Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-11-2016
Ran by Машута (04-11-2016 20:43:04)
Running from C:\Users\Машута\Desktop
Windows 10 Home Version 1607 (X64) (2016-10-08 09:27:51)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

DefaultAccount (S-1-5-21-2545252190-3862102180-932244733-503 - Limited - Disabled)
Администратор (S-1-5-21-2545252190-3862102180-932244733-500 - Administrator - Disabled)
Гость (S-1-5-21-2545252190-3862102180-932244733-501 - Limited - Disabled)
Машута (S-1-5-21-2545252190-3862102180-932244733-1000 - Administrator - Enabled) => C:\Users\Машута

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: 360 Total Security (Enabled - Up to date) {0371CA44-3F80-A1D3-BECE-910620B58D50}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: 360 Total Security (Enabled - Up to date) {B8102BA0-19BA-AE5D-847E-AA745B32C7ED}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

«Такском-Сертификаты» x64 (HKLM\...\{08DA7E30-1400-11E5-B137-DB561E5D46B0}) (Version: 1.9.27 - ООО Такском)
µTorrent (HKU\S-1-5-21-2545252190-3862102180-932244733-1000\...\uTorrent) (Version: 1.8.2 - )
1C Предприятие 7.7 (HKLM-x32\...\1C Предприятие 7.7.27) (Version: 77.27 - )
360 Total Security (HKLM-x32\...\360TotalSecurity) (Version: 8.8.0.1080 - 360 Security Center)
ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
Adobe Acrobat Reader DC - Russian (HKLM-x32\...\{AC76BA86-7AD7-1049-7B44-AC0F074E4100}) (Version: 15.016.20041 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\{9ECF7817-DB11-4FBA-9DF1-296A578D513A}) (Version: 11.5.7.609 - Adobe Systems, Inc)
AIMP (HKLM-x32\...\AIMP) (Version: v4.02.1725, 17.06.2016 - AIMP DevTeam)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
BIFIT Signer (HKLM-x32\...\BIFIT Signer) (Version: 2.1.0.2 - BIFIT)
Bing Bar Platform (x32 Version: 5.0.1438.0 - Microsoft Corporation) Hidden
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.350.6 - Broadcom Corporation)
Catalyst Control Center Next Localization BR (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
ccc-core-static (x32 Version: 2010.0621.2137.36973 - Название организации) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.16 - Piriform)
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
eToken PKI Client 5.1 SP1 (HKLM\...\{BC5C2BEB-87AF-4636-9184-CA10C3C740B8}) (Version: 5.1.66.0 - Aladdin Knowledge Systems Ltd.)
FastStone Capture 8.4 (HKLM-x32\...\FastStone Capture) (Version: 8.4 - FastStone Soft)
FileZilla Client 3.18.0 (HKU\S-1-5-21-2545252190-3862102180-932244733-1000\...\FileZilla Client) (Version: 3.18.0 - Tim Kosse)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
HP Quick Launch (HKLM-x32\...\{E342D296-DB9D-4FC7-ACB0-39926C0BFA16}) (Version: 2.1.5 - Hewlett-Packard Company)
HP Software Framework (HKLM-x32\...\{17BA469D-240E-4C2B-B441-813317FC3CB4}) (Version: 3.5.23.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{78E2C850-ADA6-420D-BA35-2F4A9BE733CC}) (Version: 8.2.8.25 - HP)
HP Support Solutions Framework (HKLM-x32\...\{CD8ABEF0-BE6C-4C33-A438-C42917446D09}) (Version: 12.5.32.37 - HP)
