Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-10-2017
Ran by tomas (07-10-2017 13:02:36)
Running from C:\Users\Tomas\Desktop
Windows 10 Home Version 1703 (X64) (2017-09-10 04:37:10)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2429547285-4153512221-1423529663-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2429547285-4153512221-1423529663-503 - Limited - Disabled)
Guest (S-1-5-21-2429547285-4153512221-1423529663-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2429547285-4153512221-1423529663-1003 - Limited - Enabled)
tomas (S-1-5-21-2429547285-4153512221-1423529663-1001 - Administrator - Enabled) => C:\Users\Tomas
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Antivirus (Disabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Disabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-2429547285-4153512221-1423529663-1001\...\uTorrent) (Version: 3.4.5.41202 - BitTorrent Inc.)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.130 - Adobe Systems Incorporated)
Adobe Flash Player 27 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 27.0.0.130 - Adobe Systems Incorporated)
Adobe Reader 8 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A80000000002}) (Version: 8.0.0 - Adobe Systems Incorporated)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.4.3 - ASUS)
ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 2.1.0 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.07.0002 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.1.2 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0037 - ASUS)
AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.0.57 - ICEpower a/s)
Avira (HKLM-x32\...\{43F410E0-CEBC-45E4-8AAD-D73C33909486}) (Version: 1.2.97.16824 - Avira Operations GmbH & Co. KG) Hidden
Avira (HKLM-x32\...\{7a4579ba-01bc-4cca-b13c-451f77ab96b6}) (Version: 1.2.97.16824 - Avira Operations GmbH & Co. KG)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.32.6 - Avira Operations GmbH & Co. KG)
Avira Phantom VPN (HKLM-x32\...\Avira Phantom VPN) (Version: 2.11.1.17574 - Avira Operations GmbH & Co. KG)
Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 4.0.1.5814 - Avira Operations GmbH & Co. KG)
Backup and Sync from Google (HKLM-x32\...\{9AC75ED0-A54A-4AEA-9563-87572879D91C}) (Version: 3.36.6721.3394 - Google, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.29 - Piriform)
Device Setup (HKLM-x32\...\{1F07F2C7-596F-4F34-B805-2C61A3E50E5A}) (Version: 1.0.18 - ASUSTek Computer Inc.)
EasiSlides (HKLM-x32\...\{8372161B-103C-4BCA-98A1-4FC330B53A49}) (Version: 4.0.5000 - Wai Kuen Mo)
Foxit PhantomPDF (HKLM-x32\...\{FC76E6BB-7CBB-4CD6-8178-3BCADC0526C3}) (Version: 6.0.62.801 - Foxit Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Spoločnosť Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Chessmaster Grandmaster Edition (HKLM-x32\...\{27614800-84A9-484E-9CCB-43ED2F1205F5}) (Version: 1.00.0000 - Ubisoft) Hidden
Chessmaster Grandmaster Edition (HKLM-x32\...\InstallShield_{27614800-84A9-484E-9CCB-43ED2F1205F5}) (Version: 1.00.0000 - Ubisoft)
Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1018 - Intel Corporation)
Intel Security True Key (HKLM\...\TrueKey) (Version: 4.12.108.1 - Intel Security)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.0.10100.71 - Intel Corporation)
Intel(R) Chipset Device Software (HKLM-x32\...\{f5d71765-7cd1-4e68-998f-5b379e725da3}) (Version: 10.0.22 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.39.1003 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4549 - Intel Corporation)
Intel(R) WiDi (HKLM\...\{2F97FBC6-7992-4DF7-A7C7-B68455E307F7}) (Version: 5.1.20.0 - Intel Corporation)
Intel(R) Wireless Bluetooth(R)(patch version 17.1.1449.356) (HKLM\...\{302600C1-6BDF-4FD1-1411-148929CC1385}) (Version: 17.1.1411.0506 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{aa2c2346-d0c0-4d3e-9ab1-11a48b4cb9f3}) (Version: 19.20.3 - Intel Corporation)
League of Legends (HKLM-x32\...\{79BF4901-1EC4-4726-B3C2-A7859706C6E7}) (Version: 3.0.1 - Riot Games) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
Lightshot-5.4.0.10 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.10 - Skillbrains)
Microsoft Office 2013 Professional Plus (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office 2016 Professional Plus (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2429547285-4153512221-1423529663-1001\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 43.0.1 (x86 sk) (HKLM-x32\...\Mozilla Firefox 43.0.1 (x86 sk)) (Version: 43.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (HKLM\...\{90150000-001F-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Nástroje kontroly pravopisu pro Microsoft Office 2016 – čeština (HKLM\...\{90160000-001F-0405-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (HKLM\...\{90150000-001F-041B-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2016 - slovenčina (HKLM\...\{90160000-001F-041B-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
NVIDIA Graphics Driver 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.25 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Ovládací panel NVIDIA 369.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 369.09 - NVIDIA Corporation) Hidden
PowerISO (HKLM-x32\...\PowerISO) (Version: 6.2 - Power Software Ltd)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.31233 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.34.617.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7469 - Realtek Semiconductor Corp.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.)
