Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14.03.2018
Ran by roman (24-03-2018 18:19:55)
Running from C:\Users\roman\Desktop
Windows 10 Pro Version 1709 16299.309 (X64) (2017-11-30 19:44:22)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2567772305-2493399478-1946925476-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2567772305-2493399478-1946925476-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-2567772305-2493399478-1946925476-1000 - Limited - Disabled) => C:\Users\defaultuser0
Guest (S-1-5-21-2567772305-2493399478-1946925476-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2567772305-2493399478-1946925476-1007 - Limited - Enabled)
roman (S-1-5-21-2567772305-2493399478-1946925476-1001 - Administrator - Enabled) => C:\Users\roman
WDAGUtilityAccount (S-1-5-21-2567772305-2493399478-1946925476-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

.NET Core SDK 1.0.0 (x64) Installer (x64) (HKLM\...\{3A36F010-62C4-4173-9F25-257F1B0899DD}) (Version: 4.0.4911 - Microsoft Corporation) Hidden
.NET Core SDK 1.0.0 (x64) Installer (x64) (HKLM-x32\...\{c7c7d963-f622-455d-879a-7ffa111d1322}) (Version: 1.0.0 - Microsoft Corporation)
.NET Core SDK 1.0.2 (x64) (HKLM\...\{EA35E834-8CA4-46DF-A8E5-8F11AC872A30}) (Version: 4.0.37723 - Microsoft Corporation) Hidden
.NET Core SDK 1.0.2 (x64) (HKLM-x32\...\{782476be-43c2-4bac-8292-b1ddff900c7b}) (Version: 1.0.2 - Microsoft Corporation)
.NET Core SDK 1.0.3 (x64) (HKLM\...\{9CD97EAE-EA85-428D-B64F-EA5D3E5233A7}) (Version: 4.0.54117 - Microsoft Corporation) Hidden
.NET Core SDK 1.0.3 (x64) (HKLM-x32\...\{e7cceb0a-317e-4e02-a41f-207fbf9bf632}) (Version: 1.0.3 - Microsoft Corporation)
.NET Core SDK 1.0.4 (x64) (HKLM\...\{11ACCE3C-C179-472C-A8CA-0F467702B2DA}) (Version: 4.1.5012 - Microsoft Corporation) Hidden
.NET Core SDK 1.0.4 (x64) (HKLM-x32\...\{c56e80af-58a4-490b-a1cd-5718290133b9}) (Version: 1.0.4 - Microsoft Corporation)
.NET Core SDK 1.1.0 (x64) (HKLM\...\{DF68596E-0F41-41CC-BAD9-9F30A9662D90}) (Version: 4.16.5124 - Microsoft Corporation) Hidden
.NET Core SDK 1.1.0 (x64) (HKLM-x32\...\{67d148ca-6fe2-47ec-bf5c-fbd64345d511}) (Version: 1.1.0 - Microsoft Corporation)
„Microsoft Office Proofing Tools 2016“ – lietuvių k. (HKLM\...\{90160000-001F-0427-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
4K Video Downloader 4.4 (HKLM-x32\...\{17CEAB50-0275-4D5E-9C11-CF2963C59FA1}) (Version: 4.4.6.2295 - Open Media LLC)
7+ Taskbar Tweaker v5.4 (HKU\S-1-5-21-2567772305-2493399478-1946925476-1001\...\7 Taskbar Tweaker) (Version: 5.4 - RaMMicHaeL)
7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Active Directory Authentication Library for SQL Server (HKLM\...\{52D1FCFD-1052-4D75-B3FB-9906901AFD98}) (Version: 13.1.4001.0 - Microsoft Corporation) Hidden
Adobe Bridge CC 2018 8.0 (HKLM\...\{2660902D-D9C8-40CF-AFF5-27D17F5D651C}) (Version: 8.0 - Adobe Systems Incorporated)
Adobe Flash Player 28 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 28.0.0.161 - Adobe Systems Incorporated)
Adobe Photoshop (HKLM\...\{9B08B2EC-C82E-4D24-A3E0-57646E2CE480}) (Version: 1.0.0000 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CC 2018 19.0.1 (HKLM\...\{4FDB9E8B-EA9A-456F-B653-F6A988DE803B}) (Version: 19.0.1 - Adobe Systems Incorporated)
Alati za jezičnu provjeru u sustavu Microsoft Office 2016 - hrvatski (HKLM\...\{90160000-001F-041A-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Allway Sync version 16.0.1 (HKLM\...\Allway Sync_is1) (Version:  - Botkind Inc)
Any Video Converter 6.0.9 (HKLM-x32\...\Any Video Converter) (Version: 6.0.9 - Anvsoft)
Apple Mobile Device Support (HKLM\...\{BD6778C5-6FA5-492A-ADD6-E706339C2A7B}) (Version: 11.0.2.4 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{C1BBFD2A-BCDD-45B3-8C0B-66BD434970A8}) (Version: 2.4.8.1 - Apple Inc.)
Application Verifier x64 External Package (HKLM\...\{D9908CED-5ABB-FEE9-FC84-743F4D38637C}) (Version: 10.1.16299.15 - Microsoft) Hidden
AudioSwitch (HKLM-x32\...\AudioSwitch_is1) (Version: 2.1.3.0 - )
Autodesk 3ds Max 2014 (HKLM\...\{52B37EC7-D836-0409-0064-3C24BCED2010}) (Version: 16.0.420.0 - Autodesk) Hidden
Autodesk 3ds Max 2014 (HKLM\...\Autodesk 3ds Max 2014) (Version: 16.0.420.0 - Autodesk)
Autodesk 3ds Max 2014 64-bit Populate Data (HKLM\...\{7491836B-659E-47DD-ABBF-F875AD48FD10}) (Version: 1.0.0.1 - Autodesk)
Autodesk 3ds Max 2017 (HKLM\...\{52B37EC7-D836-0410-0664-3C24BCED2010}) (Version: 19.3.533.0 - Autodesk) Hidden
Autodesk 3ds Max 2017 (HKLM\...\Autodesk 3ds Max 2017) (Version: 19.3.533.0 - Autodesk)
Autodesk 3ds Max 2017 Populate Data (HKLM\...\{2B07E17E-A072-43BD-9DCC-369B56C16698}) (Version: 19.0.0.0 - Autodesk)
Autodesk 3ds Max 2017 SP1 (HKLM\...\Autodesk 3ds Max 2017 SP1) (Version: 19.3.533.0 - Autodesk) Hidden
Autodesk 3ds Max 2017 SP2 (HKLM\...\Autodesk 3ds Max 2017 SP2) (Version: 19.3.533.0 - Autodesk) Hidden
Autodesk 3ds Max 2017 SP3 (HKLM\...\Autodesk 3ds Max 2017 SP3) (Version: 19.3.533.0 - Autodesk)
Autodesk Advanced Material Library Image Library 2017 (HKLM-x32\...\{8ED2ED41-4455-449D-993C-751C039089B9}) (Version: 15.11.3.0 - Autodesk)
Autodesk Backburner 2014 (HKLM-x32\...\{3D347E6D-5A03-4342-B5BA-6A771885F379}) (Version: 14.0.0.0 - Autodesk, Inc.)
Autodesk Composite 2014 (HKLM\...\{5AAB972C-FF31-4B01-8445-50C42860EC02}) (Version: 9.0.0.0 - Autodesk) Hidden
Autodesk Composite 2014 (HKLM\...\Autodesk Composite 2014) (Version: 9.0.0.0 - Autodesk)
Autodesk Desktop App (HKLM-x32\...\Autodesk Desktop App) (Version: 6.2.0.174 - Autodesk)
Autodesk DirectConnect 2014 64-bit (HKLM\...\{8FC7C2B2-0F64-4B35-AA3D-2B051D009243}) (Version: 8.0.56.1 - Autodesk) Hidden
Autodesk DirectConnect 2014 64-bit (HKLM\...\Autodesk DirectConnect 2014 64-bit) (Version: 8.0.56.1 - Autodesk)
Autodesk Essential Skills Movies for 3ds Max 2014 64-bit (HKLM\...\{E8814D63-BB76-4C89-A25E-264ECF11D00D}) (Version: 1.2.0.0 - Autodesk)
Autodesk Inventor Server Engine for 3ds Max 2014 64-bit (HKLM\...\{009751C6-22D7-4548-A313-AD48FA57076F}) (Version: 16.0 - Autodesk)
Autodesk License Service (x64) - 3.1 (HKLM\...\{EB6FE58F-8576-4272-BB9C-6B47D9EDFA4D}) (Version: 3.1.26.0 - Autodesk)
Autodesk Material Library 2014 (HKLM-x32\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.32.600 - Autodesk)
Autodesk Material Library 2017 (HKLM-x32\...\{8FB9F735-D64C-4991-8D91-4CDDAB1ABDEE}) (Version: 15.11.3.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2014 (HKLM-x32\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.32.600 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2017 (HKLM-x32\...\{3FBFBC43-9882-43FA-B979-2D53896747B3}) (Version: 15.11.3.0 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2014 (HKLM-x32\...\{A0633D4E-5AF2-4E3E-A70A-FE9C2BD8A958}) (Version: 4.0.32.600 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2017 (HKLM-x32\...\{CB6E007E-701D-42CD-AF0E-4BE9C36C7F7C}) (Version: 15.11.3.0 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2014 (HKLM\...\{0BB716E0-1400-0610-0000-097DC2F354DF}) (Version: 13.02.15161 - Autodesk) Hidden