HPAsset component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Driver Update Utility 2.4 (x32 Version: 2.4.0.15 - Intel) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Product Improvement Program (x32 Version: 2.1.27.3 - Intel) Hidden
Intel® Driver Update Utility (HKLM-x32\...\{1b09c4de-9cae-4122-b17c-65d395062b50}) (Version: 2.4.0.15 - Intel)
Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Junk Mail filter update (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Light Alloy 4.8.8 (build 2038) (HKLM-x32\...\Light Alloy) (Version: 4.8.8 (build 2038) - )
Light Image Resizer 4.7.6.1 (HKLM-x32\...\{EBE030DD-D404-4D92-85E9-8C3624820808}_is1) (Version: 4.7.6.1 - ObviousIdea)
LightScribe System Software (HKLM-x32\...\{46BA053F-57B3-4153-BDB6-D37EEC8B12D7}) (Version: 1.18.15.1 - LightScribe)
Malwarebytes Anti-Malware, версия 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft Office стандартный 2016 (HKLM\...\Office16.STANDARD) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.1.10329.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 49.0.2 (x86 ru) (HKLM-x32\...\Mozilla Firefox 49.0.2 (x86 ru)) (Version: 49.0.2 - Mozilla)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
paint.net (HKLM\...\{DADC2AF6-DC9F-4BCF-BFCE-DCEC16EF507C}) (Version: 4.0.9 - dotPDN LLC)
Photo Stamp Remover 8.1 (HKLM-x32\...\Photo Stamp Remover_is1) (Version: 8.1 - SoftOrbits)
Punto Switcher 4.2.6 (HKLM-x32\...\{0F768FC7-B895-4765-8AE5-52DEA4C3EBDB}) (Version: 4.2.6.1275 - Яндекс)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.25.824.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6066 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30105 - Realtek Semiconductor Corp.)
Recovery Manager (x32 Version: 5.5.3023 - CyberLink Corp.) Hidden
RtVOsd (HKLM\...\{F3D7AC17-1FF4-41A8-BB18-3FC39C65AEB9}) (Version: 1.0.3 - Realtek Semiconductor Corp.)
Sid Meiers Civilization - Beyond Earth (HKLM-x32\...\Sid Meiers Civilization - Beyond Earth_R.G. Mechanics_is1) (Version:  - R.G. Mechanics, markfiter)
Skype™ 7.22 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.22.109 - Skype Technologies S.A.)
Switch Virtual Router 3.4.1 (HKLM-x32\...\Switch_0) (Version: 3.4.1 - Khlamkin Nikolai)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.12.98 - Synaptics Incorporated)
Tester 2.87 (HKLM-x32\...\Tester_is1) (Version: 2.87 - ФГУП ГНИВЦ ФНС России)
VKMusic 4 (HKLM-x32\...\VKMusic 4_is1) (Version: 4.65 - )
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{08BB86A3-BD8B-491F-9751-CDA93D8E0B59}) (Version: 14.0.8117.416 - Microsoft Corporation)
WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Xerox Phaser 3140 and 3155 (HKLM-x32\...\Xerox Phaser 3140 and 3155) (Version:  - )
Засоби перевірки правопису Microsoft Office 2016 – українська (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Киностудия Windows Live (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Кнопка "Яндекс" на панели задач (HKU\S-1-5-21-2545252190-3862102180-932244733-1000\...\YaPinLancher) (Version: 2.0.1.2130 - Яндекс)
КриптоПро CSP (HKLM\...\{407E5BA7-6406-40BF-A4DC-3654B8F584C1}) (Version: 4.0.9708 - Компания КРИПТО-ПРО)
Налогоплательщик ЮЛ (HKLM-x32\...\{B38421DC-9AFE-4F63-A8D7-8B834069CA48}) (Version: 4.47 - ФГУП ГНИВЦ ФНС России)
