Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09.03.2019 01
Ran by Администратор (10-03-2019 19:21:36)
Running from C:\Users\Администратор.000\Desktop
Windows 10 Pro Version 1803 17134.590 (X64) (2018-06-24 16:45:10)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Damir (S-1-5-21-3327491866-1701107999-1953143478-1008 - Administrator - Enabled) => C:\Users\Damir
DefaultAccount (S-1-5-21-3327491866-1701107999-1953143478-503 - Limited - Disabled)
naily (S-1-5-21-3327491866-1701107999-1953143478-1009 - Limited - Enabled) => C:\Users\naily
WDAGUtilityAccount (S-1-5-21-3327491866-1701107999-1953143478-504 - Limited - Disabled)
Администратор (S-1-5-21-3327491866-1701107999-1953143478-500 - Administrator - Enabled) => C:\Users\Администратор.000
Гость (S-1-5-21-3327491866-1701107999-1953143478-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET Security (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Файервол (Enabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

«FIFA 15» 1.8.0.0 (HKLM-x32\...\«FIFA 15»_is1) (Version: 1.8.0.0 - Electronic Arts)
µTorrent (HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\uTorrent) (Version: 3.5.5.44994 - BitTorrent Inc.)
µTorrent (HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\uTorrent) (Version: 3.5.0.43804 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adblock Plus для IE (32- и 64-разрядные версии) (HKLM\...\{0E47CCC3-6D30-4CB7-A0A9-1375BBC02CCA}) (Version: 1.4 - Eyeo GmbH)
Adobe Acrobat Reader DC - Russian (HKLM-x32\...\{AC76BA86-7AD7-1049-7B44-AC0F074E4100}) (Version: 18.009.20050 - Adobe Systems Incorporated)
Adobe Audition CC 2015 (HKLM-x32\...\{839A3566-AED6-4787-A849-5CBE2B1DC6AE}) (Version: 8.1.0 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.142 - Adobe Systems Incorporated)
Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2.2 - Adobe Systems Incorporated)
AIO_CDA_ProductContext (HKLM-x32\...\{B5985100-D968-4B0D-B13C-B0362044612D}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden
AIO_CDA_Software (HKLM-x32\...\{CBB55719-C875-4C5A-A0B6-2473F77DD164}) (Version: 140.0.428.000 - Hewlett-Packard) Hidden
AIO_Scan (HKLM-x32\...\{104066F4-5897-4067-85D3-4C88B67CCF75}) (Version: 130.0.421.000 - Hewlett-Packard) Hidden
AMD OverDrive (HKLM-x32\...\{EEB605FD-C5F5-4946-90F3-D65C604A9187}) (Version: 4.3.1.0698 - Advanced Micro Devices, Inc.)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.1.1 - Advanced Micro Devices, Inc.)
Apex Legends (HKLM-x32\...\{D7FBF176-382D-484E-863A-DFD1124A2A1C}) (Version: 1.0.0.4 - Electronic Arts, Inc.)
Apple Mobile Device Support (HKLM\...\{5FA8C4BE-8C74-4B9C-9B49-EBF759230189}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Assassin's Creed III (HKLM-x32\...\Assassin's Creed III_R.G. Mechanics_is1) (Version:  - R.G. Mechanics, spider91)
Assassin's Creed III 1.01 (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.01 - Ubisoft)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
bl (HKLM-x32\...\{2A075BB4-E976-4278-BF3F-E5C6945D84C0}) (Version: 1.0.0 - Your Company Name) Hidden
Bloody6 (HKLM-x32\...\Bloody3) (Version: 18.03.0002 - Bloody)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Branding64 (HKLM\...\{EE2AFCE4-0238-4DE0-A140-1647021627C1}) (Version: 1.00.0001 - Advanced Micro Devices, Inc.) Hidden
BufferChm (HKLM-x32\...\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
C3100 (HKLM-x32\...\{E601C028-B828-4CCC-BDC3-9678CEFC6965}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden
c3100_Help (HKLM-x32\...\{1AE3E621-E0C0-4aa1-B10B-B3E353A8D110}) (Version: 82.0.256.000 - Hewlett-Packard) Hidden
Call of Duty (HKLM-x32\...\Call of Duty_R.G. Mechanics_is1) (Version:  - R.G. Mechanics, spider91)
Call of Duty 2 (HKLM-x32\...\Call of Duty 2_R.G. Mechanics_is1) (Version:  - R.G. Mechanics, spider91)
Catalyst Control Center Next Localization BR (HKLM\...\{E7AA1A02-575C-14C6-FBEF-4BE6D46A5B74}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{EB6C44F1-0F78-FE10-BC63-90BA50AB0CE9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{B26D75B8-FAB7-6F8B-767F-BAF975383D91}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{36EDC500-E4C0-371C-9865-08450415C1E9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{4C2FB7FD-89FD-BA5C-585A-3811F326AD34}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{D74218A3-C503-57EF-AC9F-2220082E7ADE}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{DA433FCF-90A1-19A5-65A7-FDF82DE4826D}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{949F125B-A6CC-5A5E-EEE7-4AC50305C1FA}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{20D46801-147B-30AD-7C5A-AC4560A79096}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{22C39711-2747-D264-319A-1550BEEAAEC6}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{1DBACFDB-5E43-7882-36BD-53526D34BD22}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{A91FC4BF-C1EC-ADCA-79D1-F4F0671F1D60}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{ED75A775-03A7-F214-868D-497748707968}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{07BFBD5C-2F63-6828-1B61-B41A44113F3B}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{E6038D3E-5D87-8DF7-6D05-BE7532C3E73E}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{DFAD9DAC-4768-C8BB-4E0E-5239605A9BEA}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{FFBFBD1F-B160-A119-7C43-8584FA2E5665}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{4D1D5407-9B69-6422-629C-8518A26004A4}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{A8379BAB-59A9-C0A3-8BCC-4852EA403692}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{24DF617A-CD23-6E6A-126B-23630D2781CE}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{83DDDFD8-AD42-72F9-E4F1-5456FDB304C9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\{8DD77F20-5104-4EB3-8A32-87E8F86C1C15}) (Version: 5.17.5590 - Piriform Ltd)
CCleaner (HKLM\...\CCleaner) (Version: 5.28 - Piriform)
City Car Driving (HKLM-x32\...\City Car Driving_is1) (Version: 1.5.4 - )
Copy (HKLM-x32\...\{9BE466FF-70B7-4DA8-807C-DB4C3610FDAA}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
Counter-Strike 1.6 (HKLM-x32\...\Counter-Strike 1.6) (Version: Valve Software - Games)
Counter-Strike Source v34 (HKLM-x32\...\Counter-Strike Source v34) (Version: 2018 - cs16-download.ru)
DAEMON Tools Ultra (HKLM\...\DAEMON Tools Ultra) (Version: 5.3.0.0717 - Disc Soft Ltd)
Defraggler (HKLM-x32\...\Defraggler) (Version:  - )
Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (HKLM-x32\...\{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
Discord PTB (HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\DiscordPTB) (Version: 0.0.48 - Discord Inc.)
Discord PTB (HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\DiscordPTB) (Version: 0.0.43 - Discord Inc.)
Dishonored - Game of the Year Edition (HKLM-x32\...\Dishonored - Game of the Year Edition_R.G. Mechanics_is1) (Version:  - R.G. Mechanics, Panky)
DocProc (HKLM-x32\...\{9B362566-EC1B-4700-BB9C-EC661BDE2175}) (Version: 140.0.185.000 - Hewlett-Packard) Hidden
Dota 2 Changer 15.0 (HKLM-x32\...\Dota 2 Changer 15.0) (Version: 15.0 - Changer Team)
Dota 2 Changer 15.3 (HKLM-x32\...\Dota 2 Changer 15.3) (Version: 15.3 - Changer Team)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.59.1 - Dropbox, Inc.) Hidden
EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.8.0.0 - Electronic Arts)
Epic Games Launcher (HKLM-x32\...\{CE5F7793-83C8-4305-AF54-1B775597DEEC}) (Version: 1.1.147.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
ESET Security (HKLM\...\{C26AA376-9D1B-4B7B-A1F0-DC41E8530176}) (Version: 11.2.49.0 - ESET, spol. s r.o.)
Fax (HKLM-x32\...\{9294F169-72EE-4D74-AE92-CA25F64B4FF8}) (Version: 140.0.307.000 - Hewlett-Packard) Hidden
FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.7 - Electronic Arts)
FIFA 14 v4.1.0 (HKLM-x32\...\FIFA 14_is1) (Version: 4.1.0 - RG_Virtus)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 73.0.3683.67 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
GPBaseService2 (HKLM-x32\...\{BB3447F6-9553-4AA9-960E-0DB5310C5779}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
Grand Theft Auto San Andreas (HKLM-x32\...\Grand Theft Auto San Andreas_is1) (Version:  - torrent-igruha.org)
GRID 2 (HKLM-x32\...\GRID 2_is1) (Version:  - DeVezor | R.G. Virtus)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
High Sky Launcher 5.072 (HKLM-x32\...\High Sky Launcher 5.072) (Version: 5.072 - High Sky Servers)