Autodesk Revit Interoperability for 3ds Max 2014 (HKLM\...\Autodesk Revit Interoperability for 3ds Max 2014) (Version: 13.02.15161 - Autodesk)
AVIcodec (remove only) (HKLM-x32\...\AVIcodec) (Version:  - )
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Brackets (HKLM-x32\...\{B2F571A7-E9D3-4030-B167-57373D2D61D7}) (Version: 1.9 - brackets.io)
calibre (HKLM-x32\...\{03AF9CD6-439E-4B25-9734-A1D70B2105CA}) (Version: 3.16.0 - Kovid Goyal)
CCleaner (HKLM\...\CCleaner) (Version: 5.26 - Piriform)
CDisplayEx 1.10.29 (HKLM-x32\...\CDisplayEx_is1) (Version:  - Progdigy Software S.A.R.L.)
ClickOnce Bootstrapper Package for Microsoft .NET Framework (HKLM-x32\...\{D1844DC3-B378-47CC-AB40-7FC16C79A2CD}) (Version: 4.7.02558 - Microsoft Corporation) Hidden
Công cụ Soát lỗi Microsoft Office 2016 - Tiếng Việt (HKLM\...\{90160000-001F-042A-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Dell Display Manager (HKLM-x32\...\{AC50C05D-9D57-40F5-B2EF-AC402F14312B}_is1) (Version:  - EnTech Taiwan)
DiagnosticsHub_CollectionService (HKLM\...\{5FC8BCBB-3408-48B0-BAF0-839490F7AE65}) (Version: 15.6.27309 - Microsoft Corporation) Hidden
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 390.77 - NVIDIA Corporation) Hidden
Eines de correcció del Microsoft Office 2016: català (HKLM\...\{90160000-001F-0403-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Entity Framework 6.1.3 Tools  for Visual Studio 15 (HKLM-x32\...\{F8C0447E-D45C-4E52-94E8-C6340AAC9DB8}) (Version: 6.1.60104.0 - Microsoft Corporation) Hidden
Exodus (HKU\S-1-5-21-2567772305-2493399478-1946925476-1001\...\exodus) (Version: 1.46.1 - Exodus Movement Inc)
Ferramentas de Verificação do Microsoft Office 2016 - Português (HKLM\...\{90160000-001F-0816-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Ferramentas de verificación de Microsoft Office 2016 - Galego (HKLM\...\{90160000-001F-0456-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
ffdshow v1.3.4533 [2014-09-29] (HKLM-x32\...\ffdshow_is1) (Version: 1.3.4533.0 - )
FIFA18 version 1.0 (HKLM\...\FIFA18_is1) (Version: 1.0 - STEAMPUNKS) <==== ATTENTION
foobar2000 v1.3.6 (HKLM-x32\...\foobar2000) (Version: 1.3.6 - Peter Pawlowski)
Git Extensions 2.50.02 (HKLM-x32\...\{D1686E6B-D327-468F-B9BA-65C408A94BD8}) (Version: 2.50.02 - Henk)
Git LFS version 1.5.6 (HKLM\...\{286391DE-F778-44EA-9375-1B21AAA04FF0}_is1) (Version: 1.5.6 - GitHub, Inc)
Git version 2.16.1.4 (HKLM\...\Git_is1) (Version: 2.16.1.4 - The Git Development Community)
Google Earth Pro (HKLM\...\{D9EF644E-2FAE-493B-8180-5617CC774C4F}) (Version: 7.3.1.4507 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 65.0.3325.181 - Spoločnosť Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
GoPro VR Player 2.3 (HKLM\...\GoPro VR Player 2.3) (Version: V2.3.1 - GoPro)
GoPro VR Player 3.0 (HKLM\...\GoPro VR Player 3.0) (Version: V3.0.3 - GoPro)
HandBrake 1.0.3 (HKLM-x32\...\HandBrake) (Version: 1.0.3 - )
Herramientas de corrección de Microsoft Office 2016: español (HKLM\...\{90160000-001F-0C0A-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
icecap_collection_neutral (HKLM-x32\...\{12C1EC05-F936-4A80-821E-7AAC64C4E6FF}) (Version: 15.6.27413 - Microsoft Corporation) Hidden
icecap_collection_x64 (HKLM\...\{C8E22DF4-5498-4B61-93CF-3081BE95A1BA}) (Version: 15.6.27413 - Microsoft Corporation) Hidden
icecap_collectionresources (HKLM-x32\...\{079302B9-1EF0-46D0-83FA-382C01ADF6E6}) (Version: 15.6.27406 - Microsoft Corporation) Hidden
icecap_collectionresourcesx64 (HKLM-x32\...\{500E3263-4930-456B-AD78-E6D0ACC7ABB1}) (Version: 15.6.27406 - Microsoft Corporation) Hidden
iFunbox (v4.0.4106.1352) (HKLM-x32\...\iFunbox_is1) (Version: v4.0.4106.1352 - iFunbox DevTeam)
IIS 10.0 Express (HKLM\...\{63E2B575-D6F7-4572-8EA9-3DAC4208AA2A}) (Version: 10.0.1741 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version:  - ) Hidden
IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version:  - ) Hidden
I-Microsoft Office Proofing Tools 2016 - IsiZulu (HKLM\...\{90160000-001F-0435-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Innealan-dearbhaidh Microsoft Office 2016 - Gàidhlig (HKLM\...\{90160000-001F-0491-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Instrumente de verificare Microsoft Office 2016 - Română (HKLM\...\{90160000-001F-0418-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
IntelliTraceProfilerProxy (HKLM-x32\...\{ACBAA378-519A-441D-9349-C0AAD8DEAD04}) (Version: 15.0.17289.01 - Microsoft Corporation) Hidden
iTunes (HKLM\...\{BDE14F64-E8A1-468E-AB7C-D8B1F5DB95E9}) (Version: 12.7.2.60 - Apple Inc.)
Java 8 Update 161 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180161F0}) (Version: 8.0.1610.12 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
JetBrains dotCover 2017.3.1 (HKU\S-1-5-21-2567772305-2493399478-1946925476-1001\...\{2735a28b-8771-5165-8e6f-b9c2b1819438}) (Version: 2017.3.1  - JetBrains s.r.o.)
JetBrains dotPeek 2017.3.1 (HKU\S-1-5-21-2567772305-2493399478-1946925476-1001\...\{4e4a07d8-d5f4-5d22-863e-b6ddbf17a1e9}) (Version: 2017.3.1  - JetBrains s.r.o.)
JetBrains ReSharper Ultimate in Visual Studio Community 2017 (HKU\S-1-5-21-2567772305-2493399478-1946925476-1001\...\{110e5768-7365-5bab-b479-e8fee96e00cd}) (Version: 2017.3.1  - JetBrains s.r.o.)
KDiff3 (remove only) (HKLM-x32\...\KDiff3) (Version:  - )
KeePass Password Safe 2.38 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.38 - Dominik Reichl)
Kits Configuration Installer (HKLM-x32\...\{86E59C8F-61D5-1782-A3CE-60AE7E4D7791}) (Version: 10.1.16299.15 - Microsoft) Hidden
Korrekturredskaber til Microsoft Office 2016 - Dansk (HKLM\...\{90160000-001F-0406-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Korrekturverktøy for Microsoft Office 2016 – norsk (bokmål) (HKLM\...\{90160000-001F-0414-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Korrekturverktøy for Microsoft Office 2016 – norsk (nynorsk) (HKLM\...\{90160000-001F-0814-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
LiteDB Viewer 3 (HKLM-x32\...\{6EFB147B-92A8-4F04-BE51-6D2A8EFB40F7}) (Version: 3.0.1.0 - Falahati.net)
Logitech Gaming Software 8.94 (HKLM\...\Logitech Gaming Software) (Version: 8.94.108 - Logitech Inc.)
Medieval CUE Splitter (HKLM-x32\...\{B96D2269-568B-4CBF-9332-12FAE8B158F7}) (Version: 1.2.0 - Medieval Software)
Microsoft .NET Core 1.0.1 - SDK Preview 4 (x64) (HKLM-x32\...\{4b5484b5-ef1f-4f6b-9532-d03071bfb38b}) (Version: 1.0.0.4233 - Microsoft Corporation)
Microsoft .NET Core 1.0.3 - SDK RC 3 (x64) (HKLM-x32\...\{738d2d05-c6fa-4784-b39f-d4cc849f276f}) (Version: 1.0.0.4530 - Microsoft Corporation)
