran by Michal (14-03-2017 10:43:51)
Running from D:\Desktop
Windows 8.1 Pro (Update) (X64) (2014-12-11 09:47:18)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2377159320-826319336-1296422701-500 - Administrator - Disabled)
Guest (S-1-5-21-2377159320-826319336-1296422701-501 - Limited - Disabled)
Michal (S-1-5-21-2377159320-826319336-1296422701-1001 - Administrator - Enabled) => C:\Users\Michal

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2377159320-826319336-1296422701-1001\...\uTorrent) (Version: 3.4.9.43295 - BitTorrent Inc.)
Adobe Acrobat Reader DC - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AC0F074E4100}) (Version: 15.023.20070 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.221 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Aktualizácie NVIDIA 23.23.30.0 (Version: 23.23.30.0 - NVIDIA Corporation) Hidden
Ansel (Version: 378.78 - NVIDIA Corporation) Hidden
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version:  - )
Balabolka (HKLM-x32\...\Balabolka) (Version: 2.11.0.586 - Ilya Morozov)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform)
Connectify 2016 (HKLM\...\Connectify) (Version: 2016.0.12.37996 - Connectify)
Driver Booster (HKLM-x32\...\{C452D509-1644-40F0-8C6D-C362ACCB334E}) (Version: 4.2.0.478 - IObit)
Driver Booster 3.5 (HKLM-x32\...\Driver Booster_is1) (Version: 3.5 - IObit)
Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.14 - Lenovo)
Energy Management (x32 Version: 8.0.2.14 - Lenovo) Hidden
Far Cry Primal (HKLM-x32\...\{80BD47AF-CF13-49B2-99BF-7E78FBA26124}_is1) (Version:  - Ubisoft)
Google Talk Plugin (HKLM-x32\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 5.41.3.0 - Google)
iCloud (HKLM\...\{709A2D23-C25E-47B5-9268-CB6FEE648504}) (Version: 4.1.1.53 - Apple Inc.)
Infovox Desktop 2.2 (HKLM-x32\...\{52C32940-C538-40CF-8DE9-B91090F49938}) (Version: 2.220.3 - Acapela Group)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3277 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
iTunes (HKLM\...\{9D0D2A8B-7E7B-4D88-8D50-24286ED6A5EB}) (Version: 12.5.5.5 - Apple Inc.)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)
KairosPlanet (HKLM-x32\...\AB468267-4C4A-4672-A1D4-2D85F697E91B_is1) (Version: 1.2.1.767 - Kairos Technologies Ltd)
KMSpico v9.1.3 (HKLM\...\KMSpico_is1) (Version: 9.1.3 - )
Malwarebytes verzia 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2013 Professional Plus (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 51.0.1 (x86 sk) (HKLM-x32\...\Mozilla Firefox 51.0.1 (x86 sk)) (Version: 51.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 51.0.1.6234 - Mozilla)
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
NVIDIA GeForce Experience 3.4.0.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.4.0.70 - NVIDIA Corporation)
NVIDIA Grafický ovládač 378.78 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 378.78 - NVIDIA Corporation)
NVIDIA Ovládač 3D Vision 378.78 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 378.78 - NVIDIA Corporation)
NVIDIA Softvér systému s podporou technológie PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.4.0.70 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.3.16.0 - NVIDIA Corporation) Hidden
NvvHci (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
O&O Defrag Professional (HKLM\...\{B30EBF12-4268-45F5-8948-99C983025151}) (Version: 20.0.457 - O&O Software GmbH)
Ovládací panel NVIDIA 378.78 (Version: 378.78 - NVIDIA Corporation) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Podpora Apple aplikácií (32-bit) (HKLM-x32\...\{9BA1A894-B42F-4805-BC8C-349C905A3930}) (Version: 5.3.1 - Apple Inc.)
