Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15.04.2019 01
Ran by Daniel (16-04-2019 21:23:17)
Running from C:\Users\Daniel\Downloads
Windows 10 Pro Version 1809 17763.437 (X64) (2019-03-31 18:57:42)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1390417164-89010438-2942280941-500 - Administrator - Disabled)
Daniel (S-1-5-21-1390417164-89010438-2942280941-1001 - Administrator - Enabled) => C:\Users\Daniel
DefaultAccount (S-1-5-21-1390417164-89010438-2942280941-503 - Limited - Disabled)
Guest (S-1-5-21-1390417164-89010438-2942280941-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1390417164-89010438-2942280941-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1390417164-89010438-2942280941-1001\...\uTorrent) (Version: 3.5.5.45095 - BitTorrent Inc.)
Asistent pri aktualizácii na Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22589 - Microsoft Corporation)
Counter-Strike 1.6 v43g (HKU\S-1-5-21-1390417164-89010438-2942280941-1001\...\Counter-Strike 1.6_is1) (Version:  - Valve)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.10.0.0770 - Disc Soft Ltd)
Euro Truck Simulator 2 (HKLM\...\Euro Truck Simulator 2_is1) (Version: 1.31.0.92 - )
Euro Truck Simulator 2, âĺđńč˙ 1.3 (HKLM-x32\...\Euro Truck Simulator 2_is1) (Version: 1.3 - Other s)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 73.0.3683.103 - Spoločnosť Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.7 - Google LLC) Hidden
Grand Theft Auto V (HKLM\...\Grand Theft Auto V_is1) (Version: 1.0.877.1 - )
Installer (HKLM\...\{E9675998-9B12-4560-8E98-A6CCCDE0BE18}) (Version: 1.0.0 - Default Company Name)
Java 8 Update 201 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180201F0}) (Version: 8.0.2010.9 - Oracle Corporation)
Kingdom Come Deliverance (HKLM-x32\...\Kingdom Come Deliverance_is1) (Version:  - )
LSPD First Response (HKLM-x32\...\LSPD First Response) (Version: 0.3.1 - G17 Media)
Microsoft OneDrive (HKU\S-1-5-21-1390417164-89010438-2942280941-1001\...\OneDriveSetup.exe) (Version: 19.033.0218.0011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
NVIDIA PhysX (HKLM-x32\...\{1C4551A6-4743-4093-91E4-1477CD655043}) (Version: 9.09.0203 - NVIDIA Corporation)
Ovládací panel NVIDIA 416.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 416.94 - NVIDIA Corporation) Hidden
Parkitect (HKLM-x32\...\Parkitect_is1) (Version:  - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8117 - Realtek Semiconductor Corp.)
TeamViewer 14 (HKLM-x32\...\TeamViewer) (Version: 14.1.9025 - TeamViewer)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{C99F4AFA-B32C-4063-865C-D7B5CC0A78FB}) (Version: 2.54.0.0 - Microsoft Corporation)
WinRAR 5.61 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.61.0 - win.rar GmbH)
X-Mouse Button Control 2.18.5 (HKLM-x32\...\X-Mouse Button Control) (Version: 2.18.5 - Highresolution Enterprises)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1390417164-89010438-2942280941-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2019-02-18] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2019-02-18] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-11-13] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {026D892C-2F2D-4B36-AFB8-F3CE10EE209D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {035A9331-C27D-49D8-B57F-FA91A25A4D5F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {0EEEDFCC-07BE-4211-8AA1-88283AE0D64E} - \GoogleUpdateTaskMachineCore -> No File <==== ATTENTION
Task: {296EE391-EA39-42F3-B778-518085BC3CC6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {32D0A379-AF3E-44D4-9F22-61091ED055A3} - System32\Tasks\Microsoft\Windows\Application Experience\StartupCheckLibrary => rundll32.exe StartupCheckLibrary.dll,DllMainRunLibrary
Task: {4F8B5407-0008-4753-8793-889DF60E7B18} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {85F9A445-7851-472E-B1AE-5F7BB907D3CE} - \Microsoft\Windows\WDI\SrvHost -> No File <==== ATTENTION
Task: {A8C7D4E7-B35C-4CFC-BA6A-E1FB6048D94F} - \GoogleUpdateTaskMachineUA -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============