Microsoft .NET Core 1.0.3 - SDK RC 4 (x64) (HKLM-x32\...\{c123f33d-df50-411a-8d89-b142ab465986}) (Version: 1.0.0.4771 - Microsoft Corporation)
Microsoft .NET Core SDK - 2.0.0 (x64) (HKLM-x32\...\{c4615fd2-6841-49cb-bcd3-a2cd7bd74a85}) (Version: 2.0.0 - Microsoft Corporation)
Microsoft .NET Core SDK - 2.0.2 (x64) (HKLM-x32\...\{7976d84c-fdff-4801-99ca-cd8354fbbaaf}) (Version: 2.0.2 - Microsoft Corporation)
Microsoft .NET Core SDK - 2.1.103 (x64) (HKLM-x32\...\{759f58bf-356b-4499-882f-086f6ea9d3f2}) (Version: 2.1.103 - Microsoft Corporation)
Microsoft .NET Core SDK - 2.1.2 (x64) (HKLM-x32\...\{9651d4f8-e761-4b9b-ac03-6c2685f1f225}) (Version: 2.1.2 - Microsoft Corporation)
Microsoft .NET Core SDK - 2.1.4 (x64) (HKLM-x32\...\{9e732e8f-9e57-467d-a425-6f2387bdabd0}) (Version: 2.1.4 - Microsoft Corporation)
Microsoft .NET Framework 4.6.2 SDK (HKLM-x32\...\{39BEF607-44E6-472B-90C1-BD62AA2B7A3F}) (Version: 4.6.01586 - Microsoft Corporation)
Microsoft .NET Framework 4.6.2 Targeting Pack (HKLM-x32\...\{C07B4BC7-A37D-46A8-B2A3-620CC569D149}) (Version: 4.6.01586 - Microsoft Corporation)
Microsoft Azure Authoring Tools - v2.9.5.3 (HKLM\...\{086C537B-DE1A-4A11-8441-6AAF076174B8}) (Version: 2.9.8699.20 - Microsoft Corporation)
Microsoft Azure Compute Emulator - v2.9.5.3 (HKLM\...\Microsoft Azure Compute Emulator - v2.9.5.3) (Version: 2.9.8699.20 - Microsoft Corporation)
Microsoft Azure Libraries for .NET – v2.9 (HKLM\...\{C5C91AA6-3E83-430E-8B7A-6B790083F28D}) (Version: 3.0.0127.060 - Microsoft Corporation)
Microsoft Azure Storage Emulator - v5.4 (HKLM-x32\...\Microsoft Azure Storage Emulator - v5.4) (Version: 5.4.1811.0037 - Microsoft Corporation)
Microsoft Office 2016 Professional Plus (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft Office Proofing Tools Kit Compilation 2016 (HKLM\...\Office16.PROOFKIT) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2567772305-2493399478-1946925476-1001\...\OneDriveSetup.exe) (Version: 18.025.0204.0009 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{1385D3DB-8E80-427B-91D2-B7535862B8E4}) (Version: 11.3.6518.0 - Microsoft Corporation)
Microsoft SQL Server 2016 LocalDB  (HKLM\...\{9097BF1A-13A0-4A4A-A1F8-473E2A669863}) (Version: 13.1.4001.0 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2017 (HKLM\...\{EE99006A-F227-41BA-884C-C3AF9642D95A}) (Version: 14.0.3006.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2017 (HKLM-x32\...\{FBD0D997-4E36-4B10-8471-BD7CF42ECE7F}) (Version: 14.0.3006.16 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual Studio Code (HKLM-x32\...\{F8A2A208-72B3-4D61-95FC-8A65D340689B}_is1) (Version: 1.21.1 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 1.15.3248.309 - Microsoft Corporation)
Microsoft Web Deploy 4.0 (HKLM\...\{1ED7F328-5789-44D8-A9BA-C352B8E4018D}) (Version: 10.0.1988 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
MioMore Desktop 7.50 (HKLM-x32\...\{A2804FE8-4101-48a0-AE1A-575B99014BF4}-Mio-7.50) (Version: 7.50.0112.135 - Mio Technology)
MotoGP 15 (HKLM-x32\...\MotoGP 15_is1) (Version:  - )
Mozilla Firefox 57.0.4 (x64 sk) (HKLM\...\Mozilla Firefox 57.0.4 (x64 sk)) (Version: 57.0.4 - Mozilla)
Mozilla Firefox 59.0.1 (x64 en-US) (HKLM\...\Mozilla Firefox 59.0.1 (x64 en-US)) (Version: 59.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 57.0.1 - Mozilla)
Mozilla Thunderbird 45.5.1 (x86 sk) (HKLM-x32\...\Mozilla Thunderbird 45.5.1 (x86 sk)) (Version: 45.5.1 - Mozilla)
MSI Development Tools (HKLM-x32\...\{973CACA2-E018-065B-0580-F2784802E299}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
MusicBee 3.1 (HKLM-x32\...\MusicBee) (Version: 3.1 - Steven Mayall)
Musixmatch (HKU\S-1-5-21-2567772305-2493399478-1946925476-1001\...\musixmatch) (Version: 0.19.5 - Musixmatch)
Narzędzia sprawdzające pakietu Microsoft Office 2016 — polski (HKLM\...\{90160000-001F-0415-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Nástroje kontroly pravopisu pro Microsoft Office 2016 – čeština (HKLM\...\{90160000-001F-0405-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2016 - slovenčina (HKLM\...\{90160000-001F-041B-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Nexus 17.1 (HKLM-x32\...\Winstep Xtreme_is1) (Version:  - )
Node.js (HKLM\...\{92E3C936-BE50-4D58-AB85-769E6438025E}) (Version: 6.10.2 - Node.js Foundation)
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.5.4 - Notepad++ Team)
NVIDIA Grafický ovládač 390.77 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 390.77 - NVIDIA Corporation)
NVIDIA mental ray and IRay feature plugins for 3ds Max 2017 (HKLM\...\{6ABEC32F-B90F-4499-B3A3-FF8A00948178}) (Version: 19.0.0.0 - Autodesk)
NVIDIA mental ray and IRay rendering plugins for 3ds Max 2017 (HKLM\...\{4B889650-52DC-49E0-AB9C-F501B91002E3}) (Version: 19.0.0.0 - Autodesk)
NVIDIA Softvér systému s podporou technológie PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
Opera Stable 51.0.2830.55 (HKLM-x32\...\Opera 51.0.2830.55) (Version: 51.0.2830.55 - Opera Software)
Orodja za preverjanje za Microsoft Office 2016 – angleščina (HKLM\...\{90160000-001F-0424-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Outils de vérification linguistique 2016 de Microsoft Office - Français (HKLM\...\{90160000-001F-040C-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Ovládací panel NVIDIA 390.77 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 390.77 - NVIDIA Corporation) Hidden
Paintstorm Studio (HKLM\...\{CEECEB3A-7F06-BDC5-A1DB-CAB49C4FB362}) (Version: 2.10 - Paintstorm Studio developers team)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.319.0 - Tracker Software Products Ltd)
Podpora Apple aplikácií (32-bit) (HKLM-x32\...\{BC7C46A4-D7A7-48EC-A98C-32A7762B5EFA}) (Version: 6.2.1 - Apple Inc.)
Podpora Apple aplikácií(64-bit) (HKLM\...\{F0C4B709-8BF4-4A72-B527-12E7BF5482F8}) (Version: 6.2.1 - Apple Inc.)
PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: 1.7.8556 - Kakao Corp.)
PotPlayer-64 bit (HKLM-x32\...\PotPlayer64) (Version: 1.7.8557 - Kakao Corp.)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Revisores de Texto do Microsoft Office 2016 – Português (Brasil) (HKLM\...\{90160000-001F-0416-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Ruby 2.4.1-2-x64 (HKU\S-1-5-21-2567772305-2493399478-1946925476-1001\...\RubyInstaller-2.4-x64-mingw32_is1) (Version: 2.4.1-2 - RubyInstaller Team)
Samsung Kies (HKLM-x32\...\{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.4.16113.3 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.4.16113.3 - Samsung Electronics Co., Ltd.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.61.0 - Samsung Electronics Co., Ltd.)
SDK ARM Additions (HKLM-x32\...\{7922BB77-0B59-840A-AC80-D560A34D75C5}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
SDK ARM Redistributables (HKLM-x32\...\{C87DF65C-A672-7E08-A083-E7D48FE8DB70}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
