Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21.02.2018
Ran by pofig (23-02-2018 00:44:36)
Running from C:\Users\pofig\Desktop
Windows 10 Pro Version 1709 16299.248 (X64) (2017-10-17 18:58:17)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

DefaultAccount (S-1-5-21-280144539-2591920384-1566407558-503 - Limited - Disabled)
pofig (S-1-5-21-280144539-2591920384-1566407558-1001 - Administrator - Enabled) => C:\Users\pofig
WDAGUtilityAccount (S-1-5-21-280144539-2591920384-1566407558-504 - Limited - Disabled)
Администратор (S-1-5-21-280144539-2591920384-1566407558-500 - Administrator - Disabled)
Гость (S-1-5-21-280144539-2591920384-1566407558-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Smart Security (Disabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET Smart Security (Disabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Персональный файервол ESET (Disabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.34 - GIGABYTE)
µTorrent 3.5.1 (HKLM-x32\...\µTorrentPro 3.5.1 Build 44358) (Version:  - )
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-0000-0000-0000000FF1CE}_EXCEL_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-0419-0000-0000000FF1CE}_EXCEL_{06BBE4EF-FA0F-43D4-8DE6-12B15AE6DC8F}) (Version:  - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0419-0000-0000000FF1CE}_WORD_{06BBE4EF-FA0F-43D4-8DE6-12B15AE6DC8F}) (Version:  - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}_EXCEL_{928D7B99-2BEA-49F9-83B8-20FA57860643}) (Version:  - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}_WORD_{928D7B99-2BEA-49F9-83B8-20FA57860643}) (Version:  - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}_EXCEL_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}) (Version:  - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}_WORD_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}) (Version:  - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0419-0000-0000000FF1CE}_EXCEL_{EFE123B8-9F0A-4C50-A67B-0BADF3CB00DC}) (Version:  - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0419-0000-0000000FF1CE}_WORD_{EFE123B8-9F0A-4C50-A67B-0BADF3CB00DC}) (Version:  - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0422-0000-0000000FF1CE}_EXCEL_{E23630A0-8B0D-4145-9CEA-9B4967CDDC0E}) (Version:  - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0422-0000-0000000FF1CE}_WORD_{E23630A0-8B0D-4145-9CEA-9B4967CDDC0E}) (Version:  - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_EXCEL_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}) (Version:  - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_WORD_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}) (Version:  - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0419-1000-0000000FF1CE}_EXCEL_{8D43357C-7ED3-4E4C-9804-DB84C67823BC}) (Version:  - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0419-1000-0000000FF1CE}_WORD_{8D43357C-7ED3-4E4C-9804-DB84C67823BC}) (Version:  - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-006E-0419-0000-0000000FF1CE}_EXCEL_{8D43357C-7ED3-4E4C-9804-DB84C67823BC}) (Version:  - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-006E-0419-0000-0000000FF1CE}_WORD_{8D43357C-7ED3-4E4C-9804-DB84C67823BC}) (Version:  - Microsoft) Hidden
7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Acronis Disk Director 12 (HKLM-x32\...\{FE6AA38C-8A06-41FB-B94C-5431743BB0BF}) (Version: 12.0.3297 - Acronis)
Adobe Flash Player 28 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 28.0.0.161 - Adobe Systems Incorporated)
AIDA64 (HKLM-x32\...\AIDA64) (Version:  - FinalWire Ltd.)
AIMP (HKLM-x32\...\AIMP) (Version: v4.11.1841, 09.10.2016 - AIMP DevTeam)
ApowerMirror V1.2.6 (HKLM-x32\...\{a9482532-9c34-478c-80c3-85bdccbb981f}_is1) (Version: 1.2.6 - APOWERSOFT LIMITED)
Apowersoft Unlimited V1.1.7 (HKLM-x32\...\{c03dc130-3664-4210-b9b2-3d35a08c76f5}_is1) (Version: 1.1.7 - Apowersoft LIMITED)
Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
Ashampoo Burning Studio 2016 (HKLM-x32\...\{91B33C97-B4A4-B41A-6B97-C62C82CEB6A9}_is1) (Version: 16.0.2 - Ashampoo GmbH & Co. KG)
Ashampoo HDD Control 2017 (HKLM-x32\...\{4209F371-0379-F90A-4356-52C930989916}_is1) (Version: 3.10.01 - Ashampoo GmbH & Co. KG)
Bloody6 (HKLM-x32\...\Bloody3) (Version: 16.09.0013 - Bloody)
Boilsoft Video Joiner 6.57 (HKLM-x32\...\{FD39EF4B-0B5C-4B33-8D57-2EE865A80EB1}_is1) (Version:  - Boilsoft, Inc.)
Boilsoft Video Splitter 6.34 (HKLM-x32\...\{24549038-9956-4EE5-976D-4419AAEA7DD5}_is1) (Version:  - Boilsoft, Inc.)
Bolide Movie Creator (HKLM-x32\...\{CBC12489-0C5F-4290-B497-57D8C74F12D9}_is1) (Version: 3.0 - Bolide Software)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Call of Duty 2, версия 1.0 (HKLM-x32\...\Call of Duty 2_is1) (Version: 1.0 - )
CCleaner (HKLM\...\CCleaner) (Version:  - )
Chess Ultra 4.15.1 (HKLM-x32\...\Chess Ultra_is1) (Version: 4.15.1 - Ripstone)
Chicken Invaders. Cluck of the Dark Side CE RUS 1.00 (HKLM-x32\...\Chicken Invaders. Cluck of the Dark Side CE RUS 1.00) (Version: 1.00 - Company)
Chicken Invaders: Ultimate Omelette (Easter Edition) v420i (HKLM-x32\...\Chicken Invaders: Ultimate Omelette (Easter Edition)_is1) (Version:  - InterAction studios)
CrystalDiskInfo 7.0.4 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.0.4 - Crystal Dew World)
CrystalDiskMark 3.0.2 (HKLM\...\CrystalDiskMark_is1) (Version: 3.0.2 - Crystal Dew World)
CutoMe  (HKLM-x32\...\CutoMe) (Version:  - Adoreshare, Inc.)
CyberLink YouCam 6 (HKLM-x32\...\{A9CEDD6E-4792-493e-BB35-D86D2E188A5A}) (Version: 6.0.4601.0 - CyberLink Corp.)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 390.77 - NVIDIA Corporation) Hidden
EBook Codec 1.0.0.1 (HKLM-x32\...\EBook Codec) (Version: 1.0.0.1 - Free Time)
ESET Smart Security (HKLM\...\{C7486A64-950C-48E8-9EC6-E6EDFECF530C}) (Version: 10.1.219.1 - ESET, spol. s r.o.)
