Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02.01.2018
Ran by Pedro (12-01-2018 13:37:41)
Running from C:\Users\Pedro\Desktop
Windows 8.1 (Update) (X64) (2014-12-30 21:17:34)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2121847970-1608828601-3914908799-500 - Administrator - Disabled)
Guest (S-1-5-21-2121847970-1608828601-3914908799-501 - Limited - Disabled)
Pedro (S-1-5-21-2121847970-1608828601-3914908799-1001 - Administrator - Enabled) => C:\Users\Pedro

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2121847970-1608828601-3914908799-1001\...\uTorrent) (Version: 3.5.1.44332 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (HKLM\...\{13DA9C7C-EBFB-40D0-94A1-55B42883DF21}) (Version: 21.2.1 - HP Inc.) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Flash Player 28 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 28.0.0.137 - Adobe Systems Incorporated)
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Reader 9.3 - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-A93000000001}) (Version: 9.3.0 - Adobe Systems Incorporated)
Advertising Center (HKLM-x32\...\{B2EC4A38-B545-4A00-8214-13FE0E915E6D}) (Version: 0.0.0.2 - Nero AG) Hidden
ALFA plus 8.90.00 - C:\Program Files (x86)\KROS\ALFA plus\ (HKLM-x32\...\{52564FF0-090E-4626-9173-B52C5794531B}) (Version: 8.90.00 - KROS a.s.)
Apache Tomcat 8.0.15 (HKLM\...\nbi-tomcat-8.0.15.0.0) (Version:  - )
Atmel ARM GNU Toolchain (HKLM-x32\...\{614169DF-3529-46EC-8CF2-E02865A01E8F}) (Version: 4.8.1437 - Atmel)
Atmel AVR (32 bit) GNU Toolchain (HKLM-x32\...\{C342B5D0-D95A-4B39-9262-2CC3CE3F39B2}) (Version: 3.4.1067 - Atmel)
Atmel AVR (8 bit) GNU Toolchain (HKLM-x32\...\{6E3D61B8-F3EC-462D-91F9-49D03A97053E}) (Version: 3.4.1061 - Atmel)
Atmel JungoUSB (HKLM-x32\...\{FE01BE4D-8F14-4625-9217-8F30AD8DEC1E}) (Version: 6.2.88 - Atmel) Hidden
Atmel Kits (HKLM-x32\...\{E6A7EA6C-C0C7-4D02-9D5B-7DF927B829E6}) (Version: 6.2.60 - Atmel)
Atmel LibUSB (HKLM-x32\...\{4D510684-248D-4A8F-BF95-32F5387B42C0}) (Version: 6.2.39 - Atmel) Hidden
Atmel SeggerUSB (HKLM-x32\...\{BF283CA4-D61C-439B-B6D8-42EC418CC82E}) (Version: 6.2.25 - Atmel) Hidden
Atmel Studio 6.2 (HKLM-x32\...\{B138510D-03DB-4AD5-BBAB-5029F6DFC8CB}) (Version: 6.2.1502 - Atmel)
Atmel Studio Backend (HKLM-x32\...\{70094FC6-2B70-4D43-9702-E2AEBBA2E8C7}) (Version: 1.12.4075 - Atmel Corporation)
Atmel Studio InfFiles (HKLM-x32\...\{439A65C7-B99D-440B-9560-C198A33E0342}) (Version: 6.2.734 - Atmel Corporation) Hidden
Atmel Studio Memory Logger (HKLM-x32\...\{053538A7-0B52-4CA9-9728-D506BFAA42BD}) (Version: 6.2.171 - Atmel)
Atmel USB (HKLM-x32\...\{E8F8861D-98E0-43FF-9E48-AC236CC3BE4E}) (Version: 10.6 - Atmel)
Atmel USB Driver Package (HKLM-x32\...\{d675ccbf-bd29-44f0-8f3c-70b67a0360e5}) (Version: 6.2.342 - Atmel)
Atmel WinUSB (HKLM-x32\...\{20970A09-9BF6-442D-A678-E7F183CBA079}) (Version: 6.2.25 - Atmel) Hidden
AtmelSoftwareFramework (HKLM-x32\...\{39069CC0-B237-4C9F-9AAC-00CA27C4F44A}) (Version: 3.21.0.1297 - Atmel)
ATnotes Version 9.5 (HKLM-x32\...\ATnotes_is1) (Version: 9.5 - Thomas Ascher)
AutoCAD 2015 – Čeština (Czech) (HKLM\...\{5783F2D7-E001-0000-0102-0060B0CE6BBA}) (Version: 20.0.51.0 - Autodesk) Hidden
AutoCAD 2015 – Čeština (Czech) (HKLM\...\{5783F2D7-E001-0405-2102-0060B0CE6BBA}) (Version: 20.0.51.0 - Autodesk) Hidden
AutoCAD 2015 Language Pack – Čeština (Czech) (HKLM\...\{5783F2D7-E001-0405-1102-0060B0CE6BBA}) (Version: 20.0.51.0 - Autodesk) Hidden
Autodesk App Manager (HKLM-x32\...\{C8125548-F2D5-4059-823F-1F3C5BBD9F19}) (Version: 1.2.0 - Autodesk)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 5.0.142.14 - Autodesk)
Autodesk AutoCAD 2015 – Čeština (Czech) (HKLM\...\AutoCAD 2015 – Čeština (Czech)) (Version: 20.0.51.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool Version 1.2.2 (HKLM-x32\...\{85735431-6CD3-4B16-BEC8-95332034E53B}) (Version: 1.2.2.0 - Autodesk)
Autodesk BIM 360 Glue AutoCAD 2015 Add-in 64 bit (HKLM\...\{9D589081-AFC2-4932-9071-AC585AC1EA83}) (Version: 3.32.3004 - Autodesk)
Autodesk Content Service (HKLM-x32\...\{A37CDB58-AAE8-0000-8C13-E0F7BACB0D5F}) (Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk)
Autodesk Content Service Language Pack (HKLM-x32\...\{A37CDB58-AAE8-0001-8C13-E0F7BACB0D5F}) (Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Featured Apps (HKLM-x32\...\{EDDEE94B-214D-4B07-9727-A3E46F3E379A}) (Version: 1.2.0 - Autodesk)
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
Avira (HKLM-x32\...\{518c54f5-fd43-4aa6-936b-8d7fd8c85cbd}) (Version: 1.2.103.26908 - Avira Operations GmbH & Co. KG)
Avira (HKLM-x32\...\{E3F659C3-7936-4321-B886-4DA527DA72FE}) (Version: 1.2.103.26908 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.34.17 - Avira Operations GmbH & Co. KG)
AVR macro Assembler (HKLM-x32\...\{251D9F73-6297-4941-9016-EA787F708FDF}) (Version: 2.1.1175 - Atmel)
aWARemote Server 3.0.3 (HKLM-x32\...\aWARemote Server) (Version: 3.0.3 - GeB Development)
AX88772A & AX88772 Windows 7 Drivers (HKLM-x32\...\{CEFA48AF-74CA-4298-A4B2-0646D5E37CA7}) (Version: 2.0.1.0 - ASIX Electronics Corporation) Hidden
AX88772A & AX88772 Windows 7 Drivers (HKLM-x32\...\InstallShield_{CEFA48AF-74CA-4298-A4B2-0646D5E37CA7}) (Version: 2.0.1.0 - ASIX Electronics Corporation)
Backup and Sync from Google (HKLM-x32\...\{908DB568-E5FA-40C7-A2AA-AB340190858B}) (Version: 3.38.7642.3857 - Google, Inc.)
Bad Piggies (HKLM-x32\...\{6A062CC2-747A-455F-9892-5CF7F86EA451}) (Version: 1.5.1 - Rovio Entertainment Ltd.)
BloodRayne 2 (HKLM-x32\...\{04CB9967-A8BB-468C-ABA6-CE87328712BE}) (Version: 1.00.0000 - )
Brackets (HKLM-x32\...\{4BCC5124-095C-4871-8562-55FA29DD8773}) (Version: 1.1 - brackets.io)
CCleaner (HKLM\...\CCleaner) (Version: 5.38 - Piriform)
Combined Community Codec Pack 2014-07-13 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2014.07.13.0 - CCCP Project)
Combined Community Codec Pack 64bit 2015-10-18 (HKLM\...\Combined Community Codec Pack 64bit_is1) (Version: 2015.10.19.0 - CCCP Project)
CopyTrans Control Center Uninstall Only (HKU\S-1-5-21-2121847970-1608828601-3914908799-1001\...\CopyTrans Suite) (Version: 4.013 - WindSolutions)
Dependency Package Update (HKLM\...\{0788641D-D31A-478D-BB34-C41564AE9F93}) (Version: 1.6.38.00 - Lenovo Inc.) Hidden
Dependency Package Update (HKLM\...\{5252431C-288E-409D-ADCF-24407E0E6F70}) (Version: 1.6.25.00 - Lenovo Inc.) Hidden
Dependency Package Update (HKLM\...\{FFED38DF-94DC-4FF9-96C1-A6990EDA6B03}) (Version: 1.6.29.00 - Lenovo Inc.) Hidden
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.5.1.1 - Dolby Laboratories Inc)
DolbyFiles (HKLM-x32\...\{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF}) (Version: 2.0 - Nero AG) Hidden
EAGLE 7.1.0 (HKLM-x32\...\EAGLE 7.1.0) (Version: 7.1.0 - CadSoft Computer GmbH)
EaseUS Partition Master 12.8 Trial Edition (HKLM-x32\...\EaseUS Partition Master Trial Edition_is1) (Version:  - EaseUS)
EasyBluePrint (HKLM-x32\...\{598B5BFB-3491-4C9B-9D20-F6477932FFCE}) (Version: 1.00.0000 - Lazycat Labs LLC)
Elcomm (HKLM-x32\...\Elcomm) (Version:  - )
Energy Manager (HKLM-x32\...\{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.0.0.35 - Lenovo) Hidden
Energy Manager (HKLM-x32\...\InstallShield_{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.0.0.35 - Lenovo)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )
EPSON SX110 Series Printer Uninstall (HKLM\...\EPSON SX110 Series) (Version:  - SEIKO EPSON Corporation)
EPSON USB Display (HKLM-x32\...\{7650F538-6274-44EA-8F50-843479073333}) (Version: 1.41.000 - SEIKO EPSON CORPORATION)
Folder Colorizer version 1.3.3 (HKLM\...\{A133E9CD-2879-4F30-87D4-1604AFD5C5CC}_is1) (Version: 1.3.3 - Softorino)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 8.3.2.25013 - Foxit Software Inc.)
Free Alarm Clock (HKLM-x32\...\{8ED5A2F1-338F-4608-8AF7-BCD1ADC1E1F7}_is1) (Version: 4.0.1.0 - Comfort Software Group)
Free IP Tools (HKLM-x32\...\Free IP Tools) (Version: 4.2 - TamoSoft)
Freelang (HKLM-x32\...\{0F44DC3F-6E62-4AB1-A14B-56223C512F9B}_is1) (Version: 4.3.0.1 - Freelang.net)
Freelang (HKLM-x32\...\{A09E2D66-B931-415C-A9DE-FF030AB5AD77}_is1) (Version:  - Freelang)
Furnish Pro (HKLM-x32\...\Furnish Pro) (Version:  - )
GDR 3128 for SQL Server 2012 (KB2793634) (64-bit) (HKLM\...\KB2793634) (Version: 11.1.3128.0 - Microsoft Corporation)
GlassFish Server Open Source Edition 4.1 (HKLM\...\nbi-glassfish-mod-4.1.0.13.0) (Version:  - )
Gmail Notifier Pro (HKLM-x32\...\{78F5DFAB-8045-4394-81F1-1DDAB6107852}) (Version: 5.2.4.0 - IntelliBreeze Software)
Google Earth Pro (HKLM-x32\...\{35DAA04C-1720-4BE3-A920-A03731EC6A1D}) (Version: 7.1.5.1557 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 63.0.3239.132 - Spoločnosť Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Hightail for Lenovo (HKLM\...\{2F10E937-F6D7-4174-8AB9-B299E8FC5CEC}) (Version: 2.4.97.2857 - Hightail, Inc.)