Skype™ 7.32 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.32.104 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-2567772305-2493399478-1946925476-1001\...\Spotify) (Version: 1.0.75.483.g7ff4a0dc - Spotify AB)
StarUML (HKLM-x32\...\{41425336-9163-4F0D-8878-5DEA0A1B43B6}) (Version: 2.8.0 - MKLab)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Strumenti di correzione di Microsoft Office 2016 - Italiano (HKLM\...\{90160000-001F-0410-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Taalprogramma's voor Microsoft Office 2016 - Nederlands (HKLM\...\{90160000-001F-0413-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
TypeScript Power Tool (HKLM-x32\...\{5207E91E-2B03-42C0-89D0-F7B2082993C6}) (Version: 2.1.7.0 - Microsoft Corporation) Hidden
TypeScript SDK (HKLM-x32\...\{4185E5A6-374B-4F53-B11C-630F750BC3CD}) (Version: 2.6.5.0 - Microsoft Corporation) Hidden
TypeScript SDK (HKLM-x32\...\{B08D05BC-7897-4616-B34C-95B58D07650C}) (Version: 2.5.4.0 - Microsoft Corporation) Hidden
Uirlisí Profála Microsoft Office 2016 - Gaeilge (HKLM\...\{90160000-001F-083C-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Universal CRT Extension SDK (HKLM-x32\...\{4E8F20FD-6BC7-B65C-D4F2-5D7CEDE3352E}) (Version: 10.1.14393.795 - Microsoft Corporation) Hidden
Universal CRT Extension SDK (HKLM-x32\...\{A5FA2886-1925-133F-0D41-B9A8ECEA0A2D}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{233B73D9-650E-9CEC-1002-767C916C1B61}) (Version: 10.1.14393.795 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{B739B4C5-EEEC-8E70-0276-38C4779AF398}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{A9D6F52C-694E-3E41-7AB8-5BEB644742A5}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (HKLM\...\{E053089E-7953-3219-814F-F485FC151C54}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (HKLM-x32\...\{B9424F08-0617-C4F6-A798-5A9250C1A738}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{D261CEA1-AB8D-9CFA-4407-BCEFC78661AC}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{F2EB74A7-148A-8DC9-82A5-B5A88093EEC4}) (Version: 10.1.14393.795 - Microsoft Corporation) Hidden
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
VC80CRTRedist - 8.0.50727.6195 (HKLM-x32\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden
vcpp_crt.redist.clickonce (HKLM-x32\...\{B5789DA1-92FB-4760-BD23-44DDCAA94584}) (Version: 14.13.26020 - Microsoft Corporation) Hidden
Vegas Pro 13.0 (64-bit) (HKLM\...\{CDA02BF0-BFBC-11E3-AFA0-F04DA23A5C58}) (Version: 13.0.290 - Sony)
Veglat e kontrollit gjuhësor të Microsoft Office 2016 - shqip (HKLM\...\{90160000-001F-041C-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Visual Studio Community 2017 (HKLM-x32\...\af1ac292) (Version: 15.6.27428.2015 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.0 - VideoLAN)
V-Ray for 3dsmax 2014 for x64 (HKLM\...\V-Ray for 3dsmax 2014 for x64) (Version: 3.20.03 - Chaos Software Ltd)
V-Ray for 3dsmax 2017 for x64 (HKLM\...\V-Ray for 3dsmax 2017 for x64) (Version: 3.40.03 - Chaos Software Ltd)
VS Immersive Activate Helper (HKLM-x32\...\{8A2BDA07-3417-46C1-9058-CB32BC63E30E}) (Version: 16.0.76.0 - Microsoft Corporation) Hidden
VS JIT Debugger (HKLM\...\{F8F52853-A1A7-42C7-A082-5A6D5853BB0B}) (Version: 16.0.76.0 - Microsoft Corporation) Hidden
VS Script Debugging Common (HKLM\...\{0EE5749D-2DC0-460F-AB1C-06B3EDB42426}) (Version: 16.0.76.0 - Microsoft Corporation) Hidden
VS WCF Debugging (HKLM\...\{209A1A84-1A06-4954-9D73-7E654C5F8D7A}) (Version: 16.0.76.0 - Microsoft Corporation) Hidden
vs_BlendMsi (HKLM-x32\...\{C5D83E0F-12E7-4BA3-98E6-DAE0E73B5BF9}) (Version: 15.0.27205 - Microsoft Corporation) Hidden
vs_clickoncebootstrappermsi (HKLM-x32\...\{A68D7884-F036-4A0D-AE1A-410E0311E135}) (Version: 15.0.27005 - Microsoft Corporation) Hidden
vs_clickoncebootstrappermsires (HKLM-x32\...\{91DDDFB5-1782-48C2-BA2A-8F4D9DE39D27}) (Version: 15.0.27005 - Microsoft Corporation) Hidden
vs_clickoncesigntoolmsi (HKLM-x32\...\{6A1ECF65-2CBF-4B33-9D4A-D1C0A0E5FE45}) (Version: 15.0.27005 - Microsoft Corporation) Hidden
vs_communitymsi (HKLM-x32\...\{C2749223-157E-48F0-9410-A510361D6803}) (Version: 15.6.27406 - Microsoft Corporation) Hidden
vs_communitymsires (HKLM-x32\...\{40040E64-50EB-4FCF-B209-DA0B20821759}) (Version: 15.0.26621 - Microsoft Corporation) Hidden
vs_devenvmsi (HKLM-x32\...\{BFFA2FFB-1095-4ADD-A352-368806D2412B}) (Version: 15.0.26621 - Microsoft Corporation) Hidden
vs_filehandler_amd64 (HKLM-x32\...\{02DD895F-089F-4A63-81A9-78D00142AF20}) (Version: 15.6.27406 - Microsoft Corporation) Hidden
vs_filehandler_x86 (HKLM-x32\...\{E6A92308-33DF-494B-A91A-3B80FBC97F2B}) (Version: 15.6.27406 - Microsoft Corporation) Hidden
vs_FileTracker_Singleton (HKLM-x32\...\{8EB2C670-04C2-482D-BACD-B4095E27FD39}) (Version: 15.6.27309 - Microsoft Corporation) Hidden
vs_minshellinteropmsi (HKLM-x32\...\{6B45EEA3-85F8-4B26-B952-6830A45F2688}) (Version: 15.6.27323 - Microsoft Corporation) Hidden
vs_minshellmsi (HKLM-x32\...\{13E08AD0-D6AC-44C4-9F5B-0AE2EB56B105}) (Version: 15.6.27421 - Microsoft Corporation) Hidden
vs_minshellmsires (HKLM-x32\...\{6DFE6F8D-B61D-4348-AB70-4ABF1210DFD5}) (Version: 15.0.26621 - Microsoft Corporation) Hidden
vs_SQLClickOnceBootstrappermsi (HKLM-x32\...\{5779B6DD-604A-41CE-BC3D-9D4BDDA22AD2}) (Version: 15.0.27005 - Microsoft Corporation) Hidden
vs_tipsmsi (HKLM-x32\...\{1AC6CC3D-7724-4D84-9270-798A2191AB1C}) (Version: 15.0.27005 - Microsoft Corporation) Hidden
Vulkan Run Time Libraries 1.0.65.0 (HKLM\...\VulkanRT1.0.65.0) (Version: 1.0.65.0 - LunarG, Inc.) Hidden
Wacom Tablet (HKLM\...\Wacom Tablet Driver) (Version: 6.3.27-2 - Wacom Technology Corp.)
WibuKey Setup (WibuKey Remove) (HKLM\...\{00060000-0000-1004-8002-0000C06B5161}) (Version: Version 6.20 of 2013-Dec-18 (Build 1230) (Setup) - WIBU-SYSTEMS AG)
Win32DiskImager version 1.0.0 (HKLM-x32\...\{3DFFA293-DF2C-4B23-92E5-3433BDC310E1}}_is1) (Version: 1.0.0 - ImageWriter Developers)
WinAppDeploy (HKLM-x32\...\{9690D51C-4435-1C20-7819-66CCAB0F03F9}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinAppDeploy (HKLM-x32\...\{C9966D24-DB2F-8514-EAA3-BEED85F3E166}) (Version: 10.1.14393.795 - Microsoft Corporation) Hidden
WinDirStat 1.1.2 (HKU\S-1-5-21-2567772305-2493399478-1946925476-1001\...\WinDirStat) (Version:  - )
Windows SDK AddOn (HKLM-x32\...\{45D392D2-5956-4646-9CA6-83CBF67507B6}) (Version: 10.1.0.0 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.14393.33 (HKLM-x32\...\{f23f94c5-8bba-4202-85ad-c83d4402cdc1}) (Version: 10.1.14393.33 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.14393.795 (HKLM-x32\...\{5eb6fbea-73ee-4a8e-9042-110704768d7f}) (Version: 10.1.14393.795 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.16299.15 (HKLM-x32\...\{6195c203-b53c-4bb7-983a-6070a902e704}) (Version: 10.1.16299.15 - Microsoft Corporation)
