Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-12-2016
Ran by admin (08-12-2016 01:58:06)
Running from C:\Users\admin\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2014-11-29 12:32:13)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

admin (S-1-5-21-2341918622-582166901-1024641541-1000 - Administrator - Enabled) => C:\Users\admin
Kat (S-1-5-21-2341918622-582166901-1024641541-1003 - Limited - Enabled)
Администратор (S-1-5-21-2341918622-582166901-1024641541-500 - Administrator - Disabled)
Гость (S-1-5-21-2341918622-582166901-1024641541-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2341918622-582166901-1024641541-1000\...\uTorrent) (Version: 3.4.7.42330 - BitTorrent Inc.)
Acronis Disk Director Suite (HKLM-x32\...\{2300EE96-0A41-4FAB-BD03-989EC44577A0}) (Version: 10.0.2161 - Acronis)
Adobe Acrobat Reader DC - Russian (HKLM-x32\...\{AC76BA86-7AD7-1049-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Advanced Archive Password Recovery (HKU\S-1-5-21-2341918622-582166901-1024641541-1000\...\Advanced Archive Password Recovery) (Version: 4.50 - ООО Элкомсофт)
AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 2.01.01 - ASUSTeK Computer Inc.)
AMD Catalyst Install Manager (HKLM\...\{5DDB9EF7-1BC0-C9C1-9829-6B9CF68AC357}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.12.0 - Asmedia Technology)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.18 - Piriform)
CL-Eye Driver (HKLM-x32\...\CL-Eye Driver) (Version: 5.3.0.0341 - Code Laboratories, Inc.)
Cronosplus 3.04.24 (full) (HKLM-x32\...\Cronosplus 3.04.24 (full)) (Version:  - )
DjVuLibre DjView  3.5.25.4+4.9.2 (HKLM-x32\...\DjVuLibre+DjView) (Version: 3.5.25.4+4.9.2 - DjVuZone)
Dropbox (HKU\S-1-5-21-2341918622-582166901-1024641541-1000\...\Dropbox) (Version: 15.4.22 - Dropbox, Inc.)
Empire Earth IV v9.02 eng (HKLM-x32\...\Empire Earth IV v9.02 eng) (Version: 9.02 - RGV1)
Entropiy (HKLM-x32\...\Entropiy) (Version: 1.0 - Home)
EPSON Printer Software (HKLM\...\EPSON Printer and Utilities) (Version:  - SEIKO EPSON Corporation)
Far Manager 3 x64 (HKLM\...\{54AAF47E-41D8-4294-B6B8-214D7374ACFD}) (Version: 3.0.4040 - Eugene Roshal & Far Group)
FlashFXP 5 (HKLM-x32\...\FlashFXP 5) (Version: 5.2.0.3912 - OpenSight Software LLC)
FlashGet3.7 (HKLM-x32\...\FlashGet3.7) (Version: 3.7.0.1220 - hxxp://www.FlashGet.com)
GameRanger (HKU\S-1-5-21-2341918622-582166901-1024641541-1000\...\GameRanger) (Version:  - GameRanger Technologies)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
HUAWEI DataCard Driver 5.05.01.00 (HKLM-x32\...\HUAWEI DataCard Driver) (Version: 5.05.01.00 - Huawei Technologies Co., Ltd.)
Huawei level signal (HKLM-x32\...\Huawei level signal) (Version: 1.0 - amd)
IP-Tools (HKLM-x32\...\IP-Tools) (Version:  - )
Java 8 Update 111 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
KeyGen (HKLM-x32\...\KeyGen) (Version:  - )
LanSpy (HKLM-x32\...\LanSpy_is1) (Version:  - LanTricks.com)
Logitech Gaming Software 8.78 (HKLM\...\Logitech Gaming Software) (Version: 8.78.129 - Logitech Inc.)
MagicDisc 2.7.106 (HKLM-x32\...\MagicDisc 2.7.106) (Version:  - )
Malwarebytes Anti-Malware, версия 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.427.2 - McAfee, Inc.)
MediaInfo 0.7.82 (HKLM\...\MediaInfo) (Version: 0.7.82 - MediaArea.net)
MetaTrader 5 WhoTrades (HKLM\...\MetaTrader 5 WhoTrades) (Version: 5.00 - MetaQuotes Software Corp.)
Microsoft .NET Framework 4.6.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01590 - Microsoft Corporation)
Microsoft .NET Framework 4.6.2 (Русский) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1049) (Version: 4.6.01590 - Корпорация Майкрософт)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office профессиональный плюс 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Project профессиональный 2013 (HKLM\...\Office15.PRJPRO) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft Visio профессиональный 2013 (HKLM\...\Office15.VISPRO) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
MiViewCap (HKLM-x32\...\{4E5567D4-9472-44DF-84AC-670293808EB0}) (Version: 3.00.0004 - COSVIEW)
Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.27.00.03 - Huawei Technologies Co.,Ltd)
Mobile Partner (HKLM-x32\...\Mobile Partner) (Version: 23.009.09.01.983 - Huawei Technologies Co.,Ltd)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Neoguard (HKLM-x32\...\Neoguard_is1) (Version:  - )
Nero BurningROM 2015 (HKLM-x32\...\{81F355C2-9F2F-4402-9767-61054D4F5643}) (Version: 16.0.01300 - Nero AG)
Nero Info (HKLM-x32\...\{B791E0AB-87A9-41A4-8D98-D13C2E37D928}) (Version: 16.0.1003 - Nero AG)
Network Scanner version 4.1.0.203 (HKLM-x32\...\Network Scanner_is1) (Version: 4.1.0.203 - LizardSystems)
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.2.2 - Notepad++ Team)
NVIDIA Графический драйвер 341.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.95 - NVIDIA Corporation)
NVIDIA Драйвер 3D Vision 341.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.95 - NVIDIA Corporation)
NVIDIA Драйвер контроллера 3D Vision 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA Системное программное обеспечение PhysX 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