FastStone Capture 8.4 Final (HKLM-x32\...\FastStone Capture 8.4 Final) (Version:  - )
FormatFactory (HKLM-x32\...\FormatFactory 3.9.0) (Version:  - )
FormatFactory 4.1.0.0 (HKLM-x32\...\FormatFactory) (Version: 4.1.0.0 - Free Time)
Foxit Reader 5.1 (HKLM-x32\...\Foxit Reader_is1) (Version: 5.1.4.104 - Foxit Corporation)
GameSessions Data Delivery x64 (HKLM\...\{6AC64924-363E-4CBD-BAD6-1CA9B6C1A4D4}) (Version: 1.28.455.0 - Tangentix Ltd)
GameSessions Runtime x64 (HKLM\...\{65DF8FB2-E3A4-4D88-9500-50B1013CFA9E}) (Version: 1.28.445.0 - Tangentix Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 63.0.3239.132 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation)
Intel® Power Gadget 3.0 (HKLM\...\{AAFAAB45-753C-4402-A23D-3F0EA9A750EC}) (Version: 3.0.4 - Intel)
JFK Reloaded, версия 1.0 (HKLM-x32\...\{8B8BFE6F-43B0-425B-8E30-BB5E70A6D191}_is1) (Version: 1.0 - 1.0)
K-Lite Mega Codec Pack 13.1.3 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 13.1.3 - KLCP)
Luxor 4. Тайна загробной жизни (HKLM-x32\...\Luxor 4. Тайна загробной жизни_is1) (Version:  - )
Machinarium, версия 1.0 (HKLM-x32\...\Machinarium_is1) (Version: 1.0 - Other s)
Malwarebytes, версия 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.2.0.1047 - Marvell)
Microsoft Office Excel 2007 (HKLM-x32\...\EXCEL) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Word 2007 (HKLM-x32\...\WORD) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-280144539-2591920384-1566407558-1001\...\OneDriveSetup.exe) (Version: 17.3.7294.0108 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x64 8.0.61000 (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{a2199617-3609-410f-a8e8-e8806c73545b}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{49e969a1-2990-464d-92b5-25f6f34573c6}) (Version: 12.0.40664.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{d2c8df0e-f15d-4426-9e51-f13f329f9cb4}) (Version: 12.0.40664.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.11.25325 (HKLM-x32\...\{6c6356fe-cbfa-4944-9bed-a9e99f45cb7a}) (Version: 14.11.25325.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.11.25325 (HKLM-x32\...\{404c9c27-8377-4fd1-b607-7ca635db4e49}) (Version: 14.11.25325.0 - Microsoft Corporation)
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 6.2.0.49 - MSI)
NVIDIA GeForce Experience 3.12.0.84 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.12.0.84 - NVIDIA Corporation)
NVIDIA Аудиодрайвер HD 1.3.36.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.36.6 - NVIDIA Corporation)
NVIDIA Графический драйвер 390.77 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 390.77 - NVIDIA Corporation)
NVIDIA Драйвер 3D Vision 390.77 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 390.77 - NVIDIA Corporation)
NVIDIA Драйвер контроллера 3D Vision 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
NVIDIA Системное программное обеспечение PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
Opera Stable 51.0.2830.34 (HKLM-x32\...\Opera 51.0.2830.34) (Version: 51.0.2830.34 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.5.11.27975 - Electronic Arts, Inc.)
PicosmosTools 1.13.0.0 (HKLM-x32\...\PicosmosTools) (Version: 1.13.0.0 - Free Time)
Plants vs. Zombies, версия 1.2.0.1073 (HKLM-x32\...\{8E3636E6-320C-4EEE-BCF7-476B0B66A75C}_is1) (Version: 1.2.0.1073 - PopCap Games)
Platform (HKLM-x32\...\{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.43 - VIA Technologies, Inc.) Hidden
PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: 1.7.7150 - Kakao Corp.)
PotPlayer-64 bit (HKLM-x32\...\PotPlayer64) (Version: 1.7.8557 - Kakao Corp.)
RadiAnt DICOM Viewer (64-bit) (HKLM-x32\...\RadiAnt64) (Version: 3.4.2.13370 - Medixant)
Reader for PC (HKLM-x32\...\{D279DFB7-97A3-439D-8BE9-95D8AFA68562}) (Version: 2.4.01.10241 - Sony Corporation)
Readiris Pro 10 (HKLM-x32\...\{14D08502-FEE4-40E5-90D3-8A967A1D8BA2}) (Version:  - )
Samorost 3 (HKLM-x32\...\1452686647_is1) (Version: 2.5.0.9 - GOG.com)
Samsung Scan Assistant (HKLM-x32\...\Samsung Scan Assistant) (Version: 1.04.22.00 - Samsung Electronics Co., Ltd.)
Samsung SCX-3200 Series (HKLM-x32\...\Samsung SCX-3200 Series) (Version:  - Samsung Electronics Co., Ltd.)
Seed4.Me VPN 1.0.16 (HKLM\...\Seed4.Me VPN) (Version: 1.0.16 - Seed4.me)
Singularity (HKLM-x32\...\Singularity_is1) (Version: 1.1 - )
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
SmarThru 4 (HKLM-x32\...\{90F1943D-EA4A-4460-B59F-30023F3BA69A}) (Version:  - Samsung Electronics Co., Ltd.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
UE4 Prerequisites (x64) (HKLM\...\{36EAD5CF-44EF-4FCF-8BE1-D96C4835D7A4}) (Version: 1.0.11.0 - Epic Games, Inc.) Hidden
UE4 Prerequisites (x64) (HKLM-x32\...\{2890ae6b-90e9-448d-b3e6-97e43c21e2fd}) (Version: 1.0.13.0 - Epic Games, Inc.) Hidden
Uninstall Tool (HKLM-x32\...\Uninstall Tool 3.5.1 Build 5521 Final) (Version:  - )
Uplay (HKLM-x32\...\Uplay) (Version: 25.0 - Ubisoft)
VIA Диспетчер устройств платформы (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.43 - VIA Technologies, Inc.)
Vulkan Run Time Libraries 1.0.65.0 (HKLM\...\VulkanRT1.0.65.0) (Version: 1.0.65.0 - LunarG, Inc.) Hidden
War Thunder Launcher 1.0.1.340 (HKLM-x32\...\{abc8eea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version:  - Gaijin Entertainment)
War Thunder Launcher 1.0.1.702 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version:  - Gaijin Entertainment)
WhatsApp (HKU\S-1-5-21-280144539-2591920384-1566407558-1001\...\WhatsApp) (Version: 0.2.8361 - WhatsApp)
Wolfenstein II - The New Colossus (HKLM-x32\...\Wolfenstein II - The New Colossus_R.G. Mechanics_is1) (Version:  - R.G. Mechanics, markfiter)
Алый дозор 2. Бремя плоти. Коллекционное издание 1.00 (HKLM-x32\...\Алый дозор 2. Бремя плоти. Коллекционное издание 1.00) (Version: 1.00 - NoTrial)