==================== Alternate Data Streams (Whitelisted) =========

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-02-14 17:23 - 2019-04-11 12:19 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-1390417164-89010438-2942280941-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{8817554C-BA68-4090-BC69-F6C4F1B250E8}] => (Allow) C:\WINDOWS\SysWOW64\svchost.exe (Microsoft Windows Publisher -> Microsoft Corporation)
FirewallRules: [{F0BFD659-F9DE-40B7-A7C1-8FA375E3F133}] => (Allow) C:\Users\Daniel\AppData\Local\USoOGoo.exe (Microsoft Corporation) [File not signed]
FirewallRules: [{C2EDAA33-2120-4256-821E-46982E2E544C}] => (Allow) C:\Program Files (x86)\Common Files\lyauaxEn.exe (Microsoft Corporation) [File not signed]
FirewallRules: [{1F86F002-43F3-40B8-8760-3EDDEC46AB19}] => (Allow) C:\WINDOWS\SysWOW64\msiexec.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [UDP Query User{2D760D62-FFCA-40B7-95FB-8A6575704000}C:\program files (x86)\stronghold crusader 2\bin\win32_release\crusader2.exe] => (Allow) C:\program files (x86)\stronghold crusader 2\bin\win32_release\crusader2.exe No File
FirewallRules: [TCP Query User{51DA14BF-FA01-4945-9CAF-288786AB6DE1}C:\program files (x86)\stronghold crusader 2\bin\win32_release\crusader2.exe] => (Allow) C:\program files (x86)\stronghold crusader 2\bin\win32_release\crusader2.exe No File
FirewallRules: [UDP Query User{12EE4D53-7E9D-40A0-B736-173AE07BF2E8}C:\games\drift streets japan v08.03.2017\drift streets japan.exe] => (Allow) C:\games\drift streets japan v08.03.2017\drift streets japan.exe No File
FirewallRules: [TCP Query User{12B90C25-105B-4AED-8653-97153D4FA082}C:\games\drift streets japan v08.03.2017\drift streets japan.exe] => (Allow) C:\games\drift streets japan v08.03.2017\drift streets japan.exe No File
FirewallRules: [UDP Query User{A3D6F7EB-8A9D-4068-BC66-53557E44EFF0}C:\program files (x86)\kingdom come deliverance\bin\win64\kingdomcome.exe] => (Allow) C:\program files (x86)\kingdom come deliverance\bin\win64\kingdomcome.exe (Warhorse Studios sro) [File not signed]
FirewallRules: [TCP Query User{34234455-81C4-40B0-8AA5-26738FFD9EF4}C:\program files (x86)\kingdom come deliverance\bin\win64\kingdomcome.exe] => (Allow) C:\program files (x86)\kingdom come deliverance\bin\win64\kingdomcome.exe (Warhorse Studios sro) [File not signed]
FirewallRules: [UDP Query User{5A6BE3DF-5F5B-4B8B-B45C-5253D626814A}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe
FirewallRules: [TCP Query User{EFE96438-F3A5-40B2-8A26-B27CED0DC1D1}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe
FirewallRules: [UDP Query User{C2207154-2E73-4336-92CE-2EEF1284462A}C:\games\the sims 4\game\bin\ts4_x64.exe] => (Allow) C:\games\the sims 4\game\bin\ts4_x64.exe No File