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photosmart All-In-One Driver Software (HKLM\...\{4F6C1178-3FC0-44BB-8F9A-28D8516DFEE2}) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Support Solutions Framework (HKLM-x32\...\{5D5282BD-55B2-47A7-A1B8-A673E52D9C1C}) (Version: 12.0.30.81 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (HKLM-x32\...\{CAE4213F-F797-439D-BD9E-79B71D115BE3}) (Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (HKLM-x32\...\{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
iCloud (HKLM\...\{5FEE6A85-BB93-49AB-8927-F1D780BB6727}) (Version: 7.8.0.7 - Apple Inc.)
iFunbox (v3.0.3109.1352) (HKLM-x32\...\iFunbox_is1) (Version: v3.0.3109.1352 - iFunbox DevTeam)
Imo Messenger (HKLM-x32\...\{DA7FD809-D388-454F-9063-B68FC873CC67}) (Version: 1.2.3 - PageBites, Inc)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
iTunes (HKLM\...\{6381FABB-0847-4EEB-9E71-3D0EB7449FE0}) (Version: 12.9.1.4 - Apple Inc.)
James Cameron's AVATAR(tm): THE GAME (HKLM-x32\...\{7E19B002-4CA3-4C9F-BA92-91D101B97219}) (Version: 1.02.00 - Ubisoft)
Java 8 Update 151 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
Java 8 Update 77 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418077F0}) (Version: 8.0.770.3 - Oracle Corporation)
Java 8 Update 77 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218077F0}) (Version: 8.0.770.3 - Oracle Corporation)
K-Lite Mega Codec Pack 11.9.0 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 11.9.0 - KLCP)
KnocBack, версия 1.5 (HKLM-x32\...\{357CBC4E-5D10-40E8-A6A9-9C2FA6F42021}_is1) (Version: 1.5 - My Company, Inc.)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LogMeIn Hamachi (HKLM-x32\...\{1945856D-A68E-43D3-846D-F8DFDE4A69F7}) (Version: 2.2.0.630 - LogMeIn, Inc.) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.630 - LogMeIn, Inc.)
LOTR - The Battle for Middle-earth (HKLM-x32\...\LOTR - The Battle for Middle-earth_is1) (Version:  - )
MarketResearch (HKLM-x32\...\{D360FA88-17C8-4F14-B67F-13AAF9607B12}) (Version: 140.0.299.000 - Hewlett-Packard) Hidden
Microsoft Office стандартный 2013 (HKLM\...\Office15.STANDARD) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\OneDriveSetup.exe) (Version: 19.012.0121.0011 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\OneDriveSetup.exe) (Version: 17.3.6816.0313 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x64 8.0.61000 (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{a2199617-3609-410f-a8e8-e8806c73545b}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40649 (HKLM-x32\...\{c6870a89-ef30-4f22-bbd1-49cd2516bc56}) (Version: 12.0.40649.5 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40649 (HKLM-x32\...\{78142960-066b-4581-b984-0bdcf560c4be}) (Version: 12.0.40649.5 - Корпорация Майкрософт)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.14.26429 (HKLM-x32\...\{80586c77-db42-44bb-bfc8-7aebbb220c00}) (Version: 14.14.26429.4 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{756E195A-CB58-4B99-917F-0DDA0D881204}) (Version: 1.0.4.0 - Mojang)
Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.18.00.03 - Huawei Technologies Co.,Ltd)
Moschat (HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\moschat) (Version: 2.0.25 - YY Inc)
Mozilla Firefox 60.3.0 ESR (x64 ru) (HKLM\...\Mozilla Firefox 60.3.0 ESR (x64 ru)) (Version: 60.3.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.9.0 - Mozilla)
MSI Afterburner 4.2.0 (HKLM-x32\...\Afterburner) (Version: 4.2.0 - MSI Co., LTD)
MTA:SA v1.5.6 (HKLM-x32\...\MTA:SA 1.5) (Version: v1.5.6 - Multi Theft Auto)
NCALayer v0.1.7 (HKLM-x32\...\{2E9A81FF-B19F-4F64-95B0-E688E09F7D7C}_is1) (Version:  - Национальный удостоверяющий центр РК)
Need for Speed Most Wanted Black Edition (HKLM-x32\...\Need for Speed Most Wanted Black Edition_R.G. Mechanics_is1) (Version:  - R.G. Mechanics, Panky)
Need for Speed Underground 2 (HKLM-x32\...\Need for Speed Underground 2_R.G. Mechanics_is1) (Version:  - R.G. Mechanics, Panky)
NetSpot (HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\a6e43da6e76c5494) (Version: 1.0.0.334 - Etwok LLC)
Network64 (HKLM\...\{6BFAB6C1-6D46-46DB-A538-A269907C9F2F}) (Version: 140.0.306.000 - Hewlett-Packard) Hidden
NVIDIA PhysX (Legacy) (HKLM-x32\...\{FAAC26AD-73BA-40CE-86AA-C9213F9E064A}) (Version: 9.13.0604 - NVIDIA Corporation)
NVIDIA Системное программное обеспечение PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Origin (HKLM-x32\...\Origin) (Version: 10.5.35.22222 - Electronic Arts, Inc.)
osu! (HKLM-x32\...\{74762be0-0835-44a9-b51e-db119e95180f}) (Version: latest - ppy Pty Ltd)
osu! (HKLM-x32\...\{7a8ca918-79d6-41c4-9d8e-62a5b6c256f1}) (Version: latest - ppy Pty Ltd)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
paint.net (HKLM\...\{F10AAD91-58DF-44EC-A647-810197141667}) (Version: 4.0.19 - dotPDN LLC)
PC Protector Plus (HKLM-x32\...\63F58340-0CD0-403B-B6E8-4E1449F01C6F_Jawego_PC P~AB8AF8C2_is1) (Version: 2.1.1000.20873 - Jawego)
ph (HKLM-x32\...\{185F9795-9663-4F13-9EF9-307A282ADB5A}) (Version: 1.0.0 - Your Company Name) Hidden
PokerStars.net (HKLM-x32\...\PokerStars.net) (Version:  - PokerStars.net)
RaidCall (HKLM-x32\...\RaidCall) (Version: 8.2.0-1.0.3231.155 - raidcall.com.ru)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8186 - Realtek Semiconductor Corp.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
Scan (HKLM-x32\...\{06A1D88C-E102-4527-AF70-29FFD7AF215A}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden
Secure Driver Updater (HKLM-x32\...\Secure Driver Updater_is1) (Version: 2.7.1086.17247 - Secure Driver Updater)
SignWorkaround 21 (HKLM-x32\...\{5D1C3548-BE3B-4DAE-9833-747D628ACE0E}) (Version: 21 - ECCKZ) Hidden
SignWorkaround 21 (HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\SignWorkaround 21 21) (Version: 21 - ECCKZ)
Singularity (HKLM-x32\...\1207659239_is1) (Version: 2.0.0.5 - GOG.com)
Skype™ 7.38 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.38.101 - Skype Technologies S.A.)
SolutionCenter (HKLM-x32\...\{BC5DD87B-0143-4D14-AAE6-97109614DC6B}) (Version: 140.0.299.000 - Hewlett-Packard) Hidden
Status (HKLM-x32\...\{5B025634-7D5B-4B8D-BE2A-7943C1CF2D5D}) (Version: 140.0.342.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\TeamSpeak 3 Client) (Version: 3.1.8 - TeamSpeak Systems GmbH)
Textify 1.5 (HKLM-x32\...\{BBB08CAA-D6E7-4FC7-9FBF-F06D9BCCD99A}_is1) (Version:  - Textify)
The Binding of Isaac Rebirth (HKLM-x32\...\The Binding of Isaac Rebirth_R.G. Gamblers_is1) (Version:  - R.G. Gamblers, Fanfar)
The Lord of the Rings - The Battle for Middle-Earth (HKLM-x32\...\The Lord of the Rings - The Battle for Middle-Ea~6BF0C6F6_is1) (Version:  - R.G. Mechanics, markfiter)
theHunter Call of the Wild v.1.41 (HKLM-x32\...\theHunter Call of the Wild_is1) (Version:  - )
TNod User & Password Finder (HKLM\...\TNod) (Version: 1.6.6.0 - Tukero[X]Team)
Toolbox (HKLM-x32\...\{292F0F52-B62D-4E71-921B-89A682402201}) (Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (HKLM-x32\...\{CD31E63D-47FD-491C-8117-CF201D0AFAB5}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
Twitch (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Twitch Interactive, Inc.)
Ultimate-Discounter Browser (HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\Ultimate-Discounter Browser) (Version: 2.25 - ultimate-discounter.com)
UltraISO (HKLM-x32\...\UltraISO) (Version:  - EZB Systems, Inc.)
Uninstall Tool (HKLM\...\Uninstall Tool) (Version:  - CrystalIdea Software)
Unity Web Player (HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Update for Skype for Business 2015 (KB4462135) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.STANDARD_{03CD37B7-E1EB-42AE-9BC3-3687E679668B}) (Version:  - Microsoft)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{1FD817A6-63E1-4519-BFD4-228DABB7AB6B}) (Version: 2.55.0.0 - Microsoft Corporation)
UpdateAssistant (HKLM-x32\...\{035FFC43-55D6-4F5C-BCC5-21FED122C8B4}) (Version: 1.11.0.0 - Microsoft Corporation) Hidden
War Thunder Launcher 1.0.3.148 (HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version:  - Gaijin Entertainment)
Warface (HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\Warface) (Version: 1.292 - Mail.Ru)
WarfacePts (HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\WarfacePts) (Version: 1.263 - Mail.Ru)
Web Companion (HKLM-x32\...\{c764e43e-7a58-4e54-9e09-0f74a140ad2c}) (Version: 4.6.1966.3854 - Lavasoft)
WebReg (HKLM-x32\...\{8EE94FD8-5F52-4463-A340-185D16328158}) (Version: 140.0.297.017 - Hewlett-Packard) Hidden
Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version:  - )
WinRAR 5.50 (32-разрядная) (HKLM-x32\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
Yandex (HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\YandexBrowser) (Version: 19.3.0.2485 - ООО «ЯНДЕКС»)
Амиго (HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\Amigo) (Version: 56.0.2924.197 - Mail.Ru)