Настройка рабочего места "Такском" (HKLM-x32\...\{D1D265A8-AC6A-11E4-AED0-1E831D5D46B0}) (Version: 1.1.18 - Taxcom)
Основные компоненты Windows Live (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Основные компоненты Windows Live (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Панель Bing (HKLM-x32\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 5.0.1438.0 - Microsoft Corporation)
Печать НД с PDF417 3.2.4 (пакет) (HKLM-x32\...\{D9D0E5CE-F386-4A74-B974-BF29485856C1}) (Version: 3.2.4 - ФГУП ГНИВЦ ФНС РФ в ПФО)
Почта Windows Live (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Программа Spu_orb (remove only) (HKLM-x32\...\Программа Spu_orb) (Version:  - )
Расширение для мастера выпуска сертификатов x86 (HKLM-x32\...\{9B3520BA-20E2-11E6-87F4-91C28DEB78C8}) (Version: 1.9.6 - Taxcom)
Средства проверки правописания Microsoft Office 2016 — русский (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Средство передачи Windows Live (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Фотоальбом Windows Live (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Чистилка (HKLM-x32\...\Чистилка) (Version: 2.16.451 - Чистилка)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2545252190-3862102180-932244733-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InprocServer32 -> C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2545252190-3862102180-932244733-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Машута\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\FileCoAuth.exe (Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0026A2BC-ADD0-4A4E-B9C2-96D7B636EB8D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-03-11] (Piriform Ltd)
Task: {0C3AC15D-598F-402E-BB25-508FE3458EC2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-03] (Google Inc.)
Task: {16DEA092-FB0C-40D0-AE20-0536BECC21D9} - \Microsoft\Windows\EDP\EDP App Launch Task -> No File <==== ATTENTION
Task: {1A1481F7-DE88-46A5-BA22-D790CE6A5FE8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-05-09] (Hewlett-Packard)
Task: {1B65DD58-D16B-45E8-BEB4-94D7E4D64DF7} - \Microsoft\Windows\EDP\EDP Auth Task -> No File <==== ATTENTION
Task: {1E536560-D787-47C2-8613-1B915B922DF0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-08-03] (HP Inc.)
Task: {2E0FC71C-465B-4733-A9D7-34D346FB20C7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {3086B2D8-1B47-46A1-90EE-C4E680A8D7BE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-02-18] (Hewlett-Packard Company)
Task: {31DFD9A1-5A19-4EE9-84F5-02AE640F6A57} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {32A7701B-783C-4D1F-9BD4-510E1C0CFEBD} - \Microsoft\Windows\MobilePC\HotStart -> No File <==== ATTENTION
Task: {350B8B5C-C370-4B8F-AE24-7439DA5D8294} - System32\Tasks\HPCeeScheduleForМашута => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-01-22] (Hewlett-Packard)
Task: {3CB3747B-F18B-45F7-9959-91D241E8B4FD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {5CCDD9B0-BF71-46A4-97A7-E9A7A45F323D} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