Podpora Apple aplikácií(64-bit) (HKLM\...\{7EAC8A42-9FAC-4F6B-AABF-C08C9F2E0F13}) (Version: 5.3.1 - Apple Inc.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.31228 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8036 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7601.39019 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.1 - Rockstar Games)
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version:  - Microsoft)
SHIELD Streaming (Version: 7.1.0351 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.4.0.70 - NVIDIA Corporation) Hidden
Skype™ 7.25 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.25.106 - Skype Technologies S.A.)
SUPERHOT (HKLM-x32\...\1456141688_is1) (Version: 2.4.0.8 - GOG.com)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.6.8 - Synaptics Incorporated)
System Requirements Lab (HKLM-x32\...\{0F659036-14C7-4622-9505-35A0DC93526A}) (Version: 6.1.3.0 - Husdawg, LLC)
Unity Web Player (HKU\S-1-5-21-2377159320-826319336-1296422701-1001\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)
Update for Skype for Business 2015 (KB3039776) 32-Bit Edition (HKLM-x32\...\{90150000-012B-041B-0000-0000000FF1CE}_Office15.PROPLUS_{5BE22EEB-8857-43A3-9E57-85666727CA3B}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3161988) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{245EB15F-A90C-422B-9D3F-3AEEDF028CCC}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3161988) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUS_{245EB15F-A90C-422B-9D3F-3AEEDF028CCC}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3161988) 32-Bit Edition (HKLM-x32\...\{90150000-012B-041B-0000-0000000FF1CE}_Office15.PROPLUS_{245EB15F-A90C-422B-9D3F-3AEEDF028CCC}) (Version:  - Microsoft)
Videora iPhone Converter 6 (HKLM-x32\...\Videora iPhone Converter) (Version: 6 - Red Kawa)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.)
Watch_Dogs 2 (HKLM-x32\...\{B0E33297-78B1-4B37-B8C1-39150F2DEE43}_is1) (Version:  - Ubisoft)
Windows Driver Package - Lenovo (ACPIVPC) System  (02/17/2013 9.52.0.776) (HKLM\...\35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E) (Version: 02/17/2013 9.52.0.776 - Lenovo)
Windows Driver Package - Lenovo (WUDFRd) LenovoVhid  (07/25/2013 10.30.0.288) (HKLM\...\6BCA401E9CBEED970D75F55FA5320F60D11984E9) (Version: 07/25/2013 10.30.0.288 - Lenovo)
WinRAR 5.10 beta 4 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)
World of Tanks (HKU\S-1-5-21-2377159320-826319336-1296422701-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812eu}_is1) (Version:  - Wargaming.net)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2377159320-826319336-1296422701-1001_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Michal\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2377159320-826319336-1296422701-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Michal\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll (Google Inc.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0E58600C-5D94-41C8-85E7-E52A80A69370} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2377159320-826319336-1296422701-1001UA => C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe [2016-02-27] (Google Inc.)
Task: {164B13DD-89E6-4BF6-B332-B54CA03CBA54} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-02-23] (NVIDIA Corporation)
Task: {1AFCDADE-9CA0-4DBF-B701-123736E093C4} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-02-23] (NVIDIA Corporation)
Task: {1B866FA8-B750-4170-BAB0-1BA56398EC55} - System32\Tasks\{E1D760D0-CC1E-41E2-BE3A-D4D04ECA1AA4} => pcalua.exe -a "C:\Program Files (x86)\youtubeadblocker\um9HiK1nFaOvYJ.exe" -c /s /n /i:"ExecuteCommands;UninstallCommands" ""