Голосовой помощник Алиса (HKLM-x32\...\{4D922459-6A2E-4E43-B7A1-86872A9078F3}) (Version: 5.0.0.1901 - Яндекс)
Засоби перевірки правопису Microsoft Office 2013 – українська мова (HKLM\...\{90150000-001F-0422-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Игровой центр (HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\GameCenter) (Version: 4.1429 - ООО Мэйл.Ру)
Кнопка "Яндекс" на панели задач (HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\YaPinLancher) (Version: 2.0.4.2157 - Яндекс)
Менеджер браузеров (HKLM-x32\...\{C187DB08-7705-4616-834B-87B3087AE698}) (Version: 3.0.7.830 - Яндекс) Hidden
Менеджер браузеров (HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\{95f0deb2-2099-4305-8cbe-a02c9fdd4dc2}) (Version: 3.0.7.830 - Яндекс)
Поддержка программ Apple (32 бит) (HKLM-x32\...\{49F7DD82-FC83-48BF-86C6-CFE6E1E233E1}) (Version: 7.1 - Apple Inc.)
Поддержка программ Apple (64 бит) (HKLM\...\{1FA68E27-2951-42E8-9F57-1A7F6581B4FD}) (Version: 7.1 - Apple Inc.)
Своя игра (HKLM-x32\...\{E2A09545-58FA-4B9D-93BB-D7E462D548FA}) (Version: 6.4.3.0 - Свояк-софт) Hidden
Своя игра (HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\{ccc671fb-9b31-45fa-bcac-3389e76da57b}) (Version: 6.4.3.0 - Свояк-софт)
Служба автоматического обновления программ (HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\MailRuUpdater) (Version:  - Mail.Ru) <==== ATTENTION
Средства проверки правописания Microsoft Office 2013 — русский (HKLM\...\{90150000-001F-0419-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Языковой пакет Microsoft Visual Studio 2010 Tools для среды выполнения Office (x64) - RUS (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - RUS) (Version: 10.0.50903 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3327491866-1701107999-1953143478-1008_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-3327491866-1701107999-1953143478-500_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-3327491866-1701107999-1953143478-500_Classes\CLSID\{78ceb041-1775-4caa-a203-f9538118be12}\InprocServer32 -> C:\WINDOWS\system32\dfshim.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3327491866-1701107999-1953143478-500_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\Администратор.000\Dropbox
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> No File
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll -> No File
ContextMenuHandlers1: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell64.dll [2015-03-11] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2018-12-13] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [Folder Guard] -> {D7D1D520-37AC-11d0-B20F-249700C10000} =>  -> No File
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2018-10-22] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2-x32: [AlcoholShellEx] -> {32020A01-506E-484D-A2A8-BE3CF17601C3} => C:\Program Files (x86)\Alcohol 120\AxShlex.dll [2014-09-07] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers2: [AlcoholShellEx64] -> {AF67B665-D752-424E-9A03-C7C218F2844F} => C:\Program Files (x86)\Alcohol 120\AxShlEx64.dll [2014-09-07] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers2: [DaemonShellExtDriveUltra] -> {F0E53CA3-02F8-40AE-9470-309F0309036F} => C:\Program Files\DAEMON Tools Ultra\DTShl64.dll [2018-02-15] (Disc Soft Ltd -> Disc Soft Ltd)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2018-12-13] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2014-01-02] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers3: [DaemonShellExtImageUltra] -> {B5EBA666-2B94-4C7A-9CAA-A4539F329646} => C:\Program Files\DAEMON Tools Ultra\DTShl64.dll [2018-02-15] (Disc Soft Ltd -> Disc Soft Ltd)
ContextMenuHandlers3: [UnlockerShellExtension] -> {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} => C:\Program Files\Unlocker\UnlockerCOM.dll [2010-07-15] (Empty Loop -> )
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2014-01-02] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2019-01-09] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers6: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell64.dll [2015-03-11] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2018-12-13] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [Folder Guard] -> {D7D1D520-37AC-11d0-B20F-249700C10000} =>  -> No File
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2014-01-02] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers6: [UnlockerShellExtension] -> {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} => C:\Program Files\Unlocker\UnlockerCOM.dll [2010-07-15] (Empty Loop -> )
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {03FF7C1D-CC1E-48FC-8DD7-BFDCA85F7CD9} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {10925BC8-AA20-4F8B-94E9-EC0D93569B59} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {262BC71B-7222-4139-B111-A6A0881E10D9} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {3A610A28-F6A4-4A0D-9029-433B58AB1742} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {4520E8A9-AF06-4122-859B-E4B655B29B36} - \Microsoft\Windows\AppID\SmartScreenSpecific -> No File <==== ATTENTION
Task: {49180D06-3B47-403C-A13D-5E665F56307D} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {4ED251E1-B7EA-4FC8-A864-0206CC92C8DD} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe (Advanced Micro Devices, Inc.) [File not signed]
Task: {51890ECC-A747-409F-8A5E-99E70E9B7535} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {5DE61737-8B8D-4374-B76B-F565C34B651D} - \Microsoft\Windows\Shell\FamilySafetyUpload -> No File <==== ATTENTION
Task: {6015EF5F-811A-4B3B-9B1F-1C0E56B77A93} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {61B15EE6-60AF-459E-BC97-77FB875E21FD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {6322FA18-435B-4C26-8B18-7E8F8C574064} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {6AD78D2D-893A-4950-B222-224A3CABCA32} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - \Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task -> No File <==== ATTENTION
Task: {7ACABD1A-59C9-458A-B6F1-2550F247F167} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {800B64BF-AD48-459D-93CD-4E50B08E5D9E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {80633B3E-A4E3-465D-8719-3023AF621E7A} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_142_Plugin.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {80A2684D-1D9B-4478-9952-31152CFA63F1} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - \Microsoft\Windows\SkyDrive\Routine Maintenance Task -> No File <==== ATTENTION
Task: {8A66DC2A-7806-43CA-9D6B-DBFDBCE157CD} - \Microsoft\Windows\ErrorDetails\ErrorDetailsUpdate -> No File <==== ATTENTION
Task: {8EFE4AD2-5DB2-419D-A4F5-34B3DF76F700} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\dvrcmd.exe
Task: {A83E4865-394F-4DFD-ACB6-3A9D478607A0} - \Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate -> No File <==== ATTENTION
Task: {B2F4AC84-A8D0-4524-9363-BFF5A5911A00} - \Microsoft\Windows\BrokerInfrastructure\BgTaskRegistrationMaintenanceTask -> No File <==== ATTENTION
Task: {B324C2FA-98A3-4C20-A0B6-DBD9F84504F9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {B7C54997-8B11-48FC-BCF5-C2B37EC77C61} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe (Advanced Micro Devices, Inc.) [File not signed]
Task: {C66B47FA-65D4-4F57-9018-0087519C722C} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {C9ACBFD2-20AA-4A3F-BE1A-A3D5279BB1BB} - \Microsoft\Windows\Plug and Play\Plug and Play Cleanup -> No File <==== ATTENTION
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - \Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor -> No File <==== ATTENTION
Task: {D784CC6F-618A-4727-A55A-08319E5C15F7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {DB369815-B1F9-4840-91BB-ABC5BD9ED91C} - System32\Tasks\Обновление Браузера Яндекс => C:\Users\Damir\AppData\Local\Yandex\YandexBrowser\Application\browser.exe (YANDEX LLC -> YANDEX LLC)
Task: {E6010D43-6AE7-4B59-8E67-EC78FD8E8E96} - \Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler -> No File <==== ATTENTION
Task: {E88E1500-7E50-4BF2-8268-C0CE36988C66} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {EAFDED1B-A1D7-4086-917D-447388C77920} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe (Apple Inc. -> Apple Inc.)
Task: {EB25F498-3252-4833-BA42-6218565A55CA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {F34E7A25-541D-4C63-A2D5-58EDB7A5A983} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\Обновление Браузера Яндекс.job => C:\Users\Damir\AppData\Local\Yandex\YandexBrowser\Application\browser.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