paint.net (HKLM\...\{A1D05314-DC32-4668-A97E-51060EC8BCCE}) (Version: 4.0.12 - dotPDN LLC)
Prerequisite installer (x32 Version: 16.0.0000 - Nero AG) Hidden
Quik 7.0.0 (HKLM-x32\...\Quik 7.0.0) (Version: 7.0.0 - Finam)
Quik 7.0.4 (HKLM-x32\...\Quik 7.0.4) (Version: 7.0.4 - Finam)
R for Windows 3.2.3 (HKLM\...\R for Windows 3.2.3_is1) (Version: 3.2.3 - R Core Team)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.67.1226.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7525 - Realtek Semiconductor Corp.)
RivaTuner v2.24 (HKLM-x32\...\RivaTuner) (Version: v2.24 - Alexey Nicolaychuk)
RStudio (HKLM-x32\...\RStudio) (Version: 0.99.903 - RStudio)
R-Studio 8.0 (HKLM-x32\...\R-Studio 8.0NSIS) (Version: 8.0.164761 - R-Tools Technology Inc.)
SDFormatter (HKLM-x32\...\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association)
SeaTools for Windows (HKLM-x32\...\SeaTools for Windows) (Version:  - Seagate Technology)
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
Smart Suite v3.2.8 (HKLM-x32\...\Smart Suite for Android_is1) (Version:  - TCL Communication Ltd)
Synology Download Redirector (HKLM-x32\...\{B1E9B7ED-8187-433a-9EAE-20DF1A8968B1}) (Version: 1.0.0.0 - Synology Inc.)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
Tftpd64 Standalone Edition (remove only) (HKLM-x32\...\Tftpd64) (Version:  - )
TSLab 1.2 (HKLM-x32\...\{526557B7-A802-450A-A8C7-E1A9C0539840}) (Version: 1.2.19.0 - TSLab)
TSLab 2.0 (HKLM-x32\...\{C7BE1BA1-021A-40E3-ACBC-1AE58FA9240B}) (Version: 2.0.13.0 - TSLab)
UFS Explorer Professional Recovery, version 5.20.2 (HKLM\...\UFS Explorer Professional Recovery (version 5, 64 bit)_is1) (Version: 5.20.2 - LLC "SysDev Laboratories")
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0419-1000-0000000FF1CE}_Office15.PROPLUS_{048AEE4A-C0AD-40F3-8C5C-21ED77F215A4}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3127934) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{670823C5-9E0F-444C-A115-E8C4F37C5707}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3127934) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PRJPRO_{670823C5-9E0F-444C-A115-E8C4F37C5707}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3127934) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{670823C5-9E0F-444C-A115-E8C4F37C5707}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3127934) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.VISPRO_{670823C5-9E0F-444C-A115-E8C4F37C5707}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3127934) 64-Bit Edition (HKLM\...\{90150000-012B-0419-1000-0000000FF1CE}_Office15.PROPLUS_{670823C5-9E0F-444C-A115-E8C4F37C5707}) (Version:  - Microsoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Wealth-Lab Developer 6.4 (64-bit) (HKLM\...\{42A47D98-F8F9-4D5A-A6C1-4946D2C15878}) (Version: 6.4.52 - MS123)
WIDCOMM Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.5800 - Broadcom Corporation)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16422 - Microsoft Corporation)
WinISO (HKLM-x32\...\WinISO) (Version: 6.4.0.5170 - WinISO Computing Inc.)
WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Youtube Downloader HD v. 2.9.9.26 (HKLM-x32\...\Youtube Downloader HD_is1) (Version:  - YoutubeDownloaderHD.com)
Библиотеки AraXGroup (HKLM-x32\...\Библиотеки AraXGroup_is1) (Version:  - )
Драйверы веб-камеры Logitech (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.0 - Logitech Inc.)
Засоби перевірки правопису Microsoft Office 2013 – українська мова (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Клиент Just2Trade (HKLM-x32\...\{B2E71842-A99F-4918-ACC5-A7694DA0B7CB}) (Version: 5.12.350.21 - Just2Trade)
Обновления NVIDIA 2.11.4.0 (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Панель управления NVIDIA 341.95 (Version: 341.95 - NVIDIA Corporation) Hidden
Средства проверки правописания Microsoft Office 2013 — русский (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Языковой пакет Microsoft Visual Studio 2010 Tools для среды выполнения Office (x64) - RUS (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - RUS) (Version: 10.0.50903 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{08AF38A8-587C-4C3B-AECF-8DB921522F78}\InprocServer32 -> C:\Program Files (x86)\TSLab 2.0\NiApi64.dll (IFH-InfoCentre.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{1F0F75C8-F485-491A-BC00-0DE48D52AF26}\InprocServer32 -> C:\Program Files (x86)\TSLab 2.0\NiApi64.dll (IFH-InfoCentre.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{626D757F-009E-483B-AFDF-28D6793DB03E}\InprocServer32 -> C:\Program Files (x86)\TSLab 2.0\NiApi64.dll (IFH-InfoCentre.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{727BB9ED-54D2-40A7-A6B1-A94ED206FC41}\InprocServer32 -> C:\Program Files (x86)\TSLab 2.0\NiApi64.dll (IFH-InfoCentre.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{919CE250-70B0-40E4-8D5D-E0E5D253FE7F}\InprocServer32 -> C:\Program Files (x86)\TSLab 2.0\NiApi64.dll (IFH-InfoCentre.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{9EC6427B-3A80-4BB8-97C9-1B58E2AA0610}\InprocServer32 -> C:\Program Files (x86)\TSLab 2.0\NiApi64.dll (IFH-InfoCentre.