Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-06-2016
Ran by JARXAN (2016-06-29 11:47:03)
Running from J:\EXE\DRIVERS
Windows 7 Ultimate Service Pack 1 (X64) (2011-04-01 18:55:35)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

JARXAN (S-1-5-21-3342368325-3632019662-4143609904-1000 - Administrator - Enabled) => C:\Users\JARXAN
Администратор (S-1-5-21-3342368325-3632019662-4143609904-500 - Administrator - Disabled)
Гость (S-1-5-21-3342368325-3632019662-4143609904-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-3342368325-3632019662-4143609904-1000\...\uTorrent) (Version: 3.4.2.31574 - BitTorrent Inc.)
AC3Filter 1.63b (HKLM-x32\...\AC3Filter_is1) (Version: 1.63b - Alexander Vigovsky)
ACDSee Pro 7 (64-bit) (HKLM\...\{D2A6EC54-CB46-49E4-A6FC-A9179F9D9D12}) (Version: 7.0.138 - ACD Systems International Inc.)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.38 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.5 - Adobe Systems Incorporated)
AIMP3 (HKLM-x32\...\AIMP3) (Version: v3.60.1503, 26.09.2015 - AIMP DevTeam)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.12.0 - Asmedia Technology)
Cities Skylines - Deluxe Edition v.1.5.0-f4 (HKLM-x32\...\Cities Skylines - Deluxe Edition_is1) (Version:  - )
CoreAVC Professional Edition (remove only) (HKLM-x32\...\CoreAVC Professional Edition) (Version:  - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Daum PotPlayer 1.6.55124 (64-bit) (HKLM\...\{69764025-6925-4F66-A38B-63AD94DB6746}_is1) (Version:  - ©7sh3. (Сборка от 10.07.2015))
EasyBCD 2.1 (HKLM-x32\...\EasyBCD) (Version: 2.1 - NeoSmart Technologies)
Euro Truck Simulator 2 (HKLM-x32\...\Euro Truck Simulator 2_R.G. Mechanics_is1) (Version:  - R.G. Mechanics, markfiter)
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
Java 8 Update 91 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418091F0}) (Version: 8.0.910.14 - Oracle Corporation)
JMicron JMB36X Driver (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.17.65.11 - JMicron Technology Corp.)
LeaderTask 7.6.4.0 (HKLM-x32\...\LeaderTask RePack_is1) (Version:  - )
Malwarebytes Anti-Malware, версия 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 47.0 (x64 ru) (HKLM\...\Mozilla Firefox 47.0 (x64 ru)) (Version: 47.0 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
NVIDIA GeForce Experience 2.10.2.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.10.2.40 - NVIDIA Corporation)
NVIDIA Графический драйвер 364.72 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 364.72 - NVIDIA Corporation)
NVIDIA Системное программное обеспечение PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
PTGui Pro 10.0.7 (HKLM-x32\...\PTGui) (Version:  - New House Internet Services B.V.)
