Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28.09.2018
Ran by Euromaxtv (30-09-2018 23:28:43)
Running from C:\Users\Euromaxtv\Desktop
Windows 10 Home Version 1803 17134.285 (X64) (2018-06-01 02:32:07)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

DefaultAccount (S-1-5-21-3715096018-3359421980-3385932631-503 - Limited - Disabled)
Euromaxtv (S-1-5-21-3715096018-3359421980-3385932631-1001 - Administrator - Enabled) => C:\Users\Euromaxtv
WDAGUtilityAccount (S-1-5-21-3715096018-3359421980-3385932631-504 - Limited - Disabled)
Администратор (S-1-5-21-3715096018-3359421980-3385932631-500 - Administrator - Disabled)
Гость (S-1-5-21-3715096018-3359421980-3385932631-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Anti-Virus (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Anti-Virus (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-3715096018-3359421980-3385932631-1001\...\uTorrent) (Version: 3.5.4.44632 - BitTorrent Inc.)
5KPlayer (HKLM-x32\...\5KPlayer) (Version: 5.2 - DearMob, Inc.)
7-Zip 18.05 (x64) (HKLM\...\7-Zip) (Version: 18.05 - Igor Pavlov)
Adobe After Effects CC 2017 (HKLM-x32\...\{147EC100-14BE-45EF-AB42-35BAEE7D02F2}) (Version: 14.2.1 - Adobe Systems Incorporated)
Adobe Illustrator CC 2018 (HKLM-x32\...\ILST_22_1) (Version: 22.1 - Adobe Systems Incorporated)
Adobe Media Encoder CC 2017 (HKLM-x32\...\AME_11_1_2) (Version: 11.1.2 - Adobe Systems Incorporated)
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0.1 - Adobe Systems Incorporated)
Adobe Premiere Pro CC 2014 (HKLM-x32\...\Adobe Premiere Pro CC 2014) (Version:  - )
Agama (HKLM\...\Agama ***unknown variable pkg_version***) (Version: ***unknown variable pkg_version*** - SuperNETOrg)
Agisoft PhotoScan Professional (HKLM\...\{A038BB9B-FCD1-4A99-B6CE-F81058EC15CA}) (Version: 1.0.3 - Agisoft)
Alien Skin Exposure 6 (HKLM\...\Alien Skin Exposure 6) (Version:  - Alien Skin)
Alien Skin Exposure 7 (HKLM\...\Alien Skin Exposure 7) (Version:  - Alien Skin)
Allegorithmic Substance Painter 2017.2.0 (HKLM\...\{33C3E9E2-0675-4196-9019-28AB9C5E9BB0}_is1) (Version: 2017.2.0 - Allegorithmic)
AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 4.2.3 - philandro Software GmbH)
Autodesk 3ds Max 2016 (HKLM\...\{52B37EC7-D836-0410-0464-3C24BCED2010}) (Version: 18.6.667.0 - Autodesk) Hidden
Autodesk 3ds Max 2016 (HKLM\...\Autodesk 3ds Max 2016) (Version: 18.6.667.0 - Autodesk)
Autodesk 3ds Max 2016 Ext 2 (HKLM\...\{8F59FEA4-DB31-47EF-1664-7E7954437F21}) (Version: 18.2.0.0 - Autodesk)
Autodesk 3ds Max 2016 HF1 (HKLM\...\Autodesk 3ds Max 2016 HF1) (Version: 18.6.667.0 - Autodesk) Hidden
Autodesk 3ds Max 2016 HF2 (HKLM\...\Autodesk 3ds Max 2016 HF2) (Version: 18.6.667.0 - Autodesk) Hidden
Autodesk 3ds Max 2016 Populate Data (HKLM\...\{57E92DED-DC7C-41E5-B9E1-76D83BD2EABE}) (Version: 18.0.0.0 - Autodesk)
Autodesk 3ds Max 2016 SP1 (HKLM\...\Autodesk 3ds Max 2016 SP1) (Version: 18.6.667.0 - Autodesk) Hidden
Autodesk 3ds Max 2016 SP1.1 (HKLM\...\Autodesk 3ds Max 2016 SP1.1) (Version: 18.6.667.0 - Autodesk) Hidden
Autodesk 3ds Max 2016 SP2 (HKLM\...\Autodesk 3ds Max 2016 SP2) (Version: 18.6.667.0 - Autodesk) Hidden
Autodesk 3ds Max 2016 SP2 (HKLM\...\Autodesk 3ds Max 2016 SP2.1) (Version: 18.6.667.0 - Autodesk)
Autodesk Advanced Material Library Base Resolution Image Library 2019 (HKLM-x32\...\{105181A1-013C-4EE7-A368-999FD7ED950A}) (Version: 17.11.3.0 - Autodesk)
Autodesk Advanced Material Library Image Library 2016 (HKLM-x32\...\{94AD53E7-493B-4291-8714-7A3B761D2783}) (Version: 6.3.0.19 - Autodesk)
Autodesk Advanced Material Library Low Resolution Image Library 2019 (HKLM-x32\...\{ACC0DD09-7E20-4792-87D5-BDBE40206584}) (Version: 17.11.3.0 - Autodesk)
Autodesk Advanced Material Library Medium Resolution Image Library 2019 (HKLM-x32\...\{078698AF-8BB1-4631-86D0-D91FEE147256}) (Version: 17.11.3.0 - Autodesk)
Autodesk Backburner 2016 (HKLM-x32\...\{8C5F38D2-9EFE-49A4-B3F5-BF3210FED168}) (Version: 16.0.0.0 - Autodesk)
Autodesk Inventor Server Engine for 3ds Max 2016 (HKLM\...\{9167CA34-4E58-49E3-8892-3C439739D2D3}) (Version: 18.0 - Autodesk)
Autodesk Material Library 2016 (HKLM-x32\...\{29A7D6EC-63C2-42FD-8143-5812ABD2923F}) (Version: 6.3.0.19 - Autodesk)
Autodesk Material Library 2019 (HKLM-x32\...\{8F69EE2C-DC34-4746-9B47-7511147BD4B0}) (Version: 17.11.3.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2016 (HKLM-x32\...\{6B4CFC6E-ECB0-47FE-95D3-65C680ED0687}) (Version: 6.3.0.19 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2019 (HKLM-x32\...\{3AAA4C1B-51DA-487D-81A3-4234DBB9A8F9}) (Version: 17.11.3.0 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2016 (HKLM-x32\...\{415A5A54-325E-4815-9940-62A889CA3877}) (Version: 6.3.0.19 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2019 (HKLM-x32\...\{2E819775-E94C-42CC-9C5D-ABB2ADABC7C2}) (Version: 17.11.3.0 - Autodesk)
Autodesk Network License Manager (HKLM\...\{4BE91685-1632-47FC-B563-A8A542C6664C}) (Version: 11.14.1.3 - Autodesk, Inc.)
Autodesk Revit Interoperability for 3ds Max  (HKLM\...\{0BB716E0-1600-0610-0000-097DC2F354DF}) (Version: 16.0.394.0 - Autodesk) Hidden
Autodesk Revit Interoperability for 3ds Max  (HKLM\...\Autodesk Revit Interoperability for 3ds Max ) (Version: 16.0.394.0 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2019 (HKLM\...\{0BB716E0-1900-0610-0000-097DC2F354DF}) (Version: 19.0.0.401 - Autodesk) Hidden
Autodesk Revit Interoperability for 3ds Max 2019 (HKLM\...\Autodesk Revit Interoperability for 3ds Max 2019) (Version: 19.0.0.401 - Autodesk)
Autodesk Single Sign On Component (HKLM\...\{7D4DA6F4-7498-4946-ABA3-8010F2FB8405}) (Version: 9.27.0.600 - Autodesk)
Awesome Miner (HKLM-x32\...\{08C3E86A-32AB-4680-A801-E645D39A4769}) (Version: 5.3.0.0 - IntelliBreeze Software AB)
Backup and Sync from Google (HKLM\...\{AEFBDB5B-899F-4AE6-B789-BA56A652A476}) (Version: 3.42.9858.3671 - Google, Inc.)
Bitcore-Qt version VERSION-0.14.1.6 (HKLM-x32\...\Bitcore-Qt_is1) (Version: VERSION-0.14.1.6 - )
Bytecoin (HKLM\...\{5474A905-4D3C-41AF-84CE-A5A0364CA5AE}) (Version: 18.4.4 - Bytecoin Developers)
CCleaner (HKLM\...\CCleaner) (Version: 5.32 - Piriform)
ContrastMaster 1.06 (Plugin) (HKLM\...\ContrastMaster 1.06 (Plugin)_is1) (Version:  - The Plugin Site)
Corel Graphics - Windows Shell Extension (HKLM\...\_{E7F9082A-E477-4DBC-8FBC-E19B53B7BBC9}) (Version: 19.0.0.328 - Corel Corporation)
Corel Graphics - Windows Shell Extension (HKLM\...\{E7F9082A-E477-4DBC-8FBC-E19B53B7BBC9}) (Version: 19.0.328 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit Keys (HKLM\...\{58B4F27F-B90B-4188-AA05-088B9788F8FF}) (Version: 19.0.328 - Corel Corporation) Hidden
Corel Update Manager (HKLM\...\{9E1EE683-0C7B-46E7-83EC-1F5A1D8F2296}) (Version: 2.9.389 - Corel corporation) Hidden
CorelDRAW Graphics Suite 2017 - Capture (x64) (HKLM\...\{AC9BB7B7-A763-43C5-9830-F3B78FDB051D}) (Version: 19.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 - Common (x64) (HKLM\...\{B8C51F00-63AE-4327-A533-375CB7B6BF26}) (Version: 19.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 - Connect (x64) (HKLM\...\{BD0F92AD-DFDB-4BC5-BAA5-FB27892F9483}) (Version: 19.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 - Custom Data (x64) (HKLM\...\{E7975CC5-05E4-45E3-AFD3-234809F694A0}) (Version: 19.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 - Draw (x64) (HKLM\...\{A16C7EEB-69CB-42A1-AD10-0E19A133D957}) (Version: 19.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 - EN (x64) (HKLM\...\{DB9ECE8C-5065-4388-B70D-D137A2C03152}) (Version: 19.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 - Filters (x64) (HKLM\...\{EEC42BAD-9517-450D-AF99-FA3C16D0377C}) (Version: 19.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 - Font Manager (x64) (HKLM\...\{D276DE88-654E-4738-A736-6E18D12F0C34}) (Version: 19.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 - IPM (x64) (HKLM\...\{904B10A6-0D9C-4645-9C61-504FA92B9220}) (Version: 19.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 - IPM Content (x64) (HKLM\...\{54F024CB-16AF-4CC0-9BC2-D2507E7C6C01}) (Version: 19.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 - PHOTO-PAINT (x64) (HKLM\...\{B2D66383-4F98-4108-B6A3-F9CF8715875C}) (Version: 19.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 - Redist (x64) (HKLM\...\{47865C60-4ED8-4678-B23F-C2D1C2DDC09C}) (Version: 19.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 - Setup Files (x64) (HKLM\...\{07B49D5C-2AB6-4D40-8A9B-BEDA6021A7C7}) (Version: 19.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 - VBA (x64) (HKLM\...\{5330DEB9-A612-4679-ACC1-D3D9C6190824}) (Version: 19.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 - VideoBrowser (x64) (HKLM\...\{C451F155-26B7-48F2-8A8F-9428B4D479D2}) (Version: 19.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 - Workspaces (x64) (HKLM\...\{F3EFAF0E-DF3C-4384-8A0F-90D79FEFD7F5}) (Version: 19.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 - Writing Tools (x64) (HKLM\...\{E38357D4-1B80-400F-A6D7-B4D5DD83D979}) (Version: 19.1 -  Corel Corporation) Hidden
CorelDRAW Graphics Suite 2017 (64-Bit) (HKLM\...\_{07B49D5C-2AB6-4D40-8A9B-BEDA6021A7C7}) (Version: 19.1.0.419 - Corel Corporation)
CorelDRAW Graphics Suite 2017 (HKLM\...\{03E21392-CE4A-4FC6-B593-370E7A7E345A}) (Version: 19.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Capture (x64) (HKLM\...\{1967EF95-E00B-4669-8B1C-A589BE8BF24F}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Common (x64) (HKLM\...\{35869A6C-BA31-4F23-B52D-BC1B1E41EC1B}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Connect (x64) (HKLM\...\{96AAAB95-AEBE-437A-B7CA-37C7BE13FFE9}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Custom Data (x64) (HKLM\...\{7386B5FA-8715-481D-821F-7785110506DF}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Draw (x64) (HKLM\...\{27AE72A4-B217-4CDC-B82B-3311E9D7460E}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - EN (x64) (HKLM\...\{BB65D262-3EBC-4F10-89D9-67A320E94EAA}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Filters (x64) (HKLM\...\{E699230D-4B5E-411E-9F45-FF50789B18DD}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - FontNav (x64) (HKLM\...\{3933C06C-8239-432B-87FC-F2BDC5B49A10}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - IPM (HKLM\...\{B6DF7031-2843-44FD-9CAB-DECAB4257456}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - IPM T3 (HKLM\...\{80411B38-DEF6-4E32-BE6B-796015325109}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - PHOTO-PAINT (x64) (HKLM\...\{D7C2687D-924E-4485-B367-C7D95CBF8DDD}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Redist (x64) (HKLM\...\{6099F026-0A98-4D40-9B3D-ED2123A8CBD0}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - RU (x64) (HKLM\...\{0017EDB1-6F54-4EE2-8AD6-D8BA048C1F1F}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Setup Files (x64) (HKLM\...\{BDBFAC49-8877-472F-876B-75ADB7DBC955}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - VBA (x64) (HKLM\...\{10762393-1B90-4AC2-AF1A-4C0C04AE303F}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - VideoBrowser (x64) (HKLM\...\{7B79AE44-9B76-4815-84E5-ACAC3F0F0278}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - VSTA (x64) (HKLM\...\{1E3A578C-0A7D-4820-990F-B7545C0B2303}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Writing Tools (x64) (HKLM\...\{DDE82E3D-20C4-48E1-AE1D-B1F10E42CA44}) (Version: 16.1 -  Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 (64-Bit) (HKLM\...\_{BDBFAC49-8877-472F-876B-75ADB7DBC955}) (Version: 16.1.0.843 - Corel Corporation)
CorelDRAW Graphics Suite X6 (x64) (HKLM\...\{CBC1BFA3-E641-4FCA-8EFA-77E2B7D7E552}) (Version: 16.1 - Corel Corporation) Hidden
Corona Renderer for 3ds Max (HKLM\...\CoronaForMax) (Version: 1.7 (hotfix 4) - Render Legion a.s.)