Update Installer for WildTangent Games App (HKLM-x32\...\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App) (Version: - WildTangent) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.14 - WildTangent)
Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.0.1 - ASUS)
WinRAR 5.21 (64-bitová verzia) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google)
ContextMenuHandlers1: [Foxit_ConvertToPDF] -> {C5269811-4A29-4818-A4BB-111F9FC63A5F} => C:\Program Files (x86)\Foxit PhantomPDF\plugins\ConvertToPDFShellExtension_x64.dll [2013-12-18] (Foxit Corporation)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-31] (Google)
ContextMenuHandlers1: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2015-04-08] (Power Software Ltd)
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2017-09-26] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers1: [SystemSpeedupFilesMenu] -> {ef263503-8f0e-3e6a-ae2e-fe0b4b441d52} => C:\WINDOWS\system32\mscoree.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-15] (Alexander Roshal)
ContextMenuHandlers2: [AlcoholShellEx] -> {32020A01-506E-484D-A2A8-BE3CF17601C3} => -> No File
ContextMenuHandlers2: [AlcoholShellEx64] -> {AF67B665-D752-424E-9A03-C7C218F2844F} => -> No File
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-31] (Google)
ContextMenuHandlers4: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2015-04-08] (Power Software Ltd)
ContextMenuHandlers4: [SystemSpeedupFoldersMenu] -> {3d52b24d-33bb-3895-99ea-a0156f24a3f9} => C:\WINDOWS\system32\mscoree.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-15] (Alexander Roshal)
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-15] (Alexander Roshal)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-11-30] (Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-08-01] (NVIDIA Corporation)
ContextMenuHandlers5: [SystemSpeedupDesktopMenu] -> {cefaf456-bc17-3f4b-b7d9-75070925911b} => C:\WINDOWS\system32\mscoree.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2015-04-08] (Power Software Ltd)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2017-09-26] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-15] (Alexander Roshal)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0002F842-1B2E-4CD5-89F5-A6C4801F97D4} - System32\Tasks\{6D69F08C-4DBF-489F-9FB6-A3672A25A926} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\Ubisoft\Prince of Persia Warrior Within\PrinceOfPersia.exe" -d "C:\Program Files (x86)\Ubisoft\Prince of Persia Warrior Within"
Task: {00D90071-2F5B-4D9A-888E-C99E4768EB2E} - System32\Tasks\GoogleUpdateTaskMachineCore1d0f962fec51214 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-27] (Google Inc.)
Task: {0CAC6649-5884-4C25-80A8-80F30AB3C96D} - System32\Tasks\{600D43FB-4EB8-4EAB-9026-41E5EE2E3778} => C:\Windows\system32\pcalua.exe -a "C:\Riot Games\League of Legends\lol.launcher.admin.exe" -d "C:\Riot Games\League of Legends"
Task: {0CB264DC-33EA-4E97-A823-75B105AE9299} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-06-11] (ASUSTek Computer Inc.)