FirewallRules: [TCP Query User{7782AC6A-FD89-4B4F-B154-523FECE7C509}C:\games\the sims 4\game\bin\ts4_x64.exe] => (Allow) C:\games\the sims 4\game\bin\ts4_x64.exe No File
FirewallRules: [{D0A5FFEA-D46A-4203-A1B0-BAF2CAB9C5C8}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe No File
FirewallRules: [{69F71B9F-EC51-43AF-A9AA-0162E51D97F3}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe No File
FirewallRules: [UDP Query User{0385F43A-824B-40A0-A14C-831BF00214AC}C:\games\sims 4\the sims 4\game\bin\ts4_x64.exe] => (Allow) C:\games\sims 4\the sims 4\game\bin\ts4_x64.exe (Electronic Arts Inc.) [File not signed]
FirewallRules: [TCP Query User{32FF5C76-DD3A-4DEA-BC5C-0804CF8119D5}C:\games\sims 4\the sims 4\game\bin\ts4_x64.exe] => (Allow) C:\games\sims 4\the sims 4\game\bin\ts4_x64.exe (Electronic Arts Inc.) [File not signed]
FirewallRules: [UDP Query User{FDDB327D-E65B-48D8-8CEB-8458324798D9}C:\games\di\dead island\deadislandgame.exe] => (Allow) C:\games\di\dead island\deadislandgame.exe No File
FirewallRules: [TCP Query User{5FC7EA1C-5548-43F9-B9AD-910D93B5CE31}C:\games\di\dead island\deadislandgame.exe] => (Allow) C:\games\di\dead island\deadislandgame.exe No File
FirewallRules: [{D546048C-B0CE-48BD-919B-F372B6DC4FC5}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{D7788DB5-146C-40BA-9502-08AB2DA33DC5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe No File
FirewallRules: [{9F4BB1FC-DE8A-495E-944B-9C23005143A0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe No File
FirewallRules: [{B80288B9-2499-48C4-80A2-53846A53CD79}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{6D0457C3-3839-4393-87D4-1B61B6803539}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{2CBF8598-E018-430F-B885-BE1DC9FBD6E4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{15D1E13D-7400-427D-8BF6-A898B63DDCB9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [UDP Query User{D15D51E7-49C3-4F0F-8EB4-15045BFA97AD}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe (Valve) [File not signed]
FirewallRules: [TCP Query User{012605F5-736D-4E88-BA74-7E542BEAC5E9}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe (Valve) [File not signed]
FirewallRules: [UDP Query User{280F028E-B206-4A3A-8EB7-56609F4CD8E8}C:\games\grand theft auto v\gta5.exe] => (Allow) C:\games\grand theft auto v\gta5.exe (Rockstar Games) [File not signed]
FirewallRules: [TCP Query User{9737CE4F-CBE0-4D01-94AB-784B52D794FC}C:\games\grand theft auto v\gta5.exe] => (Allow) C:\games\grand theft auto v\gta5.exe (Rockstar Games) [File not signed]
FirewallRules: [{C8853102-4D15-4595-A01B-456268F102BA}] => (Allow) C:\Users\Daniel\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{F4B1F6C8-7A7E-44AA-862E-A2AED227A25E}] => (Allow) C:\Users\Daniel\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{DB95C64A-F6E6-4418-96D2-7DED98141ACB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)