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.1 r2290 - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.78.1218.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 5.1.0270 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.10.2.40 - NVIDIA Corporation) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Uninstall Tool (HKLM\...\Uninstall Tool_is1) (Version: 3.3.3 - CrystalIDEA Software, Inc.)
UxStyle Core Beta (HKLM\...\{8E363055-15E5-4D8A-9C69-A0A9DE9A3337}) (Version: 0.2.1.1 - The Within Network, LLC)
ViewSonic Monitor Drivers x64 (HKLM-x32\...\{48963B63-7A10-49D6-8B08-61E6132453D0}) (Version:  - )
Warface (HKU\S-1-5-21-3342368325-3632019662-4143609904-1000\...\Warface) (Version: 1.156 - Mail.Ru)
WinDjView 2.1 (HKLM\...\WinDjView) (Version: 2.1 - Andrew Zhezherun)
WinRAR 5.11 (64-разрядная) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
XviD4PSP 6.0 (HKLM\...\XviD4PSP60) (Version: 6.0 - Winnydows)
Игровой центр (HKU\S-1-5-21-3342368325-3632019662-4143609904-1000\...\GameCenterMailRu) (Version: 3.1104 - ООО "Мэйл.Ру Геймз")
Обновления NVIDIA 2.10.2.40 (Version: 2.10.2.40 - NVIDIA Corporation) Hidden
Основные компоненты Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Панель управления NVIDIA 364.72 (Version: 364.72 - NVIDIA Corporation) Hidden
Программное обеспечение Intel® Chipset Device (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {47E1359F-982E-4625-9D7F-D24682086649} - \{9B825247-8EB6-44F9-9036-EC9B55FCADCD} -> No File <==== ATTENTION
Task: {63903D9B-AC60-4EDD-B732-604B160D19AB} - \JARXAN -> No File <==== ATTENTION
Task: {79D41943-7449-4BE5-BFB3-74446813ACAD} - \{D99083E0-83A4-4B95-B92E-979057879D22} -> No File <==== ATTENTION
Task: {92864BDC-52F6-42C5-830B-59337E686448} - \{51AF3F66-7140-468C-B8C6-5E362FCDABC0} -> No File <==== ATTENTION
Task: {A2C7559F-4702-449E-9BA6-8936EFD6B944} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-06-24] (AVAST Software)
Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - System32\Tasks\Microsoft\Windows\Application Experience\AitAgent => C:\Windows\system32\aitagent.exe [2010-11-21] (Корпорация Майкрософт (Microsoft Corp.))
Task: {D27DE064-F214-432A-89B1-92FF687F45C8} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline -> No File <==== ATTENTION
Task: {D5D0FDF8-F9FC-42C0-931B-70FFFEC86327} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\JARXAN\AppData\Local\Microsoft\Windows\GameExplorer\{A556D705-452F-46D4-8DF7-3904F8F15A07}\SupportTasks\0\Игры от Майкрософт.lnk -> hxxp://www.rockstargames.com/vicecity/ (No File)
Shortcut: C:\Users\JARXAN\AppData\Local\Microsoft\Windows\GameExplorer\{01CC52FF-B8B2-4B4F-B375-42DBDD86FB01}\SupportTasks\1\Поддержка.lnk -> hxxp://www.bethsoft.com/ (No File)
Shortcut: C:\Users\JARXAN\AppData\Local\Microsoft\Windows\GameExplorer\{01CC52FF-B8B2-4B4F-B375-42DBDD86FB01}\SupportTasks\0\Игры от Майкрософт.lnk -> hxxp://www.elderscrolls.com/ (No File)