Hikvision Tools (HKLM-x32\...\{9B5AA48E-8104-47FA-A8D8-F35DAADC7CC8}) (Version: 1.00.000 - company)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Photosmart 5510 series Basic Device Software (HKLM\...\{CFF43B48-42A1-4967-9506-7E341BBD075F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart 5510d series Basic Device Software (HKLM\...\{8800943A-4158-4B5B-8E6B-A0AC63E10A91}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart 5510d series Help (HKLM-x32\...\{E59ADA18-03DB-44F5-9EF5-0FA25E4D4384}) (Version: 140.0.2.2 - Hewlett Packard)
HP Photosmart 5510d series Product Improvement Study (HKLM\...\{A1D10BB4-412F-4BA5-9A90-43DB2870D989}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
Chrome Remote Desktop Host (HKLM-x32\...\{D61C8E6E-A4F3-4CD8-8568-51CEB5660C89}) (Version: 63.0.3239.32 - Google Inc.)
ImagXpress (HKLM-x32\...\{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}) (Version: 7.0.74.0 - Nero AG) Hidden
Inkscape 0.92.2 (HKLM-x32\...\Inkscape) (Version: 0.92.2 - Inkscape Project)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) 4.0 (HKLM-x32\...\{96C730E4-F055-4118-BDF3-6E071763853C}) (Version: 3.0.1342.02 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{7e493493-a430-4b7b-b8a2-48d61599e220}) (Version: 17.0.0 - Intel Corporation)
IP Camera Viewer 3 (HKLM-x32\...\IP Camera Viewer_is1) (Version:  - DeskShare Inc.)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iSpy (64 bit) (HKLM\...\{B449E0C0-055B-43A4-94CC-DDE43A5AF396}) (Version: 6.8.0.0 - DeveloperInABox)
iSpy package installer (64 bit) (HKLM-x32\...\{aaff7b58-b6ed-4c59-84a3-707d7d457f18}) (Version: 6.8.0.0 - DeveloperInABox)
iVMS-4200(v2.5.1.7) (HKLM-x32\...\{7697245D-2E00-4B83-AD27-C051DE314D1F}) (Version: 2.5.1.7 - hikvision)
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java SE Development Kit 8 Update 31 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180310}) (Version: 8.0.310.13 - Oracle Corporation)
JLink OB CDC Driver Package (HKLM\...\{85153CE3-6356-407F-A672-C1FA085FB031}) (Version: 1.2.2 - SEGGER)
JLink OB CDC Driver Package (HKLM\...\{CD0E9FFE-70DD-47E3-A7A5-750E9DE6F40B}) (Version: 1.2.1 - SEGGER)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version:  - )
KONICA MINOLTA magicolor 2530DL (HKLM\...\KONICA MINOLTA magicolor 2530DL) (Version:  - )
Ladicka (HKLM-x32\...\Ladicka) (Version:  - )
Lenovo Dependency Package (HKLM\...\Lenovo Dependency Package_is1) (Version: 1.6.25.00 - Lenovo Group Limited)
Lenovo FusionEngine  (HKLM-x32\...\Lenovo FusionEngine) (Version: 1.0.13.0 - Lenovo, Inc.)
Lenovo Mobile Phone Wireless Import (HKLM-x32\...\{DFB2E0D6-8DDE-49A4-B8F7-03C14DACCBA6}) (Version: 1.1.1.9 - Lenovo) Hidden
Lenovo Mobile Phone Wireless Import (HKLM-x32\...\InstallShield_{DFB2E0D6-8DDE-49A4-B8F7-03C14DACCBA6}) (Version: 1.1.1.9 - Lenovo)
Lenovo Motion Control (HKLM-x32\...\{E9325F15-6339-45E8-9DC4-C2D44B623039}) (Version: 2.5.1.0224 - PointGrab) Hidden
Lenovo Motion Control (HKLM-x32\...\InstallShield_{E9325F15-6339-45E8-9DC4-C2D44B623039}) (Version: 2.5.1.0224 - PointGrab)
Lenovo OneKey Recovery (HKLM\...\{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.2105 - CyberLink Corp.) Hidden
Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.2105 - CyberLink Corp.)
Lenovo Photo Master (HKLM-x32\...\{BC94C56A-3649-420C-8756-2ADEBE399D33}) (Version: 1.0.1823.01 - CyberLink Corp.) Hidden
Lenovo Photo Master (HKLM-x32\...\InstallShield_{BC94C56A-3649-420C-8756-2ADEBE399D33}) (Version: 1.0.1823.01 - CyberLink Corp.)
Lenovo Service Bridge (HKU\S-1-5-21-2121847970-1608828601-3914908799-1001\...\dda9ca0b023f4c56) (Version: 1.6.5.3 - Lenovo)
Lenovo SHAREit (HKLM-x32\...\Lenovo SHAREit_is1) (Version: 2.0.5.0 - Lenovo Group Limited)
Lenovo Smart Voice (HKLM\...\Lenovo SmartVoice) (Version: 1.0.2.4 - Lenovo)
Lenovo Transition (HKLM\...\Lenovo Transition) (Version: 2.0.13.10181 - Lenovo)
Lenovo VeriFace Pro (HKLM\...\Lenovo VeriFace) (Version: 5.0.14.1061 - Lenovo)
Lenovo Yoga 2 Demo (HKLM-x32\...\{03C682A4-05CD-4D22-B50A-B9C3C5F2B137}) (Version: 1.0.7 - Lenovo)
Lenovo Yoga PhoneCompanion (HKLM-x32\...\{0F82EA83-B0C5-4AB9-9695-DFE92C5FD57B}) (Version: 1.1.9.5 - Lenovo) Hidden
Lenovo Yoga PhoneCompanion (HKLM-x32\...\InstallShield_{0F82EA83-B0C5-4AB9-9695-DFE92C5FD57B}) (Version: 1.1.9.5 - Lenovo)
Lightshot-5.4.0.10 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.10 - Skillbrains)
Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech)
Lyrics Plugin for Winamp (HKLM-x32\...\{75E9A522-65D2-4200-A95F-C3EF89703263}) (Version: 0.4 - Lyrics Plugin)
Malwarebytes verzia 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
MATLAB R2010a (HKLM\...\MatlabR2010a) (Version: 7.10 - The MathWorks, Inc.)
Menu Templates - Starter Kit (HKLM-x32\...\{B78120A0-CF84-4366-A393-4D0A59BC546C}) (Version: 9.4.6.0 - Nero AG) Hidden
Metrel PATLink PRO v1.9.33 (HKLM-x32\...\{46DDADC9-A605-41A3-B1A4-8FE9665C3653}) (Version: 1.9.33.0 - Metrel, d.d.)
Metric Collection SDK 35 (HKLM-x32\...\{C2B5B5B0-2545-4E94-B4BA-548D4BF0B196}) (Version: 1.2.0001.00 - Lenovo Group Limited) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Office 2013 Professional Plus (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{4E968D9C-21A7-4915-B698-F7AEB913541D}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 Setup Support Files  (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation)
Microsoft SQL Server 2012 (64-bit) (HKLM\...\Microsoft SQL Server SQLServer2012) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Setup (English) (HKLM\...\{8CB0713F-CFE0-445D-BCB2-538465860E1A}) (Version: 11.1.3128.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{2A2F3AE8-246A-4252-BB26-1BEB45627074}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Runtime - 10.0.30319 (HKLM-x32\...\{6A86554B-8928-30E4-A53C-D7337689134D}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{1b103cea-f037-4504-81de-956057b442c3}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Shell (Isolated) - ENU (HKLM-x32\...\{D64B6984-242F-32BC-B008-752806E5FC44}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft VSS Writer for SQL Server 2012 (HKLM\...\{3E0DD83F-BE4C-4478-86A0-AD0D79D1353E}) (Version: 11.1.3000.0 - Microsoft Corporation)
Mozilla Firefox 57.0.2 (x64 en-US) (HKLM\...\Mozilla Firefox 57.0.2 (x64 en-US)) (Version: 57.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 57.0.2.6549 - Mozilla)
Mp3tag v2.74 (HKLM-x32\...\Mp3tag) (Version: v2.74 - Florian Heidenreich)
MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)
MySQL Connector/ODBC 3.51 (HKLM-x32\...\{0CB3C535-1171-4A20-B549-E2CB5DEB9723}) (Version: 3.51.12 - MySQL AB)
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (HKLM\...\{90150000-001F-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (HKLM\...\{90150000-001F-041B-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Need for Speed Underground 2 (HKLM-x32\...\{909F8EBC-EC7F-48FF-0085-475D818F0F31}) (Version:  - )
Nero 9 (HKLM-x32\...\{a6e6186e-ea6e-4648-923f-b5034d1fbd78}) (Version:  - Nero AG)
NetBeans IDE 8.0.2 (HKLM\...\nbi-nb-base-8.0.2.0.201411181905) (Version: 8.0.2 - NetBeans.org)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.5 - Notepad++ Team)
Notepad2 (Notepad Replacement) (HKLM\...\Notepad2) (Version: 4.2.25  - Florian Balmer)
NVIDIA PhysX (HKLM-x32\...\{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}) (Version: 9.10.0514 - NVIDIA Corporation)
PDF Settings CS5 (HKLM-x32\...\{A78FE97A-C0C8-49CE-89D0-EDD524A17392}) (Version: 10.0 - Adobe Systems Incorporated) Hidden
Podpora Apple aplikácií (32-bit) (HKLM-x32\...\{D079CAAD-0C31-47A2-9AF5-A82F9CD9B221}) (Version: 5.2 - Apple Inc.)
PowerISO (HKLM-x32\...\PowerISO) (Version: 5.2 - Power Software Ltd)
PuTTY (HKLM-x32\...\{ED9EF59B-0799-428E-823D-6D2B7B4FE2E0}) (Version: 0.67.0.0 - Simon Tatham)
RAR Password Unlocker (HKLM-x32\...\{69B77D45-F5AD-4AB9-933D-352703324469}_is1) (Version:  - RAR Password Unlocker, Inc.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.31228 - Realtek Semiconductor Corp.)
REALTEK DTV USB DEVICE (HKLM-x32\...\{DDBB7C89-1A09-441E-AA0F-6AA465755C17}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7161 - Realtek Semiconductor Corp.)
RemoteControl for Winamp (HKLM-x32\...\RemoteControl for Winamp1.00) (Version: 1.00 - Martin Schlodinski)
Saturn-W8 (HKLM-x32\...\ST6UNST #1) (Version:  - )
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for SQL Server 2012 (KB2674319) (64-bit) (HKLM\...\KB2674319) (Version: 11.1.3000.0 - Microsoft Corporation)
Should I Remove It (HKLM-x32\...\{4E62123C-4C0D-4123-A8A2-C0103B92D7EA}) (Version: 1.0.4 - Reason Software Company Inc.) Hidden