Task: {0DA1FDDE-2A25-4025-81B4-90E307A2B054} - \McAfee\McAfee Idle Detection Task -> No File <==== ATTENTION
Task: {108E9B3D-C509-4951-95CD-FDCD148CBC8C} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {15303797-7C0E-4B12-B300-A7AA15E381C7} - System32\Tasks\MicrosoftSearchIndexer => wscript.exe //E:vbscript C:\Users\Tomas\AppData\Roaming\MicrosoftSearchIndexer
Task: {1EF233F9-3C60-4670-95CC-D41B2E6BA67A} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {1F0253C1-21BA-4513-86CC-C4E3C2F4BF59} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-09-13] (Adobe Systems Incorporated)
Task: {1FEA68F5-DCF0-4C93-BBDC-EF5671C4EE1D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {212B3C34-9820-4BE1-ACCA-9429F128DEAD} - System32\Tasks\{C1E844B3-75F0-404C-893A-A56AA1E8C2AB} => C:\WINDOWS\system32\pcalua.exe -a "C:\Riot Games\League of Legends\lol.launcher.admin.exe" -d "C:\Riot Games\League of Legends"
Task: {313525DA-BE10-4078-8C93-D2A9D3500C2B} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
Task: {34D0DE8B-0DBA-4DCF-B3BA-D181491BF45F} - System32\Tasks\{49998809-45FD-4EA2-87B1-DE08C805B0EA} => C:\WINDOWS\system32\pcalua.exe -a "C:\Riot Games\League of Legends\lol.launcher.admin.exe" -d "C:\Riot Games\League of Legends"
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {356D6B62-9409-4431-AFCC-82358F337F7B} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_130_pepper.exe [2017-09-13] (Adobe Systems Incorporated)
Task: {39A57163-AEB1-4E7A-B3A3-940356624B88} - System32\Tasks\update-S-1-5-21-2429547285-4153512221-1423529663-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: <Company name>)
Task: {3CFA3041-76DC-4F00-A575-4333000BE220} - System32\Tasks\{01A180D0-8479-41EA-B88A-23B7BE44A2EF} => C:\WINDOWS\system32\pcalua.exe -a "C:\Tomas\w3\Frozen Throne.exe" -d C:\Tomas\w3
Task: {46FE31D7-A4FE-4F22-835D-40A2D051DD6D} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {4D60FBEA-5053-447D-987C-C9ACEEF82E75} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {4D672ECB-5BEB-4E11-8352-F4B3037964D2} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {5322CCB0-465A-4198-9575-630BABDD5EBA} - System32\Tasks\Avira SystrayStartTrigger => Avira.SystrayStartTrigger.exe
Task: {6DA30928-130F-473E-8776-AD799C09F6DD} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2014-09-02] (ASUSTek Computer Inc.)
Task: {6FE16664-1DE7-4DB2-88A2-4ACC744237FE} - System32\Tasks\Avira\System Speedup\TestScheduler => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [2017-08-17] (Avira Operations GmbH & Co. KG)
Task: {70820B27-250D-4331-AD16-FE0DF33588AA} - System32\Tasks\{93FE485A-0609-4CCB-9F7B-6A13C404B8FE} => C:\WINDOWS\system32\pcalua.exe -a "C:\Riot Games\League of Legends\lol.launcher.admin.exe" -d "C:\Riot Games\League of Legends"
Task: {74AB2D19-8D9C-4E9A-B66C-60A22C0E96A5} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: <Company name>)
Task: {75D0E7C4-17FC-437D-BE40-B5BB3165A1F0} - System32\Tasks\{DBBDA9B5-C1AC-47E7-A1B5-9EE19865FA9E} => C:\Windows\system32\pcalua.exe -a "C:\Tomas\Games\Warcraft III (eng_DotA) (2002)\Warcraft III.exe" -d "C:\Tomas\Games\Warcraft III (eng_DotA) (2002)"
Task: {7D52F027-7C43-4E53-96BA-B2C4B460F0BE} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2017-10-05] (Avira Operations GmbH & Co. KG)
Task: {81DD4D70-6E98-4C80-A44E-DBAAE987913D} - \Microsoft\Windows\Setup\GWXTriggers\Logon-URT -> No File <==== ATTENTION
Task: {81E98086-5C68-40D7-BB46-B17C958E9BA0} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {8BAB19BB-B881-415B-8259-80A4736FE746} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {926070FA-2157-4878-AA68-6331D29CA0DE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-27] (Google Inc.)