Task: {60F8B525-DCDB-4798-BBAE-0CC8D064620A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-03] (Google Inc.)
Task: {67D280B9-85FE-46C6-94CA-F14DED77089A} - System32\Tasks\USER_ESRV_SVC_WILLAMETTE => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\task.vbs"
Task: {7B7FB8A3-12BF-4C48-860C-814C0991C37D} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-03-02] (Hewlett-Packard)
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - \Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor -> No File <==== ATTENTION
Task: {B494427F-260B-4BF9-A1E1-3118E02F6F62} - System32\Tasks\Hewlett-Packard\HP Support Assistant\First Boot => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe [2016-02-18] (Hewlett-Packard Company)
Task: {C8B40EED-5788-49CD-881C-DA27F6694629} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-08-03] (HP Inc.)
Task: {CE4B5DF8-8DA3-4453-A679-77237ADE1847} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-03-02] (Hewlett-Packard)
Task: {E7A401B4-9F4B-4455-913B-75F26796982D} - System32\Tasks\Intel\Intel Telemetry 2 (x86) => C:\Program Files (x86)\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation)
Task: {FEF64F5A-3A45-4B19-9EA3-0AE7D1DAAF1E} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-03-21] (Advanced Micro Devices, Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForМашута.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\Машута\Desktop\Downloads — ярлык.lnk -> C:\Users\Машута\Documents\Downloads () <===== Cyrillic
Shortcut: C:\Users\Машута\Desktop\Терабайт.lnk -> G:\ () <===== Cyrillic
Shortcut: C:\Users\Машута\Desktop\царькедр.lnk -> C:\Users\Машута\OneDrive\Documents\царькедр () <===== Cyrillic
Shortcut: C:\Users\Машута\Desktop\Этот компьютер - Ярлык.lnk -> L ᐁ  À  䘀                         借俠⃐㫪ၩ�〫鴰 Ő 	ꀀ~ 匱卐뜥䟯ယ怂麌곫1 
 ἀ ༀ ⴀ䈄㸄䈄 㨀㸄㰄㼄䰄丄䈄㔄䀄 ㄀ Ѐ    Системная папка    匱卐檦⡣锽ᇒ횵쀀�퀘e  ἀ ⤀ 㨀㨀笀㈀　䐀　㐀䘀䔀　ⴀ㌀䄀䔀䄀ⴀ㄀　㘀㤀ⴀ䄀㈀䐀㠀ⴀ　㠀　　㈀䈀㌀　㌀　㤀䐀紀    䔀 ㄀偓龅鱗桏꬐࢑⬀댧⧙ Ԁ  ဟ  
 Компьютер        <===== Cyrillic
Shortcut: C:\Users\Машута\Desktop\бухгалтерия\Налогоплательщик ЮЛ.lnk -> C:\np_ul\INPUTDOC\inputdoc.exe (ФГУП ГНИВЦ ФНС России) <===== Cyrillic
Shortcut: C:\Users\Машута\Desktop\бухгалтерия\Программа Spu_orb.lnk -> C:\Spu_orb\Spu_orb.exe (ОПФР по Оренбургской области) <===== Cyrillic
Shortcut: C:\Users\Машута\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Корзина.lnk ->   <===== Cyrillic
Shortcut: C:\Users\Машута\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spu_orb\История изменений.lnk -> C:\Spu_orb\Version.rtf () <===== Cyrillic
Shortcut: C:\Users\Машута\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spu_orb\Программа Spu_orb.lnk -> C:\Spu_orb\Spu_orb.exe (ОПФР по Оренбургской области) <===== Cyrillic
Shortcut: C:\Users\Машута\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spu_orb\Руководство пользователя.lnk -> C:\Spu_orb\Help.chm () <===== Cyrillic
Shortcut: C:\Users\Машута\AppData\Roaming\Microsoft\Windows\SendTo\Передача файлов через Bluetooth.LNK -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation) <===== Cyrillic
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive для бизнеса.lnk -> C:\Windows\Installer\{90160000-0012-0000-1000-0000000FF1CE}\grv_icons.exe () <===== Cyrillic