Should I Remove It (HKU\S-1-5-21-2121847970-1608828601-3914908799-1001\...\Should I Remove It 1.0.4) (Version: 1.0.4 - Reason Software Company Inc.)
SketchUp Import (HKLM-x32\...\{C403E867-FCF1-432B-BCC1-8FFD40A10A6E}) (Version: 1.2.0 - Autodesk)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.3.0.9150 - Microsoft Corporation)
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.103 - Skype Technologies S.A.)
Sony PC Companion 2.10.245 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.245 - Sony)
SQL Server 2012 Common Files (HKLM\...\{1D411379-9CE0-4B13-A19B-72D3222DD620}) (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
SQL Server 2012 Common Files (HKLM\...\{202AAF1F-69AA-442A-B59F-6B54B1AD07C6}) (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
SQL Server 2012 Database Engine Services (HKLM\...\{18B2A97C-92C3-4AC7-BE72-F823E0BC895B}) (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
SQL Server 2012 Database Engine Services (HKLM\...\{84FBCA4A-D650-4B0D-8094-EC0671FA9B91}) (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
SQL Server 2012 Database Engine Shared (HKLM\...\{54FF8FAB-DE27-4187-82F1-EBAE6AEE869A}) (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
SQL Server 2012 Database Engine Shared (HKLM\...\{6603C2CE-3C54-4F1D-92F9-8390CD4CCCA8}) (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
SQL Server Browser for SQL Server 2012 (HKLM-x32\...\{4B9E6EB0-0EED-4E74-9479-F982C3254F71}) (Version: 11.1.3000.0 - Microsoft Corporation)
Sql Server Customer Experience Improvement Program (HKLM\...\{BED1EA3D-592D-4305-9D1F-20F03726EFC1}) (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
Subtitle Edit 3.4.6 (HKLM-x32\...\SubtitleEdit_is1) (Version: 3.4.6.544 - Nikse)
Sweet Home 3D version 5.4 (HKLM\...\Sweet Home 3D_is1) (Version: 5.4 - eTeks)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.14.71 - Synaptics Incorporated)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51 - Ghisler Software GmbH)
Ultra Librarian (HKLM-x32\...\Product_Name) (Version:  - )
UltraUXThemePatcher (HKLM-x32\...\UltraUXThemePatcher) (Version: 2.5.10.0 - Manuel Hoefs (Zottel))
Uninstall Tool (HKLM\...\Uninstall Tool_is1) (Version: 3.5.0 - CrystalIDEA Software, Inc.)
USB Disk Storage Format Tool 5.3 (HKLM\...\USB Disk Storage Format Tool_is1) (Version:  - Authorsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Web Components (HKLM-x32\...\{03B13AF8-9625-478A-AF0E-205337B9415A}_is1) (Version:  - )
web control version 3.0.5.1 (HKLM-x32\...\{F88ED86C-0010-4943-BA16-72E4184E31ED}_is1) (Version: 3.0.5.1 - )
Winamp (HKLM-x32\...\Winamp) (Version: 5.66  - Nullsoft, Inc)
Winamp Detector Plug-in (HKU\S-1-5-21-2121847970-1608828601-3914908799-1001\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
WinAVR 20100110 (remove only) (HKLM-x32\...\WinAVR-20100110) (Version: 20100110 - )
Windows Driver Package - Lenovo (ACPIVPC) System  (02/17/2013 9.52.0.776) (HKLM\...\35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E) (Version: 02/17/2013 9.52.0.776 - Lenovo)
Windows Driver Package - Lenovo (WUDFRd) LenovoVhid  (07/25/2013 10.30.0.288) (HKLM\...\6BCA401E9CBEED970D75F55FA5320F60D11984E9) (Version: 07/25/2013 10.30.0.288 - Lenovo)
Windows Driver Package - Segger (jlink) USB  (07/28/2014 2.6.8.1) (HKLM\...\468237BA12C6D9DD0125166A16609C632EE9CF1C) (Version: 07/28/2014 2.6.8.1 - Segger)
Windows Driver Package - Segger (jlink_ob_x64) USB  (03/13/2012 2.6.6.2) (HKLM\...\6D4C34D12E9233ABADF9D04ADF9E288A7ECF3B5B) (Version: 03/13/2012 2.6.6.2 - Segger)
Windows Driver Package - SEGGER (JLinkCDC_x64) Ports  (08/28/2014 6.0.2601.5) (HKLM\...\ED80E3D3A350D18BFD3D3D8DAED8E2B19105763A) (Version: 08/28/2014 6.0.2601.5 - SEGGER)
Windows Driver Package - SEGGER (usbser) Ports  (01/25/2012 6.0.2600.4) (HKLM\...\BD6BF8BBF7BE0D0091163F649A1A423B7EB9D4F1) (Version: 01/25/2012 6.0.2600.4 - SEGGER)
WinRAR archivátor (HKLM\...\WinRAR archiver) (Version:  - )
WIZ200web Configuration Tool (HKLM-x32\...\{CDC807B6-5BCB-44D6-9A16-C41160B69752}) (Version: 1.2 - WIZnet)
XAMPP (HKLM-x32\...\xampp) (Version: 5.6.3-0 - Bitnami)
Yoga Picks (HKLM-x32\...\{267C8BA0-876B-4589-9F14-EFB84ABCEA7F}) (Version: 1.5.014.0106 - Lenovo)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2121847970-1608828601-3914908799-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\windows\system32\igfxEM.exe (Intel Corporation)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-20] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-20] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-20] (Google)
ShellIconOverlayIdentifiers: [00001LenovoSyncComplete] -> {1E9CED2C-E7B4-4C47-B07A-25416393B67B} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers: [00002LenovoSyncActive] -> {C1285F4D-918F-4EF2-BC94-CAD5B118C835} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers: [00003LenovoSyncError] -> {CE5633DA-1488-4D1D-9A9B-B500297D4A8C} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers: [00004LenovoLocalOnly] -> {C7362DA9-D3AC-4C17-B2F5-2F1823FA04C3} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\windows\system32\AcSignIcon.dll [2016-05-24] (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32-x32-x32-x32: [00001LenovoSyncComplete] -> {1E9CED2C-E7B4-4C47-B07A-25416393B67B} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers-x32-x32-x32-x32: [00002LenovoSyncActive] -> {C1285F4D-918F-4EF2-BC94-CAD5B118C835} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers-x32-x32-x32-x32: [00003LenovoSyncError] -> {CE5633DA-1488-4D1D-9A9B-B500297D4A8C} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers-x32-x32-x32-x32: [00004LenovoLocalOnly] -> {C7362DA9-D3AC-4C17-B2F5-2F1823FA04C3} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2016-05-24] (Autodesk)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2014-05-12] ()
ContextMenuHandlers1-x32: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => C:\Program Files (x86)\Nero\Nero 9\Nero CoverDesigner\CoverEdExtension.dll [2009-09-24] (Nero AG)
ContextMenuHandlers1-x32: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\ConvertToPDFShellExtension_x64.dll [2017-08-19] (Foxit Software Inc.)
ContextMenuHandlers1-x32: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-11-20] (Google)
ContextMenuHandlers1-x32: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2016-02-13] (Florian Heidenreich)
ContextMenuHandlers1-x32: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2012-05-31] (Power Software Ltd)
ContextMenuHandlers1-x32: [SHAREit.FileContextMenuExt] -> {430BD134-576D-4E75-87CD-0F5C6221A82B} => C:\Program Files (x86)\Lenovo\SHAREit\ShellEx\ShellExt64.dll [2014-04-24] (Lenovo)
ContextMenuHandlers1-x32: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-12-15] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers1-x32: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2010-02-10] ()
ContextMenuHandlers1-x32-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2010-02-10] ()
ContextMenuHandlers2: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2016-02-13] (Florian Heidenreich)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers4: [000LenovoFoldersContextMenu] -> {D2DB7BAA-9E12-4640-825C-B1EB36A3809A} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ContextMenuHandlers4: [FolderColorize] -> {3443FE61-F294-403D-A4A6-53E034FC9B3F} => C:\Program Files\Folder Colorizer\FolderColorShlExt.dll [2014-06-10] ()
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-11-20] (Google)
ContextMenuHandlers4: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2016-02-13] (Florian Heidenreich)
ContextMenuHandlers4: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2012-05-31] (Power Software Ltd)
ContextMenuHandlers4: [SHAREit.FileContextMenuExt] -> {430BD134-576D-4E75-87CD-0F5C6221A82B} => C:\Program Files (x86)\Lenovo\SHAREit\ShellEx\ShellExt64.dll [2014-04-24] (Lenovo)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2010-02-10] ()
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2010-02-10] ()
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\windows\system32\igfxDTCM.dll [2014-03-10] (Intel Corporation)
ContextMenuHandlers5: [igfxOSP] -> {FA507C3F-30C6-4DCA-9EE5-2656072EEC14} => C:\windows\system32\igfxOSP.dll [2014-03-10] (Intel Corporation)
ContextMenuHandlers6: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\ConvertToPDFShellExtension_x64.dll [2017-08-19] (Foxit Software Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2012-05-31] (Power Software Ltd)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-12-15] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2010-02-10] ()
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2010-02-10] ()