Shortcut: C:\Users\Администратор.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Дополнительные возможности.lnk -> C:\Windows\System32\fodhelper.exe (Microsoft Corporation) <==== Cyrillic
Shortcut: C:\Users\Администратор.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Корзина.lnk -> [LFx@_dP/N1SPSU(Ly9K-q/{D3414F45-E1E7-4CD9-AFEB-624199E539B7}\>@78=0] <==== Cyrillic
Shortcut: C:\Users\Администратор.000\AppData\Roaming\Microsoft\Windows\SendTo\Передача файлов через Bluetooth.LNK -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation) <==== Cyrillic
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Регистрация I.R.I.S. OCR.lnk -> C:\Program Files (x86)\HP\Digital Imaging\DocProc\regipe.exe (I.R.I.S. Image Recognition Integarted Systems) <==== Cyrillic

ShortcutWithArgument: C:\Users\Администратор.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Приложения Chrome\Advanced REST client.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=hgmloofddffdnphfgcellkdfbfbjeloo
ShortcutWithArgument: C:\Users\Администратор.000\AppData\Roaming\Microsoft\Windows\SendTo\Получатель факса.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo <==== Cyrillic

==================== Loaded Modules (Whitelisted) ==============

2010-08-06 11:15 - 2010-08-06 11:15 - 000071680 _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzinw12.dll
2010-08-06 11:15 - 2010-08-06 11:15 - 000089600 _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzipm12.dll
2013-05-11 17:45 - 2013-05-11 17:45 - 000733696 _____ (Intel(R) Corporation) [File not signed] C:\Program Files\Intel\iCLS Client\HeciServer.exe
2009-12-24 03:34 - 2009-12-24 03:34 - 000370688 _____ (StarWind Software) [File not signed] C:\Program Files (x86)\Alcohol 120\StarWind\StarWindServiceAE.exe
2011-08-18 01:29 - 2011-08-18 01:29 - 001039360 _____ (Hewlett-Packard Co.) [File not signed] c:\program files (x86)\hp\digital imaging\bin\hpslpsvc64.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000355328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngine.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 076171264 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngineCore.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 003699712 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 005590528 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000461312 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll
2018-12-20 17:51 - 2018-12-20 17:51 - 006303232 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll
2018-12-20 17:51 - 2018-12-20 17:51 - 003556352 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 002821632 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5XmlPatterns.dll
2018-12-20 17:51 - 2018-12-20 17:51 - 001077248 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000189952 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll
2019-01-09 19:03 - 2019-01-09 19:03 - 005786112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000113152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebChannel.dll
2018-12-20 17:51 - 2018-12-20 17:51 - 000323584 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Positioning.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 001413632 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\platforms\qwindows.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000135680 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\styles\qwindowsvistastyle.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000014336 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libEGL.DLL
2018-12-20 17:52 - 2018-12-20 17:52 - 002551808 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qgif.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000040960 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qicns.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qico.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000345600 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qjpeg.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qsvg.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000331264 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Svg.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000024576 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qtga.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000023552 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qwbmp.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000502784 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\imageformats\qwebp.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000017408 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000327680 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000059392 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\qtgraphicaleffectsplugin.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000017920 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000053760 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000089600 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2018-12-20 17:52 - 2018-12-20 17:52 - 000137728 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll
2018-04-18 19:11 - 2018-04-18 19:11 - 000144896 _____ () [File not signed] C:\Users\Damir\AppData\Local\GameCenter\zlib1.dll
2018-04-18 19:11 - 2018-08-08 00:02 - 000508416 _____ (The curl library, hxxps://curl.haxx.se/) [File not signed] C:\Users\Damir\AppData\Local\GameCenter\libcurl.dll
2018-04-18 19:11 - 2019-03-04 15:08 - 000158720 _____ (Igor Pavlov) [File not signed] C:\Users\Damir\AppData\Local\GameCenter\7zxa.dll
2018-10-29 12:25 - 2018-10-29 12:25 - 091392000 _____ () [File not signed] C:\Users\Damir\AppData\Local\GameCenter\Chrome\3.3538.1848\libcef.dll
2018-10-26 23:32 - 2018-10-26 23:32 - 000589824 _____ (The Chromium Authors) [File not signed] C:\Users\Damir\AppData\Local\GameCenter\Chrome\3.3538.1848\chrome_elf.dll
2014-05-28 10:10 - 2014-05-28 10:10 - 000296960 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\PsiData.dll
2014-05-28 10:10 - 2014-05-28 10:10 - 000526336 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\ISDI2.dll
2018-10-26 21:15 - 2018-10-26 21:15 - 002245632 _____ () [File not signed] C:\Users\Damir\AppData\Local\GameCenter\Chrome\3.3538.1848\swiftshader\libglesv2.dll
2018-10-26 21:15 - 2018-10-26 21:15 - 000119296 _____ () [File not signed] C:\Users\Damir\AppData\Local\GameCenter\Chrome\3.3538.1848\swiftshader\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [432]
AlternateDataStreams: C:\ProgramData\TEMP:10D14739 [147]
AlternateDataStreams: C:\Users\Damir\Application Data:00e481b5e22dbe1f649fcddd505d3eb7 [362]
AlternateDataStreams: C:\Users\Damir\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [362]
AlternateDataStreams: C:\Users\Все пользователи\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\Users\Все пользователи\MTA San Andreas All:NT2 [432]
AlternateDataStreams: C:\Users\Все пользователи\TEMP:10D14739 [147]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-12-25 14:18 - 2018-02-24 12:33 - 000000004 _____ C:\WINDOWS\system32\drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\AMD\ATI.ACE\Core-Static;C:\Program Files (x86)\Skype\Phone\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\Control Panel\Desktop\\Wallpaper -> C:\Users\Damir\Desktop\maxresdefault.jpg
HKU\S-1-5-21-3327491866-1701107999-1953143478-500\Control Panel\Desktop\\Wallpaper -> C:\Users\Администратор.000\Pictures\larm-rmah-47685-unsplash.jpg
DNS Servers: 192.168.100.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "XFast LAN"
HKLM\...\StartupApproved\Run: => "IAStorIcon"
HKLM\...\StartupApproved\Run: => "StartCCC"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "MouseDriver"
HKLM\...\StartupApproved\Run: => "Malwarebytes TrayApp"
HKLM\...\StartupApproved\Run: => "FG_Monitor"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKLM\...\StartupApproved\Run32: => "XFastUSB"
HKLM\...\StartupApproved\Run32: => "Raptr"
HKLM\...\StartupApproved\Run32: => "PPRX"
HKLM\...\StartupApproved\Run32: => "Aimersoft Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKU\S-1-5-21-3327491866-1701107999-1953143478-1008\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\StartupApproved\StartupFolder: => "Create virtual drive for Denwer.lnk"
HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\StartupApproved\Run: => "HydraVisionDesktopManager"
HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\StartupApproved\Run: => "Uninstall C:\Users\Администратор\AppData\Local\Microsoft\OneDrive\17.3.5892.0626"
HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\StartupApproved\Run: => "Uninstall C:\Users\Администратор\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\StartupApproved\Run: => "Uninstall C:\Users\Администратор\AppData\Local\Microsoft\OneDrive\17.3.5907.0716"
HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\StartupApproved\Run: => "Uninstall C:\Users\Администратор\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"
HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\StartupApproved\Run: => "BitTorrent"
HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\StartupApproved\Run: => "BlueStacks Agent"
HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\StartupApproved\Run: => "GameCenterMailRu"
HKU\S-1-5-21-3327491866-1701107999-1953143478-500\...\StartupApproved\Run: => "iCloudServices"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{BF8EB189-0C5E-4CCA-8C1C-BEF34D7C27EC}E:\steamlibrary\steamapps\common\pubg_test\tslgame\binaries\win64\tslgame.exe] => (Allow) E:\steamlibrary\steamapps\common\pubg_test\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
FirewallRules: [TCP Query User{3F9B2327-28C0-437A-978B-B65564FF1708}E:\steamlibrary\steamapps\common\pubg_test\tslgame\binaries\win64\tslgame.exe] => (Allow) E:\steamlibrary\steamapps\common\pubg_test\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
FirewallRules: [UDP Query User{71FD52C8-5394-443B-A146-D514059993C1}E:\assasin's creed ii\assasin's creed ii\assassin's creed iii\ac3sp.exe] => (Allow) E:\assasin's creed ii\assasin's creed ii\assassin's creed iii\ac3sp.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [TCP Query User{33E08520-EE2D-45F0-9141-4148FA5EDC3B}E:\assasin's creed ii\assasin's creed ii\assassin's creed iii\ac3sp.exe] => (Allow) E:\assasin's creed ii\assasin's creed ii\assassin's creed iii\ac3sp.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [UDP Query User{AEEFC76E-E40A-42F2-92EB-B996AD7404F2}C:\program files (x86)\brackets\node.exe] => (Block) C:\program files (x86)\brackets\node.exe No File
