Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24.02.2018
Ran by Martin (25-02-2018 05:42:18)
Running from C:\Users\Martin\Desktop
Windows 10 Pro Version 1709 16299.248 (X64) (2017-12-04 16:27:57)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1346476288-3969530600-2660108626-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1346476288-3969530600-2660108626-503 - Limited - Disabled)
Guest (S-1-5-21-1346476288-3969530600-2660108626-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1346476288-3969530600-2660108626-1002 - Limited - Enabled)
Martin (S-1-5-21-1346476288-3969530600-2660108626-1000 - Administrator - Enabled) => C:\Users\Martin
WDAGUtilityAccount (S-1-5-21-1346476288-3969530600-2660108626-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

325 USB PC Camera (HKLM-x32\...\{F9466082-90E9-4BE4-92F0-CF0AF195B0CF}) (Version: 0.6.0.001 - Sonix)
Adobe Acrobat Reader DC - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AC0F074E4100}) (Version: 18.011.20038 - Adobe Systems Incorporated)
AMD Settings (HKLM\...\WUCCCApp) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.)
AutoCAD 2015 - English (HKLM\...\{5783F2D7-E001-0000-0102-0060B0CE6BBA}) (Version: 20.0.51.0 - Autodesk) Hidden
AutoCAD 2015 - English (HKLM\...\{5783F2D7-E001-0409-2102-0060B0CE6BBA}) (Version: 20.0.51.0 - Autodesk) Hidden
AutoCAD 2015 Language Pack - English (HKLM\...\{5783F2D7-E001-0409-1102-0060B0CE6BBA}) (Version: 20.0.51.0 - Autodesk) Hidden
Autodesk App Manager (HKLM-x32\...\{C8125548-F2D5-4059-823F-1F3C5BBD9F19}) (Version: 1.2.0 - Autodesk)
Autodesk AutoCAD 2015 - English (HKLM\...\AutoCAD 2015 - English) (Version: 20.0.51.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool Version 1.2.2 (HKLM-x32\...\{85735431-6CD3-4B16-BEC8-95332034E53B}) (Version: 1.2.2.0 - Autodesk)
Autodesk BIM 360 Glue AutoCAD 2015 Add-in 64 bit (HKLM\...\{9D589081-AFC2-4932-9071-AC585AC1EA83}) (Version: 3.32.3004 - Autodesk)
Autodesk Content Service (HKLM-x32\...\{A37CDB58-AAE8-0000-8C13-E0F7BACB0D5F}) (Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk)
Autodesk Content Service Language Pack (HKLM-x32\...\{A37CDB58-AAE8-0001-8C13-E0F7BACB0D5F}) (Version: 3.2.0.0 - Autodesk) Hidden
Autodesk DWF Viewer (HKLM-x32\...\Autodesk DWF Viewer) (Version: 4.1 - Autodesk, Inc.)
Autodesk Featured Apps (HKLM-x32\...\{EDDEE94B-214D-4B07-9727-A3E46F3E379A}) (Version: 1.2.0 - Autodesk)
Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk)
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 18.1.2326 - AVAST Software)
Backup and Sync from Google (HKLM-x32\...\{AC62F3F2-61A2-4357-93EC-C308E3FEDF4E}) (Version: 3.39.8370.7843 - Google, Inc.)
Catalyst Control Center Next Localization BR (HKLM\...\{A16E186C-58C4-3BDC-5CCE-714EFEF5F27F}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (HKLM\...\{E7AA1A02-575C-14C6-FBEF-4BE6D46A5B74}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{36EDC500-E4C0-371C-9865-08450415C1E9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{62098A5F-E03B-31A3-5F9C-51A7F7D25744}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{1757AD9B-0E3C-05F9-FE43-4343BED7DA85}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{4C2FB7FD-89FD-BA5C-585A-3811F326AD34}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{66B06F29-EE4F-9130-D96A-754826093FEA}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{D74218A3-C503-57EF-AC9F-2220082E7ADE}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{821D0A0E-F246-BE40-0D68-93883C14C410}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{DA433FCF-90A1-19A5-65A7-FDF82DE4826D}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{88BD74C4-23AB-4554-915C-6E1F0C81F6CD}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{949F125B-A6CC-5A5E-EEE7-4AC50305C1FA}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{20D46801-147B-30AD-7C5A-AC4560A79096}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{A48E2AB0-0866-7783-9657-E1709EB18D02}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{22C39711-2747-D264-319A-1550BEEAAEC6}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{E61CEF9A-BAC3-EAEE-F735-E257D2354DF2}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{1DBACFDB-5E43-7882-36BD-53526D34BD22}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{DA0326BB-657D-AAFC-752C-363E8FA33755}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{E42911E5-48F8-8557-ED20-D72AD1907D25}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{EB6C44F1-0F78-FE10-BC63-90BA50AB0CE9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{B26D75B8-FAB7-6F8B-767F-BAF975383D91}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{B4C30EF4-B2C5-1395-B534-7B63BCB6E8E4}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{A91FC4BF-C1EC-ADCA-79D1-F4F0671F1D60}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{B873A1FB-5EA0-EE5F-A861-1E38880AD08E}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{EC9DF9FF-9D75-4CDD-1D58-A2E887B0A42E}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{ED75A775-03A7-F214-868D-497748707968}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{07BFBD5C-2F63-6828-1B61-B41A44113F3B}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{7ABACA7E-6E59-0EF9-8FA3-6B32E5F58127}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{3E196AAF-F81C-B384-E2AB-28EE2398FE5F}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{E6038D3E-5D87-8DF7-6D05-BE7532C3E73E}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{DAEFFE0C-CD05-1355-6AFC-7B3D4