Времена Года 4 1.00 (HKLM-x32\...\Времена Года 4 1.00) (Version: 1.00 - NoTrial)
Египетский Шар (HKLM-x32\...\{3451A290-7D25-89d6-C409-644DC32069750}_is1) (Version: 1.04 - EleFun Games)
Машина Времени - Эволюция (HKLM-x32\...\Машина Времени - Эволюция) (Version:  - )
Обновления NVIDIA 31.0.11.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 31.0.11.0 - NVIDIA Corporation) Hidden
Панель управления NVIDIA 390.77 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 390.77 - NVIDIA Corporation) Hidden
Программное обеспечение Intel® Chipset Device (HKLM-x32\...\{c6cff78a-cccb-49d5-be68-ae0ec5f0d48a}) (Version: 10.1.1.8 - Intel(R) Corporation) Hidden
Скрытые Чудеса Глубин 2 Вокруг Света (HKLM-x32\...\Скрытые Чудеса Глубин 2 Вокруг Света) (Version:  - )
Сокровища Монтесумы 4 (HKLM-x32\...\Сокровища Монтесумы 4) (Version: 1.0.0 - Alawar)
Сокровища Монтесумы 5 (HKLM-x32\...\Сокровища Монтесумы 5) (Version: 1.0.0 - Alawar)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers1: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => E:\Program\AIMP\System\aimp_menu64.dll [2016-11-18] (AIMP DevTeam)
ContextMenuHandlers1: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2017-10-20] (ESET)
ContextMenuHandlers1: [FormatFactoryShell] -> {A3777921-CFD3-4A6B-89BF-08E6B95716E8} => E:\Program\FormatFactory\ShellEx64_103.dll [2013-06-17] (Free Time)
ContextMenuHandlers2: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2017-10-20] (ESET)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers4: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => E:\Program\AIMP\System\aimp_menu64.dll [2016-11-18] (AIMP DevTeam)
ContextMenuHandlers4: [FormatFactoryShell] -> {A3777921-CFD3-4A6B-89BF-08E6B95716E8} => E:\Program\FormatFactory\ShellEx64_103.dll [2013-06-17] (Free Time)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-01-24] (NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers6: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2017-10-20] (ESET)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {050CEDD3-9FA4-4FD4-9E7D-0C1BD2A2327C} - \Microsoft\Windows\BrokerInfrastructure\BgTaskRegistrationMaintenanceTask -> No File <==== ATTENTION
Task: {0A471120-029F-456B-B1D4-2C80F5E7BA1F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2018-01-10] (NVIDIA Corporation)
Task: {1FD4A519-C53E-4695-AF45-64B735D7B563} - System32\Tasks\MSISW_Host => C:\WINDOWS\SysWOW64\muachost.exe [2015-08-18] (MSI)
Task: {24575C79-F075-4557-9F56-0C6B753BF500} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-01-10] (NVIDIA Corporation)
Task: {2F2F45CB-2197-4132-8C38-1DE5E5A6F422} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-01-10] (NVIDIA Corporation)
Task: {37072969-34A0-4288-BDE6-6BE9619C2743} - System32\Tasks\S-1-5-21-280144539-2591920384-1566407558-1001\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2017-09-29] (Microsoft Corporation)
Task: {375B2009-B8DA-48EC-B2E1-845189A9EEB7} - System32\Tasks\{C9CB6098-65AF-4337-A788-AD4AF2784E27} => c:\program files (x86)\opera\launcher.exe [2018-02-15] (Opera Software)
Task: {3AFBC257-E94F-4DAF-8800-C97AFBC7EA62} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2017-04-14] ()
Task: {417A01F5-F038-4F21-898C-3D03415603FC} - System32\Tasks\RunAsStdUser_GameCenterMailRu => C:\Users\pofig\AppData\Local\Mail.Ru\GameCenter\GameCenter@Mail.Ru.exe <==== ATTENTION
Task: {4520E8A9-AF06-4122-859B-E4B655B29B36} - \Microsoft\Windows\AppID\SmartScreenSpecific -> No File <==== ATTENTION
Task: {458FE01C-A346-4DD8-95D3-B1757BC89FE9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-18] (Google Inc.)
Task: {46A2F33F-2D11-42EF-A609-D57EF255323C} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-01-10] (NVIDIA Corporation)
Task: {54B63C68-0959-4091-931C-10337D58FE9E} - \Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate -> No File <==== ATTENTION
Task: {59A2FFF3-1CFB-4A58-9757-E26D97AA531F} - System32\Tasks\Opera scheduled Autoupdate 1479302954 => C:\Program Files (x86)\Opera\launcher.exe [2018-02-15] (Opera Software)
Task: {640CF558-67F4-41D5-91BE-389E4A8E63C8} - System32\Tasks\MSIOSDx86_Host => C:\Program Files (x86)\MSI\Gaming APP\OSD\x86\MsiGamingOSD_x86.exe [2017-09-05] (Micro-Star INT'L CO., LTD.)
Task: {7AAAA7FE-D7DF-46BF-811B-CE811EBEBF8C} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_28_0_0_161_pepper.exe [2018-02-10] (Adobe Systems Incorporated)
Task: {7C5F5F90-CA4D-49E2-AEBC-780F0E71A9A7} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-01-10] (NVIDIA Corporation)
Task: {881DAA3E-7BCD-49C5-9221-1CD90E4664AA} - \iToolsDaemon -> No File <==== ATTENTION
Task: {8B6AA2C5-956A-4B4B-9860-90F8CAA09315} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-18] (Google Inc.)
Task: {8EA7A278-C332-4017-85ED-8DA03B65388E} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2018-01-10] (NVIDIA Corporation)
Task: {B97AC85E-3FAB-488F-909A-1085AFD618E9} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-01-10] (NVIDIA Corporation)
Task: {C5B699E5-C7BD-4341-98AA-6D8EF8AB1E0E} - System32\Tasks\MSIOSDx64_Host => C:\Program Files (x86)\MSI\Gaming APP\OSD\x64\MsiGamingOSD_x64.exe [2017-09-05] (Micro-Star INT'L CO., LTD.)
Task: {C9ACBFD2-20AA-4A3F-BE1A-A3D5279BB1BB} - \Microsoft\Windows\Plug and Play\Plug and Play Cleanup -> No File <==== ATTENTION
Task: {DED8D496-ED6B-4A19-82F3-D081B49C16EE} - \Microsoft\Windows\ErrorDetails\ErrorDetailsUpdate -> No File <==== ATTENTION
Task: {E32AE64C-B657-466D-B854-EB5FB1AE97AB} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {F2C30DC6-CBD3-444C-9404-7520DF3D2492} - System32\Tasks\MSIGH_Host => C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe [2017-11-01] (Micro-Star INT'L CO., LTD.)
Task: {FAAE3E14-0FC8-4391-9D7F-F6C24D99032B} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2018-01-10] (NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