FirewallRules: [TCP Query User{CEE09EBE-81FC-4636-A818-6743E2D56562}C:\program files (x86)\brackets\node.exe] => (Block) C:\program files (x86)\brackets\node.exe No File
FirewallRules: [UDP Query User{B5D103A7-115C-4AD4-BA53-74F2FD0D2AE7}E:\games\[r.g. mechanics] call of duty anthology\01. call of duty\call of duty\codmp.exe] => (Block) E:\games\[r.g. mechanics] call of duty anthology\01. call of duty\call of duty\codmp.exe () [File not signed]
FirewallRules: [TCP Query User{0F97B3BB-AC2B-4DF5-9428-B9899094AEFB}E:\games\[r.g. mechanics] call of duty anthology\01. call of duty\call of duty\codmp.exe] => (Block) E:\games\[r.g. mechanics] call of duty anthology\01. call of duty\call of duty\codmp.exe () [File not signed]
FirewallRules: [{29D6D07C-E932-4900-A448-9589A3ADA689}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe No File
FirewallRules: [{BE14687D-DAD9-4E2F-9679-AC684A35C4D5}] => (Allow) C:\Program Files (x86)\Nox\bin\Nox.exe No File
FirewallRules: [UDP Query User{6E760D78-7916-435D-8888-05F20725D495}C:\users\damir\appdata\local\gamecenter\gamecenter.exe] => (Allow) C:\users\damir\appdata\local\gamecenter\gamecenter.exe (Mail.Ru, LLC -> MY.COM B.V.)
FirewallRules: [TCP Query User{BE0E01C2-6D63-4194-9869-53D8426D6C42}C:\users\damir\appdata\local\gamecenter\gamecenter.exe] => (Allow) C:\users\damir\appdata\local\gamecenter\gamecenter.exe (Mail.Ru, LLC -> MY.COM B.V.)
FirewallRules: [{F064F1A1-E190-4BC1-A485-D64F7525E5DD}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{50A2F7E6-6935-4166-9A8C-C1C38716DBA9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4D33FEAF-DEAD-4C33-A46C-2B01032D42A3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C4C05FDC-2A78-4E23-863C-4754C65E1A8C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{8371368D-A7D7-4FC4-B133-FF5C18C028BC}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [UDP Query User{35389970-D5BB-44B8-8223-6E948B4A2775}E:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) E:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
FirewallRules: [TCP Query User{DA27FF1B-D563-4774-B086-689F3EA97B9E}E:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) E:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
FirewallRules: [{72DC4ED1-BFCE-4846-9D1A-9AD9C09B3AD1}] => (Allow) C:\WINDOWS\SysWOW64\svchost.exe (Microsoft Windows Publisher -> Microsoft Corporation)
FirewallRules: [{A7A2F972-588E-41BE-BFDE-C68932DA5CCD}] => (Allow) C:\WINDOWS\SysWOW64\UNVIkUAaPTf.exe (Microsoft Corporation) [File not signed]
FirewallRules: [{C125BA65-1A6B-4C79-8CFA-1DD5E072DA8D}] => (Allow) C:\Users\Damir\AppData\Roaming\ahHAAV.exe (Microsoft Corporation) [File not signed]
FirewallRules: [{F51A7AE8-2CCE-47AC-9F92-12A543AA6353}] => (Allow) C:\WINDOWS\SysWOW64\msiexec.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [UDP Query User{CD3E81A5-7033-4FAD-AA9C-E6D0626FB661}C:\users\damir\appdata\roaming\.vimeworld\vimeworld.exe] => (Block) C:\users\damir\appdata\roaming\.vimeworld\vimeworld.exe (Dmytro Manchynskyi -> VimeWorld)
FirewallRules: [TCP Query User{C75209CC-A8A1-4148-9745-EC8A09DB55EF}C:\users\damir\appdata\roaming\.vimeworld\vimeworld.exe] => (Block) C:\users\damir\appdata\roaming\.vimeworld\vimeworld.exe (Dmytro Manchynskyi -> VimeWorld)
FirewallRules: [UDP Query User{90DA80AD-D9C4-495F-B75D-F73415DB1C87}E:\cs source\counter-strike source v34\hl2.exe] => (Block) E:\cs source\counter-strike source v34\hl2.exe () [File not signed]
FirewallRules: [TCP Query User{2EF36AD7-7DB3-42FB-8B2A-88CED9860757}E:\cs source\counter-strike source v34\hl2.exe] => (Block) E:\cs source\counter-strike source v34\hl2.exe () [File not signed]
FirewallRules: [{80D29826-393F-4B78-9F4D-DE43C15EA566}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe (Hewlett-Packard Company -> Hewlett-Packard)
FirewallRules: [{3145C47B-526F-4903-9A34-08EF069DCC7F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{22C3524E-1FA4-407A-9294-117D2D720471}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{07B67393-7DC0-4C22-9130-1ABDDF2630C6}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (Hewlett Packard -> Hewlett-Packard)
FirewallRules: [{90BC4105-4EB9-4702-95F4-BFD8210CB987}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{74DAF377-1A54-4E24-ACB6-821C823BCAA0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{20F997C6-3DAE-4F43-8D71-346CFC111E7A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{6C0BD5A5-BCB7-4A0A-872B-E42EAB7D90F5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{258BD8BA-382E-4B17-97AE-EE729821C0A3}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe (Hewlett-Packard Co.) [File not signed]
FirewallRules: [{776CA523-2E83-43FD-A641-D790CCEECD56}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{851106E5-C16A-4AE0-9F26-878A6257603D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{9A37C342-CE4F-40F6-B5E1-1B5E9A037130}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{BFC0412B-55F8-4D4C-84CD-FB7DB2A0BFF5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{2D6FA94B-BF68-442E-887B-439FEFB5BEFE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{4883E010-67CE-482D-862B-EF8A5A547CD4}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{DEDBCAA2-9692-43D8-96E1-D5C0C04BF873}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{2E136B1F-FDDE-4A8B-9ED8-56C188CF4F71}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{5A86B715-5C4D-43F1-B7FF-4E3DA85EA8A2}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{B04A3748-75D6-4E2B-B784-C62E0F680C0D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{4C31D260-E6BD-43CA-A75C-B6B351E05BAA}] => (Block) E:\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [{5FCE3DA7-5643-4DF0-918C-1E23701E20EB}] => (Block) E:\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [UDP Query User{C50039F8-759B-4214-ADD0-27E42ED622AE}E:\hearthstone\hearthstone.exe] => (Allow) E:\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [TCP Query User{569DCB09-423A-4CAB-B44B-9DF94367D63B}E:\hearthstone\hearthstone.exe] => (Allow) E:\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [{588ADC64-F613-4813-B81B-D6536E07802F}] => (Block) E:\dishonored\binaries\win32\dishonored.exe (Bethesda Softworks -> ZeniMax Media Inc.)
FirewallRules: [{4018ADD3-8965-49E1-B9E9-53420F5AD33E}] => (Block) E:\dishonored\binaries\win32\dishonored.exe (Bethesda Softworks -> ZeniMax Media Inc.)
FirewallRules: [UDP Query User{DA682312-0235-4755-8477-742BDC4AC1F7}E:\dishonored\binaries\win32\dishonored.exe] => (Allow) E:\dishonored\binaries\win32\dishonored.exe (Bethesda Softworks -> ZeniMax Media Inc.)
FirewallRules: [TCP Query User{57DB1926-AB16-4DEA-B222-727A03B6D28D}E:\dishonored\binaries\win32\dishonored.exe] => (Allow) E:\dishonored\binaries\win32\dishonored.exe (Bethesda Softworks -> ZeniMax Media Inc.)
FirewallRules: [UDP Query User{985CEF40-7632-4857-86AB-7DAADF872D2B}C:\program files (x86)\high sky launcher\java\x86_64\bin\java.exe] => (Allow) C:\program files (x86)\high sky launcher\java\x86_64\bin\java.exe
FirewallRules: [TCP Query User{FA6C2F6F-18BF-4D64-BB7D-D911A7681906}C:\program files (x86)\high sky launcher\java\x86_64\bin\java.exe] => (Allow) C:\program files (x86)\high sky launcher\java\x86_64\bin\java.exe
FirewallRules: [{20E943BF-60ED-49A0-843C-AF517D75F614}] => (Allow) E:\FIFA 14\Game\fifa14.exe (Electronic Arts -> Electronic Arts)
FirewallRules: [{D4505D39-2073-4A0F-989D-B8295FFAB40C}] => (Allow) E:\FIFA 14\Game\fifa14.exe (Electronic Arts -> Electronic Arts)
FirewallRules: [{D6BF42F7-C501-47A8-B6E0-B13996AA7FD0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{624E4F16-F031-4A42-ADA6-17C6BF104155}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{395BDC32-5A94-4BDE-8046-4915A169B1FA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{7F395FFC-DE94-44B5-B4F5-3B2B02A1CF72}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{9EC613B6-2C25-4C29-B6AF-746EB3AAAC6A}] => (Allow) E:\SteamLibrary\steamapps\common\The Binding Of Isaac\Isaac.exe (Edmund Mcmillen & Florian Himsl ) [File not signed]
FirewallRules: [{E2E9DED2-44F7-4640-B127-5A9FE854EE8D}] => (Allow) E:\SteamLibrary\steamapps\common\The Binding Of Isaac\Isaac.exe (Edmund Mcmillen & Florian Himsl ) [File not signed]
FirewallRules: [{E1BE4F2C-7A8A-40D1-8BF1-931B829DBD66}] => (Allow) C:\Program Files (x86)\Garena Plus\ggdllhost.exe (Garena Online Pte Ltd -> )
FirewallRules: [{7E90413D-3F44-4A59-A5DE-531C5F1DE06E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{34618C14-09A8-4B29-9E7C-330631E74491}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{50F62196-7F1F-491B-8508-37D9B8F68C12}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{16E84854-B6F5-4D57-B0A7-D40B29C47E9F}] => (Allow) C:\Program Files (x86)\MCoffline\MCoffline\MCoffline.exe (MCoffline Team) [File not signed]
FirewallRules: [{99A76D8D-6130-49FA-9226-C3A1054177BC}] => (Allow) C:\Program Files (x86)\MCoffline\MCoffline\MCoffline.exe (MCoffline Team) [File not signed]
FirewallRules: [{BEF57ECE-10BF-4A80-937B-F4F28F8A5421}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{0AA5A0C5-4621-4ACF-9338-EB12AC8ECFD1}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [TCP Query User{F8AD6EB9-0875-4559-8852-0205C4720027}C:\program files\java\jre1.8.0_77\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_77\bin\javaw.exe
FirewallRules: [UDP Query User{85C4EC16-2C1D-419D-ABB2-7A40B77F438E}C:\program files\java\jre1.8.0_77\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_77\bin\javaw.exe
FirewallRules: [{2A47F041-993D-464E-A368-6047C049C591}] => (Allow) E:\R.G. Catalyst\FIFA 15\fifasetup\fifaconfig.exe (Electronic Arts -> Electronic Arts Canada)
FirewallRules: [{04FC671B-42DA-4380-835F-4FDFFFD1B1FA}] => (Allow) E:\R.G. Catalyst\FIFA 15\fifasetup\fifaconfig.exe (Electronic Arts -> Electronic Arts Canada)
FirewallRules: [TCP Query User{D259EDBE-9A35-401D-AE79-74043ED6CDFB}E:\warthunder\warthunder\launcher.exe] => (Allow) E:\warthunder\warthunder\launcher.exe (Gaijin Entertainment LLP -> Gaijin Entertainment)
FirewallRules: [UDP Query User{2A8A9538-27EA-47B9-AD86-11FC07DDCD21}E:\warthunder\warthunder\launcher.exe] => (Allow) E:\warthunder\warthunder\launcher.exe (Gaijin Entertainment LLP -> Gaijin Entertainment)
FirewallRules: [{2F9EF9FD-8100-4DF3-9219-DE2F67E95AF8}] => (Block) E:\warthunder\warthunder\launcher.exe (Gaijin Entertainment LLP -> Gaijin Entertainment)