Task: {95274034-E7FA-43CC-AF41-3BAE38279BDF} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-09-14] (Microsoft Corporation)
Task: {A082FF7A-AF2A-422C-A223-E431045AEAC3} - System32\Tasks\{7DCF7CB4-6176-4430-8588-A33EDAC7B2B5} => C:\WINDOWS\system32\pcalua.exe -a "C:\Tomas\Games\w3\Frozen Throne.exe" -d C:\Tomas\Games\w3
Task: {A1CC4DAE-E954-431B-ACD4-CB7F73F89EE6} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {A2DD3FCB-7179-44A6-908D-1AA6D328B58A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {A3A88438-3D73-45F7-86FE-D45FC3E0E100} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-27] (Google Inc.)
Task: {A574C7CD-9C88-48EE-A9EA-F8FB230A6E96} - System32\Tasks\{ECE06AAF-1AD5-4EB9-A7B5-D6F1F4E0D6C7} => C:\WINDOWS\system32\pcalua.exe -a "C:\Riot Games\League of Legends\lol.launcher.admin.exe" -d "C:\Riot Games\League of Legends"
Task: {A69673FE-3145-4D72-AFE9-7BDF12EAA47B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {ABEB3763-DA4E-4D6E-BF5D-6CB39876400A} - System32\Tasks\{7D4064A0-1597-4359-A02E-E2B7B38DA9BB} => C:\Windows\system32\pcalua.exe -a "C:\Riot Games\League of Legends\lol.launcher.exe" -d "C:\Riot Games\League of Legends\"
Task: {AE655CEB-2884-4601-B9A4-29176BFF7B61} - System32\Tasks\Avira\System Speedup\SpeedupSysTray => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe [2017-08-17] (Avira Operations GmbH & Co. KG)
Task: {B14A349E-00F9-4545-B403-5DB1969C6C2C} - System32\Tasks\AviraSystemSpeedupUpdate => C:\ProgramData\Avira\SystemSpeedup\Update\avira_speedup_setup_update.exe [2017-08-27] (Avira Operations GmbH & Co. KG )
Task: {B4208AB5-E7A9-44EC-943B-93AD09B509DD} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {C280435D-D3CD-42AE-9142-CB79924C4430} - System32\Tasks\{9FA6E634-7672-4112-98A8-D9E8EB495432} => C:\WINDOWS\system32\pcalua.exe -a D:\autoplay.exe -d D:\
Task: {C4FF3CC8-89CD-48A7-8C17-3AA9FD3BBA6E} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
Task: {C752E25F-B8E0-4C35-AE98-B43AB36D5910} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
Task: {CA8E6A42-9AA2-4CCB-A91D-FBE1B16E2EFB} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
Task: {CAB29B0F-560C-40FB-9591-BAAC95E058AD} - System32\Tasks\{2A46FB99-E443-49BC-B177-6CA75AAFFD93} => C:\WINDOWS\system32\pcalua.exe -a D:\autoplay.exe -d D:\
Task: {CC0768A5-915B-4060-8606-038B7DD00796} - System32\Tasks\{D64031A3-803F-418C-B13F-CF5E2B5C573D} => C:\Windows\system32\pcalua.exe -a "C:\Tomas\Games\Warcraft III (ENG)\Frozen Throne.exe" -d "C:\Tomas\Games\Warcraft III (ENG)"
Task: {CC76E005-4971-4F53-A2DC-B3BE6B645D88} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-04-11] (Piriform Ltd)
Task: {D032B623-2491-48CF-B1AE-1B85775CE7FB} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2015-02-06] (ASUS)
Task: {D2DEA1BA-3D02-4B90-86B1-00E660B8B321} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {DA313B98-D558-4C50-AE70-02D50FA0D225} - System32\Tasks\{F9C0CA9C-20E8-42DC-8776-97A0D8F6C2A2} => C:\Windows\system32\pcalua.exe -a "C:\Tomas\Warcraft III (ENG)\Frozen Throne.exe" -d "C:\Tomas\Warcraft III (ENG)"
Task: {DA5259C6-0645-4E84-A90A-92909CECBC09} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {E25541D2-504E-4039-949C-1B8EFD3F20E1} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-01-22] (Realtek Semiconductor)
Task: {EA6C4A46-41FF-4DE5-859C-AF24B4CF4B42} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2015-02-25] (ASUSTek Computer Inc.)