DenoiseMyImage_gpu (HKLM-x32\...\DenoiseMyImagePlugIn_gpu) (Version: 2.0 - Filip Krolupper)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 399.07 - NVIDIA Corporation) Hidden
Electrum (HKU\S-1-5-21-3715096018-3359421980-3385932631-1001\...\Electrum) (Version: 3.0.3 - Electrum Technologies GmbH)
Exodus (HKU\S-1-5-21-3715096018-3359421980-3385932631-1001\...\exodus) (Version: 1.52.0 - Exodus Movement Inc)
FileZilla Client 3.36.0 (HKLM-x32\...\FileZilla Client) (Version: 3.36.0 - Tim Kosse)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Hidden
GhostTown version 1.31 (HKLM\...\GhostTown_is1) (Version: 1.31 - kilad.net)
GIGABYTE OC_GURU II (HKLM-x32\...\{EA298EC1-2B8F-4DA9-8C5B-BC1FCBBAD72F}) (Version: 2.08.0000 - GIGABYTE Technology Co.,Ltd.) Hidden
GIGABYTE OC_GURU II (HKLM-x32\...\InstallShield_{EA298EC1-2B8F-4DA9-8C5B-BC1FCBBAD72F}) (Version: 2.08.0000 - GIGABYTE Technology Co.,Ltd.)
Globus Privacy (HKLM\...\Globus Privacy) (Version: 1.1.0.35 - Woogable Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 69.0.3497.100 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
GoPro VR Player 3.0 (HKLM\...\GoPro VR Player 3.0) (Version: V3.0.5 - GoPro)
headus UVLayout v2 Professional (HKLM-x32\...\{A1086DA0-903E-4DEA-A83F-6317923CC63D}) (Version: 2.09.00 - headus)
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
IrfanView 4.50 (64-bit) (HKLM\...\IrfanView64) (Version: 4.50 - Irfan Skiljan)
iSpring Free Cam 8 (HKLM-x32\...\{A85094B2-BFE8-4C0D-8FF9-2B139D6A4008}) (Version: 8.7.19627 - iSpring Solutions Inc.)
Java 8 Update 161 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180161F0}) (Version: 8.0.1610.12 - Oracle Corporation)
Jaxx 1.3.9 (only current user) (HKU\S-1-5-21-3715096018-3359421980-3385932631-1001\...\c8bd836d-41d7-5f55-90da-0bae2db13a07) (Version: 1.3.9 - decentral.ca)
Kaspersky Anti-Virus (HKLM-x32\...\{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Лаборатория Касперского) Hidden
Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Лаборатория Касперского)
Kaspersky Secure Connection (HKLM-x32\...\{F33C0717-8E04-4EB5-90C8-47221287DB4F}) (Version: 18.0.0.405 - Лаборатория Касперского) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{F33C0717-8E04-4EB5-90C8-47221287DB4F}) (Version: 18.0.0.405 - Лаборатория Касперского)
LightMachine 1.06 (Plugin) (HKLM\...\LightMachine 1.06 (Plugin)_is1) (Version:  - The Plugin Site)
Litebitcoin Core (64-bit) (HKU\S-1-5-21-3715096018-3359421980-3385932631-1001\...\Litebitcoin Core (64-bit)) (Version: 3.0.0 - Litebitcoin Core project)
LitecoinZ (64-bit) (HKU\S-1-5-21-3715096018-3359421980-3385932631-1001\...\LitecoinZ (64-bit)) (Version: 1.0.15 - LitecoinZ project)
Malwarebytes, версия 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
Marvelous Designer 4 Enterprise (HKLM-x32\...\Marvelous Designer 4 Enterprise) (Version:  - CLO Virtual Fashion Inc.)
Marvelous Designer 6 Personal (HKLM-x32\...\Marvelous Designer 6 Personal) (Version:  - CLO Virtual Fashion Inc.)
MAXtoA for 3ds Max 2019 (HKLM\...\{F27AD68F-774D-4AC6-AEE8-C9A48687FFBD}) (Version: 1.2.926.0 - Solid Angle)
Microsoft Office профессиональный плюс 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3715096018-3359421980-3385932631-1001\...\OneDriveSetup.exe) (Version: 18.151.0729.0012 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x64 8.0.61000 (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{a2199617-3609-410f-a8e8-e8806c73545b}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{49e969a1-2990-464d-92b5-25f6f34573c6}) (Version: 12.0.40664.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{d2c8df0e-f15d-4426-9e51-f13f329f9cb4}) (Version: 12.0.40664.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32\...\{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation)
Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.29.03.143 - Huawei Technologies Co.,Ltd)
MSI Afterburner 4.4.2 (HKLM-x32\...\Afterburner) (Version: 4.4.2 - MSI Co., LTD)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.8 - F.J. Wechselberger)
Neon 0.0.7 (only current user) (HKU\S-1-5-21-3715096018-3359421980-3385932631-1001\...\211a501f-25dd-501b-8c98-509ac17aedfa) (Version: 0.0.7 - Ethan Fast)
NVIDIA GeForce Experience 3.14.1.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.14.1.48 - NVIDIA Corporation)
NVIDIA Аудиодрайвер HD 1.3.37.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.37.4 - NVIDIA Corporation)
NVIDIA Графический драйвер 399.07 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 399.07 - NVIDIA Corporation)
NVIDIA Драйвер 3D Vision 399.07 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 399.07 - NVIDIA Corporation)
NVIDIA Драйвер контроллера 3D Vision 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
NVIDIA Системное программное обеспечение PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
OctaneRender 3.06.2 (HKLM-x32\...\OctaneRender 3.06.2) (Version: 3.06.2 - OTOY)
OctaneRender 3.08.3 (HKLM-x32\...\OctaneRender 3.08.3) (Version: 3.08.3 - OTOY)
OctaneRender 4.00 RC4 (HKLM-x32\...\OctaneRender 4.00 RC4) (Version: 4.00 RC4 - OTOY)
OctaneRender 4.00 XB3 (HKLM-x32\...\OctaneRender 4.00 XB3) (Version: 4.00 XB3 - OTOY)
OctaneRender® for Autodesk® 3ds Max® 4.00-RC2 - 6.06 (HKLM\...\OctaneRender for 3ds Max) (Version: 4.00-RC2 - 6.06 - OTOY Inc.)
Oracle VM VirtualBox 5.1.26 (HKLM\...\{11A88BD5-F059-4743-81D9-1432AC9C3D4E}) (Version: 5.1.26 - Oracle Corporation)
Parity - Fast, light, robust Ethereum implementation (HKLM-x32\...\Parity Parity) (Version: 1.7.8 - Parity)
Rhinoceros 5 Language Pack Installer (en-US) (HKLM-x32\...\{F1BAB792-F0B9-4A73-A5A2-D930FF5E10AF}) (Version: 5.14.00522.08390 - Robert McNeel & Associates)
Rhinoceros 5.0 (64-bit) (HKLM\...\{BB435434-EDC8-4E54-B32D-28452CACAEC6}) (Version: 5.1.20927.2230 - Robert McNeel & Associates)
RivaTuner Statistics Server 7.0.2 (HKLM-x32\...\RTSS) (Version: 7.0.2 - Unwinder)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics)
ShaderMap 3.0.7 (HKLM\...\ShaderMap™ 3_is1) (Version:  - Rendering Systems Inc.)
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.)
Snagit 2018 (HKLM\...\{88677238-16C0-421F-9396-6AB001A4153A}) (Version: 18.2.1 - TechSmith Corporation)
Soda Manager (HKLM-x32\...\{9BCA490C-5063-4466-BA39-D749F0DC48AE}) (Version: 7.0.0.21719 - LULU Software Limited) Hidden
Soda PDF 3D Reader (HKLM-x32\...\Soda PDF 3D Reader) (Version: 7.2.3.22591 - LULU Software Limited)
Soda PDF 3D Reader Create Module (HKLM-x32\...\{555FB2F3-3B7A-4254-9B71-1600BC99227A}) (Version: 7.2.3.22270 - LULU Software Limited) Hidden
Soda PDF 3D Reader View Module (HKLM-x32\...\{8F58B40B-5808-4532-BDA8-39268875AF9E}) (Version: 7.2.3.22270 - LULU Software Limited) Hidden
TeamViewer (HKLM-x32\...\TeamViewer 12.0.88438) (Version:  - )
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.2.14327 - TeamViewer)
TeamViewer 13.2.14327 (HKLM-x32\...\TeamViewer_is1) (Version: 13.2.14327 - lrepacks.ru)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
TextNow 1.1.0 (only current user) (HKU\S-1-5-21-3715096018-3359421980-3385932631-1001\...\7ec1a1d9-f9b8-5575-8e2f-f5258b79a4d7) (Version: 1.1.0 - TextNow Inc.)
Tintii (HKLM-x32\...\tintii) (Version:  - )
Topaz DeNoise 6 (HKLM-x32\...\Topaz DeNoise 6) (Version: 6.0.1 - Topaz Labs, LLC)
UltraISO (HKLM-x32\...\UltraISO) (Version:  - )
UltraVnc (HKLM\...\Ultravnc2_is1) (Version: 1.2.2.2 - uvnc bvba)
Vertcoin One-Click Miner (HKLM-x32\...\{15C3756C-B26F-482A-AC04-7C95411AE9AF}) (Version: 1.1.80 - Vertcoin Development Team)
VMware Workstation (HKLM\...\{7DB08B46-7D86-48CB-A8E5-3869E2499604}) (Version: 12.5.7 - VMware, Inc.)
VNC Viewer 6.18.625 (HKLM\...\{AA70FF2C-1FB3-478B-B0EF-CE2D96397BD4}) (Version: 6.18.625.36746 - RealVNC Ltd)
V-Ray for 3dsmax 2016 for x64 (HKLM\...\V-Ray for 3dsmax 2016 for x64) (Version: 3.60.03 - Chaos Software Ltd)
VSR Shape 2.0.3  for Rhino 5 64bit (HKLM\...\VSR Shape for Rhino 5 64bit) (Version: 2.0.3 - Virtual Shape Research)
VSR WebGL 3.0.1  for Rhino 5 64bit (HKLM\...\VSR WebGL for Rhino 5 64bit) (Version: 3.0.1 - Virtual Shape Research)
Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.3-2 - Wacom Technology Corp.)
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WibuKey Setup (WibuKey Remove) (HKLM\...\{00060000-0000-1004-8002-0000C06B5161}) (Version: Version 6.20 of 2013-Dec-18 (Build 1230) (Setup) - WIBU-SYSTEMS AG)
WinHex (HKLM-x32\...\WinHex) (Version:  - )
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
XnView 2.39 (HKLM-x32\...\XnView_is1) (Version: 2.39 - Gougelet Pierre-e)
ZBrush 4R6 (HKLM-x32\...\ZBrush 4R6 4R6) (Version: 4R6 - Pixologic)
Засоби перевірки правопису Microsoft Office 2013 – Українська версія (HKLM-x32\...\{90150000-001F-0422-0000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Обновления NVIDIA 31.2.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 31.2.0.0 - NVIDIA Corporation) Hidden
Пакет драйверов Windows - Broadcom Corporation (bcbtums) Bluetooth  (07/14/2015 12.0.1.658) (HKLM\...\BABE4E18F2E0DA329C1139E5584082BBE6F64E5F) (Version: 07/14/2015 12.0.1.658 - Broadcom Corporation)
Панель управления NVIDIA 399.07 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 399.07 - NVIDIA Corporation) Hidden
Планшет Wacom (HKLM\...\Wacom Tablet Driver) (Version: 6.3.23-1 - Wacom Technology Corp.)