FirewallRules: [{BAB8D69C-A36B-4723-B374-991D7AC8CEE4}] => (Block) E:\warthunder\warthunder\launcher.exe (Gaijin Entertainment LLP -> Gaijin Entertainment)
FirewallRules: [TCP Query User{34487BFB-6533-4F46-B77D-AABB1C1FE73C}E:\wot\worldoftanks.exe] => (Allow) E:\wot\worldoftanks.exe (Wargaming.net LLP -> Wargaming.net) [File not signed]
FirewallRules: [UDP Query User{AA723EB0-3608-4869-B09D-9DF68EE3D943}E:\wot\worldoftanks.exe] => (Allow) E:\wot\worldoftanks.exe (Wargaming.net LLP -> Wargaming.net) [File not signed]
FirewallRules: [{44606956-8A27-496C-AC03-7F091C28BCF3}] => (Block) E:\wot\worldoftanks.exe (Wargaming.net LLP -> Wargaming.net) [File not signed]
FirewallRules: [{E1F674D0-D909-48B3-B78B-9075C7C29527}] => (Block) E:\wot\worldoftanks.exe (Wargaming.net LLP -> Wargaming.net) [File not signed]
FirewallRules: [TCP Query User{CAEEB2BA-3E23-47BC-AC95-15D97A830C17}E:\wot\wotlauncher.exe] => (Allow) E:\wot\wotlauncher.exe (Wargaming.net LLP -> Wargaming.net) [File not signed]
FirewallRules: [UDP Query User{BFD01C8C-6C47-4FFE-929E-BC5F6B92CD40}E:\wot\wotlauncher.exe] => (Allow) E:\wot\wotlauncher.exe (Wargaming.net LLP -> Wargaming.net) [File not signed]
FirewallRules: [{7D1E47C1-EE43-405A-B123-33BC528A4A93}] => (Block) E:\wot\wotlauncher.exe (Wargaming.net LLP -> Wargaming.net) [File not signed]
FirewallRules: [{D95906D3-0215-47E9-8ABA-81D681946DCE}] => (Block) E:\wot\wotlauncher.exe (Wargaming.net LLP -> Wargaming.net) [File not signed]
FirewallRules: [{F105FECE-D8AD-4D58-A039-881F2137705C}] => (Allow) C:\Program Files (x86)\RaidCall.RU\rcplugin.exe (Beijing Changyou Raidcall Internet Tech Co.,Ltd Guangzhou branch -> RAIDCALL.COM) [File not signed]
FirewallRules: [{E6409095-3307-4E48-B4FE-FBB9CC476853}] => (Allow) C:\Program Files (x86)\RaidCall.RU\rcplugin.exe (Beijing Changyou Raidcall Internet Tech Co.,Ltd Guangzhou branch -> RAIDCALL.COM) [File not signed]
FirewallRules: [{12CDBC94-9F4E-4862-8D3D-D0EFD4FAD19F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{64BBB978-4355-4D9F-AA6F-0D8B82E50DDC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{05DBEA8C-DC2D-4E1E-9CBD-ECC2B14A9334}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe No File
FirewallRules: [{76555610-253A-468B-9D19-6549BE3DA8D9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe No File
FirewallRules: [{678B893C-8318-4940-920D-9C456FEEA41B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{A91A64FF-328B-4440-A2F6-DBEA4E69BEF0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{523BD6C6-DBCA-4FC3-B747-65D72EF0E51A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{E2097351-7B08-4756-8CD0-5B17B953A9F5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{5B7B34C3-7D15-40CF-AB51-7A5841AA98E9}] => (Allow) C:\Users\Администратор.000\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{6EC354F6-3CC5-467D-8749-613357983685}] => (Allow) C:\Users\Администратор.000\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{6DD258C9-9C45-4588-8D18-F0A1DA168B25}] => (Allow) C:\Users\Администратор.000\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{F3820F79-CC35-4254-A644-85E35330F0FA}] => (Allow) C:\Users\Администратор.000\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{05B84DFD-2ED4-4972-A159-70454BD67B1A}] => (Allow) C:\Users\Администратор.000\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{B2203184-02CE-4B2C-AA15-7436B1C053D0}] => (Allow) C:\Users\Администратор.000\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{F1C87BB8-C1CE-4E8D-A0AA-2358015956A7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{28E11328-3BC7-4C01-9FFC-2DDF5435CE19}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{5EFC1D5F-F668-4EBB-9F67-6CDA83F5DE2F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{7DE0EA31-8304-4B99-B525-A5A68F25DF46}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{DA08307F-101D-4895-89C4-836C049BF983}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{6063D515-62B8-4EFB-9868-723E140C2F35}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{4E3B7A8B-39B2-4D33-95F1-227ABCB2F4A2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{73CA2472-03CD-4E59-8EF7-05A585100203}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{B8E7DB62-C687-43D1-AAE4-80463345DFD4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{7B761120-19A7-461A-9E54-938F2C3ED211}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{5428AA70-2D73-4B9F-84FA-B14429F90E41}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{3F3F04EA-1B3B-4FD2-8D94-71C2A14A2FC5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{BBB6C90F-B3F3-4A5E-8600-6D6B06B284C2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{391D4C29-A7AD-4204-93CE-5A2246BB3720}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{343981F8-49E8-4D6F-B44C-A97EBB1FC35E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{39F14244-8846-48F8-9C86-709BECE2DF88}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{2B25557C-37F6-4F61-8D75-81C0FFD145C0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{0798913E-B56F-4328-9FF0-601AE25B6EFD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{F41E8726-05CB-4F71-8423-0884D170A083}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{9AD26384-DF7E-4D75-B89A-5FB69102CC03}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{34418701-0373-416B-991D-3A2B6939F030}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{1FA3067E-8FDC-4830-A30F-3CF1259F9B27}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{CC31DC31-7F72-4FDC-9E60-1449CF10ECAD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{0C6DFC7A-10CE-40FF-9F32-03FD60326034}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [TCP Query User{2F1A371F-2073-429C-B98B-33D0C580FC4D}C:\program files\java\jre1.8.0_77\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_77\bin\java.exe
FirewallRules: [UDP Query User{884BEE15-5DBE-4A59-8955-201FD8253DFD}C:\program files\java\jre1.8.0_77\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_77\bin\java.exe
FirewallRules: [{97F94846-1BC0-4B86-8E48-95FFF1FB2987}] => (Block) C:\program files\java\jre1.8.0_77\bin\java.exe
FirewallRules: [{56292023-C1AE-40F5-AB4C-E68FD0E6395C}] => (Block) C:\program files\java\jre1.8.0_77\bin\java.exe
FirewallRules: [{78B167DF-0F35-4DFB-842F-B14A3F712D6C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{72D6B632-8187-48F8-AEE6-14814CAF7EA9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{1460D3B1-0EAB-4C89-A814-1A648821731D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{7EDC4EB5-4360-450F-8DB9-1DAAC1163043}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{708C299B-0ECE-40D3-B5C0-062D2E2E2CC7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{0DF6D611-28D1-470E-98BA-7BF1A83307D7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{C3864470-8B6A-4279-9C99-E2F9BDE8150A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{03B0365B-10A9-487F-A717-3D1F51A034B1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{B7CE4A80-7211-4C71-9ADF-1FE4E71E9A7B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{CF75D29A-6A1B-4048-83A4-EF1F4226097E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{0852FA86-E857-4B81-A42D-84E5F39A4550}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{707B457D-AAE5-4947-9533-7B3ECF702424}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{8E993144-13ED-4152-BE58-2C2A3383D355}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{CCB03951-93EB-4B90-8536-5A8DCFE815DD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{85A7BAB7-8157-446E-89D9-2FA6358DC460}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{4CC23946-993D-475B-88FA-320590C20238}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{0E5F13A7-E5DF-4B57-B111-5F1AF037ADAB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{8C21EFAC-D72E-487F-B6DC-A40D8253BA80}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{3E8BA693-77C5-4AB5-AD81-A2313314EFFC}] => (Allow) E:\SteamLibrary\steamapps\common\Brawlhalla\Brawlhalla.exe () [File not signed]
FirewallRules: [{D1A80B49-8835-437A-9406-0F619B4CA3C3}] => (Allow) E:\SteamLibrary\steamapps\common\Brawlhalla\Brawlhalla.exe () [File not signed]
FirewallRules: [{A1066EF2-48FC-4A53-B61E-168EBD3BD92B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{D1B0785B-17EE-40C9-A677-F08C45645FAF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{13751B8D-C1AB-4599-8912-BF8336B9F87C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{3B603D15-69D5-4B69-8F35-D2953AC6896E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{8FCB2FAE-0B53-4DB0-A742-E7F50DAF8D67}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{BDAA6F24-44E6-419B-B304-4CA358DDB6DF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{E2D455F4-B00B-4E6B-8DB4-5F6BC1CD626A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{1FE3584E-C9F8-4863-9488-1990FD713DB3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{E36065B8-CCC6-441B-8E87-5CAB49E5A771}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{E2601A20-E48B-47EE-B323-AD6B7F03F618}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{11F8B2ED-5D35-4665-9082-F84B529BA291}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{DFD4A57B-6247-45F0-826A-806F414F0092}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{379DAA56-3454-4EA6-BBA3-C54481E79680}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{3147C87D-C45C-4E20-A87B-200C23E492E5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{B6F98F65-293A-4BCE-ACA4-26EFB0A379C2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{412B2A8E-A5A1-42FD-9D0B-0EE6D4BBA4A9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{C4065A9B-4F66-4ABA-8EFB-C1525364B2A7}] => (Allow) E:\SteamLibrary\steamapps\common\Euro Truck Simulator\eurotrucks.exe (SCS Software s.r.o. -> )
FirewallRules: [{9B298A65-81F6-49C6-8A5E-B46605D84C2A}] => (Allow) E:\SteamLibrary\steamapps\common\Euro Truck Simulator\eurotrucks.exe (SCS Software s.r.o. -> )