106A820}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{DFAD9DAC-4768-C8BB-4E0E-5239605A9BEA}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{E392A425-53A7-DF90-96A0-E287A75DD3B2}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{FFBFBD1F-B160-A119-7C43-8584FA2E5665}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{4D1D5407-9B69-6422-629C-8518A26004A4}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{D6F47BB4-700A-F612-0671-5F69EA311BB7}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{01FD9A26-3F61-9236-B360-BE5D043D82C0}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{A8379BAB-59A9-C0A3-8BCC-4852EA403692}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{24DF617A-CD23-6E6A-126B-23630D2781CE}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{64D4CCC3-63DF-252D-D29D-03491670225D}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{83DDDFD8-AD42-72F9-E4F1-5456FDB304C9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{8DF90937-B869-9F76-5D45-5A8BDA0A33B6}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.40 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5844 - CDBurnerXP)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.4.0.0192 - Disc Soft Ltd)
FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
Geeks3D FurMark 1.17.0.0 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version:  - Geeks3D)
GIMP 2.8.18 (HKLM\...\GIMP-2_is1) (Version: 2.8.18 - The GIMP Team)
Google Earth Pro (HKLM\...\{D9EF644E-2FAE-493B-8180-5617CC774C4F}) (Version: 7.3.1.4507 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 64.0.3282.167 - Spoločnosť Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Inkscape 0.92.1 (HKLM-x32\...\Inkscape) (Version: 0.92.1 - Inkscape Project)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4835 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)
Microsoft Office 2013 Professional Plus (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1346476288-3969530600-2660108626-1000\...\OneDriveSetup.exe) (Version: 17.005.0107.0008 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24123 (HKLM-x32\...\{2cbcedbb-f38c-48a3-a3e1-6c6fd821a7f4}) (Version: 14.0.24123.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Moj CEWE FOTOSVET (HKLM-x32\...\Moj CEWE FOTOSVET) (Version: 6.2.6 - CEWE Stiftung u Co. KGaA)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (HKLM\...\{90150000-001F-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (HKLM\...\{90150000-001F-041B-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
NVIDIA Softvér systému s podporou technológie PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
PDF24 Creator 7.3.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.82.317.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
SafeZone Stable 4.58.2552.909 (HKLM-x32\...\SafeZone 4.58.2552.909) (Version: 4.58.2552.909 - Avast Software) Hidden
SEMAV181 (HKLM-x32\...\{67D5A16C-254D-4CC6-B6B1-4E7D224DF67F}) (Version: 18.1 - SEMA)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.151 - Skype Technologies S.A.)
Update for Skype for Business 2015 (KB4011678) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8E63F16F-BC60-413E-8ABA-DAD375D2C356}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB4011678) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8E63F16F-BC60-413E-8ABA-DAD375D2C356}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB4011678) 64-Bit Edition (HKLM\...\{90150000-012B-041B-1000-0000000FF1CE}_Office15.PROPLUS_{8E63F16F-BC60-413E-8ABA-DAD375D2C356}) (Version:  - Microsoft)
V8-04-05_E02 (HKLM-x32\...\V8-04-05_E02) (Version:  - )
VBA (2627.01) (HKLM-x32\...\{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}) (Version: 6.03.00.9402 - Microsoft Corporation) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.0 - VideoLAN)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
World of Tanks (HKU\S-1-5-21-1346476288-3969530600-2660108626-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812eu}_is1) (Version:  - Wargaming.net)
XVM verzia 7.4.1 (HKLM-x32\...\{2865cd27-6b8b-4413-8272-cd968f316050}_is1) (Version: 7.4.1 - XVM team)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1346476288-3969530600-2660108626-1000_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1346476288-3969530600-2660108626-1000_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1346476288-3969530600-2660108626-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2015\en-US\acadficn.dll (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-01-29] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-01-29] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-01-29] (Google)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-02-16] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-02-16] (AVAST Software)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [Správa překryvné ikony digitálních podpisů AutoCADu ] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32-x32-x32-x32: [Správa překryvné ikony digitálních podpisů AutoCADu ] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2014-02-07] (Autodesk)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-02-16] (AVAST Software)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2018-01-29] (Google)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-02-16] (AVAST Software)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2018-01-29] (Google)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2017-09-22] (Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2017-10-20] (Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-02-16] (AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {012E8334-7100-44C6-89F1-3ED70B9F2877} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {016EE95F-C6E4-4685-9273-86AE58166607} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {0189042F-CB59-4F0D-8CF7-F919C5E8AA6B} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {06DD7E19-5402-4FE0-8C16-4775A8A9DA01} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {0E213910-08D0-4F13-A370-17F5E9810D85} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2018-02-14] (Microsoft Corporation)