==================== Loaded Modules (Whitelisted) ==============

2016-03-28 18:28 - 2016-03-22 05:25 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-02-27 09:28 - 2016-02-17 09:56 - 01416064 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-02-27 09:28 - 2016-02-17 09:56 - 03613056 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-02-27 09:05 - 2016-02-17 09:56 - 00299392 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2014-05-25 17:18 - 2014-05-25 17:18 - 00036536 _____ () C:\Program Files\Rainmeter\Rainmeter.exe
2014-05-25 17:18 - 2014-05-25 17:18 - 00747192 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2014-05-25 17:17 - 2014-05-25 17:17 - 00056832 _____ () C:\Program Files\Rainmeter\Plugins\WebParser.dll
2015-07-26 08:25 - 2016-02-17 10:02 - 00020352 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Windows:nlsPreferences [386]
AlternateDataStreams: C:\ProgramData\Microsoft:DVEluLg59g38BPV3WlXvqivfz [2362]
AlternateDataStreams: C:\ProgramData\Microsoft:dVLgkvRmDUT2KUNJ8hEKbEH [1974]
AlternateDataStreams: C:\ProgramData\Microsoft:XUol7ILDT1i8HY2dUZgRw9ny [2092]
AlternateDataStreams: C:\ProgramData\TEMP:07BF512B [137]
AlternateDataStreams: C:\ProgramData\TEMP:41ADDB8A [137]
AlternateDataStreams: C:\ProgramData\TEMP:774C075A [112]
AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9 [138]
AlternateDataStreams: C:\Users\JARXAN\Local Settings:ppkt87qQluTutBLsNSQu2Nos [2024]
AlternateDataStreams: C:\Users\JARXAN\Local Settings:wa [146]
AlternateDataStreams: C:\Users\JARXAN\AppData\Local:ppkt87qQluTutBLsNSQu2Nos [2024]
AlternateDataStreams: C:\Users\JARXAN\AppData\Local:wa [146]
AlternateDataStreams: C:\Users\Все пользователи\Microsoft:DVEluLg59g38BPV3WlXvqivfz [2362]
AlternateDataStreams: C:\Users\Все пользователи\Microsoft:dVLgkvRmDUT2KUNJ8hEKbEH [1974]
AlternateDataStreams: C:\Users\Все пользователи\Microsoft:XUol7ILDT1i8HY2dUZgRw9ny [2092]
AlternateDataStreams: C:\Users\Все пользователи\TEMP:07BF512B [137]
AlternateDataStreams: C:\Users\Все пользователи\TEMP:41ADDB8A [137]
AlternateDataStreams: C:\Users\Все пользователи\TEMP:774C075A [112]
AlternateDataStreams: C:\Users\Все пользователи\TEMP:CB0AACC9 [138]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKLM\...\regfile\DefaultIcon: C:\Windows\regedit.exe,1 <===== ATTENTION
HKLM\...\batfile\DefaultIcon: C:\Windows\SysWow64\imageres.dll,-68 <===== ATTENTION
HKU\S-1-5-21-3342368325-3632019662-4143609904-1000\Software\Classes\regfile: regedit.exe "%1" <===== ATTENTION

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 05:34 - 2016-06-26 11:58 - 00000871 __RAH C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
127.0.0.1                   activate.adobe.com
127.0.0.1 serius.mwbsys.com
127.0.0.1 keystone.mwbsys.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3342368325-3632019662-4143609904-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\JARXAN\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: Domru => "C:\Users\JARXAN\AppData\Local\Apps\2.0\TLBLH6D6.DC0\VPWX6BZ3.CZH\domr..tion_2edef5e10e1944ec_0000.0000_d0a1b8e1b413eb2d\Domru.exe" /auto