Task: {1CCFD82F-0435-4425-9700-8B88A3248117} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {2525B752-9567-410A-9CDD-FB8242EAE078} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-02-23] (NVIDIA Corporation)
Task: {2CF6F559-B85D-48AD-87B2-C2855F908AC6} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => %ProgramFiles%\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe 
Task: {313DBFE9-42B9-4E66-8E2C-2AED09C5191E} - System32\Tasks\R@1n-KMS\Windows63Professional => wmic 
Task: {351B7731-B437-4760-BC88-72074E8B4270} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-02-14] (Adobe Systems Incorporated)
Task: {3A82A068-0964-4021-AD72-DA399F060B78} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-02-23] (NVIDIA Corporation)
Task: {57BF6A9B-BE53-4AFF-949B-1DEE032A61A3} - System32\Tasks\R@1n-KMS\Office15ProPlus => wmic 
Task: {5CD662CE-17E0-4FBC-91B7-8BC8A6EB5808} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-02-23] (NVIDIA Corporation)
Task: {68D5EEDE-48DE-43A3-B8B8-0F509D599B8C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2377159320-826319336-1296422701-1001Core1d1e912b7d5884 => C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe [2016-02-27] (Google Inc.)
Task: {76030A01-97DA-4270-BDE0-DB0827F82F19} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe 
Task: {85453854-FE92-4D98-B66F-533C787C67F2} - System32\Tasks\Driver Booster SkipUAC (Michal) => C:\Program Files (x86)\IObit\Driver Booster\Driver Booster\4.2.0\DriverBooster.exe [2017-01-11] (IObit)
Task: {86CE1A41-B69F-4A68-9FF9-B6C60D229A4B} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-02-23] (NVIDIA Corporation)
Task: {A3270567-99DD-4CC9-B0FA-77744F56FA0D} - System32\Tasks\{F40FE521-7FA5-43F2-91FF-8CAD20FA4B9A} => pcalua.exe -a F:\setup.exe -d F:\
Task: {A9794EC7-8853-4EAA-B7D3-7AB75E214636} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-08-14] (Synaptics Incorporated)
Task: {CF06A7B7-97F9-48EF-8D1D-AF0493E4D18C} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe 
Task: {D1B8A6C5-82FA-455C-AC9B-4442C95C06B6} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-02-23] (NVIDIA Corporation)
Task: {DB92B33C-DEE9-45E5-9FA6-B095C0D205B4} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {E713F7D4-BFE9-4291-9F41-13034998FBF9} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe 
Task: {EE24A9C3-F6FA-4C50-B76C-B7DE2DEF903D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2377159320-826319336-1296422701-1001Core.job => C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2377159320-826319336-1296422701-1001Core1d171695578f8b8.job => C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2377159320-826319336-1296422701-1001Core1d1ab53a7b4185f.job => C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-06-11 05:52 - 2015-06-11 05:52 - 00022528 _____ () C:\Windows\System32\sst8clm.dll
2016-11-17 01:28 - 2016-11-17 01:28 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-01-13 13:56 - 2017-01-13 13:56 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-02-14 20:15 - 2017-02-14 20:15 - 00026112 _____ () C:\Windows\KMS-R@1n.exe
2016-11-24 17:53 - 2017-02-23 19:35 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-11-24 17:53 - 2017-02-23 19:35 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2014-12-11 11:38 - 2017-02-23 09:28 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-01-29 10:13 - 2017-03-03 18:25 - 02264352 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-01-29 10:14 - 2017-03-03 18:25 - 02264528 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2014-10-01 19:54 - 2014-10-01 19:54 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2016-10-20 19:52 - 2014-08-22 18:44 - 00695808 _____ () C:\Program Files (x86)\KairosPlanet\Bin\Telerik.Windows.Controls.Data.dll