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{385A1387-A488-9E90-3635-086129610034}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{A249F631-CEBC-EDCB-4C49-700E551E66CA}) (Version: 10.1.14393.795 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{D7DD3171-DA58-52A1-95B2-4769640855AF}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{E71CB7F1-3E88-4450-1764-B3CC1E205C4A}) (Version: 10.1.14393.795 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{7336279F-8F8F-5530-A543-3BE963846C0A}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{C49E6FDA-8196-0CAF-2CDD-CF1B0F4EA5AD}) (Version: 10.1.14393.795 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{33D11371-82A5-852B-CDE2-5528CE406151}) (Version: 10.1.14393.795 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{E414A474-0A87-4F66-C409-A4D9857CFD34}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{CE760B86-975B-F514-5673-0ED4332B801B}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{5E67F8BE-D8D2-257F-CE19-419A2D5125C7}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{FB431EE2-C835-6DE9-8DC3-C8FCDE028FE0}) (Version: 10.1.14393.795 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{A2AA063E-AF50-A1F5-8925-A06EB1556644}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{FB82399D-9C48-9AF5-DCA1-CFE61BCA70A6}) (Version: 10.1.14393.795 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{23909757-D6F0-7F7C-BD34-7E72BA9BD59C}) (Version: 10.1.14393.795 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{7D4C7F4A-02A9-E434-6451-C8787DF28C1F}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{BC467065-9374-5345-DA3F-FCF073304A25}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{D3A337CD-EA32-F4BA-03FA-825903190C92}) (Version: 10.1.14393.795 - Microsoft Corporation) Hidden
XnView 2.39 (HKLM-x32\...\XnView_is1) (Version: 2.39 - Gougelet Pierre-e)
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.4) (Version: 1.3.4 - Xvid Team)
YouTube Downloader 5.0 HD version 5.0 (HKLM-x32\...\{19D5222A-2997-44DF-A41F-1806CB847A5D}_is1) (Version: 5.0 - Hexotic Software)
ZBrush 4R8 (HKLM\...\ZBrush 4R8 4R8) (Version: 4R8 - Pixologic)
Εργαλεία γλωσσικού ελέγχου του Microsoft Office 2016 - Ελληνικά (HKLM\...\{90160000-001F-0408-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Засоби перевірки правопису Microsoft Office 2016 – українська (HKLM\...\{90160000-001F-0422-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Средства проверки правописания Microsoft Office 2016 — русский (HKLM\...\{90160000-001F-0419-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
כלי ההגהה של Microsoft Office 2016 - עברית (HKLM\...\{90160000-001F-040D-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
ابزارهای تصحیح Microsoft Office 2016 - فارسی (HKLM\...\{90160000-001F-0429-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2567772305-2493399478-1946925476-1001_Classes\CLSID\{10F482D3-7138-4B04-9DF7-BE8A5E44DEAA}\InprocServer32 -> C:\Users\roman\AppData\Local\JetBrains\Installations\ReSharperPlatformVs15_af1ac292\x64\JetBrains.Profiler.Windows.Core.dll (JetBrains s.r.o)
CustomCLSID: HKU\S-1-5-21-2567772305-2493399478-1946925476-1001_Classes\CLSID\{3CBDFA96-DADB-4F8B-9958-407146E44233}\InprocServer32 -> C:\Users\roman\AppData\Local\JetBrains\Installations\ReSharperPlatformVs15_af1ac292\x64\JetBrains.Profiler.Windows.Core.dll (JetBrains s.r.o)
CustomCLSID: HKU\S-1-5-21-2567772305-2493399478-1946925476-1001_Classes\CLSID\{83B0E426-D4EE-11D4-BEDF-BAB7F1EEA455}\InprocServer32 -> C:\Program Files\Autodesk\3ds Max 2014\addflow4.ocx (Lassalle Technologies)
CustomCLSID: HKU\S-1-5-21-2567772305-2493399478-1946925476-1001_Classes\CLSID\{F999A040-4D33-483B-9078-59162980BA56}\InprocServer32 -> C:\Users\roman\AppData\Local\JetBrains\Installations\ReSharperPlatformVs15_af1ac292\x64\JetBrains.Profiler.Windows.Core.dll (JetBrains s.r.o)
ShellIconOverlayIdentifiers: [EldosIconOverlay-cbfs6] -> {C65726A2-4C64-4315-9F28-F412D42A456F} => C:\WINDOWS\system32\cbfsMntNtf6.dll [2016-09-21] (/n software, Inc.)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay-cbfs6] -> {C65726A2-4C64-4315-9F28-F412D42A456F} => C:\WINDOWS\system32\cbfsMntNtf6.dll [2016-09-21] (/n software, Inc.)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2017-01-17] ()
ContextMenuHandlers1: [GitExtensions2] -> {3C16B20A-BA16-4156-916F-0A375ECFFE24} => C:\Program Files (x86)\GitExtensions\GitExtensionsShellEx64.dll [2017-09-06] ()
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers4: [GitExtensions2] -> {3C16B20A-BA16-4156-916F-0A375ECFFE24} => C:\Program Files (x86)\GitExtensions\GitExtensionsShellEx64.dll [2017-09-06] ()
ContextMenuHandlers5: [GitExtensions2] -> {3C16B20A-BA16-4156-916F-0A375ECFFE24} => C:\Program Files (x86)\GitExtensions\GitExtensionsShellEx64.dll [2017-09-06] ()
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-01-23] (NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {01172366-7D75-41C4-B2FC-FD1116BC7229} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-12-21] (Piriform Ltd)
Task: {0BDC26FD-2C05-486B-B069-73706E56DC8F} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
Task: {157B1B6D-51AE-4013-8FF9-E94C7A6B23A8} - System32\Tasks\BackUpFolders => D:\Roman\Programming\FoldersBackup\FoldersBackup\bin\Release\FoldersBackup.exe
Task: {1B592354-B4F4-434D-82D6-4CFF5DF0ABD1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-01] (Microsoft Corporation)
Task: {7D78F7BC-829F-4273-A44E-22260A069695} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {8F957744-50C2-4B1D-A7C8-9A98D1F1942B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-11] (Google Inc.)
Task: {BC112680-2251-47D9-BB25-5585FC84F71D} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {C3B4DCA0-28DB-4937-9950-1EA8F2E77208} - System32\Tasks\Opera scheduled Autoupdate 1485365945 => C:\Program Files\Opera\launcher.exe [2018-03-08] (Opera Software)
Task: {D18F9121-BC58-47AF-8429-C07079C7CAEF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-01] (Microsoft Corporation)
Task: {DF13CAD3-0B86-4B5C-9A8B-25FD87513BE7} - System32\Tasks\Microsoft\VisualStudio\VSIX Auto Update 15.0.26201.1 => C:\Program Files (x86)\Microsoft Visual Studio\2017\Community\Common7\IDE\VSIXAutoUpdate.exe
Task: {E41015C5-3EE5-4FB1-83BD-BB2BF20E69BA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-01] (Microsoft Corporation)
Task: {E6B4300D-8480-4288-B512-D219A2EB7933} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-01] (Microsoft Corporation)
Task: {EAC25C1E-00AE-4CEA-9FC9-A34729D4B123} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {F42BA760-EE99-44F7-8B6F-CE6A04E32A3F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-11] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