==================== Restore Points =========================

01-04-2019 10:31:13 Windows Update
08-04-2019 21:21:19 Scheduled Checkpoint

==================== Faulty Device Manager Devices =============

Name: Standard PS/2 Keyboard
Description: Standard PS/2 Keyboard
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard keyboards)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Realtek High Definition Audio
Description: Realtek High Definition Audio
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: IntcAzAudAddService
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.

Name: Microsoft PS/2 Mouse
Description: Microsoft PS/2 Mouse
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/16/2019 06:28:00 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: RAGEPluginHook.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.IO.DirectoryNotFoundException
   at System.IO.__Error.WinIOError(Int32, System.String)
   at System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
   at System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean)
   at System.IO.File.InternalWriteAllBytes(System.String, Byte[], Boolean)
   at =Qau6HPnXPEaCsRdxpwuHlYCVKf=.=9sTsnY5Byb28gWhJbUNDlGBnswD=()
   at =obbES7YMppfor0VU1HOXcU5Nsb=.=Rl7H6QthLGc1hrPnoxlOF24C6b=(Boolean)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   at System.Threading.ThreadHelper.ThreadStart()

Error: (04/14/2019 08:55:56 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: GTA5.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 00007FF6CCDBB74A
Stack:
   at <Module>.OnGameCrashManaged(_EXCEPTION_POINTERS*, Void**, Int32, SByte*, Rage.Plugin, System.String)
   at <Module>.OnGameCrashManaged(_EXCEPTION_POINTERS*, Void**, Int32, SByte*)

Error: (04/14/2019 07:59:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: RAGEPluginHook.exe, verzia: 0.47.1037.9935, časová značka: 0x57f6bbf6
Názov chybujúceho modulu: KERNELBASE.dll, verzia: 10.0.17763.404, časová značka: 0x2528b630
Kód výnimky: 0xe0434352
Odstup chyby: 0x0000000000039129
Identifikácia chybujúceho procesu: 0xde4
Čas spustenia chybujúcej aplikácie: 0x01d4f2ebcc570eb0
Cesta chybujúcej aplikácie: C:\Games\Grand Theft Auto V\RAGEPluginHook.exe
Cesta chybujúceho modulu: C:\WINDOWS\System32\KERNELBASE.dll
Identifikácia hlásenia: 3674974e-7fb5-44e6-8ebc-facf697a744e
Celé meno chybujúceho balíka: 
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (04/14/2019 07:59:33 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: RAGEPluginHook.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.IO.DirectoryNotFoundException
   at System.IO.__Error.WinIOError(Int32, System.String)
   at System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
   at System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean)
   at System.IO.File.InternalReadAllBytes(System.String, Boolean)
   at =Qau6HPnXPEaCsRdxpwuHlYCVKf=.=9sTsnY5Byb28gWhJbUNDlGBnswD=()
   at =obbES7YMppfor0VU1HOXcU5Nsb=.=Rl7H6QthLGc1hrPnoxlOF24C6b=(Boolean)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   at System.Threading.ThreadHelper.ThreadStart()

Error: (04/14/2019 07:59:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: RAGEPluginHook.exe, verzia: 0.47.1037.9935, časová značka: 0x57f6bbf6
Názov chybujúceho modulu: KERNELBASE.dll, verzia: 10.0.17763.404, časová značka: 0x2528b630
Kód výnimky: 0xe0434352
Odstup chyby: 0x0000000000039129
Identifikácia chybujúceho procesu: 0x2110
Čas spustenia chybujúcej aplikácie: 0x01d4f2ebb78322b8
Cesta chybujúcej aplikácie: C:\Games\Grand Theft Auto V\RAGEPluginHook.exe
Cesta chybujúceho modulu: C:\WINDOWS\System32\KERNELBASE.dll
Identifikácia hlásenia: b15a80f0-071a-41df-9108-1981c406490f
Celé meno chybujúceho balíka: 
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (04/14/2019 07:58:59 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: RAGEPluginHook.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.IO.DirectoryNotFoundException
   at System.IO.__Error.WinIOError(Int32, System.String)
   at System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
   at System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean)
   at System.IO.File.InternalWriteAllBytes(System.String, Byte[], Boolean)
   at =Qau6HPnXPEaCsRdxpwuHlYCVKf=.=9sTsnY5Byb28gWhJbUNDlGBnswD=()
   at =obbES7YMppfor0VU1HOXcU5Nsb=.=Rl7H6QthLGc1hrPnoxlOF24C6b=(Boolean)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   at System.Threading.ThreadHelper.ThreadStart()

Error: (04/14/2019 07:07:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program GTA5.exe version 1.0.877.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 8c0

Start Time: 01d4f2dd7b5aaee7

Termination Time: 4294967295

Application Path: C:\Games\Grand Theft Auto V\GTA5.exe

Report Id: 283bad3f-c8e4-4442-a80a-7a7ae631a264

Faulting package full name: 

Faulting package-relative application ID: 

Hang type: Top level window is idle

Error: (04/11/2019 12:37:14 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine QueryFullProcessImageNameW.  hr = 0x80070006, The handle is invalid.
.