ShortcutWithArgument: C:\Users\Машута\Desktop\бухгалтерия\1С Предприятие.lnk -> C:\Program Files (x86)\1Cv77\BIN\1cv7s.exe (1C) -> enterprise <===== Cyrillic
ShortcutWithArgument: C:\Users\Машута\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Налогоплательщик ЮЛ\Удаление программы.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /x {B38421DC-9AFE-4F63-A8D7-8B834069CA48} <===== Cyrillic
ShortcutWithArgument: C:\Users\Машута\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spu_orb\Удалить Spu_orb.lnk -> C:\Spu_orb\Uninstall.exe (ОПФР по Оренбургской области) -> win-uninstall.ico <===== Cyrillic
ShortcutWithArgument: C:\Users\Машута\AppData\Roaming\Microsoft\Windows\SendTo\Получатель факса.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo <===== Cyrillic
ShortcutWithArgument: C:\Users\Машута\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\1С Предприятие.lnk -> C:\Program Files (x86)\1Cv77\BIN\1cv7s.exe (1C) -> enterprise <===== Cyrillic
ShortcutWithArgument: C:\Users\Машута\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Антон - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"

==================== Loaded Modules (Whitelisted) ==============

2016-07-28 12:28 - 2012-11-05 19:34 - 00034304 _____ () C:\WINDOWS\System32\sxp3ml6.dll
2016-11-03 20:22 - 2016-11-03 19:39 - 01601264 _____ () C:\ProgramData\Чистилка\Чистилка.exe
2010-07-02 10:51 - 2010-07-02 10:51 - 00027192 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
2016-03-09 20:43 - 2016-03-09 20:43 - 00118424 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
2016-10-08 11:49 - 2016-10-08 11:49 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-10-08 11:49 - 2016-10-08 11:49 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-10-08 12:42 - 2016-10-08 12:42 - 01864384 _____ () C:\Users\Машута\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\amd64\ClientTelemetry.dll
2016-04-21 10:46 - 2016-09-28 09:52 - 00782248 _____ () C:\Program Files (x86)\360\Total Security\MenuEx64.dll
2016-10-08 11:49 - 2016-10-08 11:49 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-10-12 21:11 - 2016-10-05 12:35 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-10-20 10:07 - 2016-10-20 10:07 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-10-20 10:07 - 2016-10-20 10:07 - 00178176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-10-20 10:07 - 2016-10-20 10:07 - 35253760 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2012-11-26 23:54 - 2012-11-26 23:54 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2007-03-27 20:03 - 2007-03-27 20:03 - 08048640 ____R () C:\Aladdin\eToken\PKIClient\x64\QtGui4.dll
2007-03-29 15:11 - 2007-03-29 15:11 - 00317440 ____R () C:\Aladdin\eToken\PKIClient\x64\QtXml4.dll
2007-03-27 20:03 - 2007-03-27 20:03 - 02173952 ____R () C:\Aladdin\eToken\PKIClient\x64\QtCore4.dll
2007-03-27 20:03 - 2007-03-27 20:03 - 00175104 ____R () C:\Aladdin\eToken\PKIClient\x64\plugins\imageformats\qjpeg1.dll
2016-03-11 23:31 - 2016-03-11 23:31 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1049.dll
2016-04-23 22:48 - 2016-03-09 20:43 - 00460952 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe
2016-04-23 22:48 - 2016-03-09 20:43 - 00709272 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_modeler.dll
2016-04-23 22:48 - 2016-03-09 20:43 - 00188568 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\foreground_window_input.dll
2016-04-23 22:48 - 2016-03-09 20:43 - 00416408 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
2016-04-23 22:48 - 2016-03-09 20:43 - 00130712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_process_input.dll
2016-04-23 22:48 - 2016-03-09 20:43 - 00025752 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_system_power_state_input.dll
2016-04-23 22:48 - 2016-03-09 20:43 - 00059544 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_quality_and_reliability_input.dll
2016-04-23 22:48 - 2016-03-09 20:43 - 00194712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\acpi_battery_input.dll
2016-04-23 22:48 - 2016-03-09 20:43 - 00159896 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\sema_thermal_input.dll
2016-04-23 22:48 - 2016-03-09 20:43 - 00158360 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\wifi_input.dll
2016-04-23 22:48 - 2016-03-09 20:43 - 00050840 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\devices_use_input.dll
2016-04-23 22:48 - 2016-03-09 20:43 - 00032920 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_disktrace_input.dll
2016-08-25 19:00 - 2016-08-25 19:00 - 03763712 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1608.2213.0_x64__8wekyb3d8bbwe\Calculator.exe
2016-11-03 13:51 - 2016-10-31 10:11 - 02367080 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.87\libglesv2.dll
2016-11-03 13:51 - 2016-10-31 10:11 - 00107112 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.87\libegl.dll
2016-07-16 14:42 - 2016-07-16 14:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-10-28 18:33 - 2016-10-15 06:41 - 09760256 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-10-28 18:34 - 2016-10-15 06:34 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-10-28 18:34 - 2016-10-15 06:34 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-10-28 18:34 - 2016-10-15 06:34 - 02424832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-10-28 18:34 - 2016-10-15 06:38 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-04-21 10:46 - 2016-09-28 09:52 - 00099240 _____ () C:\Program Files (x86)\360\Total Security\deepscan\qutmload.dll
2016-04-21 10:46 - 2016-09-28 09:52 - 00584616 _____ () C:\Program Files (x86)\360\Total Security\safemon\wdui2.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:41ADDB8A [131]
AlternateDataStreams: C:\ProgramData\Temp:A064CECC [250]
AlternateDataStreams: C:\Users\Все пользователи\Temp:41ADDB8A [131]
AlternateDataStreams: C:\Users\Все пользователи\Temp:A064CECC [250]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-2545252190-3862102180-932244733-1000\...\taxcom.ru -> hxxps://taxcom.ru