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{B01E956E-EC4D-470A-B717-B1FE6F892921}\InprocServer32 -> C:\Program Files (x86)\TSLab 2.0\NiApi64.dll (IFH-InfoCentre.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{C87F177C-8808-46CA-AF1A-DD3F6AB5C329}\InprocServer32 -> C:\Program Files (x86)\TSLab 2.0\NiApi64.dll (IFH-InfoCentre.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{FA1F745D-EAFC-43D3-892E-54318F29F376}\InprocServer32 -> C:\Program Files (x86)\TSLab 2.0\NiApi64.dll (IFH-InfoCentre.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2341918622-582166901-1024641541-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0C418A3B-BF86-4F03-ADFE-1A767BE13A40} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2341918622-582166901-1024641541-1000UA => C:\Users\admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-06] (Dropbox, Inc.)
Task: {13CF01A2-706A-4806-908A-FA7AA7A4D0AA} - System32\Tasks\{1135DACC-834E-4DFC-A73E-36B2734027BD} => D:\LARIX51\larix.exe [2010-04-12] (МЦЭБ)
Task: {18619668-156B-4127-887A-18CC6DBC4134} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {1E071446-2350-4163-AC42-BC29B74B67C3} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask -> No File <==== ATTENTION
Task: {21122567-17C1-434D-B391-B0481469BE35} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2341918622-582166901-1024641541-1000
Task: {225431E6-6DD4-4349-BF19-9AA9E9C26096} - System32\Tasks\{80DC47BD-FAE1-4F75-8F6B-B0F244AA4F07} => pcalua.exe -a "E:\Games\S.T.A.L.K.E.R. - Shadow of Chernobyl\setup-bp.exe" -d "E:\Games\S.T.A.L.K.E.R. - Shadow of Chernobyl"
Task: {2750EADD-CD3E-4A52-B79E-6D540B3D3C29} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-09] (Adobe Systems Incorporated)
Task: {35C6BAF4-6119-42E6-A6A9-F9AEA3829726} - System32\Tasks\{C6916F46-A895-4356-92C6-A0E25600A580} => D:\LARIX51\larix.exe [2010-04-12] (МЦЭБ)
Task: {3B9E2A9B-0868-455E-A417-19AAC80FB63F} - System32\Tasks\{66AF59A6-42B3-4458-8E2D-6BE9B14720E2} => D:\LARIX51\larix.exe [2010-04-12] (МЦЭБ)
Task: {473B46AD-CEB2-459E-8CC8-50FF8BEAA4A8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {555CDF26-41E5-4294-95F7-24FC6514D20B} - System32\Tasks\{DC4ED349-0280-4442-9D9A-3EE896BFEA71} => pcalua.exe -a "C:\Users\admin\Downloads\dxwebsetup (1).exe" -d C:\Users\admin\Downloads
Task: {59B54B4A-76F5-4D63-A3FF-C46EFC5FD50A} - System32\Tasks\{0504640F-F8D3-4716-ABB4-16C369257EBB} => pcalua.exe -a E:\Drivers\AMD\C&amp;Q\setup.exe -d E:\Drivers\AMD\C&amp;Q
Task: {5B5C1934-9E72-4D52-BADF-1E611FF31898} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {6C99648D-3149-45C7-B774-09CF5CA5BA24} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {79D02C9A-1E1E-4AEC-931E-FE192EEE36F6} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2014-07-21] (Nero AG)
Task: {8159B1A5-6786-49AF-95F5-E23A27533924} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {826D411C-E3B6-43F8-9632-40977FC5618D} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2012-03-13] (ASUSTeK Computer Inc.)
Task: {88CDE4BF-C06B-42A9-87DF-C29886E917DE} - System32\Tasks\{A43044A1-98CC-463D-99CF-493F0E224D07} => D:\LARIX51\larix.exe [2010-04-12] (МЦЭБ)
Task: {95643B62-6B22-4B52-BA4A-51CB0DC7D355} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2341918622-582166901-1024641541-1000Core => C:\Users\admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-06] (Dropbox, Inc.)
Task: {9A6A7099-A5B8-41BD-9E2F-BDF17EEF3F91} - System32\Tasks\{840276E2-40F5-4478-97A7-305A846AB75D} => pcalua.exe -a C:\Users\admin\Downloads\usb-rs232_pl-2303-win7-8(32-64bit)\CH341SER\SETUP.EXE -d C:\Users\admin\Downloads\usb-rs232_pl-2303-win7-8(32-64bit)\CH341SER
Task: {9AF0230A-8147-48C8-9E04-FF5C322BD730} - System32\Tasks\{4D2BCB88-279F-45A5-9292-55E9B710DA25} => pcalua.exe -a C:\Users\admin\AppData\Local\Temp\Temp1_spr390_prtdrv_x64_6.52_en_ru_uk.zip\SPR390_PRTDRV_x64_6.52_EN_RU_UK.exe <==== ATTENTION
Task: {9EA55020-BE9F-4582-B311-07E89294536F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-01] (Piriform Ltd)
Task: {A447FECA-48C8-49BE-888C-15566AED19F8} - System32\Tasks\InternetBF => Chrome.exe hxxp://inform-world.ru/watch
Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - System32\Tasks\Microsoft\Windows\Application Experience\AitAgent => C:\Windows\system32\aitagent.exe [2010-11-21] (Корпорация Майкрософт (Microsoft Corp.))
Task: {B699B1FE-A5DE-426A-B73C-8C5E04B6F0BC} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe [2014-11-17] (MSfree Inc.)
Task: {C7F8546E-77F3-433B-8880-95A32B4B3FFC} - System32\Tasks\{5DE0991F-29D2-4482-A76B-9214AE607007} => pcalua.exe -a C:\Users\admin\Downloads\GameRangerSetup.exe -d C:\Users\admin\Downloads
Task: {C95C8712-F153-4220-BFDB-017742DA8ABD} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline -> No File <==== ATTENTION
Task: {DB7FE5E6-DE36-4282-96DF-E4C7B2B584B6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {EE1C48C1-C434-48A8-8897-358084889E09} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {FECACD11-6B9F-4A1E-8EB4-EABCF45CB7C3} - System32\Tasks\{23304546-090B-439F-93B6-FC16AF3A3F8C} => pcalua.exe -a C:\Users\admin\Desktop\EasySetupAssistant\wr841n\EasySetupAssistant.exe -d C:\Users\admin\Desktop\EasySetupAssistant\wr841n