Shortcut: C:\Users\pofig\Desktop\Документы.lnk -> C:\Users\pofig\OneDrive\Документы () <==== Cyrillic
Shortcut: C:\Users\pofig\Desktop\Этот компьютер.lnk -> [LFPO :i+00P~1SPS0%G`1-B>B :><?LNB5@1!8AB5<=0O ?0?:01SPSjc(=Oe)::{20D04FE0-3AEA-1069-A2D8-08002B30309D}E1SPSOh+')><?LNB5@] <==== Cyrillic
Shortcut: C:\Users\pofig\Desktop\Мини-игры\Luxor 4. Тайна загробной жизни.lnk -> E:\Games\Luxor 4. Тайна загробной жизни\game.exe () <==== Cyrillic
Shortcut: C:\Users\pofig\Desktop\Мини-игры\Алый дозор 2. Бремя плоти. Коллекционное издание.lnk -> E:\Games\Vermillion Watch 2 Fleshbound CE Rus\VermillionWatch_Fleshbound_CE.exe (Free Games) <==== Cyrillic
Shortcut: C:\Users\pofig\Desktop\Мини-игры\Времена Года 4.lnk -> E:\Games\Season Match 4 Rus\engine.exe () <==== Cyrillic
Shortcut: C:\Users\pofig\Desktop\Мини-игры\Египетский Шар.lnk -> E:\Games\Egyptian Ball\Egyptian Ball.exe () <==== Cyrillic
Shortcut: C:\Users\pofig\Desktop\Мини-игры\Машина Времени - Эволюция.lnk -> E:\Games\Машина Времени - Эволюция\theTimeMachine-rus.exe () <==== Cyrillic
Shortcut: C:\Users\pofig\Desktop\Мини-игры\Скрытые Чудеса Глубин 2 Вокруг Света.lnk -> G:\krabiki\HWD2 rus\HWD2.exe () <==== Cyrillic
Shortcut: C:\Users\pofig\Desktop\Мини-игры\Скрытые Чудеса Глубин Приключения в Аталантиде.lnk -> G:\krabiki\HWD3.exe () <==== Cyrillic
Shortcut: C:\Users\pofig\Desktop\Мини-игры\Сокровища Монтесумы 4.lnk -> E:\Games\The Treasures Of Montezuma 4\TheTreasuresofMontezuma4.exe (SPL) <==== Cyrillic
Shortcut: C:\Users\pofig\Desktop\Мини-игры\Сокровища Монтесумы 5.lnk -> E:\Games\The Treasures Of Montezuma 5\TheTreasuresOfMontezuma5.exe () <==== Cyrillic
Shortcut: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Скрытые Чудеса Глубин 2 Вокруг Света\Скрытые Чудеса Глубин 2 Вокруг Света.lnk -> G:\krabiki\HWD2 rus\HWD2.exe () <==== Cyrillic
Shortcut: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Скрытые Чудеса Глубин 2 Вокруг Света\Удаление Скрытые Чудеса Глубин 2 Вокруг Света.lnk -> G:\krabiki\HWD2 rus\Uninstall.exe () <==== Cyrillic
Shortcut: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Игры\Игры от Alawar\Сокровища Монтесумы 5\Сокровища Монтесумы 5.lnk -> E:\Games\The Treasures Of Montezuma 5\TheTreasuresOfMontezuma5.exe () <==== Cyrillic
Shortcut: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Игры\Игры от Alawar\Сокровища Монтесумы 5\Удалить игру Сокровища Монтесумы 5.lnk -> E:\Games\The Treasures Of Montezuma 5\Uninstall.exe () <==== Cyrillic
Shortcut: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Игры\Игры от Alawar\Сокровища Монтесумы 4\Сокровища Монтесумы 4.lnk -> E:\Games\The Treasures Of Montezuma 4\TheTreasuresofMontezuma4.exe (SPL) <==== Cyrillic
Shortcut: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Игры\Игры от Alawar\Сокровища Монтесумы 4\Удалить игру Сокровища Монтесумы 4.lnk -> E:\Games\The Treasures Of Montezuma 4\Uninstall.exe () <==== Cyrillic
Shortcut: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunderDev\Деинсталлировать War Thunder.lnk -> G:\WarThunderDev\unins000.exe () <==== Cyrillic
Shortcut: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder\Деинсталлировать War Thunder.lnk -> E:\WarThunder\unins000.exe () <==== Cyrillic
Shortcut: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\poigraem\Скрытые Чудеса Глубин Приключения в Аталантиде.lnk -> G:\krabiki\HWD3.exe () <==== Cyrillic
Shortcut: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\SendTo\Передача файлов через Bluetooth.LNK -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation) <==== Cyrillic
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Браузер Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) <==== Cyrillic
Shortcut: C:\Users\Public\Desktop\Браузер Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) <==== Cyrillic