Task: {EA90A27B-CF10-45F1-8865-726144EF23B9} - System32\Tasks\Google Update 8.3 => C:\Users\Tomas\AppData\Roaming\Google [Argument = Update 8.3\GUpdateSvc.exe] <==== ATTENTION
Task: {EB1F615E-B719-4625-B0F0-CA48F2FACA30} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {F35A9FA4-1BE9-4D7C-9396-95B76170011D} - System32\Tasks\{60F65B24-F3C7-43D5-9548-C4E621374A63} => C:\WINDOWS\system32\pcalua.exe -a "C:\Tomas\Games\Warcraft III (cz) (2002)\Warcraft III.exe" -d "C:\Tomas\Games\Warcraft III (cz) (2002)"
Task: {F3B5926B-4D4F-43DD-A360-14A3866B3CA4} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {FE9A1529-A7AC-4961-88CC-56DCF4573E01} - System32\Tasks\{422C1BEE-CC4B-4197-B59F-28DAD0A5FEDB} => C:\Windows\system32\pcalua.exe -a C:\TOMÁŠ\Inštalačky\Lexicon.2002.EN-SK.Studijny.Slovnik.v4.03.exe -d C:\TOMÁŠ\Inštalačky
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\update-S-1-5-21-2429547285-4153512221-1423529663-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2017-09-10 06:25 - 2016-08-01 14:54 - 000133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-11-30 22:57 - 2016-11-30 22:57 - 000401888 _____ () C:\WINDOWS\system32\igfxTray.exe
2017-03-18 22:58 - 2017-03-18 22:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-03-18 22:59 - 2017-03-20 06:10 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-08-31 17:18 - 2017-08-31 17:18 - 040257336 _____ () C:\Program Files (x86)\Google\Drive\googledrivesync.exe
2017-04-11 00:57 - 2017-04-11 00:57 - 000061440 _____ () C:\Program Files\CCleaner\lang\lang-1051.dll
2015-02-06 16:51 - 2015-02-06 16:51 - 000035376 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2015-02-06 16:51 - 2015-02-06 16:51 - 000124928 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2017-10-07 12:59 - 2017-10-07 12:59 - 000088064 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\_ctypes.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000918528 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\_hashlib.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000098816 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\win32api.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000110080 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\pywintypes27.dll
2017-10-07 12:59 - 2017-10-07 12:59 - 000364544 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\pythoncom27.dll
2017-10-07 12:59 - 2017-10-07 12:59 - 000686080 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\unicodedata.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000320512 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\win32com.shell.shell.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 001177088 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\wx._core_.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000806912 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\wx._gdi_.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000816640 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\wx._windows_.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 001067520 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\wx._controls_.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000733696 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\wx._misc_.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000736256 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\pysqlite2._sqlite.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000119808 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\win32file.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000108544 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\win32security.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000007168 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\hashobjs_ext.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000017920 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\thumbnails_ext.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000082432 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\usb_ext.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000013824 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\common.time34.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000018432 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\win32event.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000088576 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\windows.volumes.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000017408 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\windows.winwrap.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000167936 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\win32gui.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000046080 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\_socket.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 001309696 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\_ssl.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000129536 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\_elementtree.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000127488 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\pyexpat.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000038912 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\win32inet.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000077824 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\wx._html2.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000036864 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\_psutil_windows.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000524248 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\windows._lib_cacheinvalidation.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000011264 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\win32crypt.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000218624 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\PIL._imaging.