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 05:34 - 2016-11-04 14:49 - 00000029 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2545252190-3862102180-932244733-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Машута\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img0.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKU\S-1-5-21-2545252190-3862102180-932244733-1000\...\StartupApproved\StartupFolder: => "Punto Switcher.lnk"
HKU\S-1-5-21-2545252190-3862102180-932244733-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2545252190-3862102180-932244733-1000\...\StartupApproved\Run: => "Skype"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{03782DA8-66DB-4586-B462-4C463A569BCF}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{A43B05ED-6D88-4798-8229-B3B01B5AFA13}] => (Allow) C:\Program Files (x86)\Baidu WiFiHotspot\WifiHotspot.exe
FirewallRules: [{830EC93C-C7B1-4CDC-BCC4-44D2CC141073}] => (Allow) C:\Program Files (x86)\Baidu WiFiHotspot\WifiHotspot.exe
FirewallRules: [{F170822D-02D9-4F93-9BCB-141A5B61FFC7}] => (Allow) C:\Program Files (x86)\360\Total Security\softmgr\360InstantSetup.exe
FirewallRules: [{6360D398-D9BA-40B1-9535-F77DF2D64918}] => (Allow) C:\Program Files (x86)\360\Total Security\softmgr\360InstantSetup.exe
FirewallRules: [{F88A024F-7252-4173-9205-DEFCDD76409A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{99213267-988B-4BD9-8E30-8ED60107AF30}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C5152B08-3DF2-4838-A117-449BA0B3E9C2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{FC748EC1-692F-4285-8A9D-D27B3659B62E}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [{9820FBCD-FDD1-4684-8740-80B85E05114C}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [{005AAE88-71BC-449A-A4BE-EEA204C1CA00}] => (Allow) C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe
FirewallRules: [{E16D84DD-4B98-408C-9653-908E4101F646}] => (Allow) C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe
FirewallRules: [{B6ED6A2F-4EBF-4445-81E1-9A37CC14810D}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{E9D7BB16-8B29-45CB-9353-79116257BBB4}] => (Allow) svchost.exe
FirewallRules: [{4272AB7C-2A56-4BC9-AEED-2B5817ABF7E5}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{42EDFB77-DD7B-4083-B215-9C0D160CAF8E}] => (Allow) C:\Baidu WiFiHotspot\WifiHotspot.exe
FirewallRules: [{8BC18345-1030-47BC-B293-5420C914AAB9}] => (Allow) C:\Baidu WiFiHotspot\WifiHotspot.exe
FirewallRules: [{205E2F52-A0B3-468B-B27F-DA553BA2936D}] => (Allow) LPort=1688
FirewallRules: [{10B5DC18-056E-4A3C-809E-7D2BF4A08584}] => (Allow) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
FirewallRules: [{4A0F6959-989C-461C-A7C0-D553FBBCE275}] => (Allow) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
FirewallRules: [{FDDCF36F-2F5A-4592-85FA-989FB1FDB502}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{21F1B4AF-9DA8-4F00-8A74-3C24373E2982}] => (Allow) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
FirewallRules: [{A2A67100-F746-4B38-9408-52BEE3AB74B3}] => (Allow) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe

==================== Restore Points =========================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/04/2016 08:37:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: SearchUI.exe, версия: 10.0.14393.351, метка времени: 0x5801a548
Имя сбойного модуля: aticfx64.dll, версия: 8.17.10.1433, метка времени: 0x56d0b1fb
Код исключения: 0xc0000409
Смещение ошибки: 0x00000000000cbba8
Идентификатор сбойного процесса: 0x1b68
Время запуска сбойного приложения: 0x01d236c0ce068456
Путь сбойного приложения: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
Путь сбойного модуля: C:\WINDOWS\SYSTEM32\aticfx64.dll
Идентификатор отчета: 65bc417f-c166-4b87-b65b-5f2433d6c6f7
Полное имя сбойного пакета: Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy
Код приложения, связанного со сбойным пакетом: CortanaUI

Error: (11/04/2016 04:28:46 PM) (Source: cpcsp) (EventID: 306) (User: )
Description: КриптоПро CSP. Срок действия этой версии КриптоПро CSP истёк или ещё не наступил, либо серийный номер лицензии не был введен.

Error: (11/04/2016 04:20:49 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Ошибка создания контекста архивации для "C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.Exe". Ошибка в файле манифеста или политики "C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL" в строке 8.
Идентификатор компонента в файле манифеста не соответствует запрошенному идентификатору компонента.
Ссылка - WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Определение - WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Используйте sxstrace.exe для подробной диагностики.

Error: (11/04/2016 04:16:28 PM) (Source: cpcsp) (EventID: 306) (User: )
Description: КриптоПро CSP. Срок действия этой версии КриптоПро CSP истёк или ещё не наступил, либо серийный номер лицензии не был введен.