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{0FE54B8A-DA59-4B3A-B0FF-D7F360ACEE2E}C:\program files (x86)\mirandafinal\miranda32.exe] => (Allow) C:\program files (x86)\mirandafinal\miranda32.exe
FirewallRules: [UDP Query User{A8BB9F0C-207B-4642-91D3-CEBAEA336738}C:\program files (x86)\mirandafinal\miranda32.exe] => (Allow) C:\program files (x86)\mirandafinal\miranda32.exe
FirewallRules: [{046CFAE2-B370-414A-84DA-826E5589F7E8}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{16239EAD-B6E7-45AD-9652-B7603A8BDC4A}] => (Allow) LPort=2869
FirewallRules: [{AD2867CD-7B28-4A70-8228-0EBBF50FF0E9}] => (Allow) LPort=1900
FirewallRules: [PotPlayer(PotPlayerMini64.exe)] => (Allow) C:\Program Files\PotPlayer\PotPlayerMini64.exe
FirewallRules: [{E2982773-518D-4499-BFF0-7F8A25BB25FF}] => (Allow) C:\Program Files\PotPlayer\PotPlayerMini64.exe
FirewallRules: [{AE5C90C7-0DB2-4B78-B1CE-A60391F4476F}] => (Allow) C:\Users\JARXAN\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{9DA8EB0C-E4FA-4DA7-8F67-2D2068A42A51}] => (Allow) C:\Users\JARXAN\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{A461291A-2860-408F-9168-473BA60F50DA}] => (Allow) LPort=80
FirewallRules: [{91103028-0A9E-458D-B203-6C2DE064A72C}] => (Allow) LPort=443
FirewallRules: [{83AE238E-E4C0-48D1-B5DA-D2D4CBCEB2C6}] => (Allow) LPort=20010
FirewallRules: [{879431C9-6258-492B-9CA1-5684FDF3CB75}] => (Allow) LPort=3478
FirewallRules: [{8FA845BF-6869-4112-80A7-561C7F397169}] => (Allow) LPort=7850
FirewallRules: [{E7A53555-98BE-494B-8A35-2BAEF9EA28D2}] => (Allow) LPort=7852
FirewallRules: [{73DFCFFA-C5EA-4240-B456-1547B9BCF522}] => (Allow) LPort=7853
FirewallRules: [{F65492C0-B4AB-4AEA-88A7-59955CA3D131}] => (Allow) LPort=27022
FirewallRules: [{C96EF79A-B07F-4DC4-929D-0B12B4FE6836}] => (Allow) LPort=6881
FirewallRules: [{AE1745EF-7E7D-4585-8DBF-31E2E77DA4D2}] => (Allow) LPort=33333
FirewallRules: [{1E991BB9-AA59-424C-988C-3A286109F692}] => (Allow) LPort=20443
FirewallRules: [{03418787-E7B2-423A-BA4C-0B8463DB92D5}] => (Allow) LPort=8090
FirewallRules: [{80DC5DC3-760F-4B26-83B7-839CB0B8C329}] => (Allow) C:\Users\JARXAN\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{94E2398E-BDAA-49B3-9FA3-F7E0C5AA467C}] => (Allow) C:\Users\JARXAN\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{DBE3DB72-3DF2-4CAC-9271-C6EF16D944AD}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E01C1BD1-445F-402C-B560-BFC8935A889B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{6049D752-7A39-4194-8D86-CF0BAF40E91D}] => (Allow) LPort=8743
FirewallRules: [{6EC4B46A-8432-47B6-8364-FE1328D0CFCD}] => (Allow) LPort=8643
FirewallRules: [{BC08B8CF-100A-4775-8BFE-FF8ACA875271}] => (Allow) LPort=7676
FirewallRules: [{A76D86AD-79B2-42FA-8BF2-FE41BC457290}] => (Allow) LPort=7679
FirewallRules: [{9F44D1DE-586F-4F00-8F88-333283921F35}] => (Allow) LPort=24234
FirewallRules: [{F1DEC43F-6855-4CEC-A85D-ADBD640DC0E2}] => (Allow) LPort=7900
FirewallRules: [{470220B7-B8CF-442D-8F74-431973D15E61}] => (Allow) LPort=1900
FirewallRules: [{FA273AFF-C877-4964-B5FE-3B496D83D0BF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{21859406-4AF2-4DE2-B687-72C68449823D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{A6433348-B824-4BB8-869B-4A7A453120E4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{0FD13643-0681-450F-8948-F56CB1CF323F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{C07FF2D6-0EEA-4F10-9284-D4E3C21026F6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E2BEE35F-3D89-477D-B117-F5812F7D3FF4}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{088EEBEE-056D-408F-B61E-A576DC5A4EA9}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{60756001-9C79-4DDB-A2AD-E2917A0BA40D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{BDBAD361-B43B-46B1-91CC-32AED2AF225B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Restore Points =========================

Check "winmgmt" service or repair WMI.


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/29/2016 11:47:09 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Ошибка теневого копирования тома: Непредвиденная ошибка при вызове подпрограммы CoCreateInstance.. hr = 0x80070422, Указанная служба не может быть запущена, поскольку она отключена или все связанные с ней устройства отключены.
.


Операция:
   Создание экземпляра сервера VSS

Error: (06/29/2016 11:47:09 AM) (Source: VSS) (EventID: 13) (User: )
Description: Информация теневого копирования тома: не удается запустить COM-сервер с CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} под именем IVssCoordinatorEx2. [0x80070422, Указанная служба не может быть запущена, поскольку она отключена или все связанные с ней устройства отключены.
]


Операция:
   Создание экземпляра сервера VSS

Error: (06/29/2016 11:46:39 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/29/2016 11:19:42 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/29/2016 10:12:25 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Ошибка теневого копирования тома: Непредвиденная ошибка при вызове подпрограммы CoCreateInstance.. hr = 0x80070422, Указанная служба не может быть запущена, поскольку она отключена или все связанные с ней устройства отключены.
.