2016-10-20 19:52 - 2014-09-28 16:38 - 02456064 _____ () C:\Program Files (x86)\KairosPlanet\Bin\Telerik.Windows.Controls.Charting.dll
2016-10-20 19:52 - 2014-08-22 18:44 - 00443904 _____ () C:\Program Files (x86)\KairosPlanet\Bin\Telerik.Windows.Data.dll
2016-10-20 19:52 - 2014-08-27 08:44 - 02586624 _____ () C:\Program Files (x86)\KairosPlanet\Bin\Telerik.Windows.Controls.GridView.dll
2016-10-20 19:52 - 2014-08-22 18:44 - 03041280 _____ () C:\Program Files (x86)\KairosPlanet\Bin\Telerik.Windows.Controls.Navigation.dll
2016-10-20 19:52 - 2014-09-28 16:38 - 00811520 _____ () C:\Program Files (x86)\KairosPlanet\Bin\Telerik.Windows.Controls.Chart.dll
2016-10-20 19:52 - 2014-08-22 18:44 - 01963008 _____ () C:\Program Files (x86)\KairosPlanet\Bin\Telerik.Windows.Controls.Input.dll
2016-10-20 19:52 - 2016-06-14 06:53 - 00012288 _____ () C:\Program Files (x86)\KairosPlanet\Bin\WinApp.Module.dll
2016-10-20 19:52 - 2014-08-27 08:44 - 00215040 _____ () C:\Program Files (x86)\KairosPlanet\Bin\NPoco.dll
2015-06-25 13:10 - 2016-05-25 21:30 - 00375808 _____ () C:\Program Files (x86)\KairosPlanet\Modules\Rent module\RentModule.dll
2015-01-11 17:21 - 2016-12-14 19:56 - 00925240 _____ () C:\Program Files (x86)\Connectify\log4cplus.dll
2016-11-24 17:53 - 2017-02-23 19:35 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-11-24 17:53 - 2017-02-23 19:35 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-01-13 13:56 - 2017-01-13 13:56 - 01041720 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2016-11-17 01:29 - 2016-11-17 01:29 - 00080184 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2016-11-24 17:53 - 2017-02-23 15:30 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-11-24 17:53 - 2017-02-23 15:30 - 00252352 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-11-24 17:53 - 2017-02-23 15:30 - 02443320 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-11-24 17:53 - 2017-02-23 15:30 - 00385592 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-11-24 17:53 - 2017-02-23 15:30 - 00543288 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-11-24 17:53 - 2017-02-23 15:30 - 00468536 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2377159320-826319336-1296422701-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Michal\AppData\Roaming\Microsoft\Windows Photo Viewer\Tapeta programu Windows Photo Viewer.jpg
DNS Servers: 158.195.6.2 - 158.195.6.3
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\StartupFolder: => "O&O Defrag Tray.lnk"
HKLM\...\StartupApproved\Run: => "OODefragTray"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "PWRISOVM.EXE"
HKU\S-1-5-21-2377159320-826319336-1296422701-1001\...\StartupApproved\StartupFolder: => "Badoo TB 1.0.6.lnk"
HKU\S-1-5-21-2377159320-826319336-1296422701-1001\...\StartupApproved\Run: => "Lync"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{B1E80706-5342-487F-B67D-EEAF2C2B2B27}] => (Allow) C:\Users\Michal\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{399B1D03-0AF3-48CD-97CB-4A6B4B35F1F2}] => (Allow) C:\Users\Michal\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{AFB46C73-0811-4F83-9B7B-DDA2D03212E2}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{451D79B6-DFE3-4632-BA75-E9E19BE3DCFC}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [TCP Query User{4FAF9F17-1B93-46FA-ABDF-C22705461EFB}C:\program files (x86)\connectify\connectify.exe] => (Allow) C:\program files (x86)\connectify\connectify.exe
FirewallRules: [UDP Query User{220850B6-A9D3-40C4-8AEB-711D76D9D01E}C:\program files (x86)\connectify\connectify.exe] => (Allow) C:\program files (x86)\connectify\connectify.exe