Приложение Autodesk для ПК (HKLM-x32\...\Autodesk Desktop App) (Version: 7.0.10.89 - Autodesk)
Средства проверки правописания Microsoft Office 2013 — русский (HKLM-x32\...\{90150000-001F-0419-0000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3715096018-3359421980-3385932631-1001_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> C:\Program Files\Autodesk\3ds Max 2019\Inventor Server\Bin\TestServer.dll => No File
CustomCLSID: HKU\S-1-5-21-3715096018-3359421980-3385932631-1001_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> C:\Program Files\Autodesk\3ds Max 2019\Inventor Server\Bin\TestServer.dll => No File
CustomCLSID: HKU\S-1-5-21-3715096018-3359421980-3385932631-1001_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> C:\Program Files\Autodesk\3ds Max 2019\Inventor Server\Bin\TestServer.dll => No File
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-05-30] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-05-30] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-05-30] (Google)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-05-30] (Google)
ContextMenuHandlers1: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\shellex.dll [2017-04-29] (AO Kaspersky Lab)
ContextMenuHandlers1-x32: [MyPhoneExplorer] -> {A372C6DF-7A85-41B1-B3B0-D1E24073DCBF} => C:\Program Files (x86)\MyPhoneExplorer\DLL\ShellMgr.dll [2010-03-30] (F.J. Wechselberger)
ContextMenuHandlers1-x32-x32: [PDFManagerExt] -> {6FFE8805-6586-4CDB-B880-047950580CB2} => C:\Program Files (x86)\Soda PDF 3D Reader\creator-context-menu.dll [2015-03-06] (LULU SOFTWARE LIMITED)
ContextMenuHandlers1-x32-x32: [SnagItMainShellExt] -> {CF74B903-3389-469c-B3B6-0204D204FCBD} => C:\Program Files (x86)\TechSmith\Snagit 2018\DLLx64\SnagitShellExt64.dll [2018-06-25] (TechSmith Corporation)
ContextMenuHandlers1-x32-x32: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-02-04] (Alexander Roshal)
ContextMenuHandlers1-x32-x32-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-02-04] (Alexander Roshal)
ContextMenuHandlers2: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\shellex.dll [2017-04-29] (AO Kaspersky Lab)
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2009-10-22] (EZB Systems, Inc.)
ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => C:\Program Files (x86)\VMware\VMware Workstation\vmdkShellExt.dll [2017-06-19] (VMware, Inc.)
ContextMenuHandlers2-x32: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => C:\Program Files (x86)\VMware\VMware Workstation\x64\vmdkShellExt64.dll [2017-06-19] (VMware, Inc.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-05-30] (Google)
ContextMenuHandlers4: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\shellex.dll [2017-04-29] (AO Kaspersky Lab)
ContextMenuHandlers4: [SnagItMainShellExt] -> {CF74B903-3389-469c-B3B6-0204D204FCBD} => C:\Program Files (x86)\TechSmith\Snagit 2018\DLLx64\SnagitShellExt64.dll [2018-06-25] (TechSmith Corporation)
ContextMenuHandlers4: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2009-10-22] (EZB Systems, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} =>  -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-08-21] (NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov)
ContextMenuHandlers6: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\shellex.dll [2017-04-29] (AO Kaspersky Lab)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2009-10-22] (EZB Systems, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-02-04] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-02-04] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1C717AF4-E290-4955-9544-E3C9691E2902} - System32\Tasks\update-S-1-5-21-3715096018-3359421980-3385932631-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: <Company name>)
Task: {2637FB05-82C4-4A7A-AD49-EAE8E5CE7533} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: {306B3A57-A6BF-4693-ADDC-20A35EC42E7B} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-08-21] (NVIDIA Corporation)
Task: {321F68BF-F38B-46FA-AB93-E0FD7B9FB29C} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2018-08-21] (NVIDIA Corporation)
Task: {4BB06D08-8C09-425D-8519-2980A0A2B6FD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-12-29] (Google Inc.)
Task: {50A26230-EC86-41CA-B8C6-FF862F489AF2} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2018-08-21] (NVIDIA Corporation)
Task: {5BBA9E26-63C2-46AA-954A-87D28625C8B5} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2018-06-21] (Corel Corporation)
Task: {5BD96E11-2EFD-451D-8D41-8D6C27B857C7} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2018-08-21] (NVIDIA Corporation)
Task: {5FDB89F2-1F8D-41FF-A64D-E6F0A4A20AF0} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-08-21] (NVIDIA Corporation)
Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()
Task: {7EAC6EB1-AACC-43A4-B560-35AC69B3C500} - System32\Tasks\AdobeGCInvoker-1.0-DESKTOP-1AI24PD-Euromaxtv => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-09-10] (Adobe Systems, Incorporated)
Task: {86090EEA-FFCE-4CCA-B05C-BF9FE646A368} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-12-29] (Google Inc.)
Task: {9885F5D0-00A1-4516-9D30-579DCF312B78} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-08-21] (NVIDIA Corporation)
Task: {99F89561-5F44-455E-BEBA-489470C2A20E} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-08-21] (NVIDIA Corporation)
Task: {9DE41179-4A2B-48E3-AB02-690521E16A16} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-06-30] (Piriform Ltd)
Task: {9E3FDD6E-591A-4FB8-B077-2C0F55DF03D1} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {9EA00A89-93B8-41A8-846C-FD85FFE1AE1A} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-08-21] (NVIDIA Corporation)
Task: {A24EAAE6-139C-407F-B14E-E2F3650025BE} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2017-12-15] ()
Task: {AE42C567-7587-4EE9-8CC9-1945B371DEF5} - System32\Tasks\S-1-5-21-3715096018-3359421980-3385932631-1001\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2018-04-12] (Microsoft Corporation)
Task: {B014D8C6-108C-43C3-B99C-4A83B5672CAF} - System32\Tasks\Microsoft\Windows\Setup\Notifier => C:\WINDOWS\system32\Notifier.exe
Task: {BC3F8917-5599-45FF-A06A-91C8A0BAC284} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: <Company name>)
Task: {C1EE37B1-D14A-4B0F-A11B-A6E513BF5EEB} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.)
Task: {C6E41013-6729-482B-8D85-4D61BBB1D5CD} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-08-21] (NVIDIA Corporation)
Task: {CF615D9A-3584-461C-8493-47569C3E4323} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {E12EE43B-BFBE-465B-9DD0-A88631ADDAFB} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-08-21] (NVIDIA Corporation)
Task: {F1BFC795-E188-4703-A2E1-CF19A42CA862} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-08-21] (NVIDIA Corporation)
Task: {F71D9ACF-435A-43ED-B938-BB8E1A459F1F} - System32\Tasks\GIGABYTE OC GURU => C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe [2017-01-19] (GIGABYTE Technology Co.,Ltd.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\update-S-1-5-21-3715096018-3359421980-3385932631-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


Shortcut: C:\Users\Euromaxtv\OneDrive\Этот компьютер - Ярлык.lnk -> [LFPO :i+00P~1SPS0%G`1-B>B :><?LNB5@1!8AB5<=0O ?0?:01SPSjc(=Oe)::{20D04FE0-3AEA-1069-A2D8-08002B30309D}E1SPSOh+')><?LNB5@] <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\Desktop\MD4_Enterprise_x64.exe — ярлык.lnk -> C:\Program Files\Marvelous Designer 4 Enterprise\MD4_Enterprise_x64.exe () <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\Desktop\photoscan - Ярлык.lnk -> C:\Program Files\Agisoft\PhotoScan Pro\photoscan.exe (Agisoft, LLC.) <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\Desktop\Substance Painter — ярлык.lnk -> C:\Program Files\Allegorithmic\Substance Painter\Substance Painter.exe (Allegorithmic) <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\Desktop\Бодиков Е — ярлык.lnk -> H:\Бодиков Е () <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\Desktop\флешка оксана - Ярлык.lnk -> H:\последний рабочий стол\Users\Anton\Desktop\флешка оксана () <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\Desktop\Нужная папка оксана\Поставщики\Счёт Костюмы  январь .jpg.lnk -> C:\Users\Euromaxtv\Documents\Downloads\счет Нова НН 210114 (1).jpg (No File) <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\Desktop\Нужная папка оксана\Поставщики\Ярлык для Нова НН (2).JPG.lnk -> C:\Users\Euromaxtv\Documents\Downloads\Нова НН (2).JPG (No File) <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\Desktop\Нужная папка оксана\Поставщики\Ярлык для Нова НН (4).JPG.lnk -> C:\Users\Euromaxtv\Documents\Downloads\Нова НН (4).JPG (No File) <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\Desktop\Нужная папка оксана\Поставщики\Ярлык для счет 214.jpg.lnk -> C:\Users\Euromaxtv\Documents\Downloads\счет 214.jpg (No File) <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\Desktop\Нужная папка оксана\Ингрид Мие\Ярлык для Нова НН (3).JPG.lnk -> C:\Users\Euromaxtv\Documents\Downloads\Нова НН (3).JPG (No File) <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\Desktop\Нужная папка оксана\Акесенова С.Ю\нова\ОТЧЕТЫ\Клиенты\Ярлык для Клиенты.lnk -> H:\Акесенова С.Ю\нова\ОТЧЕТЫ\Клиенты (No File) <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Корзина (2).lnk -> [LFx@_dP/N1SPSU(Ly9K-e)::{645FF040-5081-101B-9F08-00AA002F954E}] <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Корзина (3).lnk -> [LFx@_dP/N1SPSU(Ly9K-e)::{645FF040-5081-101B-9F08-00AA002F954E}] <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Корзина (4).lnk -> [LFx@_dP/N1SPSU(Ly9K-e)::{645FF040-5081-101B-9F08-00AA002F954E}] <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Корзина (5).lnk -> [LFx@_dP/N1SPSU(Ly9K-e)::{645FF040-5081-101B-9F08-00AA002F954E}] <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Корзина (6).lnk -> [LFx@_dP/N1SPSU(Ly9K-e)::{645FF040-5081-101B-9F08-00AA002F954E}] <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Корзина.lnk -> [LFx@_dP/N1SPSU(Ly9K-e)::{645FF040-5081-101B-9F08-00AA002F954E}] <==== Cyrillic
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OTOY\OctaneRender 4.00 XB3\Install Octane 4.00 XB3 Daemon.lnk -> C:\Program Files\OTOY\OctaneRender 4.00 XB3\_install_daemon.bat ()
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OTOY\OctaneRender 4.00 XB3\Start Octane 4.00 XB3 Daemon.lnk -> C:\Program Files\OTOY\OctaneRender 4.00 XB3\_run_installed_daemon.bat ()
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OTOY\OctaneRender 4.00 XB3\Uninstall Octane 4.00 XB3 Daemon.lnk -> C:\Program Files\OTOY\OctaneRender 4.00 XB3\_uninstall_daemon.bat ()