Task: {0F7EF922-C59D-42C2-BA54-BA347F339E88} - System32\Tasks\SafeZone scheduled Autoupdate 1451646078 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-08-04] (Avast Software)
Task: {19AD2393-BBEB-4E28-912A-DEEFACBC92DF} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2017-09-22] (Advanced Micro Devices, Inc.)
Task: {1F251F14-4411-4AF1-9A6C-1E85E503CD2E} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-02-16] (AVAST Software)
Task: {22B646BA-9D0E-4689-A7D6-F709AD8C549E} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {263C93BF-26A3-46E9-A18D-9727FD05817C} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {3AFD499A-09CB-40C5-932A-6EDE5EFD4627} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {538A39E2-26B4-40F3-A763-FF52BBFA7152} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {5B0DAE75-0FB3-487C-8330-C897536DBD84} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-21] (Google Inc.)
Task: {5F116F60-AFE5-44C1-A83E-E4DC18B72DB1} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {645005C0-36B6-4BFB-83B8-C746038B82B0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-02-07] (Piriform Ltd)
Task: {64AD3A5F-3BD4-4B97-A203-92E0C087F404} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6CBEA0D6-2EBD-45A1-9BE2-38F54EA634CB} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6EE745C4-6F91-4997-8D46-AC0F51A814D7} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {72469203-0B4F-4FDB-935F-60EFD60DB47B} - System32\Tasks\SafeZone scheduled Autoupdate 1473184600 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-08-04] (Avast Software)
Task: {77749792-ACF8-47C9-BCB1-B30BD747EBCF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-21] (Google Inc.)
Task: {8524A688-33F1-420C-9679-A448EBC7F215} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {88592EDF-C7D0-4653-A440-63ED6DE3330C} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {96FF1606-00FD-48F3-9802-1A3F7B99CB18} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {98DF8D44-86EE-48E5-A5CA-D7EF227773A7} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {A1F00607-CA11-4DA5-8C90-D91DFAFC783A} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {AB060F1E-AFBB-4BB8-BB88-ABC26FDE8CF7} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {AE6A593F-6819-44AD-91C5-DFA8B7AD794C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {AF47406F-C6F2-409E-B7DE-70CF6DB7B090} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {C711C340-0628-40D0-AD54-C1D7A964C341} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C7E8F29B-8489-4DA3-BF06-3B0B54B60E31} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {C843A853-442D-4BE4-8B6C-87D9795E5AFD} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-02-07] (Piriform Ltd)
Task: {CB0D8514-5F51-4482-B309-F37A65A7E730} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {CEE5EAAC-6996-4A94-9A85-4280AB1F9322} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D4CD1DA3-5451-43BA-91C3-DB88BA398277} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DBA0D01B-6FB9-429B-8D0B-6945858481AE} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-01-17] (Adobe Systems Incorporated)
Task: {F4EE8E62-E758-4942-AD5C-397E69CDE55E} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2018-01-09] (AVAST Software)
Task: {FCF555CB-ED8A-49D0-BA6C-9171F96951E8} - System32\Tasks\S-1-5-21-1346476288-3969530600-2660108626-1000\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2017-09-29] (Microsoft Corporation)
Task: {FDEC50CC-7DD0-4B57-8E46-19B50DB06D45} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Spúšťač aplikácií Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Spúšťač aplikácií Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Google Keep – poznámky a zoznamy (1).lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory="Profile 1" --app-id=hmjkmjkepdijhoojdojkdfohbdgmmhki
ShortcutWithArgument: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Google Keep – poznámky a zoznamy.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory="Profile 4" --app-id=hmjkmjkepdijhoojdojkdfohbdgmmhki
ShortcutWithArgument: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Vzdialená plocha Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory="Profile 4" --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
ShortcutWithArgument: C:\Users\Martin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\ec6aa8af9983914a\Checker Plus for Gmail™.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1" --app-id=oeopbcgkkoapgobdbedcemjljbihmemj
ShortcutWithArgument: C:\Users\Martin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Zuzka - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"
ShortcutWithArgument: C:\Users\Martin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\48499db33039e897\Martin - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 4"