Error: (11/04/2016 01:54:55 PM) (Source: cpcsp) (EventID: 306) (User: )
Description: КриптоПро CSP. Срок действия этой версии КриптоПро CSP истёк или ещё не наступил, либо серийный номер лицензии не был введен.

Error: (11/04/2016 11:29:05 AM) (Source: cpcsp) (EventID: 306) (User: )
Description: КриптоПро CSP. Срок действия этой версии КриптоПро CSP истёк или ещё не наступил, либо серийный номер лицензии не был введен.

Error: (11/03/2016 08:39:25 PM) (Source: cpcsp) (EventID: 306) (User: )
Description: КриптоПро CSP. Срок действия этой версии КриптоПро CSP истёк или ещё не наступил, либо серийный номер лицензии не был введен.

Error: (11/03/2016 08:18:27 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: МАШУТА-HP)
Description: Сбой активации приложения Microsoft.Getstarted_4.1.15.0_x64__8wekyb3d8bbwe:App.AppX7mv0s3r0wanj0n66dy6vax24ps6avzvz.mca. Ошибка: -2144927149. Дополнительные сведения см. в журнале Microsoft-Windows-TWinUI/Operational.

Error: (11/03/2016 08:10:26 PM) (Source: cpcsp) (EventID: 306) (User: )
Description: КриптоПро CSP. Срок действия этой версии КриптоПро CSP истёк или ещё не наступил, либо серийный номер лицензии не был введен.

Error: (11/03/2016 04:34:12 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Ошибка создания контекста архивации для "C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.Exe". Ошибка в файле манифеста или политики "C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL" в строке 8.
Идентификатор компонента в файле манифеста не соответствует запрошенному идентификатору компонента.
Ссылка - WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Определение - WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Используйте sxstrace.exe для подробной диагностики.


System errors:
=============
Error: (11/04/2016 04:28:13 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 и APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 пользователю NT AUTHORITY\LOCAL SERVICE с ИД безопасности (S-1-5-19) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.

Error: (11/04/2016 04:28:13 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 и APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 пользователю NT AUTHORITY\LOCAL SERVICE с ИД безопасности (S-1-5-19) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.

Error: (11/04/2016 04:28:12 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Служба "CDPUserSvc_787b8" завершена из-за ошибки 
Неопознанная ошибка

Error: (11/04/2016 04:17:00 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Превышение времени ожидания (30000 мс) при ожидании ответа транзакции от службы "HPWMISVC".

Error: (11/04/2016 04:15:33 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 и APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 пользователю NT AUTHORITY\LOCAL SERVICE с ИД безопасности (S-1-5-19) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.

Error: (11/04/2016 04:15:33 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 и APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 пользователю NT AUTHORITY\LOCAL SERVICE с ИД безопасности (S-1-5-19) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.

Error: (11/04/2016 04:15:32 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Служба "CDPUserSvc_77c06" завершена из-за ошибки 
Неопознанная ошибка

Error: (11/04/2016 04:14:07 PM) (Source: DCOM) (EventID: 10010) (User: МАШУТА-HP)
Description: Регистрация сервера {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} DCOM не выполнена за отведенное время ожидания.

Error: (11/04/2016 04:14:07 PM) (Source: DCOM) (EventID: 10010) (User: МАШУТА-HP)
Description: Регистрация сервера {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} DCOM не выполнена за отведенное время ожидания.

Error: (11/04/2016 04:14:07 PM) (Source: DCOM) (EventID: 10010) (User: МАШУТА-HP)
Description: Регистрация сервера {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} DCOM не выполнена за отведенное время ожидания.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i3 CPU M 350 @ 2.27GHz
Percentage of memory in use: 86%
Total physical RAM: 2933.86 MB
Available physical RAM: 406.52 MB
Total Virtual: 4853.86 MB
Available Virtual: 1372.47 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:216.74 GB) (Free:153.15 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (RECOVERY) (Fixed) (Total:15.85 GB) (Free:2.27 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive g: (Seagate Expansion Drive) (Fixed) (Total:931.51 GB) (Free:741.42 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 232.9 GB) (Disk ID: DA01512C)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=216.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15.8 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 0BF6956D)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================