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000027648 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\_multiprocessing.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000020480 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\_yappi.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000035840 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\win32process.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000024064 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\win32pipe.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000010240 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\select.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000025600 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\win32pdh.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000058880 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\windows.device_monitor.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000017408 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\win32profile.pyd
2017-10-07 12:59 - 2017-10-07 12:59 - 000022528 _____ () C:\Users\Tomas\AppData\Local\Temp\_MEI124362\win32ts.pyd
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 15:25 - 2016-02-13 18:19 - 000002576 _____ C:\WINDOWS\system32\Drivers\etc\hosts
217.77.219.101 firststart.nero.com
127.0.0.1
www.nero.com
127.0.0.1
www.nero.com/rus/index.html
127.0.0.1
www.nero.com/rus/support.html
127.0.0.1
http://www.nero.com/rus/support-custome ... ation.html
127.0.0.1
www.nero.com/rus/store-upgrade-center.html
127.0.0.1
www.nero.com/rus/store-volume-licensing.html
127.0.0.1
http://www.nero.com/eng/support.html?Ne ... 25e97a3b80
127.0.0.1
http://www.nero.com/eng/store-upgrade-c ... 25e97a3b80
127.0.0.1
http://www.nero.com/eng/support-custome ... 25e97a3b80
127.0.0.1
www.nero.com/eng/index.html
127.0.0.1
www.nero.com/enu/support-nero8.html
127.0.0.1 my.nero.com
127.0.0.1 secure.nero.com/us/secure.asp
127.0.0.1
activation@nero.com
127.0.0.1 registernero.com
127.0.0.1
www.registernero.com
127.0.0.1
www.nero.com/eng/privacy.html
127.0.0.1
legal@nero.com
127.0.0.1 support.nero.com
127.0.0.1
http://www.nero.com/esp/index.php?NeroS ... 5faf35093e
127.0.0.1
http://www.nero.com/esl/index.php?NeroS ... 5faf35093e
127.0.0.1
http://www.nero.com/esp/support.html?Ne ... 5faf35093e
127.0.0.1
http://www.nero.com/esl/support.html?Ne ... 5faf35093e
0.0.0.1 mssplus.mcafee.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2429547285-4153512221-1423529663-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Tomas\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{4222f3bd-f7ee-49e5-8c78-148a2edbee3c}.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [UDP Query User{A1353D1C-27A4-46B9-BF71-A448C2FC5E65}C:\tomas\games\w3\war3.exe] => (Allow) C:\tomas\games\w3\war3.exe
FirewallRules: [TCP Query User{C5A0DD32-DC03-4A80-A2BD-DD3C65199AB7}C:\tomas\games\w3\war3.exe] => (Allow) C:\tomas\games\w3\war3.exe
FirewallRules: [{67B29AAA-0493-4423-8EC8-4772BDE63969}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{0DDAB395-6276-4853-9598-CFE8B97A8EAA}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{09B07F77-A41B-427A-8AA1-CED7C9A3CF57}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{8A558D16-564D-4AF2-9174-F08E347246AE}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{DD83EB71-1C3C-410F-96D8-055E381E5B8F}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{0CB01E59-32BC-4326-A663-27B931F01A65}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{263BDE97-85E5-45D7-9408-A13C65748079}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5CF84BDA-369D-42A7-9E41-1392287AE4A3}] => (Allow) LPort=1689
FirewallRules: [{B2D8F8CC-A2FB-49F5-BDB8-B83CB7701BF2}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{7F175C0E-1658-4E21-A95E-4B5EC9470392}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{C304F625-5674-4D57-A6AD-C1380ED52EEE}] => (Allow) C:\Users\Tomas\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{B4C3A631-535F-4A78-A517-78C1194059C5}] => (Allow) C:\Users\Tomas\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{B668288F-00CF-4AD7-9C56-690AC6127E2B}] => (Allow) C:\Users\Tomas\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F620BE33-FD53-448F-A9C2-345BF72FB808}] => (Allow) C:\Users\Tomas\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{31FC8A6C-B908-41C1-A3FC-73168407C298}] => (Allow) C:\Users\Tomas\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{6ADC74E5-5314-4A8A-B6A8-FE8B3A4AE42E}] => (Allow) C:\Users\Tomas\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0D80108F-1B15-453A-B81F-EF22B08199D7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B5BAE173-DD4D-4436-AC96-76838D3B92B9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{EF6DEFB7-C27B-4325-924D-E12259BE932D}] => (Allow) C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe
FirewallRules: [{D6F67BB1-D028-42A2-AD20-3E135803CD33}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{68B93A09-7EFB-4436-B75E-E1709DB0F5D1}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{9FF28AA5-8828-48D9-A89B-9DEDF7C73A7D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{06327D57-89A1-4DAD-B51F-2423AD623BC5}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{FB5670E4-EB25-4F57-8877-5F2D03D39990}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{6AC112FC-C0C2-410E-8A93-408E417D46B3}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{2E863DFA-9758-4A3B-888B-C8FEDC09F2FC}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{19086481-B8BF-4526-B522-5441C2250AB1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Restore Points =========================
ATTENTION: System Restore is disabled
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (10/07/2017 01:00:01 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Windows cannot load the extensible counter DLL rdyboost. The first four bytes (DWORD) of the Data section contains the Windows error code.