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2341918622-582166901-1024641541-1000Core.job => C:\Users\admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2341918622-582166901-1024641541-1000UA.job => C:\Users\admin\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\admin\Documents\R-TT\Презентации\Презентация КМУП БИН\BP v.3.0\1. Допроектная работа.vsd - Ярлык.lnk -> D:\Work\Презентации\БИН\BP v.3.0\1. Допроектная работа.vsd (No File) <===== Cyrillic
Shortcut: C:\Users\admin\Documents\R-TT\Презентации\Презентация КМУП БИН\BP v.3.0\2. Инициация проекта.vsd - Ярлык.lnk -> D:\Work\Презентации\БИН\BP v.3.0\2. Инициация проекта.vsd (No File) <===== Cyrillic
Shortcut: C:\Users\admin\Documents\R-TT\Презентации\Презентация КМУП БИН\BP v.3.0\2.1. Инициация проекта.Создание актуализация концепции проекта разработка ТЭО.vsd - Ярлык.lnk -> D:\Work\Презентации\БИН\BP v.3.0\2.1. Инициация проекта.Создание актуализация концепции проекта разработка ТЭО.vsd (No File) <===== Cyrillic
Shortcut: C:\Users\admin\Documents\R-TT\Презентации\Презентация КМУП БИН\BP v.3.0\2.1.1. Инициация проекта.Создание актуализация концепции проекта разработка ТЭО. Разработка ТЭО проекта.vsd - Ярлык.lnk -> D:\Work\Презентации\БИН\BP v.3.0\2.1.1. Инициация проекта.Создание актуализация концепции проекта разработка ТЭО. Разработка ТЭО проекта.vsd (No File) <===== Cyrillic
Shortcut: C:\Users\admin\Documents\R-TT\Презентации\Презентация КМУП БИН\BP v.3.0\2.2. Инициация проекта.Презентация и согласование концепции.vsd - Ярлык.lnk -> D:\Work\Презентации\БИН\BP v.3.0\2.2. Инициация проекта.Презентация и согласование концепции.vsd (No File) <===== Cyrillic
Shortcut: C:\Users\admin\Documents\R-TT\Презентации\Презентация КМУП БИН\BP v.3.0\3. Планирование проекта.vsd - Ярлык.lnk -> D:\Work\Презентации\БИН\BP v.3.0\3. Планирование проекта.vsd (No File) <===== Cyrillic
Shortcut: C:\Users\admin\Documents\R-TT\Презентации\Презентация КМУП БИН\BP v.3.0\3.1. Планирование проекта.Создание плана исполнения проекта.vsd - Ярлык.lnk -> D:\Work\Презентации\БИН\BP v.3.0\3.1. Планирование проекта.Создание плана исполнения проекта.vsd (No File) <===== Cyrillic
Shortcut: C:\Users\admin\Documents\R-TT\Презентации\Презентация КМУП БИН\BP v.3.0\3.1.1 Планирование проекта.Создание плана исполнения проекта.Привлечение подрядчиков.vsd - Ярлык.lnk -> D:\Work\Презентации\БИН\BP v.3.0\3.1.1 Планирование проекта.Создание плана исполнения проекта.Привлечение подрядчиков.vsd (No File) <===== Cyrillic
Shortcut: C:\Users\admin\Documents\R-TT\Презентации\Презентация КМУП БИН\BP v.3.0\4. Исполнение и контроль проекта.vsd - Ярлык.lnk -> D:\Work\Презентации\БИН\BP v.3.0\4. Исполнение и контроль проекта.vsd (No File) <===== Cyrillic
Shortcut: C:\Users\admin\Documents\R-TT\Презентации\Презентация КМУП БИН\BP v.3.0\4.1. Исполнение и контроль проекта.Исполнение и отчетность по задачам проекта.vsd - Ярлык.lnk -> D:\Work\Презентации\БИН\BP v.3.0\4.1. Исполнение и контроль проекта.Исполнение и отчетность по задачам проекта.vsd (No File) <===== Cyrillic
Shortcut: C:\Users\admin\Documents\R-TT\Презентации\Презентация КМУП БИН\BP v.3.0\5. Управление изменениями проекта.vsd - Ярлык.lnk -> D:\Work\Презентации\БИН\BP v.3.0\5. Управление изменениями проекта.vsd (No File) <===== Cyrillic
Shortcut: C:\Users\admin\Documents\R-TT\Презентации\Презентация КМУП БИН\BP v.3.0\6. Завершение проекта.vsd - Ярлык.lnk -> D:\Work\Презентации\БИН\BP v.3.0\6. Завершение проекта.vsd (No File) <===== Cyrillic
Shortcut: C:\Users\admin\Documents\R-TT\Презентации\Презентация КМУП БИН\BP v.3.0\6.1. Завершение проекта. Приемка проекта и формирование доработок.vsd - Ярлык.lnk -> D:\Work\Презентации\БИН\BP v.3.0\6.1. Завершение проекта. Приемка проекта и формирование доработок.vsd (No File) <===== Cyrillic
Shortcut: C:\Users\admin\Documents\R-TT\Презентации\Презентация КМУП БИН\BP v.3.0\7. Аудит проекта.vsd - Ярлык.lnk -> D:\Work\Презентации\БИН\BP v.3.0\7. Аудит проекта.vsd (No File) <===== Cyrillic
Shortcut: C:\Users\admin\Desktop\Handlers - Ярлык.lnk -> C:\Users\admin\AppData\Local\TSLab\TSLab12\Handlers () <===== Cyrillic
Shortcut: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\R-Studio\R-Studio Справка.lnk -> C:\Program Files (x86)\R-Studio\ru\rstudio.chm () <===== Cyrillic
Shortcut: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\R-Studio\Лицензионное соглашение.lnk -> C:\Program Files (x86)\R-Studio\ru\eula.txt () <===== Cyrillic
Shortcut: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\R-Studio\Удалить R-Studio.lnk -> C:\Program Files (x86)\R-Studio\Uninstall.exe (R-Tools Technology Inc.) <===== Cyrillic
Shortcut: C:\Users\Public\Desktop\Клиент Just2Trade.lnk -> C:\Just2Trade Client\transaq.exe (Screen Market Systems) <===== Cyrillic