ShortcutWithArgument: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunderDev\Журнал ошибок.lnk -> G:\WarThunderDev\.game_logs () -> cd  <==== Cyrillic
ShortcutWithArgument: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunderDev\Записи повторов.lnk -> G:\WarThunderDev\Replays () -> cd  <==== Cyrillic
ShortcutWithArgument: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunderDev\Скриншоты.lnk -> G:\WarThunderDev\Screenshots () -> cd  <==== Cyrillic
ShortcutWithArgument: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder\Журнал ошибок.lnk -> E:\WarThunder\.game_logs () -> cd  <==== Cyrillic
ShortcutWithArgument: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder\Повторы боев.lnk -> E:\WarThunder\Replays () -> cd  <==== Cyrillic
ShortcutWithArgument: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder\Скриншоты.lnk -> E:\WarThunder\Screenshots () -> cd  <==== Cyrillic
ShortcutWithArgument: C:\Users\pofig\AppData\Roaming\Microsoft\Windows\SendTo\Получатель факса.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo <==== Cyrillic

==================== Loaded Modules (Whitelisted) ==============

2017-09-29 16:41 - 2017-09-29 16:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2018-01-09 15:36 - 2018-01-24 03:23 - 000544240 _____ () C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\DisplayDriverAnalyzer\_DisplayDriverCrashAnalyzer64.dll
2016-11-16 21:30 - 2011-04-14 05:41 - 000034304 _____ () C:\WINDOWS\System32\ssb3ml6.dll
2016-02-15 21:01 - 2016-02-15 21:01 - 000031256 _____ () C:\WINDOWS\System32\us008lm.dll
2017-10-19 22:39 - 2018-01-10 17:33 - 001268024 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2018-01-26 00:46 - 2018-01-10 17:33 - 000019760 _____ () c:\program files\nvidia corporation\nvstreamsrv\detoured.dll
2018-01-24 15:34 - 2016-06-14 16:35 - 000187392 _____ () C:\Program Files (x86)\MSI\Gaming APP\OSD\x64\D3D11FontDraw.dll
2018-02-14 00:05 - 2018-02-10 07:39 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2018-02-14 00:05 - 2018-02-10 07:36 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-01-30 11:45 - 2018-01-30 11:45 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1803.279.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2018-01-30 11:45 - 2018-01-30 11:45 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1803.279.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2018-01-30 11:45 - 2018-01-30 11:45 - 025135104 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1803.279.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2018-01-30 11:45 - 2018-01-30 11:45 - 002542592 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1803.279.0_x64__kzf8qxf38zg5c\skypert.dll
2016-11-16 17:16 - 2016-11-16 17:15 - 000078456 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2016-11-16 17:16 - 2016-11-16 17:15 - 000386168 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2017-10-19 22:39 - 2018-01-10 17:33 - 001041208 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2018-01-24 15:34 - 2016-06-14 16:35 - 000163328 _____ () C:\Program Files (x86)\MSI\Gaming APP\OSD\x86\D3D11FontDraw.dll
2018-01-24 15:34 - 2017-08-02 14:48 - 000237568 _____ () C:\Program Files (x86)\MSI\Gaming APP\LEDControl.dll
2017-10-19 22:39 - 2018-01-10 17:33 - 066907448 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:4C7FCC73 [144]
AlternateDataStreams: C:\ProgramData\TEMP:7B2BB690 [216]
AlternateDataStreams: C:\Users\Все пользователи\TEMP:4C7FCC73 [144]
AlternateDataStreams: C:\Users\Все пользователи\TEMP:7B2BB690 [216]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-10-30 10:24 - 2015-10-30 10:21 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-280144539-2591920384-1566407558-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\pofig\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 85.21.192.5 - 213.234.192.7
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\StartupFolder: => "GammaTray.lnk"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "Acronis Scheduler2 Service"
HKLM\...\StartupApproved\Run: => "HotKeysCmds"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "LifeCam"
HKLM\...\StartupApproved\Run32: => "SCX3200_Scan2Pc"
HKLM\...\StartupApproved\Run32: => "Samsung PanelMgr"
HKLM\...\StartupApproved\Run32: => "3200 Scan2PC"
HKLM\...\StartupApproved\Run32: => "MagicTuneLauncher"
HKLM\...\StartupApproved\Run32: => "Acronis Scheduler2 Service"
HKLM\...\StartupApproved\Run32: => "SecurityHealth"
HKLM\...\StartupApproved\Run32: => "Ashampoo HDD Control 2017 Guard"
HKLM\...\StartupApproved\Run32: => "YouCam Service6"
HKLM\...\StartupApproved\Run32: => "Reader Application Helper"
HKU\S-1-5-21-280144539-2591920384-1566407558-1001\...\StartupApproved\Run: => "MultiScreen"
HKU\S-1-5-21-280144539-2591920384-1566407558-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-280144539-2591920384-1566407558-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-280144539-2591920384-1566407558-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-280144539-2591920384-1566407558-1001\...\StartupApproved\Run: => "Gaijin.Net Agent"
HKU\S-1-5-21-280144539-2591920384-1566407558-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-280144539-2591920384-1566407558-1001\...\StartupApproved\Run: => "iFunBox"
HKU\S-1-5-21-280144539-2591920384-1566407558-1001\...\StartupApproved\Run: => "FlashPlayerUpdate"
HKU\S-1-5-21-280144539-2591920384-1566407558-1001\...\StartupApproved\Run: => "Uninstall 17.3.6998.0830_1"
HKU\S-1-5-21-280144539-2591920384-1566407558-1001\...\StartupApproved\Run: => "Uninstall 17.3.6998.0830_1\amd64"
HKU\S-1-5-21-280144539-2591920384-1566407558-1001\...\StartupApproved\Run: => "Seed4Me"
HKU\S-1-5-21-280144539-2591920384-1566407558-1001\...\StartupApproved\Run: => "Application Restart #1"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{4BE3DA66-0469-45D2-BB43-D46A45D32F36}] => (Allow) E:\Program\FormatFactory\FFModules\Package\PTInstOnline.exe