Операция:
   Создание экземпляра сервера VSS

Error: (06/29/2016 10:12:25 AM) (Source: VSS) (EventID: 13) (User: )
Description: Информация теневого копирования тома: не удается запустить COM-сервер с CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} под именем IVssCoordinatorEx2. [0x80070422, Указанная служба не может быть запущена, поскольку она отключена или все связанные с ней устройства отключены.
]


Операция:
   Создание экземпляра сервера VSS

Error: (06/29/2016 09:57:39 AM) (Source: MsiInstaller) (EventID: 11316) (User: STARGENT)
Description: Product: Trapcode Suite 64-bit -- Error 1316.Указанная учетная запись уже существует.

Error: (06/29/2016 09:56:53 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Не удалось создать точку восстановления (Процесс = C:\Windows\system32\msiexec.exe /V; Описание = Removed Java Auto Updater; HR = 0x80042302).

Error: (06/29/2016 09:56:53 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Ошибка теневого копирования тома: Непредвиденная ошибка при вызове подпрограммы CoCreateInstance.. hr = 0x80070422, Указанная служба не может быть запущена, поскольку она отключена или все связанные с ней устройства отключены.
.

Error: (06/29/2016 09:56:53 AM) (Source: VSS) (EventID: 13) (User: )
Description: Информация теневого копирования тома: не удается запустить COM-сервер с CLSID {0b5a2c52-3eb9-470a-96e2-6c6d4570e40f} под именем Coordinator. [0x80070422, Указанная служба не может быть запущена, поскольку она отключена или все связанные с ней устройства отключены.
]


System errors:
=============
Error: (06/29/2016 11:44:48 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Сбой при загрузке драйвера(ов) перезагрузки или запуска системы: 
cdrom

Error: (06/29/2016 11:43:54 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Служба Windows Live ID Sign-in Assistant была неожиданно завершена. Это произошло 1 раз(а). Следующее корректирующее действие будет предпринято через 10000 мсек: Перезапуск службы.

Error: (06/29/2016 11:43:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Служба "NVIDIA Streamer Service" неожиданно прервана. Это произошло (раз): 1.

Error: (06/29/2016 11:43:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Служба "NVIDIA Network Service" неожиданно прервана. Это произошло (раз): 1.

Error: (06/29/2016 11:43:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Служба "NVIDIA GeForce Experience Service" неожиданно прервана. Это произошло (раз): 1.

Error: (06/29/2016 11:43:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Служба "Adobe Genuine Software Integrity Service" неожиданно прервана. Это произошло (раз): 1.

Error: (06/29/2016 11:43:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Служба "Unsigned Themes" неожиданно прервана. Это произошло (раз): 1.

Error: (06/29/2016 11:43:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Служба "NVIDIA Display Driver Service" неожиданно прервана. Это произошло (раз): 1.

Error: (06/29/2016 11:17:52 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Сбой при загрузке драйвера(ов) перезагрузки или запуска системы: 
cdrom

Error: (06/29/2016 09:40:48 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Сбой при загрузке драйвера(ов) перезагрузки или запуска системы: 
cdrom


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-2400 CPU @ 3.10GHz
Percentage of memory in use: 29%
Total physical RAM: 8173.43 MB
Available physical RAM: 5737.41 MB
Total Virtual: 8671.64 MB
Available Virtual: 6090.29 MB

==================== Drives ================================

Drive c: (CASSIUS) (Fixed) (Total:51.24 GB) (Free:1.47 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive j: (JARXAN) (Fixed) (Total:1863.01 GB) (Free:15.24 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 51.2 GB) (Disk ID: 13E6764C)
Partition 1: (Active) - (Size=51.2 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 5FAA18CA)
No partition Table on disk 1.

==================== End of Addition.txt ============================