ShortcutWithArgument: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\R-Studio\R-Studio Мастер Обновления.lnk -> C:\Program Files (x86)\R-Studio\rupdate.exe (R-TT) -> 0 0 64 <===== Cyrillic

==================== Loaded Modules (Whitelisted) ==============

2014-11-29 23:37 - 2016-01-29 13:49 - 00135224 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-11-19 13:32 - 2016-11-19 13:32 - 00920736 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
2016-12-05 22:03 - 2016-12-05 22:03 - 00243712 _____ () C:\Program Files (x86)\Ghostery Storage Server\ghstore.exe
2016-03-26 18:27 - 2015-09-23 05:06 - 00242264 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe
2016-03-26 16:53 - 2012-11-12 08:59 - 00657504 _____ () C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe
2016-09-03 13:39 - 2016-06-14 23:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-09-03 13:39 - 2016-06-14 23:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-09-03 13:39 - 2016-06-14 23:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-03-17 00:15 - 2016-06-14 23:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-09-03 13:39 - 2016-06-14 23:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-09-03 13:39 - 2016-06-14 23:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-09-03 13:39 - 2016-06-14 23:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-03-17 00:15 - 2016-06-14 23:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-09-03 13:39 - 2016-06-14 23:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-09-03 13:39 - 2016-06-14 23:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2015-03-07 03:07 - 2015-03-07 03:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2016-01-06 22:43 - 2016-01-06 22:43 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 03:07 - 2015-03-07 03:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2016-01-06 22:43 - 2016-01-06 22:43 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2016-06-01 21:16 - 2016-06-01 21:16 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1049.dll
2015-02-08 22:27 - 2015-02-08 22:27 - 04251648 _____ () C:\Program Files (x86)\Synology Download Redirector\Redirector.exe
2016-12-06 22:16 - 2016-12-06 22:16 - 03968464 _____ () C:\Users\admin\Downloads\adwcleaner_6.040.exe
2016-11-19 13:32 - 2016-12-07 19:05 - 00033792 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\PEbiosinterface32.dll
2016-11-19 13:32 - 2012-10-12 11:58 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\ATKEX.dll
2016-03-26 16:53 - 2009-01-10 21:32 - 00011362 _____ () C:\ProgramData\Mobile Partner\OnlineUpdate\mingwm10.dll
2016-03-26 16:53 - 2009-06-23 05:42 - 00043008 _____ () C:\ProgramData\Mobile Partner\OnlineUpdate\libgcc_s_dw2-1.dll
2016-03-26 16:53 - 2012-10-31 12:11 - 02417152 _____ () C:\ProgramData\Mobile Partner\OnlineUpdate\QtCore4.dll
2016-03-26 16:53 - 2012-10-31 12:14 - 01148416 _____ () C:\ProgramData\Mobile Partner\OnlineUpdate\QtNetwork4.dll
2016-03-26 16:53 - 2012-11-12 06:48 - 00843264 _____ () C:\ProgramData\Mobile Partner\OnlineUpdate\QueryStrategy.dll
2016-03-26 16:53 - 2012-10-31 12:11 - 00398336 _____ () C:\ProgramData\Mobile Partner\OnlineUpdate\QtXml4.dll
2015-03-30 21:37 - 2016-06-14 23:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-11-19 13:33 - 2011-07-12 19:14 - 00147456 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AssistFunc.dll
2016-11-19 13:33 - 2010-10-05 08:22 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\pngio.dll
2016-11-19 13:33 - 2012-03-21 12:07 - 00972288 _____ () C:\Program Files (x86)\ASUS\AI Suite II\BarGadget\BarGadget.dll
2016-11-19 13:33 - 2013-05-08 16:22 - 01040896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\EasyUpdt.dll
2016-11-19 13:33 - 2012-05-25 10:33 - 00883712 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\Sensor.dll
2016-11-19 13:33 - 2012-05-28 21:27 - 01622528 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor Graph\SensorGraph.dll
2016-11-19 13:33 - 2011-09-19 20:18 - 01243136 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Settings\Settings.dll
2016-11-19 13:33 - 2011-07-21 09:06 - 00846848 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Splitter\Splitter.dll
2016-11-19 13:33 - 2011-10-14 20:03 - 00885248 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TabGadget\TabGadget.dll
2016-11-19 13:32 - 2012-10-12 11:58 - 00662016 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMLib.dll
2016-11-19 13:33 - 2010-10-05 08:22 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ImageHelper.dll
2015-12-15 00:42 - 2016-10-29 02:50 - 00035792 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2016-12-01 23:35 - 2016-10-29 02:50 - 00145864 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2016-12-01 23:35 - 2016-10-29 02:51 - 00019408 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\faulthandler.pyd
2016-12-01 23:35 - 2016-10-29 02:50 - 00116688 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2015-12-15 00:42 - 2016-10-29 02:50 - 00100296 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2015-12-15 00:42 - 2016-10-29 02:50 - 00018888 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\select.pyd
2015-12-15 00:42 - 2016-11-28 17:17 - 00019760 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2015-12-15 00:42 - 2016-10-29 02:50 - 00694224 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 00020816 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2015-12-15 00:42 - 2016-10-29 02:51 - 00123856 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 01682760 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 00020808 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2015-12-15 00:42 - 2016-10-29 02:53 - 00105928 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\win32api.pyd
2016-09-03 13:33 - 2016-11-28 17:17 - 00021312 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 00052024 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 00038696 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\fastpath.pyd