FirewallRules: [{F4208EFD-DE0E-41D3-9E3A-7F885DBE14B9}] => (Allow) E:\Program\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{89C226E1-5314-4044-9838-192C5B86918E}] => (Allow) E:\Program\FormatFactory\FormatFactory.exe
FirewallRules: [{2F9AB870-B017-41F6-87A5-C66EE36B49F8}] => (Allow) E:\Program\FormatFactory\FormatFactory.exe
FirewallRules: [{525C5D98-D1AE-4443-9C81-C1168C5B95DF}] => (Allow) E:\Program\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{A03D350B-5402-4A8A-8565-83F81D5356B5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{6129A32F-114C-41DD-8737-72A4093CE7F2}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{8E503063-B96F-4452-82D9-3EF858864E2C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6507ADAF-B21F-47E9-ABA8-F651193C288C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{93708D07-DF62-45CE-B858-DB84DE3AC06E}] => (Allow) LPort=8733
FirewallRules: [{086C5585-2157-4927-B9D4-1EE20A969923}] => (Allow) C:\Program Files\Tangentix\DDRuntime\GSLauncher.exe
FirewallRules: [{8629F3C4-9589-4ACC-BCA0-E137B6F7F334}] => (Allow) E:\Program\PotPlayer\PotPlayerMini64.exe
FirewallRules: [{87A03F31-B474-4FC0-82F0-1CB9ACD79BBB}] => (Allow) E:\Program\PotPlayer\PotPlayerMini64.exe
FirewallRules: [{94831DFA-2D78-45EA-A527-B15D0156B85F}] => (Allow) E:\WarThunder\launcher.exe
FirewallRules: [{9F30BCC0-03EB-4462-848F-7C142A2DD570}] => (Allow) E:\WarThunder\launcher.exe
FirewallRules: [{21070FBD-764A-4D6B-B081-166C53B79F06}] => (Allow) E:\Steam\Steam.exe
FirewallRules: [{2A2F3254-63A3-4FBE-B077-D9B5A0F6381E}] => (Allow) E:\Steam\Steam.exe
FirewallRules: [{C06D9AA3-6FDC-4EC5-880F-B334F4E74367}] => (Allow) C:\Program Files (x86)\Scan Assistant\USDAgent.exe
FirewallRules: [{AB4FF08D-16FA-4B00-84B4-EC169666C63E}] => (Allow) C:\Program Files (x86)\Scan Assistant\USDAgent.exe
FirewallRules: [{6E47CCEC-2CAA-45D9-8C7C-E681467FEBD2}] => (Allow) C:\Windows\twain_32\Samsung\SCX3200\Sscan2io.exe
FirewallRules: [{AC980D40-F153-44E0-9FBD-5E2B4D07258A}] => (Allow) C:\Windows\twain_32\Samsung\SCX3200\Sscan2io.exe
FirewallRules: [{1545AEE7-7FDC-42B1-AFFE-AB7A7FEAEC0C}] => (Allow) C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe
FirewallRules: [{FA27BC52-CE63-400F-BD50-3DEFAB675436}] => (Allow) C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe
FirewallRules: [{FD4FE0F8-BFCE-4A43-8037-71818ADC703B}] => (Allow) C:\Windows\twain_32\Samsung\ScanMgr.exe
FirewallRules: [{2D205788-C934-4310-B872-9DD435EE6D5B}] => (Allow) C:\Windows\twain_32\Samsung\ScanMgr.exe
FirewallRules: [{C3250823-818E-4903-B904-889AC340A529}] => (Allow) LPort=8090
FirewallRules: [{CAB191C3-648F-48E7-A274-0CBE94F9FF8F}] => (Allow) LPort=20443
FirewallRules: [{E622E288-C1FD-443D-B849-B183AD97A2FE}] => (Allow) LPort=33333
FirewallRules: [{052C6890-B20C-40B2-8E3A-4F094BC9C233}] => (Allow) LPort=6881
FirewallRules: [{63715DF9-758F-4D72-80DE-03870ACBB675}] => (Allow) LPort=27022
FirewallRules: [{75FE93F4-8A03-4D21-A642-15936DE028C4}] => (Allow) LPort=7853
FirewallRules: [{8C7F8F42-E5A5-49D6-8537-3239D7FBBCA7}] => (Allow) LPort=7852
FirewallRules: [{DDDFACE3-93C9-4AB2-9BD3-FBF62A6C1084}] => (Allow) LPort=7850
FirewallRules: [{BB6B39FC-685E-4DCC-B3C9-67F1725A4F5B}] => (Allow) LPort=3478
FirewallRules: [{33B1B626-A45B-4BD6-BFB2-1B6B0B3B727C}] => (Allow) LPort=20010
FirewallRules: [{01D892E8-554F-4D79-B761-0DA3B9CA36B4}] => (Allow) LPort=443
FirewallRules: [{211D00AA-01C2-4EE2-9580-588437AF6ED9}] => (Allow) LPort=80
FirewallRules: [{97AC77D8-1128-403E-AB0C-BD36C48DE9B1}] => (Allow) E:\Program\Skype\Phone\Skype.exe
FirewallRules: [{7E3AFC5E-5622-410C-8526-EBD5EF958267}] => (Allow) E:\Program\FormatFactory\FormatFactory.exe
FirewallRules: [{B7F90C3F-E0AA-4CC7-86A2-2456F2088A15}] => (Allow) E:\Program\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{3AF14F32-F95E-4908-B6BF-B3EBE2C53034}] => (Allow) E:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{4CFD328D-97D4-4681-B7BA-1775118404B5}] => (Allow) E:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{C4BA1F1D-0EEA-449A-8539-7D2002F96A6D}] => (Allow) E:\Seed4.Me VPN\bin\Seed4.Me_VPN.exe
FirewallRules: [{15CA3FE4-FB0E-4DD0-A9A1-DED9EDC72095}] => (Allow) G:\WarThunderDev\launcher.exe
FirewallRules: [{8FBD35AF-6ECA-48B4-9C64-CC8D935E0285}] => (Allow) G:\WarThunderDev\launcher.exe
FirewallRules: [{EF673D9D-0630-4237-819A-7988207D9D56}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe
FirewallRules: [{800A70CC-95D8-41B6-91EB-9C48624D0BBC}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe
FirewallRules: [{C8ADBCE7-3DD2-45D6-85F6-468B42680769}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{0E9F873D-944D-427A-93DD-9BBA779368DD}] => (Allow) C:\Program Files (x86)\Opera\50.0.2762.67\opera.exe
FirewallRules: [{072A7AFB-99C5-4C49-A59C-499CAEE362A1}] => (Allow) LPort=26789
FirewallRules: [{1FFA9985-BA66-4DBB-B1A6-E7B0E5AEA2CD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{D266040F-3FAF-4D67-B4BD-21ABBBFCCD55}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{046498F2-0DF8-45D0-AC56-FFF3870DECAF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{049D5352-37AA-4AEC-BFFB-F60B1BE90F61}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{D9DE7763-6A9D-4BA6-9A4F-45CA468C4953}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E4C1301A-6DA9-4B48-B602-F7D6922472B0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{838074BD-9E35-438C-9240-5C968274BDF9}] => (Allow) E:\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{1B096DBA-C766-4207-9ED9-E9348BF00774}] => (Allow) E:\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{1A2A549B-787D-4876-B143-84BFD5DF8C4E}] => (Allow) C:\Program Files (x86)\Opera\51.0.2830.34\opera.exe
FirewallRules: [{472E6757-3A99-4AAC-8BC8-A7813E301785}] => (Allow) C:\Users\pofig\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{DC8CA00D-D564-418E-ACE9-55B477143BA5}] => (Allow) C:\Users\pofig\AppData\Roaming\BitTorrent\BitTorrent.exe