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OTOY\OctaneRender 4.00 RC4\Install Octane 4.00 RC4 Daemon.lnk -> C:\Program Files\OTOY\OctaneRender 4.00 RC4\_install_daemon.bat ()
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OTOY\OctaneRender 4.00 RC4\Start Octane 4.00 RC4 Daemon.lnk -> C:\Program Files\OTOY\OctaneRender 4.00 RC4\_run_installed_daemon.bat ()
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OTOY\OctaneRender 4.00 RC4\Uninstall Octane 4.00 RC4 Daemon.lnk -> C:\Program Files\OTOY\OctaneRender 4.00 RC4\_uninstall_daemon.bat ()
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OTOY\OctaneRender 3.08.3\Install Octane 3.08.3 Daemon.lnk -> C:\Program Files\OTOY\OctaneRender 3.08.3\_install_daemon.bat ()
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OTOY\OctaneRender 3.08.3\Start Octane 3.08.3 Daemon.lnk -> C:\Program Files\OTOY\OctaneRender 3.08.3\_run_installed_daemon.bat ()
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OTOY\OctaneRender 3.08.3\Uninstall Octane 3.08.3 Daemon.lnk -> C:\Program Files\OTOY\OctaneRender 3.08.3\_uninstall_daemon.bat ()
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OTOY\OctaneRender 3.06.2\Install Octane 3.06.2 Daemon.lnk -> C:\Program Files\OTOY\OctaneRender 3.06.2\_install_daemon.bat ()
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OTOY\OctaneRender 3.06.2\Start Octane 3.06.2 Daemon.lnk -> C:\Program Files\OTOY\OctaneRender 3.06.2\_run_installed_daemon.bat ()
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OTOY\OctaneRender 3.06.2\Uninstall Octane 3.06.2 Daemon.lnk -> C:\Program Files\OTOY\OctaneRender 3.06.2\_uninstall_daemon.bat ()
Shortcut: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\SendTo\Передача файлов через Bluetooth.LNK -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation) <==== Cyrillic

ShortcutWithArgument: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Средства Office 2013\Активация MS Office.lnk -> C:\Windows\activator.exe () -> -p12345 <==== Cyrillic
ShortcutWithArgument: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\Windows\SendTo\Получатель факса.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo <==== Cyrillic
ShortcutWithArgument: C:\Users\Euromaxtv\AppData\Roaming\Microsoft\PowerPoint\Резюме306930360329618869\Резюме.pptx.lnk -> C:\Users\Euromaxtv\Desktop\Logo\Резюме.pptx () -> 27 <==== Cyrillic

==================== Loaded Modules (Whitelisted) ==============

2018-09-11 12:14 - 2018-09-10 21:21 - 002066632 _____ () C:\Program Files (x86)\AnyDesk\AnyDesk.exe
2018-07-06 09:04 - 2018-07-06 09:04 - 000042312 _____ () C:\Program Files (x86)\Awesome Miner\IntelliBreeze.Maintenance.Service.exe
2018-01-14 22:01 - 2016-03-24 11:22 - 000242264 _____ () C:\Program Files (x86)\MobileBrServ\mbbservice.exe
2017-06-19 20:02 - 2017-06-19 20:02 - 012482024 _____ () C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
2017-12-15 12:04 - 2017-12-15 12:04 - 000725288 _____ () C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
2018-04-12 02:34 - 2018-04-12 02:34 - 000491744 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2018-04-12 02:34 - 2018-04-12 02:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
2018-04-12 02:34 - 2018-04-12 02:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2018-08-27 14:57 - 2018-08-27 14:57 - 000054440 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll
2017-08-09 21:48 - 2013-12-17 04:17 - 001356568 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2018-09-12 20:39 - 2018-08-31 06:12 - 002185728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-08-09 21:23 - 2017-06-29 02:43 - 001658312 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll
2018-09-12 15:50 - 2018-09-12 15:50 - 035124736 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.10311.0_x64__8wekyb3d8bbwe\Video.UI.exe
2018-09-12 15:50 - 2018-09-12 15:50 - 000290816 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.10311.0_x64__8wekyb3d8bbwe\SharedUI.dll
2018-09-12 15:50 - 2018-09-12 15:50 - 006417408 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.10311.0_x64__8wekyb3d8bbwe\EntCommon.dll
2017-09-26 21:00 - 2017-09-26 21:01 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.10311.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-09-12 15:50 - 2018-09-12 15:50 - 009010176 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.10311.0_x64__8wekyb3d8bbwe\EntPlat.dll
2016-01-27 18:05 - 2016-01-27 18:05 - 010857984 _____ () C:\Program Files (x86)\TechSmith\Snagit 2018\opencv_core300.dll
2018-01-12 09:40 - 2018-01-12 09:40 - 000832488 _____ () C:\Program Files (x86)\TechSmith\Snagit 2018\ruiSDK_5.1.0.x64.dll
2017-11-02 14:36 - 2017-11-02 14:36 - 001897984 _____ () C:\Program Files (x86)\TechSmith\Snagit 2018\cairo.dll
2016-01-27 18:05 - 2016-01-27 18:05 - 025250304 _____ () C:\Program Files (x86)\TechSmith\Snagit 2018\opencv_imgproc300.dll
2016-07-14 10:23 - 2016-07-14 10:23 - 000778240 _____ () C:\Program Files (x86)\TechSmith\Snagit 2018\libhpdf.dll
2016-03-04 15:10 - 2016-03-04 15:10 - 025254912 _____ () C:\Program Files (x86)\TechSmith\Snagit 2018\opencv_imgproc310.dll
2016-03-04 15:10 - 2016-03-04 15:10 - 010860544 _____ () C:\Program Files (x86)\TechSmith\Snagit 2018\opencv_core310.dll
2016-03-04 15:10 - 2016-03-04 15:10 - 000969216 _____ () C:\Program Files (x86)\TechSmith\Snagit 2018\opencv_photo310.dll
2017-11-02 14:36 - 2017-11-02 14:36 - 000086016 _____ () C:\Program Files (x86)\TechSmith\Snagit 2018\zlib1.dll
2017-11-02 14:36 - 2017-11-02 14:36 - 000252928 _____ () C:\Program Files (x86)\TechSmith\Snagit 2018\libpng16.dll
2017-11-02 14:36 - 2017-11-02 14:36 - 001037312 _____ () C:\Program Files (x86)\TechSmith\Snagit 2018\harfbuzz-vs14.dll
2017-11-02 14:36 - 2017-11-02 14:36 - 000800256 _____ () C:\Program Files (x86)\TechSmith\Snagit 2018\fontconfig.dll
2017-11-02 14:36 - 2017-11-02 14:36 - 001335808 _____ () C:\Program Files (x86)\TechSmith\Snagit 2018\libxml2.dll
2017-11-02 14:36 - 2017-11-02 14:36 - 000061440 _____ () C:\Program Files (x86)\TechSmith\Snagit 2018\iconv.dll
2018-09-20 00:27 - 2018-09-15 11:26 - 005110616 _____ () C:\Program Files (x86)\Google\Chrome\Application\69.0.3497.100\libglesv2.dll
2018-09-20 00:27 - 2018-09-15 11:26 - 000116056 _____ () C:\Program Files (x86)\Google\Chrome\Application\69.0.3497.100\libegl.dll
2018-07-06 09:04 - 2018-07-06 09:04 - 004387656 _____ () C:\Program Files (x86)\Awesome Miner\AwesomeMiner.exe
2016-06-28 00:19 - 2016-06-28 00:19 - 000865232 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\kpcengine.2.3.dll
2018-09-14 22:16 - 2018-05-09 09:54 - 000062840 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\QtSolutions_Service-head2.dll
2018-09-14 22:16 - 2018-05-09 09:54 - 000140152 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qjson0.dll
2017-06-19 20:02 - 2017-06-19 20:02 - 000173032 _____ () C:\Program Files (x86)\VMware\VMware Workstation\nfc-types.dll
2017-06-19 20:02 - 2017-06-19 20:02 - 000396776 _____ () C:\Program Files (x86)\VMware\VMware Workstation\ssoClient.dll
2017-06-19 20:02 - 2017-06-19 20:02 - 000126440 _____ () C:\Program Files (x86)\VMware\VMware Workstation\expat.dll
2017-12-14 20:56 - 2017-12-14 20:56 - 000232448 _____ () C:\Program Files (x86)\MSI Afterburner\RTCore.dll
2017-12-14 20:56 - 2017-12-14 20:56 - 000071680 _____ () C:\Program Files (x86)\MSI Afterburner\RTMUI.dll
2017-12-14 20:56 - 2017-12-14 20:56 - 000056832 _____ () C:\Program Files (x86)\MSI Afterburner\RTFC.dll
2017-12-14 20:56 - 2017-12-14 20:56 - 000357888 _____ () C:\Program Files (x86)\MSI Afterburner\RTUI.dll
2017-12-14 20:57 - 2017-12-14 20:57 - 000566784 _____ () C:\Program Files (x86)\MSI Afterburner\RTHAL.dll
2017-06-23 19:13 - 2014-09-28 17:59 - 000019872 _____ () C:\Program Files (x86)\Samsung\Samsung Magician\SAMSUNG_SSD.dll
2018-09-10 09:50 - 2018-06-08 12:16 - 000194504 _____ () C:\Program Files (x86)\DearMob\5KPlayer\libupnp.dll
2018-09-10 09:50 - 2017-06-20 07:17 - 000119616 _____ () C:\Program Files (x86)\DearMob\5KPlayer\zlib1.dll
2018-09-10 09:50 - 2017-06-20 07:16 - 000132432 _____ () C:\Program Files (x86)\DearMob\5KPlayer\libgcc_s_dw2-1.dll
2018-09-10 09:50 - 2017-06-20 07:16 - 001552720 _____ () C:\Program Files (x86)\DearMob\5KPlayer\libstdc++-6.dll
2018-09-14 22:16 - 2018-05-09 09:04 - 000050984 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\QtSolutions_MFCMigrationFramework_Ad_2.dll
2018-09-14 22:16 - 2018-05-09 09:04 - 000060712 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qoauth_Ad_1.dll
2018-09-14 22:16 - 2018-05-09 09:04 - 000202024 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qjson_Ad_0.dll
2018-09-14 22:16 - 2018-05-09 09:04 - 000789288 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qca_Ad_2.dll
2015-03-24 18:01 - 2015-03-24 18:01 - 000192512 _____ () C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GvVGAConfig.dll
2018-09-14 22:16 - 2017-09-05 11:09 - 059523896 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libcef.dll
2018-09-14 22:16 - 2017-09-05 11:09 - 002203448 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libglesv2.dll
2018-09-14 22:16 - 2017-09-05 11:09 - 000087352 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libegl.dll
2018-05-19 01:53 - 2018-07-24 10:32 - 001106736 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 2.0\KasperskyLab.Ksde.NativeInterop.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-03-19 00:03 - 2017-03-19 00:01 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3715096018-3359421980-3385932631-1001\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.1.1 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKU\S-1-5-21-3715096018-3359421980-3385932631-1001\...\StartupApproved\Run: => "Skype"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{5EC1C956-34E9-4CDF-859B-3FE6348F5599}C:\bloccoin\bloc_wallet_windows_1.5.0_x64\bloc.exe] => (Allow) C:\bloccoin\bloc_wallet_windows_1.5.0_x64\bloc.exe
FirewallRules: [TCP Query User{85CE5010-063B-47A2-8717-2B96C72F16BA}C:\bloccoin\bloc_wallet_windows_1.5.0_x64\bloc.exe] => (Allow) C:\bloccoin\bloc_wallet_windows_1.5.0_x64\bloc.exe
FirewallRules: [UDP Query User{C0B93826-143B-4C75-B080-2BEB943D011D}C:\calisto\claymore's dual ethereum+decred_siacoin_lbry_pascal_blake2s_keccak amd+nvidia gpu miner v11.7\ethdcrminer64.exe] => (Allow) C:\calisto\claymore's dual ethereum+decred_siacoin_lbry_pascal_blake2s_keccak amd+nvidia gpu miner v11.7\ethdcrminer64.exe
FirewallRules: [TCP Query User{BE00A154-D52B-47D5-80F1-AA9D5CFD67E2}C:\calisto\claymore's dual ethereum+decred_siacoin_lbry_pascal_blake2s_keccak amd+nvidia gpu miner v11.7\ethdcrminer64.exe] => (Allow) C:\calisto\claymore's dual ethereum+decred_siacoin_lbry_pascal_blake2s_keccak amd+nvidia gpu miner v11.7\ethdcrminer64.exe