2016-12-01 23:35 - 2016-10-29 02:50 - 00392144 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2016-12-01 23:35 - 2016-10-29 02:53 - 00020936 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2015-12-15 00:42 - 2016-10-29 02:53 - 00024528 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\win32event.pyd
2015-12-15 00:42 - 2016-10-29 02:53 - 00116176 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\win32security.pyd
2015-12-15 00:42 - 2016-11-28 17:17 - 00381752 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2015-12-15 00:42 - 2016-10-29 02:53 - 00124880 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\win32file.pyd
2016-09-03 13:33 - 2016-11-28 17:17 - 00025424 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd
2015-12-15 00:42 - 2016-10-29 02:53 - 00024016 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2015-12-15 00:42 - 2016-10-29 02:53 - 00175560 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\win32gui.pyd
2015-12-15 00:42 - 2016-10-29 02:53 - 00030160 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2015-12-15 00:42 - 2016-10-29 02:53 - 00043472 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\win32process.pyd
2015-12-15 00:42 - 2016-10-29 02:53 - 00048592 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\win32service.pyd
2015-12-15 00:42 - 2016-10-29 02:53 - 00057808 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2015-12-15 00:42 - 2016-10-29 02:53 - 00024016 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\win32profile.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 00246592 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 00026456 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2016-09-03 13:33 - 2016-10-29 02:52 - 00241104 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\_jpegtran.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 00020280 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2015-12-15 00:42 - 2016-10-29 02:53 - 00028616 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\win32ts.pyd
2016-02-21 00:37 - 2016-11-28 17:17 - 00020800 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-02-21 00:37 - 2016-11-28 17:17 - 00019776 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\winffi.winerror._winffi_winerror.pyd
2016-02-21 00:37 - 2016-11-28 17:17 - 00020800 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\winffi.wininet._winffi_wininet.pyd
2015-12-15 00:42 - 2016-11-28 17:17 - 00023376 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2015-12-15 00:42 - 2016-10-29 02:53 - 00350152 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2016-02-21 00:37 - 2016-11-28 17:17 - 00022352 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 00024392 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2016-12-01 23:35 - 2016-10-29 02:49 - 00036296 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\librsync.dll
2016-12-01 23:35 - 2016-11-28 17:16 - 00084280 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2016-12-01 23:35 - 2016-11-28 17:16 - 01826096 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2015-12-15 00:42 - 2016-10-29 02:51 - 00083912 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\sip.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 00531248 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2016-12-01 23:35 - 2016-11-28 17:17 - 03928880 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 01972528 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 00133424 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 00224056 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 00207672 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2016-09-03 13:33 - 2016-11-28 17:17 - 00020288 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\winffi.user32._winffi_user32.pyd
2016-12-01 23:35 - 2016-10-29 02:56 - 00017864 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\libEGL.dll
2016-12-01 23:35 - 2016-10-29 02:56 - 01631184 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2016-12-01 23:35 - 2016-11-28 17:16 - 00042808 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 00168760 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 00357680 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2015-12-15 00:42 - 2016-10-29 02:53 - 00060880 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\win32print.pyd
2016-09-03 13:33 - 2016-11-28 17:17 - 00024904 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd
2016-12-01 23:35 - 2016-11-28 17:16 - 00546096 _____ () C:\Users\admin\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2016-11-19 13:33 - 2009-08-12 20:15 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\pngio.dll
2016-11-16 00:23 - 2016-11-08 23:29 - 01819240 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\libglesv2.dll
2016-11-16 00:23 - 2016-11-08 23:29 - 00093288 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\libegl.dll
2016-11-09 19:51 - 2016-11-09 19:51 - 17772736 _____ () C:\Users\admin\AppData\Local\Google\Chrome\User Data\PepperFlash\23.0.0.207\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 05:34 - 2016-10-30 23:35 - 00000911 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 validation.sls.microsoft.com
0.0.0.1	mssplus.mcafee.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2341918622-582166901-1024641541-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\admin\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.8.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{AE0E5E71-F0BF-4832-9ACE-D2B39BA6E022}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{50643015-AF2A-44E4-9F87-C2270D332E33}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{7D7EE1B0-446F-4615-AFAC-34CD379B78FF}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{B948FCB6-E352-4870-9271-1F8D336F40BB}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B642BCC3-16ED-4874-95FD-9E4734079887}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{08D466F5-B61E-4B11-8DCB-A72FF54CDBB9}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{38B8F034-7400-4DFD-B44B-65F30808D414}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{335048AD-8C99-41DE-9DBB-8048870E29EF}] => C:\Users\admin\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{CA27958B-E118-406B-8125-559C444157CE}] => C:\Users\admin\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{7D969496-F9FB-4ABE-9D14-F51A1E9B9A93}C:\program files (x86)\synology download redirector\redirector.exe] => C:\program files (x86)\synology download redirector\redirector.exe