Error: (10/07/2017 01:00:01 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.
Error: (10/07/2017 12:59:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=43, authorId=9, vendorId=0, vendorType=0
Error: (10/07/2017 12:59:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=25, authorId=9, vendorId=0, vendorType=0
Error: (10/07/2017 12:59:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=17, authorId=9, vendorId=0, vendorType=0
Error: (10/07/2017 12:59:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=43, authorId=9, vendorId=0, vendorType=0
Error: (10/07/2017 12:59:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=25, authorId=9, vendorId=0, vendorType=0
Error: (10/07/2017 12:59:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=17, authorId=9, vendorId=0, vendorType=0
Error: (10/07/2017 12:59:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=43, authorId=9, vendorId=0, vendorType=0
Error: (10/07/2017 12:59:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=25, authorId=9, vendorId=0, vendorType=0
System errors:
=============
Error: (10/07/2017 12:59:37 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (10/07/2017 12:59:37 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (10/07/2017 12:59:17 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Počas čakania na pripojenie služby jhi_service bol dosiahnutý časový limit (30000 ms).
Error: (10/07/2017 12:59:13 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba shpamsvc bola ukončená s nasledujúcou chybou:
Catastrophic failure
Error: (10/07/2017 12:59:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby LMS zlyhalo kvôli nasledujúcej chybe:
The service did not respond to the start or control request in a timely fashion.
Error: (10/07/2017 12:59:12 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Počas čakania na pripojenie služby LMS bol dosiahnutý časový limit (30000 ms).
Error: (10/07/2017 12:59:12 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Počas čakania na pripojenie služby jhi_service bol dosiahnutý časový limit (30000 ms).
Error: (10/07/2017 12:59:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby CldFlt zlyhalo kvôli nasledujúcej chybe:
The request is not supported.
Error: (10/07/2017 12:58:53 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Službe Winmgmt sa nepodarilo s aktuálne nakonfigurovaným heslom prihlásiť ako NT AUTHORITY\SYSTEM kvôli nasledujúcej chybe:
The request is not supported.
Ak chcete zabezpečiť správne nakonfigurovanie služby, použite modul Služby konzoly MMC (Microsoft Management Console).
Error: (10/07/2017 12:58:51 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Modul WLAN Extensibility Module sa neočakávane zastavil.
Cesta k modulu: C:\WINDOWS\System32\IWMSSvc.dll
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3-5010U CPU @ 2.10GHz
Percentage of memory in use: 50%
Total physical RAM: 3998.41 MB
Available physical RAM: 1965.72 MB
Total Virtual: 6814.41 MB
Available Virtual: 4226.18 MB
==================== Drives ================================
Drive c: (C) (Fixed) (Total:118.57 GB) (Free:11.15 GB) NTFS ==>[system with boot components (obtained from drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 3A4EAE53)
Partition: GPT.
==================== End of Addition.txt ============================
V ramci cisteni Vam budou vyprazdneny docasne adresare (vysypani Kose a tempu, vyprazdneni cache prohlizecu apod.).