FirewallRules: [UDP Query User{E2281886-D98F-4F6D-85F3-03F347478447}C:\niobiocoin\niobio-cash.win64.gui.1-3-0\niobio.exe] => (Allow) C:\niobiocoin\niobio-cash.win64.gui.1-3-0\niobio.exe
FirewallRules: [TCP Query User{DC90690F-51EF-42D1-AE23-090AFDBEC742}C:\niobiocoin\niobio-cash.win64.gui.1-3-0\niobio.exe] => (Allow) C:\niobiocoin\niobio-cash.win64.gui.1-3-0\niobio.exe
FirewallRules: [UDP Query User{9C52444C-4F10-4BA7-B45B-660E9F1C7FB8}C:\etsc\eth\claymore\claymore's dual ethereum+decred_siacoin_lbry_pascal amd+nvidia gpu miner v10.1\ethdcrminer64.exe] => (Allow) C:\etsc\eth\claymore\claymore's dual ethereum+decred_siacoin_lbry_pascal amd+nvidia gpu miner v10.1\ethdcrminer64.exe
FirewallRules: [TCP Query User{9A30A81F-6BC1-423A-BA25-CD2A715840B9}C:\etsc\eth\claymore\claymore's dual ethereum+decred_siacoin_lbry_pascal amd+nvidia gpu miner v10.1\ethdcrminer64.exe] => (Allow) C:\etsc\eth\claymore\claymore's dual ethereum+decred_siacoin_lbry_pascal amd+nvidia gpu miner v10.1\ethdcrminer64.exe
FirewallRules: [UDP Query User{12AFE559-E3C1-4C2F-A713-822E37F3281A}C:\b2n coin\b2n_gui_wallet_win64_v3.1.2\b2n wallet win64 v3.1.2\b2n gui wallet.exe] => (Allow) C:\b2n coin\b2n_gui_wallet_win64_v3.1.2\b2n wallet win64 v3.1.2\b2n gui wallet.exe
FirewallRules: [TCP Query User{AD4EC62D-2789-43C6-8C7E-9AAC2BC5BCEB}C:\b2n coin\b2n_gui_wallet_win64_v3.1.2\b2n wallet win64 v3.1.2\b2n gui wallet.exe] => (Allow) C:\b2n coin\b2n_gui_wallet_win64_v3.1.2\b2n wallet win64 v3.1.2\b2n gui wallet.exe
FirewallRules: [UDP Query User{7B4F1C03-E6B1-42E1-B3E1-A1A8AE7E6338}C:\haven coin\haven-gui-windows-2.1.0\haven-gui-windows-2.1.0\havend.exe] => (Allow) C:\haven coin\haven-gui-windows-2.1.0\haven-gui-windows-2.1.0\havend.exe
FirewallRules: [TCP Query User{2DD82EBF-D598-4A81-93CB-9D06268DC6A5}C:\haven coin\haven-gui-windows-2.1.0\haven-gui-windows-2.1.0\havend.exe] => (Allow) C:\haven coin\haven-gui-windows-2.1.0\haven-gui-windows-2.1.0\havend.exe
FirewallRules: [UDP Query User{B3B217D9-6130-408F-9E51-645F4F21E846}C:\haven coin\haven-gui-windows-2.1.0\haven-gui-windows-2.1.0\haven-wallet-gui.exe] => (Allow) C:\haven coin\haven-gui-windows-2.1.0\haven-gui-windows-2.1.0\haven-wallet-gui.exe
FirewallRules: [TCP Query User{3BB6AF8F-4F77-4955-BB51-A6361B42E250}C:\haven coin\haven-gui-windows-2.1.0\haven-gui-windows-2.1.0\haven-wallet-gui.exe] => (Allow) C:\haven coin\haven-gui-windows-2.1.0\haven-gui-windows-2.1.0\haven-wallet-gui.exe
FirewallRules: [UDP Query User{824641B8-C353-40AE-91E1-200B5074B02A}C:\etsc\claymore's dual ethereum+decred_siacoin_lbry_pascal_blake2s_keccak amd+nvidia gpu miner v11.7\ethdcrminer64.exe] => (Allow) C:\etsc\claymore's dual ethereum+decred_siacoin_lbry_pascal_blake2s_keccak amd+nvidia gpu miner v11.7\ethdcrminer64.exe
FirewallRules: [TCP Query User{66A5A13C-EB64-4D93-B41A-F0B8A0B6DFCA}C:\etsc\claymore's dual ethereum+decred_siacoin_lbry_pascal_blake2s_keccak amd+nvidia gpu miner v11.7\ethdcrminer64.exe] => (Allow) C:\etsc\claymore's dual ethereum+decred_siacoin_lbry_pascal_blake2s_keccak amd+nvidia gpu miner v11.7\ethdcrminer64.exe
FirewallRules: [UDP Query User{B767195D-81A6-4F62-B5A0-BAA0E2AFF03B}C:\users\euromaxtv\appdata\roaming\etsc wallet\binaries\geth\unpacked\geth.exe] => (Allow) C:\users\euromaxtv\appdata\roaming\etsc wallet\binaries\geth\unpacked\geth.exe
FirewallRules: [TCP Query User{4D698126-3658-418C-98CB-79901A6CD378}C:\users\euromaxtv\appdata\roaming\etsc wallet\binaries\geth\unpacked\geth.exe] => (Allow) C:\users\euromaxtv\appdata\roaming\etsc wallet\binaries\geth\unpacked\geth.exe
FirewallRules: [{75E323DB-7B8E-41FF-AE80-2B093D429DAC}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\EthDcrMiner64_1\Claymore's Dual Ethereum+Decred_Siacoin_Lbry_Pascal_Blake2s_Keccak AMD+NVIDIA GPU Miner v11.7\EthDcrMiner64.exe
FirewallRules: [UDP Query User{449EEBFE-64FF-4B7F-9F55-8F5662FFB3B5}C:\dogetherium\claymore's dual ethereum+decred_siacoin_lbry_pascal_blake2s_keccak amd+nvidia gpu miner v11.7\ethdcrminer64.exe] => (Allow) C:\dogetherium\claymore's dual ethereum+decred_siacoin_lbry_pascal_blake2s_keccak amd+nvidia gpu miner v11.7\ethdcrminer64.exe
FirewallRules: [TCP Query User{596AF0B5-C1B0-4CB9-8510-34835810C0DD}C:\dogetherium\claymore's dual ethereum+decred_siacoin_lbry_pascal_blake2s_keccak amd+nvidia gpu miner v11.7\ethdcrminer64.exe] => (Allow) C:\dogetherium\claymore's dual ethereum+decred_siacoin_lbry_pascal_blake2s_keccak amd+nvidia gpu miner v11.7\ethdcrminer64.exe
FirewallRules: [{260D254A-CC96-43E6-9148-77D9D9563EA4}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\EthDcrMiner64_2\Claymore's Dual Ethereum+Decred_Siacoin_Lbry_Pascal_Blake2s_Keccak AMD+NVIDIA GPU Miner v11.7\EthDcrMiner64.exe
FirewallRules: [UDP Query User{65F85815-E118-481A-BBDD-D48B3A7ADC77}C:\users\euromaxtv\appdata\roaming\dogethereum wallet\binaries\geth\unpacked\geth.exe] => (Allow) C:\users\euromaxtv\appdata\roaming\dogethereum wallet\binaries\geth\unpacked\geth.exe
FirewallRules: [TCP Query User{C09E7628-8B68-44FF-AEF5-E9672C305569}C:\users\euromaxtv\appdata\roaming\dogethereum wallet\binaries\geth\unpacked\geth.exe] => (Allow) C:\users\euromaxtv\appdata\roaming\dogethereum wallet\binaries\geth\unpacked\geth.exe
FirewallRules: [UDP Query User{38CB17AF-376E-4002-9FDB-A5B9F61B8DDC}C:\buck\buck\buck-windows-wallet_1.1.0.4f_win64-beta\buck-windows-wallet_1.1.0.4f_win64-beta\zcashd.exe] => (Allow) C:\buck\buck\buck-windows-wallet_1.1.0.4f_win64-beta\buck-windows-wallet_1.1.0.4f_win64-beta\zcashd.exe
FirewallRules: [TCP Query User{7089435C-A825-4376-B0B1-3999DA9023BE}C:\buck\buck\buck-windows-wallet_1.1.0.4f_win64-beta\buck-windows-wallet_1.1.0.4f_win64-beta\zcashd.exe] => (Allow) C:\buck\buck\buck-windows-wallet_1.1.0.4f_win64-beta\buck-windows-wallet_1.1.0.4f_win64-beta\zcashd.exe
FirewallRules: [UDP Query User{146BA207-C901-4D91-8E68-A2075300D779}C:\program files\bytecoin\walletd.exe] => (Allow) C:\program files\bytecoin\walletd.exe
FirewallRules: [TCP Query User{9F506F83-B307-4ECC-AE2F-D75C3A1ACC11}C:\program files\bytecoin\walletd.exe] => (Allow) C:\program files\bytecoin\walletd.exe
FirewallRules: [UDP Query User{031C3614-EFF4-47A1-8104-1E802A727E3D}C:\candy\bitcoin-qt.exe] => (Allow) C:\candy\bitcoin-qt.exe
FirewallRules: [TCP Query User{6621E32B-6BD2-4F4E-9B7F-A1F9D1569B00}C:\candy\bitcoin-qt.exe] => (Allow) C:\candy\bitcoin-qt.exe
FirewallRules: [{A5433484-3E77-4ED3-90FF-A87F753970CC}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\ccminer-2.2.5_2\ccminer-x64-2.2.5-cuda9\ccminer-x64.exe
FirewallRules: [UDP Query User{0289B351-11C5-4464-AA61-F7B4F7CDB597}C:\zixx\zixx-qt.exe] => (Allow) C:\zixx\zixx-qt.exe
FirewallRules: [TCP Query User{DDFD2193-7CDB-4085-915B-80FD7C267F24}C:\zixx\zixx-qt.exe] => (Allow) C:\zixx\zixx-qt.exe
FirewallRules: [{AE52079E-E528-4C2D-A47C-60E1747EA10A}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\ccminer-alexis_1\ccminer-hsr-alexis-x86-cuda8\ccminer-alexis.exe
FirewallRules: [{36153B0D-1159-47EF-866E-873B8C222C6D}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\ccminer-820-cuda91-x64_1\ccminer.exe
FirewallRules: [UDP Query User{CF12487A-A3CD-468F-B440-82393C82B1BE}C:\buck\buck\buck-windows-wallet_1.1.0.4b_win64-beta\zcashd.exe] => (Allow) C:\buck\buck\buck-windows-wallet_1.1.0.4b_win64-beta\zcashd.exe
FirewallRules: [TCP Query User{48E5972B-1942-44CE-8D6D-C88CA70C6E89}C:\buck\buck\buck-windows-wallet_1.1.0.4b_win64-beta\zcashd.exe] => (Allow) C:\buck\buck\buck-windows-wallet_1.1.0.4b_win64-beta\zcashd.exe
FirewallRules: [{E6E21DA6-5044-4D83-B002-55E12B4C8045}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\ccminer-2.2.5_1\ccminer-x64-2.2.5-cuda9\ccminer-x64.exe
FirewallRules: [UDP Query User{991841D9-1BD1-487D-B11D-69EF608C328D}C:\program files\agamaapp\agama.exe] => (Allow) C:\program files\agamaapp\agama.exe
FirewallRules: [TCP Query User{0F25D636-1A58-4DE0-83A4-DA42B88D8CB4}C:\program files\agamaapp\agama.exe] => (Allow) C:\program files\agamaapp\agama.exe
FirewallRules: [UDP Query User{DBE0F997-250F-412E-9F39-A81278D21B10}C:\vertcoin\vertcoin-qt-v0.13.0-rc1-win64\vertcoin-qt.exe] => (Allow) C:\vertcoin\vertcoin-qt-v0.13.0-rc1-win64\vertcoin-qt.exe
FirewallRules: [TCP Query User{B848B578-3DB6-42B8-AB89-AFBB9B635478}C:\vertcoin\vertcoin-qt-v0.13.0-rc1-win64\vertcoin-qt.exe] => (Allow) C:\vertcoin\vertcoin-qt-v0.13.0-rc1-win64\vertcoin-qt.exe
FirewallRules: [UDP Query User{D0EA133B-8F0C-4567-9D6F-4393E2CE8E0B}C:\emarkcoin\emark-qt-1.5.0-win\emark 1.5.exe] => (Allow) C:\emarkcoin\emark-qt-1.5.0-win\emark 1.5.exe
FirewallRules: [TCP Query User{94536E77-401A-414E-9DB4-B7A7F303FEBB}C:\emarkcoin\emark-qt-1.5.0-win\emark 1.5.exe] => (Allow) C:\emarkcoin\emark-qt-1.5.0-win\emark 1.5.exe
FirewallRules: [UDP Query User{E96F877F-B70C-4EA2-BA8A-1B357A8F2A03}C:\mti_coin\mti-qt-(windows)\mti-qt.exe] => (Allow) C:\mti_coin\mti-qt-(windows)\mti-qt.exe
FirewallRules: [TCP Query User{B674BEA2-2B16-4064-AA18-B4BDA97579B5}C:\mti_coin\mti-qt-(windows)\mti-qt.exe] => (Allow) C:\mti_coin\mti-qt-(windows)\mti-qt.exe
FirewallRules: [UDP Query User{5BCD53B6-3B17-40E8-9468-45136A8B2C85}C:\time_coin\time-windows.x64.exe] => (Allow) C:\time_coin\time-windows.x64.exe
FirewallRules: [TCP Query User{99037E4C-70B9-4BD4-B2CA-A32013B8C0A6}C:\time_coin\time-windows.x64.exe] => (Allow) C:\time_coin\time-windows.x64.exe
FirewallRules: [{46C8890E-668F-413B-BD85-1076B748AF63}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\cgminer_1\cgminer-4.9.0-windows\cgminer.exe
FirewallRules: [UDP Query User{5EC59AFB-7D02-47CA-B7EF-4F7B18C343D7}C:\pegas_coin\pegascoin_wallet_v1_3dobfull\node\gpg.exe] => (Allow) C:\pegas_coin\pegascoin_wallet_v1_3dobfull\node\gpg.exe
FirewallRules: [TCP Query User{565D339B-B0BA-4F2D-B503-79429CA2A6E3}C:\pegas_coin\pegascoin_wallet_v1_3dobfull\node\gpg.exe] => (Allow) C:\pegas_coin\pegascoin_wallet_v1_3dobfull\node\gpg.exe
FirewallRules: [UDP Query User{F30F5DEC-8EA7-455D-8B6E-EA0598D883A4}C:\snowgem\snowgem-2.0.0b-windowsx64\snowgem-2.0.0b-windowsx64\snowgemd.exe] => (Allow) C:\snowgem\snowgem-2.0.0b-windowsx64\snowgem-2.0.0b-windowsx64\snowgemd.exe
FirewallRules: [TCP Query User{2C553F0F-1C33-4C7B-A770-8D7332CDDDB1}C:\snowgem\snowgem-2.0.0b-windowsx64\snowgem-2.0.0b-windowsx64\snowgemd.exe] => (Allow) C:\snowgem\snowgem-2.0.0b-windowsx64\snowgem-2.0.0b-windowsx64\snowgemd.exe
FirewallRules: [UDP Query User{2315D62B-24B1-47ED-8F86-A45C716EF02E}C:\program files\litecoinz\litecoinz-qt.exe] => (Allow) C:\program files\litecoinz\litecoinz-qt.exe
FirewallRules: [TCP Query User{196CE6C9-A96A-4598-8AF7-E248B88B3BC5}C:\program files\litecoinz\litecoinz-qt.exe] => (Allow) C:\program files\litecoinz\litecoinz-qt.exe