FirewallRules: [UDP Query User{F285E1C7-0960-40D3-874F-BDC25D187E31}C:\program files (x86)\synology download redirector\redirector.exe] => C:\program files (x86)\synology download redirector\redirector.exe
FirewallRules: [TCP Query User{92F65A94-6C86-4438-BC10-8F22F47B4D4C}C:\users\admin\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\admin\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{95E93B24-5B27-4A81-973C-0022BDFE869D}C:\users\admin\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\admin\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{5293BAC1-1862-4860-97BD-2FBCBD11FCBD}C:\program files (x86)\flashget network\flashget 3\flashget3.exe] => C:\program files (x86)\flashget network\flashget 3\flashget3.exe
FirewallRules: [UDP Query User{A0734FF4-57C5-4E96-B3EB-12C2DA02129F}C:\program files (x86)\flashget network\flashget 3\flashget3.exe] => C:\program files (x86)\flashget network\flashget 3\flashget3.exe
FirewallRules: [{D02155D1-C22C-4A01-AC4F-7220ACD08097}] => C:\Program Files (x86)\Nero\Nero 2015\Nero Burning ROM\StartNBR.exe
FirewallRules: [{4D854F0B-4235-40E5-8FCB-FB4D3BBEBE24}] => C:\Program Files (x86)\Nero\Nero 2015\Nero Burning ROM\nero.exe
FirewallRules: [{3F353EF3-5306-4D6F-BA40-E377B264638B}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{4E4DFCFF-1896-43DC-BF1D-6F4C1FA412D0}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{DD7DC38E-7DE9-4E70-804F-98A1BEFDCFBB}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{167ECBB0-9EAB-470A-AB3E-A6278518C4E7}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{B2893D02-A7C4-4DD5-8EB8-D8303B4EB8CF}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [VirtualPC-In-UDP-1] => %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-UDP-2] => %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-TCP-1] => %SystemRoot%\System32\vpc.exe
FirewallRules: [TCP Query User{15BAB12B-1C79-41C6-954B-236827F4C98A}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{89B84A1F-549E-476D-A49E-750B8A2644D8}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{BF464CF3-64C1-4D8C-B20D-D284B41F7B09}C:\transaq\transaq.exe] => C:\transaq\transaq.exe
FirewallRules: [UDP Query User{C9EB57F7-0250-4187-859E-ED9A1320471E}C:\transaq\transaq.exe] => C:\transaq\transaq.exe
FirewallRules: [TCP Query User{094D34A5-C236-4164-BD12-E713107B01CC}C:\quikfinam\winros.exe] => C:\quikfinam\winros.exe
FirewallRules: [UDP Query User{3CBAC31E-4048-4B41-8D10-253CE5EB21F2}C:\quikfinam\winros.exe] => C:\quikfinam\winros.exe
FirewallRules: [TCP Query User{0917E705-39C0-4B5E-8E5B-D0DC36944A5C}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{201F5239-A04B-4C99-ACD6-2202B5D60717}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{D7367D7D-8C37-40FC-BB5C-825E2A2C0B63}C:\just2trade client\transaq.exe] => C:\just2trade client\transaq.exe
FirewallRules: [UDP Query User{1B34FDF7-014D-4CE7-BE49-A7AF44D0CA87}C:\just2trade client\transaq.exe] => C:\just2trade client\transaq.exe
FirewallRules: [{A0EAE5B2-D4B9-4282-8963-F46E86F1405C}] => LPort=69
FirewallRules: [{E0710CDF-D853-4CFF-B253-17844F3B10C0}] => LPort=12000
FirewallRules: [{0B243CF9-4879-4247-852A-7D07874F4E08}] => C:\Users\admin\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{A233ACA7-7AF8-4E82-B3D5-4143C9381ECA}] => C:\Users\admin\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E73D9C72-87B5-418D-88BA-3BADB297FF7F}] => C:\Users\admin\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{5FE67BA3-45B6-467A-BBC3-00409FA37025}] => C:\Users\admin\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{ACA0E11F-321A-4E83-B9A5-6679430729B6}] => C:\Users\admin\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7D7AE3EF-4562-4466-A6D9-5EB980FD554A}] => C:\Users\admin\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{88C7DC3C-0EC3-45B7-909B-09A99C4903DA}C:0\c disk deltaleasing rnd\games\q3arena\quake3.exe] => C:0\c disk deltaleasing rnd\games\q3arena\quake3.exe
FirewallRules: [UDP Query User{56FFF03D-2B54-4CF6-98D3-36CD54988575}C:0\c disk deltaleasing rnd\games\q3arena\quake3.exe] => C:0\c disk deltaleasing rnd\games\q3arena\quake3.exe
FirewallRules: [TCP Query User{E28024A0-1D07-4BF2-84A5-D0FB7A704160}C:\program files (x86)\synology download redirector\redirector.exe] => C:\program files (x86)\synology download redirector\redirector.exe
FirewallRules: [UDP Query User{40AFC065-2E0B-4F0C-9B36-D4760F6AE75A}C:\program files (x86)\synology download redirector\redirector.exe] => C:\program files (x86)\synology download redirector\redirector.exe
FirewallRules: [{77195713-7A70-42D2-B1E2-1F2314AEEC0C}] => C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{F7DFAEEE-6089-4DD9-A0D6-6922DE99CA80}] => C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{B0B2E4BA-6E16-48B6-932B-4DA39151D004}] => C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{E59CFE9E-D001-4590-8D8E-AA05A1BDF58E}] => C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{80A9756A-69D1-4C43-B20A-8F60CEA4CF1B}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{1C0AF646-36F8-45ED-8CC6-F8FC708C55DC}] => C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
FirewallRules: [{86E058E2-26BE-46AD-8567-C4AF845D9B26}] => C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
FirewallRules: [TCP Query User{7F409A25-540A-406E-B217-A1E32B8DD4CF}F:\games\quake2\r1q2.exe] => F:\games\quake2\r1q2.exe
FirewallRules: [UDP Query User{8B76BBD0-5EA1-43D5-B936-319C173A3EF5}F:\games\quake2\r1q2.exe] => F:\games\quake2\r1q2.exe
FirewallRules: [TCP Query User{AD10C0B4-9569-4A7C-946F-6FA96D42AAC9}F:\games\q3arena\quake3.exe] => F:\games\q3arena\quake3.exe
FirewallRules: [UDP Query User{B2889D9F-6FCB-4009-ADAA-B79B39DC4F26}F:\games\q3arena\quake3.exe] => F:\games\q3arena\quake3.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe] => Enabled:Flashget3