==================== Loaded Modules (Whitelisted) ==============

2017-09-29 14:41 - 2017-09-29 14:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2018-02-14 19:31 - 2018-02-10 05:39 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2018-02-14 19:32 - 2018-02-10 05:36 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-01-10 19:09 - 2007-05-10 13:18 - 000835584 _____ () C:\Windows\vsnp325.exe
2018-01-29 12:42 - 2018-01-29 12:42 - 041100328 _____ () C:\Program Files (x86)\Google\Drive\googledrivesync.exe
2018-02-14 19:29 - 2018-02-13 05:25 - 004433752 _____ () C:\Program Files (x86)\Google\Chrome\Application\64.0.3282.167\libglesv2.dll
2018-02-14 19:29 - 2018-02-13 05:25 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\64.0.3282.167\libegl.dll
2016-01-10 19:09 - 2007-04-21 09:36 - 000270336 _____ () C:\Windows\tsnp325.exe
2017-09-30 05:27 - 2017-09-30 05:27 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2018-02-16 20:41 - 2018-02-16 20:41 - 000287960 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2018-02-16 20:41 - 2018-02-16 20:41 - 000280280 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2018-02-16 20:41 - 2018-02-16 20:41 - 000275672 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2018-02-25 05:14 - 2018-02-25 05:14 - 000088064 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\_ctypes.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000069120 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\bz2.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000920064 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\_hashlib.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000098816 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\win32api.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000110080 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\pywintypes27.dll
2018-02-25 05:14 - 2018-02-25 05:14 - 000364544 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\pythoncom27.dll
2018-02-25 05:14 - 2018-02-25 05:14 - 000686080 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\unicodedata.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000320512 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\win32com.shell.shell.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 001177088 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\wx._core_.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000806912 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\wx._gdi_.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000816640 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\wx._windows_.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 001067520 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\wx._controls_.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000733696 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\wx._misc_.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000736256 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\pysqlite2._sqlite.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000119808 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\win32file.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000108544 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\win32security.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000007168 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\hashobjs_ext.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000017920 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\thumbnails_ext.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000082432 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\usb_ext.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000013824 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\common.time34.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000018432 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\win32event.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000027648 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\windows.conditional.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000017408 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\windows.winwrap.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000089088 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\windows.volumes.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000167936 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\win32gui.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000046080 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\_socket.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 001311232 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\_ssl.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000135680 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\_elementtree.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000133632 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\pyexpat.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000038912 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\win32inet.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000077824 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\wx._html2.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000036864 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\_psutil_windows.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000524248 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\windows._lib_cacheinvalidation.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000010240 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\select.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000011264 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\win32crypt.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000218624 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\PIL._imaging.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000027648 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\_multiprocessing.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000020480 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\_yappi.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000035840 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\win32process.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000024064 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\win32pipe.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000025600 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\win32pdh.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000059392 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\windows.device_monitor.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000017408 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\win32profile.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000022528 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI95882\win32ts.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000088064 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\_ctypes.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000069120 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\bz2.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000920064 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\_hashlib.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000098816 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\win32api.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000110080 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\pywintypes27.dll
2018-02-25 05:14 - 2018-02-25 05:14 - 000364544 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\pythoncom27.dll
2018-02-25 05:14 - 2018-02-25 05:14 - 000686080 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\unicodedata.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000320512 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\win32com.shell.shell.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 001177088 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\wx._core_.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000806912 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\wx._gdi_.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000816640 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\wx._windows_.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 001067520 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\wx._controls_.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000733696 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\wx._misc_.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000736256 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\pysqlite2._sqlite.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000119808 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\win32file.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000108544 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\win32security.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000007168 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\hashobjs_ext.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000017920 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\thumbnails_ext.