Shortcut: C:\Users\roman\OneDrive\workShare\Scripts\lockBL.admin.lnk -> C:\Users\roman\OneDrive\workShare\Scripts\lockBL.bat ()
Shortcut: C:\Users\roman\OneDrive\workShare\Scripts\unlockBL.admin.lnk -> C:\Users\roman\OneDrive\workShare\Scripts\unlockBL.bat ()
Shortcut: C:\Users\roman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVIcodec\Website.lnk -> hxxp://avicodec.duby.info

==================== Loaded Modules (Whitelisted) ==============

2017-09-29 14:41 - 2017-09-29 14:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2018-01-29 18:33 - 2018-01-24 01:23 - 000544240 _____ () C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\DisplayDriverAnalyzer\_DisplayDriverCrashAnalyzer64.dll
2017-12-08 01:48 - 2017-12-08 01:48 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-12-08 01:48 - 2017-12-08 01:48 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-01-27 17:50 - 2016-05-26 14:19 - 000262144 _____ () C:\Program Files\Allway Sync\Bin\SyncService.exe
2011-09-15 05:19 - 2011-09-15 05:19 - 000086016 _____ () C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
2018-01-05 16:42 - 2018-01-01 12:23 - 000023040 _____ () C:\Windows\System32\hnsproxy.dll
2017-09-06 18:58 - 2017-09-06 18:58 - 000510464 _____ () C:\Program Files (x86)\GitExtensions\GitExtensionsShellEx64.dll
2017-01-17 02:30 - 2017-01-17 02:30 - 000230064 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2018-01-22 19:57 - 2017-12-13 19:49 - 002288072 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll
2018-03-14 10:49 - 2018-02-22 01:26 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2018-03-14 10:49 - 2018-02-22 01:21 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-01-27 17:50 - 2016-05-26 16:01 - 000100904 _____ () C:\Program Files\Allway Sync\Bin\syncappw.exe
2017-01-27 17:50 - 2016-05-26 14:18 - 013956608 _____ () C:\Program Files\Allway Sync\Bin\syncapp.dll
2017-01-26 20:57 - 2015-12-04 12:44 - 000136192 _____ () C:\Program Files (x86)\AudioSwitch\AudioSwitch.exe
2018-03-09 15:35 - 2018-03-09 15:35 - 097173592 _____ () C:\Program Files\Opera\51.0.2830.55\opera_browser.dll
2018-03-09 15:35 - 2018-03-09 15:35 - 004438104 _____ () C:\Program Files\Opera\51.0.2830.55\libglesv2.dll
2018-03-09 15:35 - 2018-03-09 15:35 - 000100440 _____ () C:\Program Files\Opera\51.0.2830.55\libegl.dll
2018-03-22 07:16 - 2018-03-22 07:16 - 004330496 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1803.711.0_x64__8wekyb3d8bbwe\Calculator.exe
2018-03-13 16:50 - 2018-03-13 16:50 - 000631296 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1803.711.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll
2017-03-01 17:45 - 2016-07-01 07:39 - 000061968 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\QtSolutions_Service-head.dll
2017-03-01 17:45 - 2016-07-01 07:39 - 000110608 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qjson0.dll
2017-01-27 17:53 - 2012-06-08 19:40 - 001086176 _____ () C:\Program Files (x86)\Winstep\wodTelnetDLX.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2016-07-16 12:47 - 2016-07-16 12:45 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2567772305-2493399478-1946925476-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\roman\AppData\Local\GNE\DualWallpaper\DualWallpaper.bmp
DNS Servers: 192.168.17.1 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\StartupFolder: => "Dell Display Manager.lnk"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "Family Tree Builder Update"
HKLM\...\StartupApproved\Run32: => "Autodesk Desktop App"
HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKLM\...\StartupApproved\Run32: => "KiesTrayAgent"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [VIRT-MIGL-In-TCP-NoScope] => (Allow) %systemroot%\system32\vmms.exe
FirewallRules: [VIRT-REMOTEDESKTOP-In-TCP-NoScope] => (Allow) %systemroot%\system32\vmms.exe
FirewallRules: [VIRTCL-WMI-RPCSS-In-TCP-NoScope] => (Allow) $(runtime.system32)\svchost.exe
FirewallRules: [VIRTCL-WMI-WINMGMT-In-TCP-NoScope] => (Allow) $(runtime.system32)\svchost.exe
FirewallRules: [VIRTCL-WMI-WINMGMT-Out-TCP-NoScope] => (Allow) $(runtime.system32)\svchost.exe
FirewallRules: [VIRTCL-WMI-ASYNC-In-TCP-NoScope] => (Allow) $(runtime.system32)\wbem\unsecapp.exe
FirewallRules: [{E32B5042-BB8E-46FE-8741-9582989F9722}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{7BB8A589-608B-48DF-A75D-979FC0832287}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{F1416E76-FA8E-4D29-997F-2CAC11C7C9F8}] => (Allow) D:\Games\SteamLibrary\steamapps\common\A Story About My Uncle\Binaries\Win32\ASAMU-Win32-Shipping.exe
FirewallRules: [{6EA9FEFB-5DDE-4DDF-8B50-3A522859EAA0}] => (Allow) D:\Games\SteamLibrary\steamapps\common\A Story About My Uncle\Binaries\Win32\ASAMU-Win32-Shipping.exe
FirewallRules: [UDP Query User{FD412EC9-A131-4328-8C94-7710F37A06B3}C:\program files\chaos group\v-ray\rt for 3ds max 2014 for x64\bin\vray.exe] => (Allow) C:\program files\chaos group\v-ray\rt for 3ds max 2014 for x64\bin\vray.exe
FirewallRules: [TCP Query User{976B37DA-692D-4482-8D3A-43D289D47508}C:\program files\chaos group\v-ray\rt for 3ds max 2014 for x64\bin\vray.exe] => (Allow) C:\program files\chaos group\v-ray\rt for 3ds max 2014 for x64\bin\vray.exe
FirewallRules: [UDP Query User{4987E9CE-242F-478C-A00D-13373BB82E74}C:\program files\autodesk\3ds max 2014\3dsmax.exe] => (Block) C:\program files\autodesk\3ds max 2014\3dsmax.exe
FirewallRules: [TCP Query User{5F15831A-2ED1-4002-AF46-BED1F83AAF16}C:\program files\autodesk\3ds max 2014\3dsmax.exe] => (Block) C:\program files\autodesk\3ds max 2014\3dsmax.exe
FirewallRules: [UDP Query User{C17D2FDA-71F1-456E-92DA-DC3144701ABD}C:\games\fifa18\fifa18.exe] => (Block) C:\games\fifa18\fifa18.exe
FirewallRules: [TCP Query User{A3056135-B31F-4711-AA3B-F6343A7F5AE6}C:\games\fifa18\fifa18.exe] => (Block) C:\games\fifa18\fifa18.exe
FirewallRules: [UDP Query User{C01ED16E-F30A-43DD-A455-E41F85FD7AB5}C:\program files (x86)\musicbee\musicbee.exe] => (Allow) C:\program files (x86)\musicbee\musicbee.exe
FirewallRules: [TCP Query User{F08AEC17-C71D-465E-9C43-DB3BE2519DC6}C:\program files (x86)\musicbee\musicbee.exe] => (Allow) C:\program files (x86)\musicbee\musicbee.exe
FirewallRules: [UDP Query User{C18F1B51-AE6F-4AA3-8B44-3A3A3EFA74E1}C:\program files (x86)\steam\steamapps\common\divinity original sin 2\bin\eocapp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\divinity original sin 2\bin\eocapp.exe
FirewallRules: [TCP Query User{AA91E74D-3BC8-4365-A2DC-1AD3F482EDFC}C:\program files (x86)\steam\steamapps\common\divinity original sin 2\bin\eocapp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\divinity original sin 2\bin\eocapp.exe
FirewallRules: [{BA656D93-4B5C-42B8-8C2A-5970CF078F1A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin 2\bin\SupportTool.exe
FirewallRules: [{6BA53DB7-6859-4F81-AF8C-19F43E42E2FC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Divinity Original Sin 2\bin\SupportTool.exe
FirewallRules: [{9A7D4051-E3B0-44BD-BA6C-471ACAB8D474}] => (Allow) C:\Program Files\Chaos Group\V-Ray\3dsmax 2014 for x64\vrlservice.exe
FirewallRules: [{08447787-1177-4D41-8B95-1A7B567C8377}] => (Allow) C:\Program Files\Chaos Group\V-Ray\3dsmax 2014 for x64\vrlservice.exe
FirewallRules: [{F5BDC839-907A-468E-88DC-9A7818C02654}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\server.exe
FirewallRules: [{1518C0DD-7076-4C61-99BA-59252FCC065C}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\server.exe
FirewallRules: [{C5BF06BD-72EE-4E7C-9FFD-93837AEB3CC6}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\manager.exe