==================== Restore Points =========================

01-02-2018 21:16:37 Запланированная контрольная точка
11-02-2018 17:11:19 Запланированная контрольная точка
17-02-2018 21:03:18 Installed @BIOS
22-02-2018 22:49:54 Операция восстановления

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/23/2018 12:35:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: mbam.exe, версия: 3.0.0.1284, метка времени: 0x5a15ab42
Имя сбойного модуля: Qt5Core.dll, версия: 5.6.2.0, метка времени: 0x59a63e00
Код исключения: 0xc0000005
Смещение ошибки: 0x0018de83
Идентификатор сбойного процесса: 0x2228
Время запуска сбойного приложения: 0x01d3ac250ec1393e
Путь сбойного приложения: C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
Путь сбойного модуля: C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll
Идентификатор отчета: f9998961-6e86-4fe0-b139-91ee29aa75cd
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (02/22/2018 10:54:06 PM) (Source: System Restore) (EventID: 8210) (User: )
Description: При восстановлении системы произошла неопознанная ошибка: (Installed @BIOS). Дополнительные сведения: 0x80071ac5.

Error: (02/22/2018 10:44:19 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Ошибка при создании контекста активации для "C:\Program Files\AVAST Software\Avast\setup\iplugins\IStats.dll".
Не найдена зависимая сборка "Avast.VC110.CRT,processorArchitecture="x86",publicKeyToken="2036b14a11e83e4a",type="win32",version="11.0.60610.1"".
Используйте sxstrace.exe для подробной диагностики.

Error: (02/22/2018 10:31:06 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Программа explorer.exe версии 10.0.16299.248 прекратила взаимодействие с Windows и была закрыта. Чтобы узнать, имеются ли дополнительные сведения о проблеме, проверьте историю проблемы в разделе "Безопасность и обслуживание" в панели управления.