FirewallRules: [{0A538AF9-A066-4906-A8B3-1335752E1F74}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{BE14F125-69B1-462B-80C8-951E847B6BB3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{A2CACD99-B134-44BE-B1A3-8248B8B0D6D8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{183A02E8-2079-4265-BF2D-24919B3E5868}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{9A2EAD99-B4A1-47AD-9DBC-D473712FAACA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{0D4F1F46-21B8-4E13-98E3-B0D8293177CC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{694D8961-85D0-4A8F-93CD-0F4BFA9DCA08}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{05EA8BE3-9EDC-4DDF-B5A2-2133CB24444A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{D799977E-DFB6-4205-BD49-F66F129AAAC0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{BBCFE2F1-7A19-4EEB-8F33-3F39F8D492A7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{0ACE8D97-C8C6-470C-BFE7-30A15CC4CFE6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{49F7830F-1F46-4619-8935-0D5784439F62}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{E159935D-BBCA-4791-84E1-8D341B90564A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{359795F8-B7A0-43A6-9F71-4A28E9315DFD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{53587927-6E9F-4E71-8F67-AE4C3150890A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{95190F4D-BD7E-4CCF-9A9A-1503DF699E86}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{BE621554-DC41-4F23-8379-B0EA01F4334B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{A11B6D4F-6FE7-4249-9E9D-B6D1FDC6DF84}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{621B7DDD-7BDE-4CF4-9FE9-FFCE9A758092}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [{B860CEE0-9096-4397-A763-186E6477DF29}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe No File
FirewallRules: [TCP Query User{79502277-C3A2-4483-9BE5-8991B99235DC}C:\users\damir\appdata\local\mozilla firefox\firefox.exe] => (Block) C:\users\damir\appdata\local\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{71EC5DD3-607F-47AC-B139-FDD9941B3E3B}C:\users\damir\appdata\local\mozilla firefox\firefox.exe] => (Block) C:\users\damir\appdata\local\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{13765FE6-632E-4C31-964A-1C4950BBDBC6}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{F653B979-03C3-4397-99B9-893B4AAC1FAF}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{682418F6-4600-456F-B77F-C4E5FE4DA1FE}] => (Allow) C:\Users\Damir\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{EDFAB649-F110-42A5-8D08-7B0DFF9AB67C}] => (Allow) C:\Users\Damir\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [TCP Query User{C279E6EA-72A9-489C-8596-019837E11F10}C:\users\damir\appdata\roaming\utorrent\updates\3.5.0_44090.exe] => (Allow) C:\users\damir\appdata\roaming\utorrent\updates\3.5.0_44090.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [UDP Query User{D5341679-5533-4F9A-AF29-9F75BAA14B3E}C:\users\damir\appdata\roaming\utorrent\updates\3.5.0_44090.exe] => (Allow) C:\users\damir\appdata\roaming\utorrent\updates\3.5.0_44090.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [TCP Query User{FFA57B66-7245-42B5-8A6E-9C0F0190EFC1}E:\city car driving\city car driving [other s]\city car driving\bin\win32\starter.exe] => (Allow) E:\city car driving\city car driving [other s]\city car driving\bin\win32\starter.exe (Forward Development) [File not signed]
FirewallRules: [UDP Query User{525371B2-AAF5-4280-A982-5BBBDB23B61B}E:\city car driving\city car driving [other s]\city car driving\bin\win32\starter.exe] => (Allow) E:\city car driving\city car driving [other s]\city car driving\bin\win32\starter.exe (Forward Development) [File not signed]
FirewallRules: [TCP Query User{5A1CB962-E8AB-4D11-823B-7730C757BC85}E:\most wanted\[r.g. mechanics] need for speed most wanted black edition\redist\need for speed most wanted black edition\need for speed.exe] => (Block) E:\most wanted\[r.g. mechanics] need for speed most wanted black edition\redist\need for speed most wanted black edition\need for speed.exe () [File not signed]
FirewallRules: [UDP Query User{8F5DF4AB-E814-433A-ABFF-FA4AC43FC693}E:\most wanted\[r.g. mechanics] need for speed most wanted black edition\redist\need for speed most wanted black edition\need for speed.exe] => (Block) E:\most wanted\[r.g. mechanics] need for speed most wanted black edition\redist\need for speed most wanted black edition\need for speed.exe () [File not signed]
FirewallRules: [{3593ABFA-8F45-4E91-B733-3CAF6D7001DB}] => (Allow) E:\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{C5EA2A43-56EC-4F16-9D61-3A807CE2CCF1}] => (Allow) E:\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{60F1A081-91AD-4792-8EAD-2ABF3D98D3D7}] => (Allow) C:\Users\Damir\AppData\Local\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{2D9EC5ED-994E-4BCB-9BA8-06425A2C04C4}] => (Allow) C:\Users\Damir\AppData\Local\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{CF84B829-ECB0-48AB-B66E-F904C9D3FF14}] => (Allow) C:\Windows\AutoKMS\AutoKMS.exe () [File not signed]
FirewallRules: [{0AE73EEA-F6C0-476C-8743-BFF329F958D7}] => (Allow) C:\Windows\AutoKMS\AutoKMS.exe () [File not signed]
FirewallRules: [TCP Query User{D83B4C22-DEA8-43AD-8DCA-B57BE5A4ABE2}C:\users\damir\appdata\local\googleupdate\googleupdate.exe] => (Block) C:\users\damir\appdata\local\googleupdate\googleupdate.exe () [File not signed]
FirewallRules: [UDP Query User{DA823D51-36BD-4BB8-87E6-0DB569097988}C:\users\damir\appdata\local\googleupdate\googleupdate.exe] => (Block) C:\users\damir\appdata\local\googleupdate\googleupdate.exe () [File not signed]
FirewallRules: [{A503E594-8A09-462D-8E03-00BA4D83B320}] => (Allow) C:\Users\Damir\AppData\Local\GoogleUpdate\GoogleUpdate.exe () [File not signed]
FirewallRules: [TCP Query User{700DF32E-9BF4-43CC-860A-BAB6E45A9CE5}E:\singularity\binaries\singularity.exe] => (Allow) E:\singularity\binaries\singularity.exe (Raven Software) [File not signed]
FirewallRules: [UDP Query User{F0B4E353-584C-4740-8E91-15C251DAFEE4}E:\singularity\binaries\singularity.exe] => (Allow) E:\singularity\binaries\singularity.exe (Raven Software) [File not signed]
FirewallRules: [TCP Query User{22F010E2-8BD2-463F-A985-6C0A95A15483}E:\hearthstone\gta san andreas\server\mta server.exe] => (Block) E:\hearthstone\gta san andreas\server\mta server.exe (Hans Roes -> Multi Theft Auto)
FirewallRules: [UDP Query User{F729B386-2210-4785-80FE-312E4D06F5B9}E:\hearthstone\gta san andreas\server\mta server.exe] => (Block) E:\hearthstone\gta san andreas\server\mta server.exe (Hans Roes -> Multi Theft Auto)
FirewallRules: [{946CD669-7EBE-49B2-A5EA-373DCB519F82}] => (Allow) E:\SteamLibrary\steamapps\common\VRChat\VRChat.exe () [File not signed]
FirewallRules: [{1B0E5CE4-9BD5-4C44-BBD6-DA6600D48013}] => (Allow) E:\SteamLibrary\steamapps\common\VRChat\VRChat.exe () [File not signed]
FirewallRules: [TCP Query User{617E81BA-4AD2-4D23-8F3E-D299F7AE6397}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe No File
FirewallRules: [UDP Query User{66840B6C-2525-4274-A966-C81397FE7DF8}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe No File
FirewallRules: [TCP Query User{9CFF3404-1C59-4937-A5F5-54F52F0DCB75}C:\users\damir\appdata\roaming\cheatbreaker\cheatbreaker.exe] => (Allow) C:\users\damir\appdata\roaming\cheatbreaker\cheatbreaker.exe () [File not signed]
FirewallRules: [UDP Query User{781277BD-2838-4993-9385-51EEF8F4AAD2}C:\users\damir\appdata\roaming\cheatbreaker\cheatbreaker.exe] => (Allow) C:\users\damir\appdata\roaming\cheatbreaker\cheatbreaker.exe () [File not signed]
FirewallRules: [TCP Query User{596C58CA-E4C5-404E-88A4-BEB20A936DDD}C:\users\damir\appdata\local\rp box online\rpboxdownloader.exe] => (Allow) C:\users\damir\appdata\local\rp box online\rpboxdownloader.exe (Bravodev) [File not signed]
FirewallRules: [UDP Query User{D7D7CD6A-560A-42A7-B648-A745628B14ED}C:\users\damir\appdata\local\rp box online\rpboxdownloader.exe] => (Allow) C:\users\damir\appdata\local\rp box online\rpboxdownloader.exe (Bravodev) [File not signed]
FirewallRules: [{EC46FC5A-AEFC-4511-9A34-37F0F65987B0}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe No File
FirewallRules: [{11D8120B-3B16-4232-BB32-09C79984753F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe No File
FirewallRules: [{36E126FF-87FF-4432-B0B1-3F12E98FF0CA}] => (Allow) E:\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (Bluehole, Inc. -> PUBG Corporation )
FirewallRules: [{85ED908C-BEDF-40CA-A9B1-DF646AC1F1FA}] => (Allow) E:\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (Bluehole, Inc. -> PUBG Corporation )
FirewallRules: [{62C47206-E642-49A7-8266-E3C17B66BF5D}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{F1EEEF5B-1626-43EC-B779-D9F2800C30F4}E:\warface\warface\bin32release\game.exe] => (Allow) E:\warface\warface\bin32release\game.exe (Mail.Ru, LLC -> Crytek GmbH)
FirewallRules: [UDP Query User{722778AB-3B01-40F0-92F0-FD71B18C3FF7}E:\warface\warface\bin32release\game.exe] => (Allow) E:\warface\warface\bin32release\game.exe (Mail.Ru, LLC -> Crytek GmbH)
FirewallRules: [{60A20CC0-69CB-411D-937C-B6586951D132}] => (Allow) C:\Program Files (x86)\Ubisoft\James Cameron's AVATAR - THE GAME\bin\Avatar.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{C317CF56-141B-4612-B6F9-D94F24A05EAF}] => (Allow) C:\Program Files (x86)\Ubisoft\James Cameron's AVATAR - THE GAME\bin\Avatar.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{C65B07AE-373A-44F2-9231-E5359529288A}] => (Allow) C:\Program Files (x86)\Ubisoft\James Cameron's AVATAR - THE GAME\bin\AvatarLauncher.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{8A185354-58CF-4B45-AC02-146E795B1240}] => (Allow) C:\Program Files (x86)\Ubisoft\James Cameron's AVATAR - THE GAME\bin\AvatarLauncher.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{8CC97D58-3E04-458A-B7FC-F1F063B2EE8C}] => (Allow) E:\SteamLibrary\steamapps\common\War Thunder\launcher.exe (Gaijin Network LTD -> Gaijin Entertainment)
FirewallRules: [{097E462D-625C-47A1-B598-B41D436E06B2}] => (Allow) E:\SteamLibrary\steamapps\common\War Thunder\launcher.exe (Gaijin Network LTD -> Gaijin Entertainment)
FirewallRules: [{CD5A05F5-3E9D-43AC-A5B4-154854B46416}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)
FirewallRules: [{E69B78E5-738E-46BA-9AF4-2DCB0121B738}] => (Allow) E:\Origin\Apex\EasyAntiCheat_launcher.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{047FD4B7-AE8A-4754-A71E-3B591DB85530}] => (Allow) E:\Origin\Apex\EasyAntiCheat_launcher.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{16654A52-D768-4185-9A4D-CFDC2E38F97B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{9544BAE0-5414-445E-A4B9-9DBF6C1C311A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{E72665C7-8640-4363-B2CB-1024E6053AE2}] => (Allow) E:\SteamLibrary\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe (Valve -> )
FirewallRules: [{EF77D325-D225-4542-A35D-7DD2AD3BB119}] => (Allow) E:\SteamLibrary\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe (Valve -> )