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0259353C-5660-490D-B972-266629BD3C9D} - System32\Tasks\HPCustParticipation HP Photosmart 5510d series => C:\Program Files\HP\HP Photosmart 5510d series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {0D007754-8CED-430F-BAD2-E21945E3F7B4} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: <Company name>)
Task: {0E42D9B5-07AC-49BD-8D51-AB0F71A4BAF3} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-2121847970-1608828601-3914908799-1001 => "C:\windows\system32\rundll32.exe" dfshim.dll,ShOpenVerbShortcut C:\Users\Pedro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo\Lenovo Service Bridge.appref-ms
Task: {1523F710-53FA-499A-A0B8-9D4352988D4F} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2017-12-13] (Piriform Ltd)
Task: {264C8483-4C2D-4AAA-8503-4D3A23B9DA40} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2017-12-15] (Avira Operations GmbH & Co. KG)
Task: {340A2ABB-3476-418A-9363-9D9B7F1B119A} - System32\Tasks\{0EFE4D3E-5A76-4B01-89AA-76AE78DF1B35} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://ui.skype.com/ui/0/7.29.80.102/sk/go/help.faq.installer?LastError=1618
Task: {503FBC12-1CA1-4F95-AB4A-650F2FAA3BA1} - System32\Tasks\Lenovo\Dependency Package Auto Update => C:\Program Files\Lenovo\iMController\AutoUpdate.exe [2014-05-22] ()
Task: {5633DF5F-60E3-47C2-B8C7-C5626BC507C7} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2016-01-11] (@ByELDI)
Task: {5DD9B831-46DB-4783-91BF-8B92877CDE6A} - System32\Tasks\DolbySelectorTask => C:\Program Files\Dolby Digital Plus\ddp.exe
Task: {999C30FA-4277-4142-B536-F94629D47CFC} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_ERROR_HB => C:\windows\system32\MRT.exe [2017-03-18] (Microsoft Corporation)
Task: {AAB1F5B9-40BD-437C-AB56-C5BAF4560A23} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {AEAA6EA5-7D7A-44A3-B02A-50AB9A95C50F} - System32\Tasks\{319D25E8-1C2C-4AB7-BAB6-A383029AFAA7} => C:\windows\system32\pcalua.exe -a E:\Driver\DrvInstall.exe -d E:\Driver
Task: {B282EEF9-22B2-49C5-8081-635652852A4C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {B5BD6C8C-437D-4142-9C2E-FA3A814276D7} - System32\Tasks\Driver Booster SkipUAC (Pedro) => C:\Program Files (x86)\IObit\Driver Booster\4.3.0\DriverBooster.exe
Task: {C24F5D87-848D-4157-9923-3542D0305C5C} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Lenpedro-Pedro Lenpedro => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2014-11-12] (Microsoft Corporation)
Task: {C5818340-E835-43B4-95A1-8F0E8A5C03F4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {D6EB7117-1208-4B78-BDD9-15F771EDFCBB} - System32\Tasks\RunUninstallTool_SkipUac => C:\Program Files\Uninstall Tool\UninstallTool.exe [2016-10-15] (CrystalIDEA Software)
Task: {D8424A9D-44C1-4DE7-BFD4-1DAC0D4D1126} - System32\Tasks\update-S-1-5-21-2121847970-1608828601-3914908799-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: <Company name>)
Task: {D91F3003-C50F-46EA-9ED0-D8EA403D31B0} - System32\Tasks\{F6901C40-BB87-44BA-859C-00B517120BB5} => C:\windows\system32\pcalua.exe -a "C:\Program Files (x86)\2K Games\Mafia II\launcher.exe" -d "C:\Program Files (x86)\2K Games\Mafia II"
Task: {DF4FC283-6CD6-4A15-B715-1B975F840052} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-12-19] (Synaptics Incorporated)
Task: {E2CCC75F-1F2F-481A-A9D1-22C6CF100E30} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {E70B8646-94B0-4F4A-BDA9-716A40E5055C} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {EC096215-5BA3-4F4D-9137-B45B58AB1526} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-12-13] (Piriform Ltd)
Task: {EC3D7B91-C092-40FE-B492-E3CEC639BF87} - System32\Tasks\RunAsStdUser Task => C:\Program Files\MATLAB\R2010a\MATLAB R2010a.lnk [Argument = -sd $documents\MATLAB -r "setenv('PATH', ['C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Lenovo\FusionEngine;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\windows\system32;C:\windows;C:\windows\System32\Wbem;C:\windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files (x86)\Lenovo\Motion Control\;C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin;C:\Program Files\MATLAB\R2010a\runtime\win64;C:\Program Files\MATLAB\R2010a\bin']);"]
Task: {F1CDAE27-8AB1-4CA5-95CE-C02FB95B27E7} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2014-05-30] (Lenovo)
Task: {F309BEFF-48D6-4202-90A2-F93E25B52580} - System32\Tasks\{86E03862-9E13-4B2A-8A9F-2EED0A2A1DEA} => C:\windows\system32\pcalua.exe -a \\kroenenamd\F\autorun.exe -d \\kroenenamd\F
Task: {FA195DD8-673C-4334-9101-D7E6B54E7717} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-01-09] (Adobe Systems Incorporated)
Task: {FCB818C7-8315-42BC-B4AD-A9AF9D816092} - System32\Tasks\{CE3FCA28-3FA1-4899-A966-018C7DFEE47F} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=7.4.0.102&LastError=404