ИД процесса: 27b8

Время запуска: 01d3abfdb5f87a5f

Время завершения: 794

Путь приложения: C:\Windows\explorer.exe

ИД отчета: 7e5d7846-a609-45d6-9349-f0952d213c87

Полное имя сбойного пакета: 

Код приложения, связанного со сбойным пакетом:

Error: (02/20/2018 09:34:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: dmclient.exe, версия: 10.0.16299.15, метка времени: 0x8614fa05
Имя сбойного модуля: ntdll.dll, версия: 10.0.16299.248, метка времени: 0xeffc9126
Код исключения: 0xc0000374
Смещение ошибки: 0x00000000000f87bb
Идентификатор сбойного процесса: 0x844
Время запуска сбойного приложения: 0x01d3aa7967fb0770
Путь сбойного приложения: C:\WINDOWS\system32\dmclient.exe
Путь сбойного модуля: C:\WINDOWS\SYSTEM32\ntdll.dll
Идентификатор отчета: 28157f25-3793-40e5-a09d-bf1856d8c55d
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (02/20/2018 09:16:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: Explorer.EXE, версия: 10.0.16299.248, метка времени: 0x18ee648b
Имя сбойного модуля: SHELL32.dll, версия: 10.0.16299.248, метка времени: 0x065dd414
Код исключения: 0xc0000005
Смещение ошибки: 0x00000000000c2acc
Идентификатор сбойного процесса: 0x1918
Время запуска сбойного приложения: 0x01d3aa76b7ed6bbf
Путь сбойного приложения: C:\WINDOWS\Explorer.EXE
Путь сбойного модуля: C:\WINDOWS\System32\SHELL32.dll
Идентификатор отчета: 9b7b4e74-58db-4b82-b987-b095c58b0f12
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (02/20/2018 08:37:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: dmclient.exe, версия: 10.0.16299.15, метка времени: 0x8614fa05
Имя сбойного модуля: webio.dll, версия: 10.0.16299.248, метка времени: 0x968e9469
Код исключения: 0xc0000409
Смещение ошибки: 0x00000000000606a8
Идентификатор сбойного процесса: 0x2d4c
Время запуска сбойного приложения: 0x01d3aa7187396574
Путь сбойного приложения: C:\WINDOWS\system32\dmclient.exe
Путь сбойного модуля: C:\WINDOWS\system32\webio.dll
Идентификатор отчета: dfbf1bc6-23f0-4fc5-af0e-37d8146aa981
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (02/19/2018 06:20:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: dmclient.exe, версия: 10.0.16299.15, метка времени: 0x8614fa05
Имя сбойного модуля: ntdll.dll, версия: 10.0.16299.248, метка времени: 0xeffc9126
Код исключения: 0xc0000374
Смещение ошибки: 0x00000000000f87bb
Идентификатор сбойного процесса: 0x242c
Время запуска сбойного приложения: 0x01d3a9951b7c8d19
Путь сбойного приложения: C:\WINDOWS\system32\dmclient.exe
Путь сбойного модуля: C:\WINDOWS\SYSTEM32\ntdll.dll
Идентификатор отчета: b6fb117b-1740-4f20-80db-3055c0156768
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:


System errors:
=============
Error: (02/23/2018 12:41:47 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 и APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 пользователю NT AUTHORITY\LOCAL SERVICE с ИД безопасности (S-1-5-19) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.

Error: (02/23/2018 12:41:47 AM) (Source: DCOM) (EventID: 10016) (User: POFIG)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 и APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 пользователю POFIG\pofig с ИД безопасности (S-1-5-21-280144539-2591920384-1566407558-1001) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.

Error: (02/23/2018 12:41:20 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 и APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 пользователю NT AUTHORITY\LOCAL SERVICE с ИД безопасности (S-1-5-19) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.

Error: (02/23/2018 12:41:20 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 и APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 пользователю NT AUTHORITY\LOCAL SERVICE с ИД безопасности (S-1-5-19) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.

Error: (02/23/2018 12:41:20 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 и APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 пользователю NT AUTHORITY\LOCAL SERVICE с ИД безопасности (S-1-5-19) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.

Error: (02/23/2018 12:41:20 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 и APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 пользователю NT AUTHORITY\LOCAL SERVICE с ИД безопасности (S-1-5-19) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.

Error: (02/23/2018 12:41:20 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 и APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 пользователю NT AUTHORITY\LOCAL SERVICE с ИД безопасности (S-1-5-19) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.

Error: (02/23/2018 12:41:20 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 и APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 пользователю NT AUTHORITY\LOCAL SERVICE с ИД безопасности (S-1-5-19) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.


CodeIntegrity:
===================================

Date: 2018-02-23 00:43:18.825
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\ESET\ESET Smart Security\ekrn.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2018-02-23 00:43:18.824
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\ESET\ESET Smart Security\ekrn.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2018-02-23 00:42:19.453
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\ESET\ESET Smart Security\ekrn.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2018-02-23 00:42:19.452
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\ESET\ESET Smart Security\ekrn.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2018-02-23 00:42:19.242
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\ESET\ESET Smart Security\ekrn.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2018-02-23 00:42:19.241
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\ESET\ESET Smart Security\ekrn.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2018-02-23 00:41:24.667
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\ESET\ESET Smart Security\ekrn.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2018-02-23 00:41:24.665
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\ESET\ESET Smart Security\ekrn.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-2500 CPU @ 3.30GHz
Percentage of memory in use: 13%
Total physical RAM: 16344.24 MB
Available physical RAM: 14181.72 MB
Total Virtual: 18776.24 MB
Available Virtual: 16335.15 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:223.02 GB) (Free:166.11 GB) NTFS
Drive e: (Новый том) (Fixed) (Total:931.51 GB) (Free:774.82 GB) NTFS
Drive f: (KINGSTON) (Removable) (Total:29.28 GB) (Free:7.62 GB) NTFS
Drive g: (Новый том) (Fixed) (Total:931.51 GB) (Free:635.31 GB) NTFS

\\?\Volume{43cab93d-c26e-4894-85fa-fb78f6957598}\ (Восстановить) (Fixed) (Total:0.44 GB) (Free:0.06 GB) NTFS
\\?\Volume{f6748e5d-cf14-4243-8383-37b5ca085f32}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 223.6 GB) (Disk ID: B5F58E07)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: D80C1FB4)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: AE9F10E9)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (MBR Code: Windows XP) (Size: 29.3 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=29.3 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================