==================== Restore Points =========================

08-03-2019 21:29:04 Запланированная контрольная точка

==================== Faulty Device Manager Devices =============

Name: LogMeIn Hamachi Virtual Ethernet Adapter
Description: LogMeIn Hamachi Virtual Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: LogMeIn Inc.
Service: Hamachi
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/09/2019 11:26:18 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (03/08/2019 09:23:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: bad_module_info, версия: 0.0.0.0, метка времени: 0x00000000
Имя сбойного модуля: unknown, версия: 0.0.0.0, метка времени: 0x00000000
Код исключения: 0x00000000
Смещение ошибки: 0x0000000000000000
Идентификатор сбойного процесса: 0x210
Время запуска сбойного приложения: 0x01d4d5c1b40af31d
Путь сбойного приложения: bad_module_info
Путь сбойного модуля: unknown
Идентификатор отчета: 2abcf9d4-61a9-4bcf-9605-b1dd87cbb4f1
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (03/08/2019 03:40:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: bad_module_info, версия: 0.0.0.0, метка времени: 0x00000000
Имя сбойного модуля: unknown, версия: 0.0.0.0, метка времени: 0x00000000
Код исключения: 0x00000000
Смещение ошибки: 0x0000000000000000
Идентификатор сбойного процесса: 0x1608
Время запуска сбойного приложения: 0x01d4d58dd29c800b
Путь сбойного приложения: bad_module_info
Путь сбойного модуля: unknown
Идентификатор отчета: 700e3058-20de-4e61-afd8-5272d9467b96
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (03/08/2019 02:45:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: bad_module_info, версия: 0.0.0.0, метка времени: 0x00000000
Имя сбойного модуля: unknown, версия: 0.0.0.0, метка времени: 0x00000000
Код исключения: 0x00000000
Смещение ошибки: 0x0000000000000000
Идентификатор сбойного процесса: 0x2628
Время запуска сбойного приложения: 0x01d4d58750846d7e
Путь сбойного приложения: bad_module_info
Путь сбойного модуля: unknown
Идентификатор отчета: 90b2c2e0-2107-4e32-a8fb-2f583646da6a
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (03/08/2019 02:11:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: bad_module_info, версия: 0.0.0.0, метка времени: 0x00000000
Имя сбойного модуля: unknown, версия: 0.0.0.0, метка времени: 0x00000000
Код исключения: 0x00000000
Смещение ошибки: 0x0000000000000000
Идентификатор сбойного процесса: 0xdf0
Время запуска сбойного приложения: 0x01d4d585a9355607
Путь сбойного приложения: bad_module_info
Путь сбойного модуля: unknown
Идентификатор отчета: c2248b49-1918-4f6d-83e7-453aac431f3c
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (03/08/2019 12:16:13 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (03/07/2019 11:41:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: bad_module_info, версия: 0.0.0.0, метка времени: 0x00000000
Имя сбойного модуля: unknown, версия: 0.0.0.0, метка времени: 0x00000000
Код исключения: 0x00000000
Смещение ошибки: 0x0000000000000000
Идентификатор сбойного процесса: 0x2660
Время запуска сбойного приложения: 0x01d4d50bec705faf
Путь сбойного приложения: bad_module_info
Путь сбойного модуля: unknown
Идентификатор отчета: c9869665-c038-4f3d-ae40-791a877f6e13
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (03/07/2019 10:05:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: svchost.exe_BcastDVRUserService, версия: 10.0.17134.556, метка времени: 0xf23cada5
Имя сбойного модуля: bcastdvruserservice.dll, версия: 10.0.17134.590, метка времени: 0x80b4c780
Код исключения: 0xc0000005
Смещение ошибки: 0x0000000000046631
Идентификатор сбойного процесса: 0x26ac
Время запуска сбойного приложения: 0x01d4d4f416daf269
Путь сбойного приложения: C:\WINDOWS\system32\svchost.exe
Путь сбойного модуля: c:\windows\system32\bcastdvruserservice.dll
Идентификатор отчета: f7a682d9-6353-41e0-88f4-e4321c555311
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:


System errors:
=============
Error: (03/10/2019 07:15:01 PM) (Source: DCOM) (EventID: 10016) (User: GREEN)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 и APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 пользователю GREEN\Администратор с ИД безопасности (S-1-5-21-3327491866-1701107999-1953143478-500) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.

Error: (03/10/2019 05:56:22 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: Регистрация сервера {F3B4E234-7A68-4E43-B813-E4BA55A065F6} DCOM не выполнена за отведенное время ожидания.

Error: (03/10/2019 05:45:54 PM) (Source: DCOM) (EventID: 10016) (User: GREEN)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 и APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 пользователю GREEN\Damir с ИД безопасности (S-1-5-21-3327491866-1701107999-1953143478-1008) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.

Error: (03/10/2019 05:44:53 PM) (Source: DCOM) (EventID: 10005) (User: GREEN)
Description: Произошла ошибка DCOM "1053" при попытке запуска службы Disc Soft Ultra Bus Service с аргументами "Недоступно" для запуска сервера:
{9297307C-0F4B-485E-A43A-044424AEF8FE}

Error: (03/10/2019 05:44:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Сбой при запуске службы "Disc Soft Ultra Bus Service" из-за ошибки 
Служба не ответила на запрос своевременно.

Error: (03/10/2019 05:44:53 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Превышение времени ожидания (30000 мс) при ожидании подключения службы "Disc Soft Ultra Bus Service".

Error: (03/10/2019 05:43:57 PM) (Source: DCOM) (EventID: 10016) (User: GREEN)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 и APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 пользователю GREEN\Damir с ИД безопасности (S-1-5-21-3327491866-1701107999-1953143478-1008) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.

Error: (03/10/2019 05:41:49 PM) (Source: DCOM) (EventID: 10016) (User: GREEN)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
 и APPID 
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
 пользователю GREEN\Администратор с ИД безопасности (S-1-5-21-3327491866-1701107999-1953143478-500) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy с ИД безопасности (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.


CodeIntegrity:
===================================

Date: 2018-08-19 14:22:52.309
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mracdrv.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-08-19 14:22:48.225
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\EasyAntiCheat.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) CPU G3240 @ 3.10GHz
Percentage of memory in use: 50%
Total physical RAM: 8131.32 MB
Available physical RAM: 4024.81 MB
Total Virtual: 16323.32 MB
Available Virtual: 6854.6 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:249.22 GB) (Free:68.93 GB) NTFS
Drive e: () (Fixed) (Total:681.51 GB) (Free:133.28 GB) NTFS

\\?\Volume{378c4a6a-0929-11e5-824e-806e6f6e6963}\ (Зарезервировано системой) (Fixed) (Total:0.34 GB) (Free:0.08 GB) NTFS
\\?\Volume{54289031-0000-0000-0000-f0633e000000}\ () (Fixed) (Total:0.44 GB) (Free:0.04 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 54289031)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=249.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
Partition 4: (Not Active) - (Size=681.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================