FirewallRules: [{DF52121A-4580-4288-BDA0-D19E885DC94D}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\manager.exe
FirewallRules: [{D6FD932C-FB27-4BD1-8F28-986EE8A433EF}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\monitor.exe
FirewallRules: [{B28FB874-0BF8-4D50-93AB-A1D56586BB97}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\monitor.exe
FirewallRules: [{8F938D63-7E93-43EE-AE93-EA0A199CB106}] => (Allow) C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64.exe
FirewallRules: [{790AF3E7-FFC4-4614-B5CA-351E0919505F}] => (Allow) C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64.exe
FirewallRules: [{410382A8-3A97-4B13-BED7-BE3B8EAD2690}] => (Allow) C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
FirewallRules: [{118FE10A-A945-4543-B72E-3F469F6845B3}] => (Allow) C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
FirewallRules: [UDP Query User{4F3411E1-3FA6-4E76-8913-C8CFB274EADC}C:\ruby24-x64\bin\ruby.exe] => (Allow) C:\ruby24-x64\bin\ruby.exe
FirewallRules: [TCP Query User{A33AA39B-2088-4CA1-A70D-EF182C4D0E0A}C:\ruby24-x64\bin\ruby.exe] => (Allow) C:\ruby24-x64\bin\ruby.exe
FirewallRules: [UDP Query User{2CA98E65-AA01-4D2F-843F-0FC012D85CD0}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{FCFF2392-E1B1-4B57-8508-F4718EB317EA}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{57EA613F-045B-4E3A-BDBF-3970B93C7631}C:\program files (x86)\brackets\node.exe] => (Allow) C:\program files (x86)\brackets\node.exe
FirewallRules: [TCP Query User{C84EBBDF-746E-40CD-B975-658D4F6693E8}C:\program files (x86)\brackets\node.exe] => (Allow) C:\program files (x86)\brackets\node.exe
FirewallRules: [{1B889C51-B60D-4815-96B8-CA08AC12438E}] => (Allow) D:\Games\SteamLibrary\steamapps\common\Ori DE\oriDE.exe
FirewallRules: [{8B37AC05-ED2A-4386-B94A-A0A47F5C6EA5}] => (Allow) D:\Games\SteamLibrary\steamapps\common\Ori DE\oriDE.exe
FirewallRules: [UDP Query User{A77E7F57-14CC-4405-A02F-470EB169FA2B}C:\program files (x86)\microsoft vs code\code.exe] => (Allow) C:\program files (x86)\microsoft vs code\code.exe
FirewallRules: [TCP Query User{23A0BBAC-2DBC-414D-A77F-571CF05B5563}C:\program files (x86)\microsoft vs code\code.exe] => (Allow) C:\program files (x86)\microsoft vs code\code.exe
FirewallRules: [{385189CE-B9DF-4D58-AFE9-5478AC71D00C}] => (Allow) C:\Program Files\DAUM\PotPlayer\PotPlayerMini64.exe
FirewallRules: [{CFA674C8-2338-4CF9-BF1A-9A0DA7EAC823}] => (Allow) C:\Program Files\DAUM\PotPlayer\PotPlayerMini64.exe
FirewallRules: [TCP Query User{7A5AA31B-D28D-42D9-8737-C62842CA793D}C:\program files (x86)\foobar2000\foobar2000.exe] => (Allow) C:\program files (x86)\foobar2000\foobar2000.exe
FirewallRules: [UDP Query User{54FB738A-B7C8-4802-AD8D-0AF79DB408F7}C:\program files (x86)\foobar2000\foobar2000.exe] => (Allow) C:\program files (x86)\foobar2000\foobar2000.exe
FirewallRules: [TCP Query User{37FC7AA1-C2A9-4139-BD22-619EE94EB669}C:\program files (x86)\microsoft visual studio\2017\community\common7\ide\devenv.exe] => (Allow) C:\program files (x86)\microsoft visual studio\2017\community\common7\ide\devenv.exe
FirewallRules: [UDP Query User{841D950B-7D6C-4316-A850-B1A5A6F26522}C:\program files (x86)\microsoft visual studio\2017\community\common7\ide\devenv.exe] => (Allow) C:\program files (x86)\microsoft visual studio\2017\community\common7\ide\devenv.exe
FirewallRules: [TCP Query User{BFBE31F0-DF99-428D-8C2F-9B3FC5474278}C:\program files\nodejs\node.exe] => (Allow) C:\program files\nodejs\node.exe
FirewallRules: [UDP Query User{4E1F04D7-F602-4813-9572-197A68C5C843}C:\program files\nodejs\node.exe] => (Allow) C:\program files\nodejs\node.exe
FirewallRules: [{5C39A2CA-2A0F-45C6-90AD-3ABB2A8B652B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7009462F-61F6-4889-97EC-0C75F041F8CD}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{5BF7F5F7-4873-418B-B7DF-0D8BDFD79815}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{61254328-2FB9-43AB-8EB7-060855D9575D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{E43D19C3-656D-450F-87E7-ADEB533D40AB}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [TCP Query User{C8275109-9904-4B96-930B-70D94CE983A8}D:\games\motogp 15\motogp15x64.exe] => (Block) D:\games\motogp 15\motogp15x64.exe
FirewallRules: [UDP Query User{B4237ECE-73B7-4AAF-A91C-D707517F8D72}D:\games\motogp 15\motogp15x64.exe] => (Block) D:\games\motogp 15\motogp15x64.exe
FirewallRules: [{1B8ED9D4-A478-463C-A05B-0673E19A6C8E}] => (Block) %ProgramFiles%\Autodesk\3ds Max 2017\3dsmax.exe
FirewallRules: [{22055F81-AAC7-4CE3-89CF-C6AB72109126}] => (Block) %ProgramFiles%\Sony\Vegas Pro 13.0\vegas130.exe
FirewallRules: [{C57EF537-69AC-41F0-AB09-F05568B2B708}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{73958AC7-DAE1-4E94-B519-EFBC953DB597}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C95AA167-50B4-43FE-9095-7ED331FF45A7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{6B0C6FFF-56C8-4629-BB23-C3D03A4698B0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{4FFEAA4C-D0C7-4783-BD30-A9B601E4DA5A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dishonored_DeathOfTheOutsider\Dishonored_DO.exe
FirewallRules: [{F7244F71-4E55-4FF3-8709-7E9A00F37BB4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dishonored_DeathOfTheOutsider\Dishonored_DO.exe
FirewallRules: [{763E251C-AF45-4099-A6C5-632320666E98}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
FirewallRules: [{C2B00B5F-8957-4E53-81F0-CD0AB5DF5EF8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{09BF088B-0D31-4D02-A5F7-A544B0ADDB5E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{9ABDC7EE-8E7C-412B-9314-A6FA418F23EB}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{225503BE-19BF-4FC7-BBE4-4B904418B824}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{56B1C8C8-3E72-44F2-B0F9-CC7CACD54A70}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{5F4567AE-3BAD-43AA-ACB2-39C6118DB707}] => (Allow) C:\Program Files\Opera\51.0.2830.40\opera.exe
FirewallRules: [TCP Query User{14FAC1AA-3A15-41D1-B52C-7245C62F58F1}C:\users\roman\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\roman\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{0DB342EA-1676-4D5A-8DD8-B0152E0A431E}C:\users\roman\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\roman\appdata\roaming\spotify\spotify.exe
FirewallRules: [{814439C5-8A61-49CC-BA0A-4FE7B1FABE51}] => (Block) C:\users\roman\appdata\roaming\spotify\spotify.exe
FirewallRules: [{F8F989C2-E609-426B-84D6-63F1AADF475E}] => (Block) C:\users\roman\appdata\roaming\spotify\spotify.exe
FirewallRules: [{2FDCD839-7484-4B03-AF3E-ACA4D7B92AA2}] => (Allow) C:\Program Files\Opera\51.0.2830.55\opera.exe
FirewallRules: [TCP Query User{964957E8-3AE7-4F2E-963D-44E53E7316FB}C:\users\roman\appdata\local\jdownloader v2.0\jdownloader2.exe] => (Allow) C:\users\roman\appdata\local\jdownloader v2.0\jdownloader2.exe
FirewallRules: [UDP Query User{79CBAAD0-2BD7-44AA-8A06-92DF6D1B863D}C:\users\roman\appdata\local\jdownloader v2.0\jdownloader2.exe] => (Allow) C:\users\roman\appdata\local\jdownloader v2.0\jdownloader2.exe
FirewallRules: [{CB7FBE97-3E4D-453A-A01F-0D77C677526F}] => (Block) C:\users\roman\appdata\local\jdownloader v2.0\jdownloader2.exe
FirewallRules: [{49A544AB-A421-44C5-B018-C1BE443F7DE3}] => (Block) C:\users\roman\appdata\local\jdownloader v2.0\jdownloader2.exe
FirewallRules: [{0BD4F96B-0276-4679-9A01-F529293AA7AE}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [DNS Server Forward Rule - TCP - d58d55f9-5f0b-4db5-ac14-6b89225377e4 - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - UDP - d58d55f9-5f0b-4db5-ac14-6b89225377e4 - 0] => (Allow) LPort=53