FirewallRules: [{5526458A-F28A-4FC8-8FA0-EFD8E4EBA2CE}] => (Allow) C:\Program Files (x86)\Connectify\Connectify.exe
FirewallRules: [{7214DEB3-E48D-4011-8815-97431E42183D}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{F27289F4-6570-4FAB-876A-4C36156730B0}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{290FD06D-B86D-4B43-9561-4FC8DC7849B5}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{F9FE8BA1-9A71-44EE-A0F9-0EE41BA02340}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{6E29033A-9D5E-407C-84A5-45813F98ED3F}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [TCP Query User{CFAECF33-CBBF-47F1-8A27-8D8C3111786A}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{FAE3C575-F36C-4692-BBFA-A8E1FC9C9CF6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{50D1BB3A-D1FA-4A6C-94F5-3CC83E266BF7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{B34579BA-07E9-4D89-886B-10ADEB3BD231}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{A68990EE-AD9E-4796-8E74-444BE22D05DC}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{31FE6693-3295-4FC8-8BAC-25CD66ECE6CA}D:\krychle\nhl09\nhl2009.exe] => (Allow) D:\krychle\nhl09\nhl2009.exe
FirewallRules: [UDP Query User{A260ED7B-1D59-49EF-BCDD-E4A9F70A8345}D:\krychle\nhl09\nhl2009.exe] => (Allow) D:\krychle\nhl09\nhl2009.exe
FirewallRules: [TCP Query User{D9E0FD3B-BC96-4071-AF57-ED4CC8CFC89A}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{C7462151-159D-4AC4-84D5-4DAA445A5963}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{E39FAFEF-BE05-4EF1-B882-D759FB2FEB55}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{0518F1C3-3A54-45BD-835B-2824AB3F6025}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{E8E91959-3DEA-4952-8ABD-96CBADF9A843}C:\program files (x86)\ea sports\madden nfl 08\updater.exe] => (Allow) C:\program files (x86)\ea sports\madden nfl 08\updater.exe
FirewallRules: [UDP Query User{44615B0D-83E2-4982-9CC4-BE6B6DD7A40D}C:\program files (x86)\ea sports\madden nfl 08\updater.exe] => (Allow) C:\program files (x86)\ea sports\madden nfl 08\updater.exe
FirewallRules: [{C4007176-5977-490A-B5AF-C186ADEE8E0C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C93D47F7-26BD-4BF0-A321-F527482B8D12}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{AC330F61-C3E2-4E8E-AD68-B4C39FD0C4E1}] => (Allow) C:\Hry\World_of_Tanks\WoTLauncher.exe
FirewallRules: [{B3B00C92-D328-4CF5-950B-3543B4406C5C}] => (Allow) C:\Hry\World_of_Tanks\WoTLauncher.exe
FirewallRules: [{998E04D4-2EF5-4245-A939-B3A7B398A70A}] => (Allow) C:\Hry\World_of_Tanks\worldoftanks.exe
FirewallRules: [{8AC74081-ACB7-44FF-830A-7946DF381F1B}] => (Allow) C:\Hry\World_of_Tanks\worldoftanks.exe
FirewallRules: [{8FF0BE84-A60F-4CE3-B271-67DB57835FFF}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{DD108410-5C8D-4F17-861C-933D22409CA4}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{8405743A-066D-4510-A5A3-8A09A4A1F516}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{35D63167-EE58-41B4-8101-FAE5F5B6BD43}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{EB574511-0234-4E58-8904-94B615BB7812}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{12A98015-E243-457B-9F0F-4A5FF63E0266}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{94FF7B63-7390-4AAF-9D0A-4B116962419D}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{DAD31875-EB5A-44B9-AE06-DA69C804DA0C}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{8993FC79-EC0A-4F16-A482-6444DD229AE7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{28FC3238-7506-43B5-9FE2-DDB839DC989F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