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000082432 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\usb_ext.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000013824 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\common.time34.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000018432 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\win32event.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000027648 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\windows.conditional.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000017408 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\windows.winwrap.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000089088 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\windows.volumes.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000167936 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\win32gui.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000046080 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\_socket.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 001311232 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\_ssl.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000135680 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\_elementtree.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000133632 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\pyexpat.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000038912 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\win32inet.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000077824 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\wx._html2.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000036864 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\_psutil_windows.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000524248 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\windows._lib_cacheinvalidation.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000010240 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\select.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000011264 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\win32crypt.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000218624 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\PIL._imaging.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000027648 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\_multiprocessing.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000020480 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\_yappi.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000035840 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\win32process.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000024064 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\win32pipe.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000025600 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\win32pdh.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000059392 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\windows.device_monitor.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000017408 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\win32profile.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000022528 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI111442\win32ts.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000088064 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\_ctypes.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000069120 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\bz2.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000920064 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\_hashlib.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000098816 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\win32api.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000110080 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\pywintypes27.dll
2018-02-25 05:14 - 2018-02-25 05:14 - 000364544 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\pythoncom27.dll
2018-02-25 05:14 - 2018-02-25 05:14 - 000686080 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\unicodedata.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000320512 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\win32com.shell.shell.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 001177088 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\wx._core_.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000806912 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\wx._gdi_.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000816640 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\wx._windows_.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 001067520 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\wx._controls_.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000733696 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\wx._misc_.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000736256 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\pysqlite2._sqlite.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000119808 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\win32file.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000108544 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\win32security.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000007168 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\hashobjs_ext.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000017920 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\thumbnails_ext.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000082432 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\usb_ext.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000013824 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\common.time34.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000018432 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\win32event.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000027648 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\windows.conditional.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000017408 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\windows.winwrap.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000089088 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\windows.volumes.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000167936 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\win32gui.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000046080 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\_socket.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 001311232 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\_ssl.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000135680 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\_elementtree.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000133632 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\pyexpat.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000038912 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\win32inet.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000077824 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\wx._html2.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000036864 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\_psutil_windows.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000524248 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\windows._lib_cacheinvalidation.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000010240 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\select.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000011264 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\win32crypt.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000218624 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\PIL._imaging.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000027648 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\_multiprocessing.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000020480 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\_yappi.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000035840 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\win32process.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000024064 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\win32pipe.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000025600 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\win32pdh.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000059392 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\windows.device_monitor.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000017408 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\win32profile.pyd
2018-02-25 05:14 - 2018-02-25 05:14 - 000022528 _____ () C:\Users\Martin\AppData\Local\Temp\_MEI73842\win32ts.pyd
2015-09-21 14:04 - 2013-09-16 11:17 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-1346476288-3969530600-2660108626-1000\Software\Classes\.scr: AutoCADScriptFile => 