Operation:
   Executing Asynchronous Operation

Context:
   Current State: DoSnapshotSet


System errors:
=============
Error: (04/16/2019 09:20:37 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9NC5AT3)
Description: The server {E60687F7-01A1-40AA-86AC-DB1CBF673334} did not register with DCOM within the required timeout.

Error: (04/16/2019 09:18:56 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-9NC5AT3)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user DESKTOP-9NC5AT3\Daniel SID (S-1-5-21-1390417164-89010438-2942280941-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (04/16/2019 09:18:37 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba wuauserv bola ukončená s nasledujúcou chybou: 
The system cannot find the file specified.

Error: (04/16/2019 09:10:56 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: The server {E60687F7-01A1-40AA-86AC-DB1CBF673334} did not register with DCOM within the required timeout.

Error: (04/16/2019 09:08:56 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba wuauserv bola ukončená s nasledujúcou chybou: 
The system cannot find the file specified.

Error: (04/16/2019 09:08:56 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: The server {E60687F7-01A1-40AA-86AC-DB1CBF673334} did not register with DCOM within the required timeout.

Error: (04/16/2019 09:06:57 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{0358B920-0AC7-461F-98F4-58E32CD89148}
 and APPID 
{3EB3C877-1F16-487C-9050-104DBCD66683}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (04/16/2019 09:06:57 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{0358B920-0AC7-461F-98F4-58E32CD89148}
 and APPID 
{3EB3C877-1F16-487C-9050-104DBCD66683}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.


Windows Defender:
===================================
Date: 2019-04-13 20:48:25.162
Description: 
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {BC2D1FAA-3117-48CD-ABD6-97DAF2E6EE9F}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-04-12 14:45:20.655
Description: 
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {B2409CC3-A4AE-4789-AD51-54216D89D1E0}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-04-12 13:31:17.845
Description: 
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {91E195DD-56FA-4056-B175-832C815378EE}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-04-12 13:23:43.403
Description: 
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {6C00A0F2-10A5-442D-B7FB-0F4AC3E927B2}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-04-16 18:25:00.734
Description: 
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version: 
Previous Signature Version: 1.291.1944.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.15800.1
Error code: 0x80080005
Error description: Server execution failed 

Date: 2019-04-15 18:52:54.928
Description: 
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version: 
Previous Signature Version: 1.291.1835.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.15800.1
Error code: 0x80080005
Error description: Server execution failed 

Date: 2019-04-14 18:28:48.045
Description: 
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version: 
Previous Signature Version: 1.291.1835.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.15800.1
Error code: 0x80080005
Error description: Server execution failed 

Date: 2019-04-14 10:48:03.389
Description: 
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version: 
Previous Signature Version: 1.291.1835.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.15800.1
Error code: 0x80080005
Error description: Server execution failed 

==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) CPU G4560 @ 3.50GHz
Percentage of memory in use: 32%
Total physical RAM: 8156.16 MB
Available physical RAM: 5491.04 MB
Total Virtual: 12508.16 MB
Available Virtual: 8026.62 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:930.91 GB) (Free:755.13 GB) NTFS

\\?\Volume{f7627804-0027-4e76-8c1b-2d1ddcb272b0}\ (Obnovenie) (Fixed) (Total:0.49 GB) (Free:0.47 GB) NTFS
\\?\Volume{2eecc47f-d415-440d-8462-191b56aba7c6}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt ============================