FirewallRules: [UDP Query User{B47D6E76-4A33-40F7-81C0-E7AC8D342B32}C:\commercium\commercium-0.1-15-win64\commercium-qt.exe] => (Allow) C:\commercium\commercium-0.1-15-win64\commercium-qt.exe
FirewallRules: [TCP Query User{A03445E2-1321-4FED-B8E9-55740EC08DCD}C:\commercium\commercium-0.1-15-win64\commercium-qt.exe] => (Allow) C:\commercium\commercium-0.1-15-win64\commercium-qt.exe
FirewallRules: [UDP Query User{B19391D4-03AF-47FD-9A51-5978EEAE7286}H:\miningit\btcz\bitcoinz-windows-wallet_1.1.5.1_win64\bitcoinz-wallet\zcashd.exe] => (Allow) H:\miningit\btcz\bitcoinz-windows-wallet_1.1.5.1_win64\bitcoinz-wallet\zcashd.exe
FirewallRules: [TCP Query User{642DD912-B5A7-4229-B570-5D4F14BBE1DE}H:\miningit\btcz\bitcoinz-windows-wallet_1.1.5.1_win64\bitcoinz-wallet\zcashd.exe] => (Allow) H:\miningit\btcz\bitcoinz-windows-wallet_1.1.5.1_win64\bitcoinz-wallet\zcashd.exe
FirewallRules: [UDP Query User{CBCCFA3D-AF19-48AA-ACF9-D681B042E693}H:\miningit\vote coin\votecoin-v1.0.13-windows\votecoin-v1.0.13-windows\votecoind.exe] => (Allow) H:\miningit\vote coin\votecoin-v1.0.13-windows\votecoin-v1.0.13-windows\votecoind.exe
FirewallRules: [TCP Query User{32D30042-68DB-4937-80D9-44DD0DFB5A0D}H:\miningit\vote coin\votecoin-v1.0.13-windows\votecoin-v1.0.13-windows\votecoind.exe] => (Allow) H:\miningit\vote coin\votecoin-v1.0.13-windows\votecoin-v1.0.13-windows\votecoind.exe
FirewallRules: [UDP Query User{75474BE0-2B02-48DB-88BA-5BC11FB9FDCE}H:\miningit\vote coin\votecoin-v1.0.14-windows\votecoin-v1.0.14-windows\votecoind.exe] => (Block) H:\miningit\vote coin\votecoin-v1.0.14-windows\votecoin-v1.0.14-windows\votecoind.exe
FirewallRules: [TCP Query User{BC9F24CD-F676-4B0B-8379-A43AB5D3B361}H:\miningit\vote coin\votecoin-v1.0.14-windows\votecoin-v1.0.14-windows\votecoind.exe] => (Block) H:\miningit\vote coin\votecoin-v1.0.14-windows\votecoin-v1.0.14-windows\votecoind.exe
FirewallRules: [UDP Query User{77614498-092A-42DB-B03D-1A4ADCD13FFD}H:\miningit\liz coin\lizus-qt-1.0.1.0.exe] => (Allow) H:\miningit\liz coin\lizus-qt-1.0.1.0.exe
FirewallRules: [TCP Query User{FF1BA2E1-4D38-4F73-8AE3-CB89F8F5130A}H:\miningit\liz coin\lizus-qt-1.0.1.0.exe] => (Allow) H:\miningit\liz coin\lizus-qt-1.0.1.0.exe
FirewallRules: [{561615D2-B346-4CB9-A935-C7F04634D181}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\Zec.miner.0.3.4b_1\0.3.4b\miner.exe
FirewallRules: [UDP Query User{A2B55B10-ADC0-429A-8109-AEDAACC11A32}H:\miningit\buck\buck-windows-wallet_1.1.0.4b_win64-beta\zcashd.exe] => (Allow) H:\miningit\buck\buck-windows-wallet_1.1.0.4b_win64-beta\zcashd.exe
FirewallRules: [TCP Query User{A3B15DD1-FF70-42D5-8745-75C251599EAF}H:\miningit\buck\buck-windows-wallet_1.1.0.4b_win64-beta\zcashd.exe] => (Allow) H:\miningit\buck\buck-windows-wallet_1.1.0.4b_win64-beta\zcashd.exe
FirewallRules: [UDP Query User{3018449C-5D5D-4833-882B-C569357E067C}H:\miningit\btcz\bitcoinz-windows-wallet_1.1.0.4_win64\bitcoinz-wallet\zcashd.exe] => (Allow) H:\miningit\btcz\bitcoinz-windows-wallet_1.1.0.4_win64\bitcoinz-wallet\zcashd.exe
FirewallRules: [TCP Query User{4FD57183-3FFC-4CF1-840A-0D1444F49931}H:\miningit\btcz\bitcoinz-windows-wallet_1.1.0.4_win64\bitcoinz-wallet\zcashd.exe] => (Allow) H:\miningit\btcz\bitcoinz-windows-wallet_1.1.0.4_win64\bitcoinz-wallet\zcashd.exe
FirewallRules: [UDP Query User{D8546B79-88E4-46E3-98C1-AE2E99AC4F84}C:\program files\litebitcoin\litebitcoin-qt.exe] => (Allow) C:\program files\litebitcoin\litebitcoin-qt.exe
FirewallRules: [TCP Query User{DF8C2B43-4AD3-431D-92BF-8C0A69F4FC1B}C:\program files\litebitcoin\litebitcoin-qt.exe] => (Allow) C:\program files\litebitcoin\litebitcoin-qt.exe
FirewallRules: [UDP Query User{A1CD5164-7449-48F4-BC24-956084D40997}H:\miningit\btx\bitcore\bitcore-qt.exe] => (Allow) H:\miningit\btx\bitcore\bitcore-qt.exe
FirewallRules: [TCP Query User{210401B8-1D74-45B1-81F8-7B5B48257C88}H:\miningit\btx\bitcore\bitcore-qt.exe] => (Allow) H:\miningit\btx\bitcore\bitcore-qt.exe
FirewallRules: [UDP Query User{29E62387-15D7-40A7-BA46-1D8925E83FFF}H:\miningit\dubaicoin\win claymore's miner v9.3 dubaicoin (dbix)\win claymore's miner v9.3 dubaicoin (dbix)\ethdcrminer64.exe] => (Allow) H:\miningit\dubaicoin\win claymore's miner v9.3 dubaicoin (dbix)\win claymore's miner v9.3 dubaicoin (dbix)\ethdcrminer64.exe
FirewallRules: [TCP Query User{69D820B1-D965-4C88-A370-0B8E765BB16F}H:\miningit\dubaicoin\win claymore's miner v9.3 dubaicoin (dbix)\win claymore's miner v9.3 dubaicoin (dbix)\ethdcrminer64.exe] => (Allow) H:\miningit\dubaicoin\win claymore's miner v9.3 dubaicoin (dbix)\win claymore's miner v9.3 dubaicoin (dbix)\ethdcrminer64.exe
FirewallRules: [{76B5C921-7721-4E6E-905D-173FF2868054}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\zm_0.5.7_win_2\zm_0.5.7_win\zm.exe
FirewallRules: [{EB58C6E1-0B62-410B-B288-A801F9D320A0}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\EthDcrMiner64_1\Claymore's Dual Ethereum+Decred_Siacoin_Lbry_Pascal AMD+NVIDIA GPU Miner v10.3\EthDcrMiner64.exe
FirewallRules: [UDP Query User{4D7FCCFA-BBE9-4A23-B289-DD11FEB481A6}H:\miningit\dubaicoin\claymore's dual ethereum+decred_siacoin_lbry_pascal amd+nvidia gpu miner v10.3 - catalyst 15.12-17.x - cuda 8.0_7.5_6.5\claymore's dual ethereum+decred_siacoin_lbry_pascal amd+nvidia gpu miner v10.3\ethdcrminer64.exe] => (Allow) H:\miningit\dubaicoin\claymore's dual ethereum+decred_siacoin_lbry_pascal amd+nvidia gpu miner v10.3 - catalyst 15.12-17.x - cuda 8.0_7.5_6.5\claymore's dual ethereum+decred_siacoin_lbry_pascal amd+nvidia gpu miner v10.3\ethdcrminer64.exe
FirewallRules: [TCP Query User{729F2BF5-C2E2-49F5-B290-BEDC27315995}H:\miningit\dubaicoin\claymore's dual ethereum+decred_siacoin_lbry_pascal amd+nvidia gpu miner v10.3 - catalyst 15.12-17.x - cuda 8.0_7.5_6.5\claymore's dual ethereum+decred_siacoin_lbry_pascal amd+nvidia gpu miner v10.3\ethdcrminer64.exe] => (Allow) H:\miningit\dubaicoin\claymore's dual ethereum+decred_siacoin_lbry_pascal amd+nvidia gpu miner v10.3 - catalyst 15.12-17.x - cuda 8.0_7.5_6.5\claymore's dual ethereum+decred_siacoin_lbry_pascal amd+nvidia gpu miner v10.3\ethdcrminer64.exe
FirewallRules: [{3165E2B4-50A8-4C70-9AD1-D77B4C0F041B}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\ccminer-2.2.4_1\ccminer-x64-2.2.4-cuda9\ccminer-x64.exe
FirewallRules: [{327E1F63-2D82-4E39-8714-83A2A5EE1C8D}] => (Allow) LPort=9630
FirewallRules: [{DDABE1CC-9F97-478C-9017-3784E471B509}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{052C41F9-5E25-45A1-AA26-712F09A5228E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{79B7196C-E3A0-43ED-8740-8C4E23790289}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{9FF0BA04-CF23-45F7-B523-572919507E2A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{21EC6491-A9B4-46D3-96C8-6E3CDB721D74}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{CB6AA666-7B7F-4A92-8AF2-507DED31E848}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Block) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [UDP Query User{D678E104-87AA-4C4B-8D32-59710FABA089}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Block) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [{ECEE3488-9C8F-45B9-A404-B2BFFC0BC7C4}] => (Allow) C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\satellite\raysat_3dsmax2016_64server.exe
FirewallRules: [{C49FED02-6A4D-46A3-8089-268102C019C2}] => (Allow) C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\satellite\raysat_3dsmax2016_64server.exe
FirewallRules: [{4B22ACEF-307B-4077-8BCF-8D5542E3AD76}] => (Allow) C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\satellite\raysat_3dsmax2016_64.exe
FirewallRules: [{F496208B-C71F-4B3E-A10D-8F7763C30796}] => (Allow) C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\satellite\raysat_3dsmax2016_64.exe
FirewallRules: [{160F1B96-7568-46DB-9208-2F4365F9B164}] => (Allow) C:\Users\Euromaxtv\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{5EE00109-9A38-4B87-B40A-ECD7DD225D37}] => (Allow) C:\Users\Euromaxtv\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{DEF36428-3F1D-4709-8202-90E726351E90}] => (Allow) C:\Users\Euromaxtv\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{B3B6B989-137A-4F9D-8278-B8CC89E0B5CD}] => (Allow) C:\Users\Euromaxtv\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{6E8EBD26-4789-49A5-B841-600A909D53F2}] => (Allow) C:\Users\Euromaxtv\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{75EE3701-8679-4F14-9E2E-8AAE1251D35C}] => (Allow) C:\Users\Euromaxtv\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7F03BD42-643C-4777-96D6-5E8373924935}] => (Allow) C:\Program Files\OTOY\OctaneRender 3.06.2\octane.exe
FirewallRules: [{64F742EA-FDBC-4513-A1B1-461B23F5F61D}] => (Allow) C:\Program Files\OTOY\OctaneRender 3.06.2\octane.exe
FirewallRules: [{7FD971A0-94BB-41C9-8CF5-294843E0BAE0}] => (Allow) C:\Program Files\OTOY\OctaneRender 3.06.2\octane-cli.exe
FirewallRules: [{2E55BF91-1327-4706-B770-50660E0C27D5}] => (Allow) C:\Program Files\OTOY\OctaneRender 3.06.2\octane-cli.exe
FirewallRules: [{A7888171-DE19-47EA-B70E-64BA427F1B5F}] => (Allow) C:\Program Files\OTOY\OctaneRender 3.06.2\octane_slave.exe
FirewallRules: [{518C51A9-CAAA-4840-A8A0-20562B915CD4}] => (Allow) C:\Program Files\OTOY\OctaneRender 3.06.2\octane_slave.exe
FirewallRules: [{D2DF0044-055C-43D2-889F-1E4EAAC7F545}] => (Allow) C:\Program Files\OTOY\OctaneRender 3.06.2\octane_slave_daemon.exe
FirewallRules: [{2DD4CA49-1798-4AD0-93EF-1DAF6BF8E40B}] => (Allow) C:\Program Files\OTOY\OctaneRender 3.06.2\octane_slave_daemon.exe
FirewallRules: [TCP Query User{23CF5E4E-47E0-4441-B8BD-1E8B38E47157}C:\program files\3d-coat-v4\3d-coatdx64s.exe] => (Allow) C:\program files\3d-coat-v4\3d-coatdx64s.exe
FirewallRules: [UDP Query User{EEAFC88F-3E30-4812-9328-888DF56C73A1}C:\program files\3d-coat-v4\3d-coatdx64s.exe] => (Allow) C:\program files\3d-coat-v4\3d-coatdx64s.exe
FirewallRules: [{CF8D60B3-07C8-423D-AFEF-ADE97A749B02}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{9FF5327A-B0A3-48E8-A943-4A66635166CE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{4C9CC4D7-8D50-4E31-87FA-615FF06DFE1E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{4A72B213-2DC5-43A6-8D3C-3FC56E039B0B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{8B0F6D3A-C99F-4FE6-AC23-0653ADF9DC3E}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
FirewallRules: [{575C3FA7-E36E-4BF5-8943-6CDB8DC61D8F}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
FirewallRules: [{F9150C21-2733-4523-A5B2-980D1AF5E18C}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
FirewallRules: [{1FB6E68D-CCDE-4C66-978A-6AC728C056DB}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