==================== Restore Points =========================

02-12-2016 03:32:24 Установлен DirectX
04-12-2016 13:19:37 Центр обновления Windows
04-12-2016 19:46:45 Утилита архивации Windows
05-12-2016 22:07:24 Removed ASUS MultiFrame
06-12-2016 02:19:51 Installed TSLab 2.0

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/07/2016 07:07:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (12/07/2016 12:08:51 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: NvStreamUserAgent.exe, версия: 7.1.2084.9592, отметка времени: 0x57605c64
Имя сбойного модуля: ntdll.dll, версия: 6.1.7601.23569, отметка времени 0x57f7c06e
Код исключения: 0xc0000005
Смещение ошибки: 0x000000000004da56
Идентификатор сбойного процесса: 0x13c4
Время запуска сбойного приложения: 0x01d25004f05849a3
Путь сбойного приложения: C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
Путь сбойного модуля: C:\Windows\SYSTEM32\ntdll.dll
Код отчета: 2f93ebdb-bbf8-11e6-886b-54a05055a227

Error: (12/07/2016 12:08:04 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (12/06/2016 11:03:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (12/06/2016 10:43:14 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (12/06/2016 10:41:34 PM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhost (3976) WebCacheLocal: Ошибка -1811 при открытии файла журнала C:\Users\admin\AppData\Local\Microsoft\Windows\WebCache\V010002C.log.

Error: (12/06/2016 10:27:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (12/06/2016 08:37:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (12/06/2016 06:06:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (12/06/2016 12:13:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.


System errors:
=============
Error: (12/07/2016 07:05:49 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Загрузка \??\C:\Windows\SysWow64\drivers\neoguvys.sys заблокирована из-за несовместимости с данной системой. Обратитесь к поставщику программного обеспечения за совместимой версией драйвера.

Error: (12/07/2016 07:05:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Сбой при запуске службы "Mobile Partner. OUC" из-за ошибки 
Служба не ответила на запрос своевременно.

Error: (12/07/2016 07:05:49 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Превышение времени ожидания (30000 мс) при ожидании подключения службы "Mobile Partner. OUC".

Error: (12/07/2016 03:36:36 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: Регистрация сервера {F9717507-6651-4EDB-BFF7-AE615179BCCF} DCOM не прошла за отведенное время ожидания.

Error: (12/07/2016 12:06:17 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Загрузка \??\C:\Windows\SysWow64\drivers\neoguvys.sys заблокирована из-за несовместимости с данной системой. Обратитесь к поставщику программного обеспечения за совместимой версией драйвера.

Error: (12/07/2016 12:06:17 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Сбой при запуске службы "Mobile Partner. OUC" из-за ошибки 
Служба не ответила на запрос своевременно.

Error: (12/07/2016 12:06:17 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Превышение времени ожидания (30000 мс) при ожидании подключения службы "Mobile Partner. OUC".

Error: (12/07/2016 12:05:33 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Сбой при запуске службы "Служба общих сетевых ресурсов проигрывателя Windows Media" из-за ошибки 
Служба не запущена из-за ошибки входа в систему.

Error: (12/07/2016 12:05:33 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Службе "WMPNetworkSvc" не удалось войти в систему с именем "NT AUTHORITY\NetworkService" и текущим паролем, поскольку произошла ошибка: 
Такой запрос не поддерживается.


Чтобы правильно настроить эту службу, используйте оснастку "Службы" в Консоли управления (MMC).

Error: (12/07/2016 12:05:33 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Сбой при запуске службы "Windows Search" из-за ошибки 
Служба не запущена из-за ошибки входа в систему.


CodeIntegrity:
===================================
  Date: 2015-08-27 22:40:34.170
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume1\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_96f694b33cfd42bf\werfault.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2015-08-27 22:40:34.165
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume1\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_96f694b33cfd42bf\werfault.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2015-08-27 22:40:34.159
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume1\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_96f694b33cfd42bf\werfault.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2015-08-27 22:40:34.153
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume1\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_96f694b33cfd42bf\werfault.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2015-08-27 22:40:33.887
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume1\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_47662a2706182d6f\wermgr.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2015-08-27 22:40:33.882
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume1\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_47662a2706182d6f\wermgr.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2015-08-27 22:40:33.877
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume1\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_47662a2706182d6f\wermgr.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2015-08-27 22:40:33.872
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume1\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_47662a2706182d6f\wermgr.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2015-08-27 22:40:32.100
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume1\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\amd64_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_f3153036f55ab3f5\werfault.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.

  Date: 2015-08-27 22:40:32.094
  Description: Windows is unable to verify the integrity of the file \Device\HarddiskVolume1\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\amd64_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_f3153036f55ab3f5\werfault.exe because the signing certificate has been revoked.  Check with the publisher to see if a new signed version of the kernel module is available.


==================== Memory info =========================== 

Processor: AMD Phenom(tm) II X6 1090T Processor
Percentage of memory in use: 36%
Total physical RAM: 8108.16 MB
Available physical RAM: 5131.39 MB
Total Virtual: 16214.51 MB
Available Virtual: 11984.51 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:119.24 GB) (Free:24.31 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:279.46 GB) (Free:10.01 GB) NTFS
Drive e: (Local store) (Fixed) (Total:186.31 GB) (Free:48.25 GB) NTFS
Drive f: () (Fixed) (Total:476.94 GB) (Free:399.81 GB) NTFS
Drive w: () (Network) (Total:2747.71 GB) (Free:982.36 GB) 
Drive z: () (Network) (Total:2747.71 GB) (Free:982.36 GB) 

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: FA9DCEAE)
Partition 1: (Active) - (Size=119.2 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 279.5 GB) (Disk ID: 2AE22AE1)
Partition 1: (Active) - (Size=279.5 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 476.9 GB) (Disk ID: CE819CE1)
Partition 1: (Not Active) - (Size=476.9 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (MBR Code: Windows XP) (Size: 186.3 GB) (Disk ID: 5970FCEB)
Partition 1: (Active) - (Size=186.3 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================