==================== Restore Points =========================

14-03-2018 10:48:39 Windows Update
18-03-2018 07:55:30 Installed 4K Video Downloader 4.4

==================== Faulty Device Manager Devices =============

Name: Hyper-V Virtual Ethernet Adapter
Description: Hyper-V Virtual Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: VMSMP
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Hyper-V Virtual Ethernet Adapter #2
Description: Hyper-V Virtual Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: VMSMP
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/24/2018 10:19:21 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "D:\Roman\ikony\devenv11.exe".
Dependent Assembly coloader80.dll,processorArchitecture="X86",type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (03/24/2018 09:17:20 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine QueryFullProcessImageNameW.  hr = 0x8007001f, A device attached to the system is not functioning.
.


Operation:
   Executing Asynchronous Operation

Context:
   Current State: DoSnapshotSet

Error: (03/24/2018 09:17:05 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005, Access is denied.
.
This is often caused by incorrect security settings in either the writer or requestor process.


Operation:
   Gathering Writer Data

Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {a4c16df0-d73f-4b95-a46e-44f8caeb4c02}

Error: (03/24/2018 07:50:01 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: VSIXAutoUpdate.exe, verzia: 15.5.100.41289, časová značka: 0x5a0b3ffb
Názov chybujúceho modulu: KERNELBASE.dll, verzia: 10.0.16299.309, časová značka: 0xd3aa915c
Kód výnimky: 0xe0434352
Odstup chyby: 0x001008f2
Identifikácia chybujúceho procesu: 0x1c04
Čas spustenia chybujúcej aplikácie: 0x01d3c33c51e1e9e9
Cesta chybujúcej aplikácie: C:\Program Files (x86)\Microsoft Visual Studio\2017\Community\Common7\IDE\VSIXAutoUpdate.exe
Cesta chybujúceho modulu: C:\WINDOWS\System32\KERNELBASE.dll
Identifikácia hlásenia: 3e8ffc28-714c-450e-acc5-2136b5b0000a
Celé meno chybujúceho balíka: 
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (03/24/2018 07:50:01 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: VSIXAutoUpdate.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.ArgumentNullException
   at Microsoft.VisualStudio.Telemetry.TelemetryComplexProperty..ctor(System.Object)
   at VSIXAutoUpdate.AutoUpdate.LogAutoUpdateCompletedTelemetry()
   at VSIXAutoUpdate.AutoUpdate.Main()

Error: (03/23/2018 08:21:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: VSIXAutoUpdate.exe, verzia: 15.5.100.41289, časová značka: 0x5a0b3ffb
Názov chybujúceho modulu: KERNELBASE.dll, verzia: 10.0.16299.309, časová značka: 0xd3aa915c
Kód výnimky: 0xe0434352
Odstup chyby: 0x001008f2
Identifikácia chybujúceho procesu: 0x1d10
Čas spustenia chybujúcej aplikácie: 0x01d3c2778f437cf1
Cesta chybujúcej aplikácie: C:\Program Files (x86)\Microsoft Visual Studio\2017\Community\Common7\IDE\VSIXAutoUpdate.exe
Cesta chybujúceho modulu: C:\WINDOWS\System32\KERNELBASE.dll
Identifikácia hlásenia: ea75f51a-6047-4175-aec5-aa84b7dab251
Celé meno chybujúceho balíka: 
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (03/23/2018 08:21:34 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: VSIXAutoUpdate.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.ArgumentNullException
   at Microsoft.VisualStudio.Telemetry.TelemetryComplexProperty..ctor(System.Object)
   at VSIXAutoUpdate.AutoUpdate.LogAutoUpdateCompletedTelemetry()
   at VSIXAutoUpdate.AutoUpdate.Main()

Error: (03/22/2018 07:15:57 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: VSIXAutoUpdate.exe, verzia: 15.5.100.41289, časová značka: 0x5a0b3ffb
Názov chybujúceho modulu: KERNELBASE.dll, verzia: 10.0.16299.309, časová značka: 0xd3aa915c
Kód výnimky: 0xe0434352
Odstup chyby: 0x001008f2
Identifikácia chybujúceho procesu: 0xca8
Čas spustenia chybujúcej aplikácie: 0x01d3c1a535557f4a
Cesta chybujúcej aplikácie: C:\Program Files (x86)\Microsoft Visual Studio\2017\Community\Common7\IDE\VSIXAutoUpdate.exe
Cesta chybujúceho modulu: C:\WINDOWS\System32\KERNELBASE.dll
Identifikácia hlásenia: 930c3056-2d81-47d2-927b-5b75a8e46e03
Celé meno chybujúceho balíka: 
Identifikácia chybujúcej aplikácie vzhľadom na balík:


System errors:
=============
Error: (03/24/2018 06:10:50 PM) (Source: DCOM) (EventID: 10016) (User: CENTURION)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user CENTURION\roman SID (S-1-5-21-2567772305-2493399478-1946925476-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (03/24/2018 06:09:53 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (03/24/2018 06:09:53 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (03/24/2018 06:09:53 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (03/24/2018 06:09:53 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (03/24/2018 06:09:26 PM) (Source: DCOM) (EventID: 10010) (User: CENTURION)
Description: The server {D63B10C5-BB46-4990-A94F-E40B9D520160} did not register with DCOM within the required timeout.

Error: (03/24/2018 06:09:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba sieťového zdieľania pre prehrávač Windows Media Player sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 30000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (03/24/2018 06:09:18 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Hyper-V Host Compute Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.


Windows Defender:
===================================
Date: 2018-03-24 18:18:15.604
Description: 
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Tiggre!rfn&threatid=2147723625&enterprise=0
Name: Trojan:Win32/Tiggre!rfn
ID: 2147723625
Severity: Závažná
Category: Trójsky kôň
Path: file:_C:\Users\roman\Downloads\cdce885c-b363-4b7f-850c-55e1e5c67629.tmp
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Program Files\Opera\51.0.2830.55\opera.exe
Signature Version: AV: 1.263.1062.0, AS: 1.263.1062.0, NIS: 119.0.0.0
Engine Version: AM: 1.1.14600.4, NIS: 2.1.14600.4

Date: 2018-03-24 18:17:18.194
Description: 
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Tiggre!rfn&threatid=2147723625&enterprise=0
Name: Trojan:Win32/Tiggre!rfn
ID: 2147723625
Severity: Závažná
Category: Trójsky kôň
Path: file:_C:\Users\roman\Downloads\65228b73-ced5-4eee-853d-f5f99c830f08.tmp
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Program Files\Opera\51.0.2830.55\opera.exe
Signature Version: AV: 1.263.1062.0, AS: 1.263.1062.0, NIS: 119.0.0.0
Engine Version: AM: 1.1.14600.4, NIS: 2.1.14600.4

Date: 2018-03-23 18:56:16.619
Description: 
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {C8543324-1102-40B2-9B1B-1AF2BE0557D2}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2018-03-21 21:03:48.451
Description: 
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {9B639D0F-1EF9-405E-B7F5-6A3D5EE24888}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2018-03-20 18:53:56.558
Description: 
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {CE72CB36-869B-452A-924C-9C9515547F20}
Scan Type: Antimalware
Scan Parameters: Quick Scan

CodeIntegrity:
===================================

Date: 2018-03-24 18:19:56.693
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-03-24 18:19:56.692
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-03-24 18:19:54.606
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-03-24 18:19:54.605
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-03-24 18:18:31.440
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Opera\51.0.2830.55\opera.exe) attempted to load \Device\HarddiskVolume5\Program Files\NVIDIA Corporation\Ansel\Tools\NvCameraWhitelisting64.dll that did not meet the Microsoft signing level requirements.

Date: 2018-03-24 18:14:55.000
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-03-24 18:14:54.999
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-03-24 18:14:52.937
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

==================== Memory info =========================== 

Processor: Intel(R) Xeon(R) CPU E3-1230 v3 @ 3.30GHz
Percentage of memory in use: 10%
Total physical RAM: 32689.16 MB
Available physical RAM: 29332.96 MB
Total Virtual: 37553.16 MB
Available Virtual: 34213.95 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:464.81 GB) (Free:199.77 GB) NTFS
Drive d: (Data) (Fixed) (Total:1863.01 GB) (Free:677.77 GB) NTFS
Drive v: (Video) (Fixed) (Total:2794.39 GB) (Free:131.72 GB) NTFS
Drive w: (Video_backup) (Fixed) (Total:2794.39 GB) (Free:131.67 GB) NTFS
Drive z: (Data_backup) (Fixed) (Total:1863.01 GB) (Free:566.04 GB) NTFS

\\?\Volume{b76b30df-0000-0000-0000-100000000000}\ (Vyhradené systémom) (Fixed) (Total:0.49 GB) (Free:0.46 GB) NTFS
\\?\Volume{05802716-0000-0000-0000-100000000000}\ (Samsung_T5) (Fixed) (Total:232.87 GB) (Free:20.15 GB) exFAT
\\?\Volume{b76b30df-0000-0000-0000-505374000000}\ () (Fixed) (Total:0.46 GB) (Free:0.08 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Protective MBR) (Size: 2794.5 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: E61C5FF9)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: B76B30DF)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=464.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=469 MB) - (Type=27)

========================================================
Disk: 3 (Protective MBR) (Size: 2794.5 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 4 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 4049313C)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 5 (Size: 232.9 GB) (Disk ID: 05802716)
Partition 1: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================