{3DF74854-5471-4475-A5B5-23C6654E63BA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{4E586DCF-BEF8-41DC-9ED4-5EFB152BC784}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{48B71573-C118-45BF-9F5C-A7DB10E38FE8}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{5BFF8764-D058-4C4A-A265-FF29658C2BAE}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{36FFD254-826A-4CC3-9D04-EB62D593B192}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{2F0BAEC1-E37D-4DC1-9395-D7EC1E279F6D}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [TCP Query User{BF2D809D-2951-4596-95DB-97EB115B25CA}D:\sťahovania\hry\feed.and.grow.fish.v0.5.0\feed.and.grow.fish.v0.5.0\feed and grow.exe] => (Allow) D:\sťahovania\hry\feed.and.grow.fish.v0.5.0\feed.and.grow.fish.v0.5.0\feed and grow.exe
FirewallRules: [UDP Query User{5AEB323E-CAE0-447D-974C-53CE963D4124}D:\sťahovania\hry\feed.and.grow.fish.v0.5.0\feed.and.grow.fish.v0.5.0\feed and grow.exe] => (Allow) D:\sťahovania\hry\feed.and.grow.fish.v0.5.0\feed.and.grow.fish.v0.5.0\feed and grow.exe
FirewallRules: [TCP Query User{D753BADD-6C9E-4E50-9EDA-75F858B65E6E}C:\program files (x86)\dishonored\binaries\win32\dishonored.exe] => (Allow) C:\program files (x86)\dishonored\binaries\win32\dishonored.exe
FirewallRules: [UDP Query User{10E08662-DE02-4FCC-A039-16A0BDBC389D}C:\program files (x86)\dishonored\binaries\win32\dishonored.exe] => (Allow) C:\program files (x86)\dishonored\binaries\win32\dishonored.exe
FirewallRules: [TCP Query User{3AFA20FA-3865-41B4-95F0-8E0C9AD0CA1A}C:\program files (x86)\dishonored\binaries\win32\dishonored.exe] => (Block) C:\program files (x86)\dishonored\binaries\win32\dishonored.exe
FirewallRules: [UDP Query User{C7620864-5C55-4DF1-8F6A-044587ADB2F4}C:\program files (x86)\dishonored\binaries\win32\dishonored.exe] => (Block) C:\program files (x86)\dishonored\binaries\win32\dishonored.exe
FirewallRules: [TCP Query User{9DF18080-B55F-490B-A331-6D8DBC172593}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{994C3DFA-5B8C-42DB-8127-2711E9E501FC}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [{D6B70C0B-EE1C-485A-906C-E1E72978E910}] => (Allow) LPort=1688
FirewallRules: [TCP Query User{97E530DA-71CC-4FDC-A5DB-88C989FD0867}C:\program files (x86)\counter-strike 1.6\hl.exe] => (Allow) C:\program files (x86)\counter-strike 1.6\hl.exe
FirewallRules: [UDP Query User{74DAC268-58CB-4AB7-BEA6-619BA53D3B5C}C:\program files (x86)\counter-strike 1.6\hl.exe] => (Allow) C:\program files (x86)\counter-strike 1.6\hl.exe
FirewallRules: [{9A029B48-7CDA-4CCD-9C06-F5F98E65A98C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{A2E54270-D542-4DC1-94C6-6273288BB6CB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{00DF76D3-87F5-4614-8426-8AD9CFEAE916}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4D8C7FBE-36DA-403A-A767-4B88AB3019C1}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{E3DAAF7B-062C-4245-A025-052858006C16}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{0B8C83AC-9B7B-4A8F-9B7D-D51D38BFDD2C}C:\program files (x86)\far cry primal\bin\fcprimal.exe] => (Allow) C:\program files (x86)\far cry primal\bin\fcprimal.exe
FirewallRules: [UDP Query User{627AFCD1-0502-43F5-AE0E-154AF53B2DCC}C:\program files (x86)\far cry primal\bin\fcprimal.exe] => (Allow) C:\program files (x86)\far cry primal\bin\fcprimal.exe
FirewallRules: [{6E6C2501-BFE0-4B08-8151-49EEC13E011F}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\Driver Booster\4.2.0\DriverBooster.exe
FirewallRules: [{2042BA87-388B-4618-A4F6-E74FE2F7B0A7}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\Driver Booster\4.2.0\DriverBooster.exe