FirewallRules: [TCP Query User{1359EAD4-7755-4561-88CF-D9EDB34D0975}C:\program files\allegorithmic\substance painter\substance painter.exe] => (Allow) C:\program files\allegorithmic\substance painter\substance painter.exe
FirewallRules: [UDP Query User{89587102-3C4C-48AD-B150-2FCEFE94AA38}C:\program files\allegorithmic\substance painter\substance painter.exe] => (Allow) C:\program files\allegorithmic\substance painter\substance painter.exe
FirewallRules: [{2AA63C4B-D37E-41D3-96DA-E0D23FD08BC0}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{EDB3DB7A-FC7B-4FA6-B90A-82E731DF4917}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{3F3923AF-EC9D-4303-A9C1-88CE52BAE7EE}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{1E62322A-21F0-4D77-AA33-A9F85D591D03}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{01F3C7E0-00AE-494A-A2FD-65B902CC8E40}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{1AEE8171-1735-4355-801D-08419A79FAE0}C:\users\euromaxtv\downloads\programs\nexus-qt.exe] => (Allow) C:\users\euromaxtv\downloads\programs\nexus-qt.exe
FirewallRules: [UDP Query User{FB24D889-F18B-40C4-8762-3FB82B09F334}C:\users\euromaxtv\downloads\programs\nexus-qt.exe] => (Allow) C:\users\euromaxtv\downloads\programs\nexus-qt.exe
FirewallRules: [{210CEC72-0905-41FB-AC3A-8AFB7F6353CE}] => (Block) C:\users\euromaxtv\downloads\programs\nexus-qt.exe
FirewallRules: [{CE0B116E-21D4-4C54-8F2A-E473E9D6DEC4}] => (Block) C:\users\euromaxtv\downloads\programs\nexus-qt.exe
FirewallRules: [TCP Query User{83F93A3D-B9B3-49D4-9596-8DA2E58A3EA0}D:\nexus-qt.exe] => (Allow) D:\nexus-qt.exe
FirewallRules: [UDP Query User{E58ACDBE-248D-4AF4-8A5C-3D7BFD0DF8E0}D:\nexus-qt.exe] => (Allow) D:\nexus-qt.exe
FirewallRules: [{E2AF45B5-D551-4BFC-AAB4-694FB19A4529}] => (Block) D:\nexus-qt.exe
FirewallRules: [{07487429-9630-4EB9-B489-40ECEAA0D794}] => (Block) D:\nexus-qt.exe
FirewallRules: [TCP Query User{92065C8B-E2B9-4D15-A0CD-87A5A191DD64}C:\users\euromaxtv\appdata\roaming\ethereum wallet\binaries\geth\unpacked\geth.exe] => (Allow) C:\users\euromaxtv\appdata\roaming\ethereum wallet\binaries\geth\unpacked\geth.exe
FirewallRules: [UDP Query User{0AD59D0F-439E-4522-8525-D284106775E3}C:\users\euromaxtv\appdata\roaming\ethereum wallet\binaries\geth\unpacked\geth.exe] => (Allow) C:\users\euromaxtv\appdata\roaming\ethereum wallet\binaries\geth\unpacked\geth.exe
FirewallRules: [{F34E3B46-8781-4C03-AB40-AE91F24D6551}] => (Block) C:\users\euromaxtv\appdata\roaming\ethereum wallet\binaries\geth\unpacked\geth.exe
FirewallRules: [{902FB7B3-5017-4BC5-B376-606F93512ED3}] => (Block) C:\users\euromaxtv\appdata\roaming\ethereum wallet\binaries\geth\unpacked\geth.exe
FirewallRules: [{957ADF40-8CFB-4ED2-85AC-9B9447211FB8}] => (Allow) C:\Program Files (x86)\Globus\GlobusService.exe
FirewallRules: [{1595F53B-FFB0-4EE0-9A8F-F49B13462497}] => (Allow) C:\Program Files (x86)\Globus\GlobusService.exe
FirewallRules: [{AC6A005B-34C6-4DF6-B245-8A98D6C6ED1F}] => (Allow) C:\Program Files (x86)\Globus\PrivacyBrowser\GlobusPrivacyBrowser.exe
FirewallRules: [{E42D2D63-6B5D-4E2D-9A8F-B98EFEB02E0E}] => (Allow) C:\Program Files\Parity\Parity\parity.exe
FirewallRules: [{E47B4505-02C7-4B72-B7DC-AE3BF8597DAA}] => (Allow) C:\Program Files\Parity\Parity\parity.exe
FirewallRules: [{A2E6CBB0-9A53-4FA3-BF9B-08AAFFC6B890}] => (Allow) C:\Program Files\Parity\Parity\parity.exe
FirewallRules: [TCP Query User{50F62D74-1787-4C37-A468-424C91A84B39}H:\miningit\litebitcoin-3.0.1\bin\litebitcoin-qt.exe] => (Block) H:\miningit\litebitcoin-3.0.1\bin\litebitcoin-qt.exe
FirewallRules: [UDP Query User{A9757918-0916-4D2E-A791-7EE83F66B0E6}H:\miningit\litebitcoin-3.0.1\bin\litebitcoin-qt.exe] => (Block) H:\miningit\litebitcoin-3.0.1\bin\litebitcoin-qt.exe
FirewallRules: [TCP Query User{EA8E8321-DBAD-478D-8395-761784F8E611}C:\users\euromaxtv\appdata\roaming\mist\binaries\geth\unpacked\geth.exe] => (Allow) C:\users\euromaxtv\appdata\roaming\mist\binaries\geth\unpacked\geth.exe
FirewallRules: [UDP Query User{6CA25C12-87F1-45FC-892C-C39D7072DF0B}C:\users\euromaxtv\appdata\roaming\mist\binaries\geth\unpacked\geth.exe] => (Allow) C:\users\euromaxtv\appdata\roaming\mist\binaries\geth\unpacked\geth.exe
FirewallRules: [{3D56F517-5F29-4296-92F9-774EBD4CDB23}] => (Block) C:\users\euromaxtv\appdata\roaming\mist\binaries\geth\unpacked\geth.exe
FirewallRules: [{4DD00C69-0B73-43E2-BF81-91CB6E0C2395}] => (Block) C:\users\euromaxtv\appdata\roaming\mist\binaries\geth\unpacked\geth.exe
FirewallRules: [TCP Query User{68DDE64F-2325-4271-B6EC-9EDFFB3D60BF}C:\users\euromaxtv\appdata\roaming\mist\swarmjs\bin\swarm.exe] => (Allow) C:\users\euromaxtv\appdata\roaming\mist\swarmjs\bin\swarm.exe
FirewallRules: [UDP Query User{F08B960D-D8AB-4A1A-8FF8-AD933B2851CF}C:\users\euromaxtv\appdata\roaming\mist\swarmjs\bin\swarm.exe] => (Allow) C:\users\euromaxtv\appdata\roaming\mist\swarmjs\bin\swarm.exe
FirewallRules: [{B5F0393D-6EBD-4952-83F1-32EF001B615E}] => (Block) C:\users\euromaxtv\appdata\roaming\mist\swarmjs\bin\swarm.exe
FirewallRules: [{79354000-992D-4FC2-8EFF-631C94779768}] => (Block) C:\users\euromaxtv\appdata\roaming\mist\swarmjs\bin\swarm.exe
FirewallRules: [{AA6A88F9-BC46-437F-AB73-6C177D690EDB}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\ccminer-2.2.3_1\ccminer-x64-2.2.3-cuda9\ccminer-x64.exe
FirewallRules: [{2E837ABA-B044-4E41-862A-DC6C909E7F4A}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\CnMiner64_1\Claymore CryptoNote AMD GPU Miner v11.0 - POOL\NsGpuCNMiner.exe
FirewallRules: [{90B02C7F-90B8-4216-8317-C47EE82587D3}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\ZecMiner64_1\Claymore's ZCash AMD GPU Miner v12.6\ZecMiner64.exe
FirewallRules: [{E8B08F23-441C-4CE7-99D9-652FE5EE5595}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\EthDcrMiner64_1\Claymore's Dual Ethereum+Decred_Siacoin_Lbry_Pascal AMD+NVIDIA GPU Miner v10.2\EthDcrMiner64.exe
FirewallRules: [{0BE06547-3D6D-413C-B5BA-B9A02C6E07DF}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\ccminer-alexis_1\ccminer alexis-1.0 windows\ccminer.exe
FirewallRules: [{BE895E7F-46BE-4E82-93E9-50AECD68314E}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\excavator_v1.1.4a_Win64_1\excavator.exe
FirewallRules: [{7166FDA8-870A-4467-99F2-D1A745441A0B}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\excavator_v1.1.4a_Win64_2\excavator.exe
FirewallRules: [{B0B99E78-0FB9-4274-B89D-CF6107C162C5}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\ccminer-2.2.3_2\ccminer-x64-2.2.3-cuda9\ccminer-x64.exe
FirewallRules: [{DE6EA2D7-3C89-4538-9234-BF7250311F66}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\EthDcrMiner64_2\Claymore's Dual Ethereum+Decred_Siacoin_Lbry_Pascal AMD+NVIDIA GPU Miner v10.2\EthDcrMiner64.exe
FirewallRules: [{843009C8-0720-456E-9079-F56B88F30F86}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\cpuminer-opt_2\cpuminer-opt-3.7.6-windows\cpuminer-sse2.exe
FirewallRules: [{AA66D14D-0EE9-41EC-AD8A-924895036038}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\ccminer-2.2.4_2\ccminer-x64-2.2.4-cuda9\ccminer-x64.exe
FirewallRules: [{E59EB952-8174-4376-A107-209F9749FD72}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\Zec.miner.0.3.4b_2\0.3.4b\miner.exe
FirewallRules: [{B2412CED-E991-4C74-BDC9-1FAED894842C}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\ccminer-alexis_2\ccminer alexis-1.0 windows\ccminer.exe
FirewallRules: [{9561B052-82F2-40BD-8B98-A57DF84DEF98}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\EthDcrMiner64_2\Claymore's Dual Ethereum+Decred_Siacoin_Lbry_Pascal AMD+NVIDIA GPU Miner v10.3\EthDcrMiner64.exe
FirewallRules: [TCP Query User{86C781D8-81B9-4C6B-855B-5E0E26CEAD5A}C:\gincoin\gincoincore-1.1.0-windows-64bit.exe] => (Allow) C:\gincoin\gincoincore-1.1.0-windows-64bit.exe
FirewallRules: [UDP Query User{B10A8363-1964-4A93-825C-1C83DB5F31DE}C:\gincoin\gincoincore-1.1.0-windows-64bit.exe] => (Allow) C:\gincoin\gincoincore-1.1.0-windows-64bit.exe
FirewallRules: [{D45A3DE0-566C-472B-AC3D-1F35AF8DF5DA}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\bminer-v8.0.0-32928c5_1\bminer-v8.0.0-32928c5\bminer.exe
FirewallRules: [{795E57AD-58FC-4363-88E0-41826DD6E1B0}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\zm_0.6.1_win_1\zm_0.6.1_win\zm.exe
FirewallRules: [{307FC8ED-07C9-4E06-A533-2B51D98CBB2B}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\ccminer-2.2.6_1\ccminer-x64.exe
FirewallRules: [TCP Query User{515F0671-2247-4F3B-AAC4-94D585AC6152}C:\btcz\bitcoinz-windows-wallet_1.1.5.2_win64\zcashd.exe] => (Allow) C:\btcz\bitcoinz-windows-wallet_1.1.5.2_win64\zcashd.exe
FirewallRules: [UDP Query User{C865CC37-6428-465A-9EC9-19050D32FAF7}C:\btcz\bitcoinz-windows-wallet_1.1.5.2_win64\zcashd.exe] => (Allow) C:\btcz\bitcoinz-windows-wallet_1.1.5.2_win64\zcashd.exe
FirewallRules: [TCP Query User{18301ABB-673C-4AC4-9219-9E8731F1F13D}C:\btcz\bitcoinz-windows-wallet_1.4.0_win64\zcashd.exe] => (Allow) C:\btcz\bitcoinz-windows-wallet_1.4.0_win64\zcashd.exe
FirewallRules: [UDP Query User{2DE2F4A3-5307-4685-858F-1E2DA6F37F8E}C:\btcz\bitcoinz-windows-wallet_1.4.0_win64\zcashd.exe] => (Allow) C:\btcz\bitcoinz-windows-wallet_1.4.0_win64\zcashd.exe
FirewallRules: [TCP Query User{1FBD739A-94C5-4481-8CB4-B67A6B767B4E}C:\monerov\monerov-wallet-gui-win64-0.13\build\release\bin\monerov-wallet-gui.exe] => (Allow) C:\monerov\monerov-wallet-gui-win64-0.13\build\release\bin\monerov-wallet-gui.exe
FirewallRules: [UDP Query User{598A2408-1A64-41CD-8271-44306E9AE7B4}C:\monerov\monerov-wallet-gui-win64-0.13\build\release\bin\monerov-wallet-gui.exe] => (Allow) C:\monerov\monerov-wallet-gui-win64-0.13\build\release\bin\monerov-wallet-gui.exe
FirewallRules: [TCP Query User{80B568BD-C1F4-42D5-87F6-DE641CEDA576}C:\monerov\monerov-wallet-gui-win64-0.13\build\release\bin\monerovd.exe] => (Block) C:\monerov\monerov-wallet-gui-win64-0.13\build\release\bin\monerovd.exe
FirewallRules: [UDP Query User{914F1A39-4348-4300-B637-799D5EFEECEA}C:\monerov\monerov-wallet-gui-win64-0.13\build\release\bin\monerovd.exe] => (Block) C:\monerov\monerov-wallet-gui-win64-0.13\build\release\bin\monerovd.exe
FirewallRules: [{EB6488A6-AE47-4B62-93C8-3F7047EDC82A}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\phoenixminer_3.0c_2\PhoenixMiner_3.0c\PhoenixMiner.exe
FirewallRules: [{C5A1E21C-D814-472A-883A-4B85853DCAE1}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\EthDcrMiner64_1\Claymore's Dual Ethereum+Decred_Siacoin_Lbry_Pascal_Blake2s_Keccak AMD+NVIDIA GPU Miner v11.8\EthDcrMiner64.exe
FirewallRules: [{A1B414C8-1AC1-418F-B923-B20D0B2A38A3}] => (Allow) C:\Users\Euromaxtv\AppData\Local\AwesomeMiner\ccminer-2.3-cuda9_1\ccminer-x64.exe
FirewallRules: [TCP Query User{FD1C0C7E-449D-4177-9220-60D75A5153A1}C:\calisto\solo\ethdcrminer64.exe] => (Allow) C:\calisto\solo\ethdcrminer64.exe