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1346476288-3969530600-2660108626-1000\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 192.168.202.213 - 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\startupreg: FlickrUploadr => "C:\Users\Martin\AppData\Local\FlickrUploadrWindows\Update.exe" --processStart Flickr.exe
MSCONFIG\startupreg: PDFPrint => C:\Program Files (x86)\PDF24\pdf24.exe
HKU\S-1-5-21-1346476288-3969530600-2660108626-1000\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1346476288-3969530600-2660108626-1000\...\StartupApproved\Run: => "FlickrUploadr"
HKU\S-1-5-21-1346476288-3969530600-2660108626-1000\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{D139A8B7-3CE5-4098-B7AA-F0909F57EB27}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909_0\SZBrowser.exe
FirewallRules: [{3F9421A6-9043-4930-AE09-3FD727C9B809}] => (Allow) LPort=50248
FirewallRules: [{E7BAB287-9F55-4ADA-AD75-FB92554B6E32}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909\SZBrowser.exe
FirewallRules: [{AA2086D5-8695-401C-A449-9FE61B03E973}] => (Allow) C:\Games\World_of_Tanks\WoTLauncher.exe
FirewallRules: [{9FA8DCE8-CD5D-4695-9D42-6D1DBB920181}] => (Allow) C:\Games\World_of_Tanks\WorldofTanks.exe
FirewallRules: [{14A7EAC1-A11A-4472-BC10-E06216911A2D}] => (Allow) C:\Windows\system32\hasplms.exe
FirewallRules: [{9C8DEED7-585A-4D60-BD79-0B6FFAA64E6A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7BC2D390-E577-4F75-B382-33D5928BCE8E}] => (Allow) C:\WINDOWS\system32\hasplms.exe
FirewallRules: [{914EEE4C-8447-4B92-847F-79FB5A021D81}] => (Allow) C:\WINDOWS\system32\hasplms.exe
FirewallRules: [{CD3325F0-1079-4210-9559-82042CF676BC}] => (Allow) LPort=80
FirewallRules: [{2BEC9FCC-C610-472F-9460-E622C113D967}] => (Allow) LPort=443
FirewallRules: [{ABCF95E4-A893-48E9-9618-E31103D8B731}] => (Allow) LPort=20010
FirewallRules: [{B66D2DB6-2821-4CC0-9B03-8DD5EACBC0D3}] => (Allow) LPort=3478
FirewallRules: [{00FB9F79-D7F9-460C-9C9C-96ECFBBBA130}] => (Allow) LPort=7850
FirewallRules: [{FF66CA96-6710-46E8-AB63-BE9D74298D0F}] => (Allow) LPort=7852
FirewallRules: [{C1E52A38-22E2-491C-B0D4-A67F985AC1A8}] => (Allow) LPort=7853
FirewallRules: [{7A770A70-BCAE-4CBD-BDD9-C1389E43DC3A}] => (Allow) LPort=27022
FirewallRules: [{5EC67CE5-532A-40FF-95E2-4BB722DA6ADD}] => (Allow) LPort=6881
FirewallRules: [{4227C439-08F1-47C1-B719-857E8662DFA5}] => (Allow) LPort=33333
FirewallRules: [{6B4B4857-906B-4B46-B259-F2C63F3241D9}] => (Allow) LPort=20443
FirewallRules: [{F89CE5D9-93A5-4170-8BEE-FBD79A3156A6}] => (Allow) LPort=8090
FirewallRules: [TCP Query User{31D83AFB-B646-4E4D-9129-8FD7A147A988}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{EEFDCD9C-937A-4AF9-A615-7D74671F471B}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [{E3C1ABB2-07F1-4F76-8DCD-6412A090BF0D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{AB08B45A-4F81-4AC3-922E-A768ED5C2E87}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{A66CCE5B-6E4B-4B6B-A3D0-273F6C271685}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{D399A35D-6567-4735-BDC5-0F0A82E9EEC6}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
FirewallRules: [{6ACD7572-EB5F-4DF3-8BB4-A89C88021921}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/23/2018 11:29:11 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

Error: (02/23/2018 07:49:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: vlc.exe, verzia: 3.0.0.0, časová značka: 0x00dee6e6
Názov chybujúceho modulu: libqt_plugin.dll, verzia: 3.0.0.0, časová značka: 0x39203903
Kód výnimky: 0x40000015
Odstup chyby: 0x00b6b537
Identifikácia chybujúceho procesu: 0x19c4
Čas spustenia chybujúcej aplikácie: 0x01d3acd668956218
Cesta chybujúcej aplikácie: C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
Cesta chybujúceho modulu: C:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libqt_plugin.dll
Identifikácia hlásenia: 3590948a-b0c9-4188-8307-466762549763
Celé meno chybujúceho balíka: 
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (02/23/2018 07:25:04 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (02/22/2018 07:45:57 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