FirewallRules: [{261A3342-7C5B-402A-AB07-B233A613CFFD}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\Driver Booster\4.2.0\DBDownloader.exe
FirewallRules: [{6F62D4DE-A817-4052-9ADA-35078355FDC1}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\Driver Booster\4.2.0\DBDownloader.exe
FirewallRules: [{4FF668D7-90B1-4794-8549-DDEBB2380FD5}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\Driver Booster\4.2.0\AutoUpdate.exe
FirewallRules: [{A3041025-5B2A-4F90-B357-5D2AFC1123C2}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\Driver Booster\4.2.0\AutoUpdate.exe
FirewallRules: [{874A2A7C-0371-40DC-987C-4B07AB589D56}] => (Allow) C:\Windows\KMS-R@1n.exe
FirewallRules: [{80E346C2-2A16-4975-B385-3B50334DEE1C}] => (Allow) C:\Windows\KMS-R@1n.exe
FirewallRules: [{E48A6C84-FD9D-4561-9BBA-A2164B8972AA}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{B4A76C32-8763-4AD9-9E7E-9BC22E7708E2}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{DA9D75A2-46F5-479E-93BB-C62486188AC8}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{5CCA5BE0-83D7-4DF8-8BA0-280E81BB3F08}] => (Allow) C:\Program Files (x86)\Connectify\Connectifyd.exe
FirewallRules: [{674B168B-6179-4FB2-8AAC-B33FAF92390B}] => (Allow) C:\Program Files (x86)\Connectify\Connectifyd.exe
FirewallRules: [{9F75CB6E-4BD7-492F-9A9A-0F889194FB68}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{F4C81FB9-9099-40E2-8806-0D3F0E789D4B}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{1019D8CE-E1C7-47DE-8B70-5AE5ABEE7280}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{F0A51B18-AFF5-4E42-84B8-F61B36D242F9}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{85413726-B375-4E29-BE45-6EE3228C4A75}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{EA9FA5FF-B3DF-4265-80A5-673FD7660DBB}] => (Allow) C:\Program Files (x86)\Connectify\Connectifyd.exe
FirewallRules: [{31CC3296-FB40-41E9-8CCE-7BBB6EC63E77}] => (Allow) C:\Program Files (x86)\Connectify\Connectifyd.exe
FirewallRules: [{F0233A44-0BE9-4548-AE09-330BA0134A6D}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{114F229D-6FF9-47DF-A20B-C927FDD6EC9D}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{B922C09A-F86D-4E9F-963E-7CD81EED67CD}] => (Allow) C:\Program Files (x86)\Connectify\Connectifyd.exe
FirewallRules: [{D2D335A0-BB8F-4252-9FFD-80160928BD1C}] => (Allow) C:\Program Files (x86)\Connectify\Connectifyd.exe
FirewallRules: [{00AD196D-060F-416D-A706-7FD28DDC2966}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{0CF78EE8-3904-4190-AA6B-FF1F762DDF83}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{A9CF8065-DD2C-4CD6-AB17-846F7D495BCD}] => (Allow) C:\Program Files (x86)\Connectify\Connectifyd.exe
FirewallRules: [{DC60D24C-F212-4273-A3F6-BB46DDE3A709}] => (Allow) C:\Program Files (x86)\Connectify\Connectifyd.exe
FirewallRules: [{F68B74BF-3E5D-46F5-BFA3-9D9B6B60B759}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{4AE34794-E657-4BB1-9B04-AA98EB6A1E08}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{884D03F6-498C-43EC-AB36-276409569AC0}] => (Allow) C:\Program Files (x86)\Connectify\Connectifyd.exe
FirewallRules: [{2574C232-BEBD-4570-9ECD-50FCFB9DF8E9}] => (Allow) C:\Program Files (x86)\Connectify\Connectifyd.exe
FirewallRules: [{8164D0D5-F1D5-4770-BCD7-EC10934DC9C7}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{944A2A2C-BE22-483A-989D-686615E5EC15}] => (Allow) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
FirewallRules: [{11429C66-40D1-4F0F-BD5F-CC1CC4CF080E}] => (Allow) C:\Program Files (x86)\Connectify\Connectifyd.exe
FirewallRules: [{96AC3AFE-A19D-4632-94CE-239C9B62C1AA}] => (Allow) C:\Program Files (x86)\Connectify\Connectifyd.exe