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\windows\Tasks\update-S-1-5-21-2121847970-1608828601-3914908799-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\Users\Pedro\AppData\Local\Google\Chrome\User Data\Spúšťač aplikácií Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\Pedro\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_gbchcmhmhahfdphkhkmpfmihenigjmpp\Vzdialená plocha Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
ShortcutWithArgument: C:\Users\Pedro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Spúšťač aplikácií Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\Pedro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Vzdialená plocha Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
ShortcutWithArgument: C:\Users\Pedro\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vzdialená plocha Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp

==================== Loaded Modules (Whitelisted) ==============

2014-09-26 21:37 - 2014-09-26 21:37 - 000067856 _____ () C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe
2014-09-26 21:37 - 2014-09-26 21:37 - 000672016 _____ () C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfDataStorageInterface.dll
2014-09-26 21:36 - 2014-09-26 21:36 - 000061200 _____ () C:\ProgramData\LenovoTransition\Server\x64\dptf.dll
2014-09-26 21:28 - 2014-01-06 23:14 - 000019440 _____ () C:\Program Files (x86)\Lenovo\Yoga Picks\Service\x64\YogaPicks.AppService.exe
2017-12-19 09:24 - 2017-11-29 09:11 - 002301384 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2014-12-30 23:49 - 2010-02-10 18:10 - 000166400 _____ () C:\Program Files\WinRAR\rarext.dll
2017-11-20 15:27 - 2017-11-20 15:27 - 041061856 _____ () C:\Program Files (x86)\Google\Drive\googledrivesync.exe
2018-01-01 19:25 - 2014-11-18 14:44 - 000255072 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\TrayTipAgentE.exe
2014-02-25 00:39 - 2014-02-25 00:39 - 000013576 _____ () C:\Program Files (x86)\Lenovo\Motion Control\PointGrabDeviceAPI.dll
2014-09-26 20:47 - 2013-09-16 20:17 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2013-07-18 13:03 - 2013-07-18 13:03 - 001128448 _____ () C:\Program Files (x86)\Gmail Notifier Pro\DotNetOpenAuth.dll
2018-01-01 19:25 - 2014-02-13 15:27 - 000222792 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\traynet.dll
2018-01-01 19:25 - 2014-02-13 15:27 - 000275528 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\libcurl.dll
2018-01-01 19:25 - 2014-02-13 15:27 - 000113166 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\zlib1.dll
2018-01-01 19:25 - 2014-02-13 15:27 - 000249928 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\uexper.dll
2018-01-12 13:29 - 2018-01-12 13:29 - 000088064 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\_ctypes.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000919552 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\_hashlib.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000098816 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\win32api.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000110080 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\pywintypes27.dll
2018-01-12 13:29 - 2018-01-12 13:29 - 000364544 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\pythoncom27.dll
2018-01-12 13:29 - 2018-01-12 13:29 - 000686080 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\unicodedata.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000320512 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\win32com.shell.shell.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 001177088 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\wx._core_.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000806912 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\wx._gdi_.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000816640 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\wx._windows_.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 001067520 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\wx._controls_.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000733696 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\wx._misc_.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000736256 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\pysqlite2._sqlite.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000119808 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\win32file.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000108544 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\win32security.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000007168 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\hashobjs_ext.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000017920 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\thumbnails_ext.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000082432 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\usb_ext.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000013824 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\common.time34.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000018432 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\win32event.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000027648 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\windows.conditional.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000017408 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\windows.winwrap.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000089088 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\windows.volumes.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000167936 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\win32gui.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000046080 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\_socket.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 001311744 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\_ssl.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000129536 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\_elementtree.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000127488 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\pyexpat.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000038912 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\win32inet.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000077824 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\wx._html2.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000036864 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\_psutil_windows.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000524248 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\windows._lib_cacheinvalidation.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000011264 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\win32crypt.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000218624 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\PIL._imaging.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000027648 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\_multiprocessing.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000020480 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\_yappi.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000035840 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\win32process.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000024064 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\win32pipe.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000010240 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\select.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000025600 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\win32pdh.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000059392 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\windows.device_monitor.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000017408 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\win32profile.pyd
2018-01-12 13:29 - 2018-01-12 13:29 - 000022528 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI60402\win32ts.pyd
2014-05-22 02:29 - 2014-05-22 02:29 - 000033536 _____ () C:\Program Files\Lenovo\iMController\AutoUpdate.exe
2018-01-12 13:35 - 2018-01-12 13:35 - 000088064 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\_ctypes.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000919552 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\_hashlib.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000098816 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\win32api.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000110080 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\pywintypes27.dll
2018-01-12 13:35 - 2018-01-12 13:35 - 000364544 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\pythoncom27.dll
2018-01-12 13:35 - 2018-01-12 13:35 - 000686080 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\unicodedata.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000320512 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\win32com.shell.shell.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 001177088 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\wx._core_.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000806912 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\wx._gdi_.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000816640 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\wx._windows_.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 001067520 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\wx._controls_.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000733696 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\wx._misc_.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000736256 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\pysqlite2._sqlite.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000119808 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\win32file.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000108544 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\win32security.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000007168 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\hashobjs_ext.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000017920 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\thumbnails_ext.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000082432 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\usb_ext.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000013824 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\common.time34.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000018432 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\win32event.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000027648 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\windows.conditional.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000017408 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\windows.winwrap.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000089088 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\windows.volumes.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000167936 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\win32gui.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000046080 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\_socket.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 001311744 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\_ssl.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000129536 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\_elementtree.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000127488 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\pyexpat.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000038912 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\win32inet.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000077824 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\wx._html2.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000036864 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\_psutil_windows.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000524248 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\windows._lib_cacheinvalidation.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000011264 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\win32crypt.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000218624 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\PIL._imaging.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000027648 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\_multiprocessing.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000020480 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\_yappi.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000035840 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\win32process.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000024064 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\win32pipe.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000010240 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\select.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000025600 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\win32pdh.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000059392 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\windows.device_monitor.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000017408 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\win32profile.pyd
2018-01-12 13:35 - 2018-01-12 13:35 - 000022528 _____ () C:\Users\Pedro\AppData\Local\Temp\_MEI42242\win32ts.pyd