Error: (02/22/2018 06:58:21 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (02/21/2018 07:14:00 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

Error: (02/21/2018 06:39:59 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (02/20/2018 05:11:31 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0


System errors:
=============
Error: (02/25/2018 05:14:24 AM) (Source: DCOM) (EventID: 10016) (User: Martin-PC)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user Martin-PC\Martin SID (S-1-5-21-1346476288-3969530600-2660108626-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (02/25/2018 05:13:59 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (02/25/2018 05:13:59 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (02/25/2018 05:13:59 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (02/25/2018 05:13:59 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (02/25/2018 05:13:54 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby Autodesk Content Service zlyhalo kvôli nasledujúcej chybe: 
The service did not respond to the start or control request in a timely fashion.

Error: (02/25/2018 05:13:54 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Počas čakania na pripojenie služby Autodesk Content Service bol dosiahnutý časový limit (30000 ms).

Error: (02/25/2018 05:13:24 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Message Queuing sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 120000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.


Windows Defender:
===================================
Date: 2018-01-11 19:22:17.283
Description: 
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version: 
Previous Signature Version: 1.251.42.0
Update Source: Microsoft Malware Protection Center
Signature Type: AntiVirus
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.14104.0
Error code: 0x800704e8
Error description: The remote system is not available. For information about network troubleshooting, see Windows Help. 

Date: 2018-01-11 19:22:17.279
Description: 
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version: 
Previous Signature Version: 116.1.0.0
Update Source: Microsoft Malware Protection Center
Signature Type: Network Inspection System
Update Type: Full
Current Engine Version: 
Previous Engine Version: 2.1.13804.0
Error code: 0x800704e8
Error description: The remote system is not available. For information about network troubleshooting, see Windows Help. 

Date: 2018-01-11 19:22:16.852
Description: 
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version: 
Previous Signature Version: 1.251.42.0
Update Source: Microsoft Malware Protection Center
Signature Type: AntiVirus
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.14104.0
Error code: 0x800704e8
Error description: The remote system is not available. For information about network troubleshooting, see Windows Help. 

Date: 2018-01-11 19:22:16.842
Description: 
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version: 
Previous Signature Version: 1.251.42.0
Update Source: Microsoft Malware Protection Center
Signature Type: AntiSpyware
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.14104.0
Error code: 0x800704e8
Error description: The remote system is not available. For information about network troubleshooting, see Windows Help. 

Date: 2018-01-11 19:22:16.841
Description: 
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version: 
Previous Signature Version: 1.251.42.0
Update Source: Microsoft Malware Protection Center
Signature Type: AntiVirus
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.14104.0
Error code: 0x800704e8
Error description: The remote system is not available. For information about network troubleshooting, see Windows Help. 

CodeIntegrity:
===================================

Date: 2018-02-18 07:53:56.964
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

Date: 2018-02-18 07:53:56.943
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

Date: 2018-02-18 07:53:56.913
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

Date: 2018-02-18 07:53:56.847
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

Date: 2018-02-18 07:53:56.836
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

Date: 2018-02-18 07:53:56.826
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

Date: 2018-02-18 07:53:55.954
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

Date: 2018-02-18 07:53:55.806
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) CPU G3258 @ 3.20GHz
Percentage of memory in use: 60%
Total physical RAM: 3983.82 MB
Available physical RAM: 1559.87 MB
Total Virtual: 8847.82 MB
Available Virtual: 6015.04 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.25 GB) (Free:11.43 GB) NTFS
Drive d: () (Fixed) (Total:596.17 GB) (Free:68.1 GB) NTFS

\\?\Volume{54cfc04d-608e-11e5-8634-806e6f6e6963}\ (Vyhradené systémom) (Fixed) (Total:0.1 GB) (Free:0.03 GB) NTFS
\\?\Volume{87eadaf7-0000-0000-0000-60d61b000000}\ () (Fixed) (Total:0.44 GB) (Free:0.06 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: 87EADAF7)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 596.2 GB) (Disk ID: 371ECF35)
Partition 1: (Not Active) - (Size=596.2 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================