==================== Restore Points =========================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/14/2017 10:17:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20856 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1dec

Start Time: 01d29ca304b86957

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: f8dd077a-0896-11e7-8337-20689df47b9e

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

Error: (03/14/2017 10:11:46 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20856 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: c50

Start Time: 01d29ca2493797c8

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: 3d72cc7a-0896-11e7-8337-20689df47b9e

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

Error: (03/14/2017 08:27:15 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MICHAL)
Description: Aktivácia aplikácie microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 zlyhala pre chybu: -2144927142 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.

Error: (03/14/2017 08:14:10 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20856 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 27bc

Start Time: 01d29c9199da35fa

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: d035176b-0885-11e7-8336-20689df47b9e

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

Error: (03/14/2017 08:07:11 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MICHAL)
Description: Aktivácia aplikácie microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 zlyhala pre chybu: -2144927142 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.

Error: (03/14/2017 08:07:07 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MICHAL)
Description: Aktivácia aplikácie microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail zlyhala pre chybu: -2147024865 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.

Error: (03/14/2017 08:07:07 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MICHAL)
Description: Aktivácia aplikácie microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail zlyhala pre chybu: -2147024865 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.

Error: (03/14/2017 08:07:07 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MICHAL)
Description: Aktivácia aplikácie microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail zlyhala pre chybu: -2147024865 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.

Error: (03/14/2017 08:07:07 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MICHAL)
Description: Aktivácia aplikácie microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail zlyhala pre chybu: -2147024865 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.

Error: (03/14/2017 08:07:07 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MICHAL)
Description: Aktivácia aplikácie microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail zlyhala pre chybu: -2147024865 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.


System errors:
=============
Error: (03/14/2017 10:05:39 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 9:37:11 on ‎14.‎3.‎2017 was unexpected.

Error: (03/14/2017 09:53:35 AM) (Source: iaStor) (EventID: 9) (User: )
Description: The device, \Device\Ide\iaStor0, did not respond within the timeout period.

Error: (03/14/2017 09:52:34 AM) (Source: iaStor) (EventID: 9) (User: )
Description: The device, \Device\Ide\iaStor0, did not respond within the timeout period.

Error: (03/14/2017 09:51:33 AM) (Source: iaStor) (EventID: 9) (User: )
Description: The device, \Device\Ide\iaStor0, did not respond within the timeout period.

Error: (03/14/2017 09:50:32 AM) (Source: iaStor) (EventID: 9) (User: )
Description: The device, \Device\Ide\iaStor0, did not respond within the timeout period.

Error: (03/14/2017 09:48:31 AM) (Source: iaStor) (EventID: 9) (User: )
Description: The device, \Device\Ide\iaStor0, did not respond within the timeout period.

Error: (03/14/2017 09:47:30 AM) (Source: iaStor) (EventID: 9) (User: )
Description: The device, \Device\Ide\iaStor0, did not respond within the timeout period.

Error: (03/14/2017 09:45:30 AM) (Source: iaStor) (EventID: 9) (User: )
Description: The device, \Device\Ide\iaStor0, did not respond within the timeout period.

Error: (03/14/2017 09:43:29 AM) (Source: iaStor) (EventID: 9) (User: )
Description: The device, \Device\Ide\iaStor0, did not respond within the timeout period.

Error: (03/14/2017 09:38:28 AM) (Source: iaStor) (EventID: 9) (User: )
Description: The device, \Device\Ide\iaStor0, did not respond within the timeout period.


CodeIntegrity:
===================================
  Date: 2017-02-01 09:26:19.911
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-31 09:43:51.485
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-30 08:28:28.868
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-29 09:50:24.672
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-28 09:35:02.099
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-27 07:33:52.435
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-26 08:39:10.223
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-24 08:53:32.059
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-23 09:37:24.355
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-20 08:52:15.280
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-3632QM CPU @ 2.20GHz
Percentage of memory in use: 36%
Total physical RAM: 8053.6 MB
Available physical RAM: 5118.67 MB
Total Virtual: 16245.6 MB
Available Virtual: 13294.65 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:200.01 GB) (Free:34.81 GB) NTFS
Drive d: (DATA) (Fixed) (Total:731.16 GB) (Free:273.72 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1ACD2E17)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=200 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=731.2 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================