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2015-02-12 17:12 - 000000852 _____ C:\windows\system32\Drivers\etc\hosts

127.0.0.1 activate.adobe.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2121847970-1608828601-3914908799-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Pedro\Pictures\Wallpapers\1-1352830294\00047.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\StartupFolder: => "ALFA plus - rýchle spustenie.lnk"
HKLM\...\StartupApproved\Run: => "RtHDVBg_LENOVO_MICPKEY"
HKLM\...\StartupApproved\Run: => "RtHDVBg_LENOVO_DOLBYDRAGON"
HKLM\...\StartupApproved\Run: => "Energy Manager"
HKLM\...\StartupApproved\Run: => "Lenovo Utility"
HKLM\...\StartupApproved\Run: => "Yoga PhoneCompanion"
HKLM\...\StartupApproved\Run: => "AutoStartTransition"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "EvtMgr6"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "Yoga Picks"
HKLM\...\StartupApproved\Run32: => "avgnt"
HKLM\...\StartupApproved\Run32: => "AdobeCS5ServiceManager"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "SwitchBoard"
HKLM\...\StartupApproved\Run32: => "EPSON_UD_START"
HKLM\...\StartupApproved\Run32: => "Presto! PVR Monitor"
HKLM\...\StartupApproved\Run32: => "ADSKAppManager"
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKLM\...\StartupApproved\Run32: => "Adobe Reader Speed Launcher"
HKU\S-1-5-21-2121847970-1608828601-3914908799-1001\...\StartupApproved\Run: => "Epson Stylus SX110"
HKU\S-1-5-21-2121847970-1608828601-3914908799-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-2121847970-1608828601-3914908799-1001\...\StartupApproved\Run: => "BlazeServoTool"
HKU\S-1-5-21-2121847970-1608828601-3914908799-1001\...\StartupApproved\Run: => "Epic Privacy Browser Installer"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{D2CF2695-B096-41F1-804B-611EFEADCFDE}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{8C124FB3-0F93-4104-8A39-E222984E2663}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe
FirewallRules: [{6CE7742F-4F62-4E77-9648-11D4A2C39AF9}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe
FirewallRules: [{F57DFDA0-E380-40DF-A495-E7F527AF69E3}] => (Allow) C:\Program Files (x86)\Lenovo\Lenovo Photo Master\subsys\AdvPhotoEditor\PhotoDirector5.exe
FirewallRules: [{58BBB8D5-96AD-4F9C-8C75-D344C704C281}] => (Allow) LPort=55100
FirewallRules: [{F707A379-C674-4C5A-8C19-5EEFB2296D25}] => (Allow) C:\Program Files\Lenovo PhotoMasterImport\PhotoMasterImport.exe
FirewallRules: [TCP Query User{A1AEAF2B-641B-46AF-A2E3-5CA96AA7C178}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{DB1BF07C-4402-4D11-8A05-8A28DF7BF89B}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [{52802D7E-B266-4986-948D-FCC5F63EF1E8}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{18CDCCB4-F403-4F70-B3A3-4087C22EE264}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{4DAC22EA-90FF-44B4-B276-6183919FE1D4}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{9FBB420C-77B0-49F3-AFD6-0232CBC5F141}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{92C81BE2-D732-4601-BC04-C9AB92B74B4F}] => (Allow) C:\Users\Pedro\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2AA0E46D-DDBC-45FC-8271-586DB24608A2}] => (Allow) C:\Users\Pedro\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{E34B4F20-EECC-49DF-9BAD-82035CA3ABDC}D:\applications\hercules_3-2-8.exe] => (Allow) D:\applications\hercules_3-2-8.exe
FirewallRules: [UDP Query User{3FD6463E-2F1B-43A0-AA41-395CB9D6F21C}D:\applications\hercules_3-2-8.exe] => (Allow) D:\applications\hercules_3-2-8.exe
FirewallRules: [TCP Query User{0A45225E-D30F-4087-A762-4FAB63FAFE98}C:\gd\school\5 roc\dp\wiz200web web_server\wiz200web_config_tool_source_v1_2\wiz-web_v1_2.exe] => (Allow) C:\gd\school\5 roc\dp\wiz200web web_server\wiz200web_config_tool_source_v1_2\wiz-web_v1_2.exe
FirewallRules: [UDP Query User{3E38ACA9-DD8D-46EA-88F7-1EB4A9F6A62F}C:\gd\school\5 roc\dp\wiz200web web_server\wiz200web_config_tool_source_v1_2\wiz-web_v1_2.exe] => (Allow) C:\gd\school\5 roc\dp\wiz200web web_server\wiz200web_config_tool_source_v1_2\wiz-web_v1_2.exe
FirewallRules: [TCP Query User{D297A06E-E4C7-4694-855A-DC4E5504EF4F}C:\gd\school\5 roc\dp\wiz200web web_server\wiz200web_config_tool_source_v1_2\source_v1_2\wiz-web_v1_2.exe] => (Allow) C:\gd\school\5 roc\dp\wiz200web web_server\wiz200web_config_tool_source_v1_2\source_v1_2\wiz-web_v1_2.exe
FirewallRules: [UDP Query User{B27E63A4-2A9A-46C1-AB7C-8157ADF264E4}C:\gd\school\5 roc\dp\wiz200web web_server\wiz200web_config_tool_source_v1_2\source_v1_2\wiz-web_v1_2.exe] => (Allow) C:\gd\school\5 roc\dp\wiz200web web_server\wiz200web_config_tool_source_v1_2\source_v1_2\wiz-web_v1_2.exe
FirewallRules: [TCP Query User{8DC59902-76C6-4D66-9C6F-D44D6147016A}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{0AB49B60-741A-4F6B-9F45-2F8FF476A840}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{477185B6-559B-42A4-8103-CCB44093349E}C:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe] => (Allow) C:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe
FirewallRules: [UDP Query User{61D48CA0-CFB8-4EF9-9BDA-75D096A66587}C:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe] => (Allow) C:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe
FirewallRules: [TCP Query User{C52FA0B7-31C3-484D-84C6-1C816EF925CE}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{A3C4C185-252F-44EE-951A-A846F00880FF}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{29B2E607-20EE-43BE-B39E-C865ACA7753B}C:\gd\school\5 roc\dp\wiz200web web_server\wiz200web_config_tool_source_v1_2\wiz-web_v1_2.exe] => (Allow) C:\gd\school\5 roc\dp\wiz200web web_server\wiz200web_config_tool_source_v1_2\wiz-web_v1_2.exe
FirewallRules: [UDP Query User{1C88F12B-FE12-444C-A337-E0462A405E2A}C:\gd\school\5 roc\dp\wiz200web web_server\wiz200web_config_tool_source_v1_2\wiz-web_v1_2.exe] => (Allow) C:\gd\school\5 roc\dp\wiz200web web_server\wiz200web_config_tool_source_v1_2\wiz-web_v1_2.exe
FirewallRules: [TCP Query User{93515F0E-FD76-47B1-870A-6C63D2A83024}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{F380CF14-B619-476A-B141-93CC938244DC}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{61B641E1-0B97-454E-B53F-5BA013DA6477}C:\program files\netbeans 8.0.2\bin\netbeans64.exe] => (Allow) C:\program files\netbeans 8.0.2\bin\netbeans64.exe
FirewallRules: [UDP Query User{E1738943-53BF-4727-9360-3B21D5E53950}C:\program files\netbeans 8.0.2\bin\netbeans64.exe] => (Allow) C:\program files\netbeans 8.0.2\bin\netbeans64.exe
FirewallRules: [TCP Query User{C78FF58C-1C0F-4EBC-8A3F-3F969C9A6CD5}C:\program files\netbeans 8.0.2\bin\netbeans64.exe] => (Allow) C:\program files\netbeans 8.0.2\bin\netbeans64.exe
FirewallRules: [UDP Query User{E4F5815F-28AB-489A-8E95-7324C491BE7F}C:\program files\netbeans 8.0.2\bin\netbeans64.exe] => (Allow) C:\program files\netbeans 8.0.2\bin\netbeans64.exe
FirewallRules: [TCP Query User{88ADBE27-3573-4E35-9844-87C16532FD37}C:\program files (x86)\brackets\node.exe] => (Block) C:\program files (x86)\brackets\node.exe
FirewallRules: [UDP Query User{969FE679-353E-4939-B3F4-8F07807C9774}C:\program files (x86)\brackets\node.exe] => (Block) C:\program files (x86)\brackets\node.exe
FirewallRules: [TCP Query User{90553FFB-82B0-4F5E-A388-8563F83872D7}C:\program files (x86)\brackets\node.exe] => (Allow) C:\program files (x86)\brackets\node.exe
FirewallRules: [UDP Query User{AEEB77EC-E3CE-4F3E-BF54-1954C5F2F5DB}C:\program files (x86)\brackets\node.exe] => (Allow) C:\program files (x86)\brackets\node.exe
FirewallRules: [TCP Query User{52743894-A83C-4C88-8417-74BD89EA7D28}C:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe] => (Allow) C:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe
FirewallRules: [UDP Query User{F317E191-33CE-4A30-B343-D851A89E3D90}C:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe] => (Allow) C:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe
FirewallRules: [{B475C0D9-8B85-4F18-AA60-48A081B3A709}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{03ABF4B2-E44B-4D8A-9549-F85FFEC8F2BB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1FE0BBEC-1AB5-4018-8D4B-A43437C06853}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{CCE652CB-C04F-4FFF-8919-86F0886892C7}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [TCP Query User{4AFA988C-AD66-43C8-B966-2D7587608BD4}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{C839D7CB-08AD-47E6-99F7-3D6C01CEEAFA}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [{F24140DB-67C7-4C4E-A40F-8E9B1624DF4C}] => (Allow) C:\windows\system32\hasplms.exe
FirewallRules: [TCP Query User{F9A74435-E0A2-4AF9-AE0C-DE1388901B4A}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{371EA98D-854B-4585-AEBD-36F3B92FBE83}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{DEF5FB99-AA26-4AD7-BD9A-F3D2CD8D09FD}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A26190F5-3CBD-4A4D-8754-45377A6EADCD}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{3D9B703B-559C-4D57-ACB2-B3EB52B47A90}C:\program files\ivms-4200 station\ivms-4200\ivms-4200 client\ivms-4200.exe] => (Allow) C:\program files\ivms-4200 station\ivms-4200\ivms-4200 client\ivms-4200.exe
FirewallRules: [UDP Query User{93CC8F48-70F1-4297-9B63-424C47C6ADCC}C:\program files\ivms-4200 station\ivms-4200\ivms-4200 client\ivms-4200.exe] => (Allow) C:\program files\ivms-4200 station\ivms-4200\ivms-4200 client\ivms-4200.exe
FirewallRules: [{53E46FE1-A66C-4CEB-9F2E-822D32491563}] => (Block) C:\program files\ivms-4200 station\ivms-4200\ivms-4200 client\ivms-4200.exe
FirewallRules: [{DDE76D75-CFE0-4311-8743-DD5834DA2B2A}] => (Block) C:\program files\ivms-4200 station\ivms-4200\ivms-4200 client\ivms-4200.exe
FirewallRules: [TCP Query User{5B83988D-7916-4645-A47D-865319B6E894}C:\program files\ivms-4200 station\ivms-4200\ivms-4200 storage\nvrstoragesever.exe] => (Allow) C:\program files\ivms-4200 station\ivms-4200\ivms-4200 storage\nvrstoragesever.exe
FirewallRules: [UDP Query User{00400DCA-BBDD-492B-97F3-D6567D49A289}C:\program files\ivms-4200 station\ivms-4200\ivms-4200 storage\nvrstoragesever.exe] => (Allow) C:\program files\ivms-4200 station\ivms-4200\ivms-4200 storage\nvrstoragesever.exe
FirewallRules: [{58CCE0A2-5A29-4AD4-8C1D-91299419A6C5}] => (Block) C:\program files\ivms-4200 station\ivms-4200\ivms-4200 storage\nvrstoragesever.exe
FirewallRules: [{3CF9987D-40A9-43E4-B7D1-B08069038F0A}] => (Block) C:\program files\ivms-4200 station\ivms-4200\ivms-4200 storage\nvrstoragesever.exe
FirewallRules: [{EA20AAB2-3253-4E23-A71E-30A109C6106F}] => (Allow) LPort=50248
FirewallRules: [TCP Query User{28AB77EE-4460-4E13-BEC4-C9107C1B1E87}C:\program files\konica minolta\drivers\magicolor 2530dl\slovak\mpsmc_06.exe] => (Block) C:\program files\konica minolta\drivers\magicolor 2530dl\slovak\mpsmc_06.exe
FirewallRules: [UDP Query User{B5447B40-E834-4C68-817F-C4ED20AC94A5}C:\program files\konica minolta\drivers\magicolor 2530dl\slovak\mpsmc_06.exe] => (Block) C:\program files\konica minolta\drivers\magicolor 2530dl\slovak\mpsmc_06.exe
FirewallRules: [{AE05B61E-9804-4FE6-A000-B6C1D5ACDE39}] => (Allow) LPort=1688
FirewallRules: [TCP Query User{0D582C16-F938-4547-A529-CE54BBD86DB1}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [UDP Query User{C9E8E85D-79BE-458D-BC02-910DFA0205B1}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [TCP Query User{218F7079-3556-469F-9364-329AB3B396CF}C:\=downloads=\ip camera finder v1.0.0.150.exe] => (Allow) C:\=downloads=\ip camera finder v1.0.0.150.exe
FirewallRules: [UDP Query User{8341F656-F861-476D-9E2F-14041E383A12}C:\=downloads=\ip camera finder v1.0.0.150.exe] => (Allow) C:\=downloads=\ip camera finder v1.0.0.150.exe
FirewallRules: [{F9C3E674-4D6B-4279-94D9-490E71AFDFA1}] => (Block) C:\=downloads=\ip camera finder v1.0.0.150.exe
FirewallRules: [{BBB0EA36-D651-429C-9D14-80DFD825EBFC}] => (Block) C:\=downloads=\ip camera finder v1.0.0.150.exe
FirewallRules: [{EA4AE673-5492-4B76-AB55-853404223A0D}] => (Allow) C:\Program Files (x86)\Deskshare\IP Camera Viewer 3\IP Camera Viewer.exe
FirewallRules: [{74E4DC7A-C357-489A-80BA-18738FCA3CB9}] => (Allow) C:\Program Files (x86)\Deskshare\IP Camera Viewer 3\IP Camera Viewer.exe
FirewallRules: [TCP Query User{002BB79D-A13E-4E71-B0D4-303544A3775A}C:\program files\ispy\ispy.exe] => (Allow) C:\program files\ispy\ispy.exe
FirewallRules: [UDP Query User{0D7802B2-8C41-4389-BBC6-096293D4E654}C:\program files\ispy\ispy.exe] => (Allow) C:\program files\ispy\ispy.exe
FirewallRules: [{DF1814DC-35C0-4547-96D8-4849BBA8CD00}] => (Block) C:\program files\ispy\ispy.exe
FirewallRules: [{BFA8DDC2-41D7-483B-BC5D-3F05C2B60C22}] => (Block) C:\program files\ispy\ispy.exe
FirewallRules: [TCP Query User{DBB646F6-34DC-4C23-BCBA-E046A910CD85}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{A9410A70-F4E9-4EDA-AA89-A8962879F375}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{00C04EB4-C9B7-499F-8F6F-272E3D78E977}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D1CBDE52-06D7-4192-8B1A-B6010993A5CD}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{C8A8EFD4-11E5-48FB-8103-12CCB5781ECD}] => (Allow) LPort=1689
FirewallRules: [TCP Query User{08BE5F7F-4EAD-4C68-91A4-E683FACA6D94}C:\program files (x86)\awaremote server\awaremote server.exe] => (Allow) C:\program files (x86)\awaremote server\awaremote server.exe
FirewallRules: [UDP Query User{1EB08B7C-15A4-4995-9DBB-20AA2C80848E}C:\program files (x86)\awaremote server\awaremote server.exe] => (Allow) C:\program files (x86)\awaremote server\awaremote server.exe
FirewallRules: [{D9655086-0575-4234-988D-5DD75554CCB6}] => (Block) C:\program files (x86)\awaremote server\awaremote server.exe
FirewallRules: [{9ACBFCFA-CC0D-4CD2-A90A-26ADEF3E9A39}] => (Block) C:\program files (x86)\awaremote server\awaremote server.exe
FirewallRules: [{8A0B1E0F-D34F-4FE0-8138-2528E856E317}] => (Allow) C:\Program Files\HP\HP Photosmart 5510 series\Bin\DeviceSetup.exe
FirewallRules: [{DD465A69-E20A-4C42-8A07-B0CFC8E20EF0}] => (Allow) C:\Program Files\HP\HP Photosmart 5510 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{6825FCCC-9C70-45CC-8CAD-929A145D6312}] => (Allow) C:\Program Files\HP\HP Photosmart 5510 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{D7A4A76E-1295-4529-8D99-740F32DBDC0D}] => (Allow) C:\Program Files\HP\HP Photosmart 5510d series\Bin\DeviceSetup.exe
FirewallRules: [{FF8BD7FF-6024-4A26-BD35-328B7A98E7E4}] => (Allow) C:\Program Files\HP\HP Photosmart 5510d series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{2F0CB5B8-AE55-43FC-B0B6-ECB2CC7528DF}] => (Allow) C:\Program Files\HP\HP Photosmart 5510d series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{A700C5EF-C289-4953-9620-D63A841CD0E0}] => (Block) LPort=445
FirewallRules: [{7DADFF98-24DF-409E-B29E-707D56CD3E9E}] => (Block) LPort=445
FirewallRules: [{91C39FCD-BE7F-47D2-BF89-0DA96F4698F7}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\63.0.3239.32\remoting_host.exe
FirewallRules: [{9A3FB583-586B-42C9-9185-54CEC72C9F6C}] => (Allow) LPort=20400
FirewallRules: [{E82C09A0-00B5-4D9C-8A24-285D2ABC49BA}] => (Allow) LPort=20401
FirewallRules: [{F8B77CDE-408D-40CD-B5F7-9EAF3A5A0FA7}] => (Allow) LPort=20402
FirewallRules: [{6A82C130-1A7E-4C2C-94B7-DEF488F960CA}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{4F992E0C-B54A-4986-BA67-4B388D718882}] => (Allow) LPort=1688
FirewallRules: [{B895544A-3D54-4194-B98C-1FEFC0702C87}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{75E6F4C3-1CF8-4DD0-B7E6-DB2860B4FCEE}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe

==================== Restore Points =========================


==================== Faulty Device Manager Devices =============

Name: TAP-Windows Adapter V9
Description: TAP-Windows Adapter V9
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: tap0901
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/12/2018 09:49:10 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program backgroundTaskHost.exe version 6.3.9600.17415 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1e30

Start Time: 01d38b817b3bb069

Termination Time: 4294967295

Application Path: C:\windows\system32\backgroundTaskHost.exe

Report Id: 6f4bf3c1-f775-11e7-833b-e8b1fc0cf016

Faulting package full name: MediaMobileTechnologies.MediaPlayerLite_1.1.1.266_x64__pshwwm0bwg8de

Faulting package-relative application ID: App

Error: (01/12/2018 08:58:53 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (01/12/2018 08:58:53 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (01/12/2018 08:50:57 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program backgroundTaskHost.exe version 6.3.9600.17415 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1494

Start Time: 01d38b795810b2a6

Termination Time: 4294967295

Application Path: C:\windows\syswow64\backgroundTaskHost.exe

Report Id: 4e19ed93-f76d-11e7-833b-e8b1fc0cf016

Faulting package full name: E046963F.LenovoSupport_2.0.4.0_x86__k1h2ywk1493x8

Faulting package-relative application ID: App

Error: (01/12/2018 08:19:23 AM) (Source: SideBySide) (EventID: 63) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3.
The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.

Error: (01/12/2018 08:05:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 10219

Error: (01/12/2018 08:05:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 10219

Error: (01/11/2018 11:58:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/11/2018 01:00:42 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2516

Error: (01/11/2018 01:00:42 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2516


System errors:
=============
Error: (01/12/2018 01:12:26 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: The ICS_IPV6 failed to configure IPv6 stack.

Error: (01/12/2018 01:12:26 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: The ICS_IPV6 failed to configure IPv6 stack.

Error: (01/12/2018 01:11:25 PM) (Source: aksfridge) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/12/2018 01:10:21 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby MBAMService bol dosiahnutý časový limit (30000 ms).

Error: (01/12/2018 10:41:12 AM) (Source: DCOM) (EventID: 10010) (User: Lenpedro)
Description: The server {1B1F472E-3221-4826-97DB-2C2324D389AE} did not register with DCOM within the required timeout.

Error: (01/12/2018 10:40:41 AM) (Source: DCOM) (EventID: 10010) (User: Lenpedro)
Description: The server {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} did not register with DCOM within the required timeout.

Error: (01/12/2018 08:49:48 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Intel(R) Management and Security Application Local Management Service sa pri spustení zablokovala.

Error: (01/12/2018 08:45:30 AM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: The ICS_IPV6 failed to configure IPv6 stack.

Error: (01/12/2018 08:45:30 AM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: The ICS_IPV6 failed to configure IPv6 stack.

Error: (01/12/2018 08:44:00 AM) (Source: aksfridge) (EventID: 0) (User: )
Description: Event-ID 0


CodeIntegrity:
===================================
  Date: 2015-08-18 00:40:32.625
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\uxtheme.dll that did not meet the Windows signing level requirements.

  Date: 2015-08-18 00:39:17.048
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\uxtheme.dll that did not meet the Windows signing level requirements.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i3-4030U CPU @ 1.90GHz
Percentage of memory in use: 69%
Total physical RAM: 4016.96 MB
Available physical RAM: 1221.2 MB
Total Virtual: 5808.96 MB
Available Virtual: 2417.05 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:423.96 GB) (Free:12.41 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:2.82 GB) NTFS
Drive g: (HDD oSCiTy) (Fixed) (Total:931.51 GB) (Free:206.47 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 2B66F383)

Partition: GPT.

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 08F4DE7D)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================