FirewallRules: [UDP Query User{94BC7BF0-913A-48E9-B0E1-B5936CF9DC5C}C:\calisto\solo\ethdcrminer64.exe] => (Allow) C:\calisto\solo\ethdcrminer64.exe
FirewallRules: [TCP Query User{740DE135-90AF-4E9F-AC18-5294D28EB89B}C:\eth\claymore's dual ethereum+decred_siacoin_lbry_pascal_blake2s_keccak amd+nvidia gpu miner v11.7\ethdcrminer64.exe] => (Allow) C:\eth\claymore's dual ethereum+decred_siacoin_lbry_pascal_blake2s_keccak amd+nvidia gpu miner v11.7\ethdcrminer64.exe
FirewallRules: [UDP Query User{AE796D00-65C3-4CE0-B69D-2B9F8260BC89}C:\eth\claymore's dual ethereum+decred_siacoin_lbry_pascal_blake2s_keccak amd+nvidia gpu miner v11.7\ethdcrminer64.exe] => (Allow) C:\eth\claymore's dual ethereum+decred_siacoin_lbry_pascal_blake2s_keccak amd+nvidia gpu miner v11.7\ethdcrminer64.exe
FirewallRules: [{969BFFF3-679A-4B4C-ABB2-332A707D9568}] => (Allow) LPort=8298
FirewallRules: [{0B0B5D31-95B2-4562-B409-D6FBA0C74046}] => (Allow) C:\Program Files\OTOY\OctaneRender 3.08.3\octane.exe
FirewallRules: [{BAF318C6-5920-4898-B29C-9055808C561D}] => (Allow) C:\Program Files\OTOY\OctaneRender 3.08.3\octane.exe
FirewallRules: [{D5168A06-246E-4D0F-934E-4E9B5E4B62A6}] => (Allow) C:\Program Files\OTOY\OctaneRender 3.08.3\octane-cli.exe
FirewallRules: [{B9AF8066-43AD-4BAB-8CE9-8F9942A89658}] => (Allow) C:\Program Files\OTOY\OctaneRender 3.08.3\octane-cli.exe
FirewallRules: [{61B0F0A3-015A-4605-A4BB-1A1C20BE9791}] => (Allow) C:\Program Files\OTOY\OctaneRender 3.08.3\octane_slave.exe
FirewallRules: [{F94FB9DA-65B8-46BE-B320-21B5315826C0}] => (Allow) C:\Program Files\OTOY\OctaneRender 3.08.3\octane_slave.exe
FirewallRules: [{8C1A0B0C-D51B-46C7-B63A-1CA403FAE5BD}] => (Allow) C:\Program Files\OTOY\OctaneRender 3.08.3\octane_slave_daemon.exe
FirewallRules: [{586BD46C-CB12-4B76-AB56-8501007DB56F}] => (Allow) C:\Program Files\OTOY\OctaneRender 3.08.3\octane_slave_daemon.exe
FirewallRules: [{234F8E8D-ED47-426B-8048-1EB3384875AC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{651DD16C-9BC5-4F6D-8850-E8E543CEC1D5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{602895CE-DFE1-47AE-9830-CC774FBEEF66}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{E7DF6166-C452-4882-9D09-696EDEA37BBB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{2AACE43C-1155-4D82-B348-45F615F006A8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{CCE11DFD-DD20-4111-B2E2-C73019BB7B13}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5080246F-86DB-4AB4-9B35-778065C4E003}] => (Allow) C:\Program Files\OTOY\OctaneRender 4.00 XB3\octane.exe
FirewallRules: [{B8436DFE-5B91-4297-9D58-0D8F73A4AA79}] => (Allow) C:\Program Files\OTOY\OctaneRender 4.00 XB3\octane.exe
FirewallRules: [{1EC3C790-0B8C-40E6-B905-3DDBEDA6D912}] => (Allow) C:\Program Files\OTOY\OctaneRender 4.00 XB3\octane-cli.exe
FirewallRules: [{F3B4742B-DA22-4CCA-B753-DDF08E9F8C96}] => (Allow) C:\Program Files\OTOY\OctaneRender 4.00 XB3\octane-cli.exe
FirewallRules: [{60A0BC05-199D-4939-8C4F-C9E078D764EC}] => (Allow) C:\Program Files\OTOY\OctaneRender 4.00 XB3\octane_slave.exe
FirewallRules: [{D9DB39EC-A2AC-46BC-9ED5-EAF509433EEA}] => (Allow) C:\Program Files\OTOY\OctaneRender 4.00 XB3\octane_slave.exe
FirewallRules: [{6303E645-0B3A-4490-8E23-FA6480106302}] => (Allow) C:\Program Files\OTOY\OctaneRender 4.00 XB3\octane_slave_daemon.exe
FirewallRules: [{3BE1B817-AA3A-449A-A5B3-6051310E44E3}] => (Allow) C:\Program Files\OTOY\OctaneRender 4.00 XB3\octane_slave_daemon.exe
FirewallRules: [TCP Query User{1E0933E7-727A-4830-85C9-63F4AF74CA16}C:\program files (x86)\dearmob\5kplayer\5kplayer.exe] => (Allow) C:\program files (x86)\dearmob\5kplayer\5kplayer.exe
FirewallRules: [UDP Query User{FD676170-02BF-4BB7-8C8C-3CB5A53C3E2C}C:\program files (x86)\dearmob\5kplayer\5kplayer.exe] => (Allow) C:\program files (x86)\dearmob\5kplayer\5kplayer.exe
FirewallRules: [{C4C47471-4279-4AD2-934A-B146378E188F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{2F5226AA-7BEC-4610-83BB-58AEA1E5C26B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{758C8BC4-4B67-4F60-AA6B-C40098751F54}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{BAF02E46-1FD6-42C4-8D11-0F095D6B423B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{2DBC57CC-9D18-4635-9B6A-D5749FE7B3C7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{9870329F-681F-4F03-85D0-47810AB71C16}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{7C47D0F9-E80C-4793-8482-B0485D239BA8}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{30E32973-5A94-42BD-820D-4B32275E1A3E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [TCP Query User{48008C89-5E8D-4200-8987-81A776C6FAD7}C:\users\euromaxtv\downloads\anydesk.exe] => (Allow) C:\users\euromaxtv\downloads\anydesk.exe
FirewallRules: [UDP Query User{188442B4-1BA9-44E7-81B4-69F43CA70783}C:\users\euromaxtv\downloads\anydesk.exe] => (Allow) C:\users\euromaxtv\downloads\anydesk.exe
FirewallRules: [TCP Query User{7B079DB9-1C91-4D56-934F-34C759A5A32A}C:\users\euromaxtv\downloads\anydesk (1).exe] => (Allow) C:\users\euromaxtv\downloads\anydesk (1).exe
FirewallRules: [UDP Query User{6B80DB73-AB62-4B66-9D36-1BC0D1AE18AF}C:\users\euromaxtv\downloads\anydesk (1).exe] => (Allow) C:\users\euromaxtv\downloads\anydesk (1).exe
FirewallRules: [TCP Query User{C21826C0-0706-4399-85FE-6D4722A1D2D5}C:\users\euromaxtv\downloads\repeater_v140\repeater_1400.exe] => (Allow) C:\users\euromaxtv\downloads\repeater_v140\repeater_1400.exe
FirewallRules: [UDP Query User{9C7CC682-39BC-41A7-BDBD-D2CD3691E79A}C:\users\euromaxtv\downloads\repeater_v140\repeater_1400.exe] => (Allow) C:\users\euromaxtv\downloads\repeater_v140\repeater_1400.exe
FirewallRules: [{32FB5265-B740-4D28-AACB-4131C1D6583A}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\winvnc.exe
FirewallRules: [{FC5E4FFE-97C6-4C98-B51A-E6B277F30425}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\winvnc.exe
FirewallRules: [{26C7AA36-8CA4-4E9F-8EF1-59EFEDAA8F5D}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\vncviewer.exe
FirewallRules: [{01FE46D0-C7E3-44E4-92BC-3092D1403041}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\vncviewer.exe
FirewallRules: [{87D8688A-8A08-4C9A-ACBB-A7C003385957}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{70F40389-D12C-4B89-83EB-08C0BEE5114D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{00CC4353-3A40-4D70-B042-D1962359C166}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{D89D1400-4B32-41BF-B9E1-AF4BBC9DB92F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{7EE3BD1C-32BE-4B3E-88A8-E1B3A0C88860}] => (Allow) C:\Program Files\OTOY\OctaneRender 4.00 RC4\octane.exe
FirewallRules: [{DD8D2230-51A1-45F6-8AF4-247F968FE5DE}] => (Allow) C:\Program Files\OTOY\OctaneRender 4.00 RC4\octane.exe
FirewallRules: [{A8116805-B1BC-4683-A56A-E0603B1A2AD6}] => (Allow) C:\Program Files\OTOY\OctaneRender 4.00 RC4\octane-cli.exe
FirewallRules: [{70AA2030-E03C-4C9C-9D67-24E69EB1B9EF}] => (Allow) C:\Program Files\OTOY\OctaneRender 4.00 RC4\octane-cli.exe
FirewallRules: [{31C72255-CD3F-4489-916B-A134F72483CD}] => (Allow) C:\Program Files\OTOY\OctaneRender 4.00 RC4\octane_slave.exe
FirewallRules: [{9EB2CA12-715A-4307-B5DE-B808B3BCA4AF}] => (Allow) C:\Program Files\OTOY\OctaneRender 4.00 RC4\octane_slave.exe
FirewallRules: [{7DAAABD6-1FC1-4961-B522-27526788B993}] => (Allow) C:\Program Files\OTOY\OctaneRender 4.00 RC4\octane_slave_daemon.exe
FirewallRules: [{897BD07F-6FC2-4CC8-A6C1-4658E778EB79}] => (Allow) C:\Program Files\OTOY\OctaneRender 4.00 RC4\octane_slave_daemon.exe
FirewallRules: [{56AEE266-B292-423C-923D-F73F0C21045A}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{3D0FE040-C54F-4D75-AD96-130B7871F4DD}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite 2017\Programs64\CorelDrw.exe
FirewallRules: [{BBB2BF30-286E-45FC-B178-73CD15B0E662}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite 2017\Programs64\CorelPP.exe
FirewallRules: [{E05A64F9-CEDC-444A-87F5-0AB67B6E57AC}] => (Block) %ProgramFiles%\Marvelous Designer 6 Personal\MarvelousDesigner6_Personal_x64.exe
FirewallRules: [{3A418C27-F5FC-4763-BDA4-E777F87FC007}] => (Block) %ProgramFiles%\Marvelous Designer 6 Personal\MarvelousDesigner6_Personal_x64.exe
FirewallRules: [{37B67319-23F6-44E2-A3B7-4314EF050E10}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
FirewallRules: [{12AC71D3-57F7-4C71-BE15-C0FC514F0824}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
FirewallRules: [{1AD1E93C-BE09-473B-8139-02ACAA6E731F}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
FirewallRules: [{444F08ED-C72E-4B9F-BE65-B4CDE280AA6C}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
FirewallRules: [{4FEE304F-50E1-47A9-93D6-A7516B08D149}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
FirewallRules: [{86CB76DD-9F0F-4DEC-BF54-A9EA79FA78B1}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe

==================== Restore Points =========================

27-09-2018 09:26:55 Installed Soda PDF 3D Reader View Module

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/30/2018 11:21:51 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Ошибка при изменении состояния  на SECURITY_PRODUCT_STATE_OFF.

Error: (09/30/2018 11:19:49 PM) (Source: Service1) (EventID: 0) (User: )
Description: Service cannot be started. System.BadImageFormatException: Could not load file or assembly 'McNeelUpdateClient, Version=5.1.20803.1059, Culture=neutral, PublicKeyToken=c4ed0fcf90254de7' or one of its dependencies. The module was expected to contain an assembly manifest.
File name: 'McNeelUpdateClient, Version=5.1.20803.1059, Culture=neutral, PublicKeyToken=c4ed0fcf90254de7'
   at McNeelUpdateService.Log.Exception(Exception ex, String message, Object[] args)
   at McNeelUpdateService.McNeelUpdateService.StartService() in d:\rhino5\integration\src4\tools\McNeelUpdate5\McNeelUpdateService\McNeelUpdateService.cs:line 80
   at McNeelUpdateService.McNeelUpdateService.OnStart(String[] args) in d:\rhino5\integration\src4\tools\McNeelUpdate5\McNeelUpdateService\McNeelUpdateService.cs:line 37
   at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Предупреждение: регистрация привязки сборок выключена.
Чтобы включить регистрацию ошибок привязки сборок, установите значение параметра реестра [HKLM\Software\Micros...

Error: (09/30/2018 10:38:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: PixPlant_3.0.8_x64_2015__ENG_P4R4D4.tmp, версия: 51.52.0.0, метка времени: 0x2a425e19
Имя сбойного модуля: KERNELBASE.dll, версия: 10.0.17134.165, метка времени: 0xfa43f4b2
Код исключения: 0x0eedfade
Смещение ошибки: 0x0010ddc2
Идентификатор сбойного процесса: 0x4938
Время запуска сбойного приложения: 0x01d458f529b13086
Путь сбойного приложения: C:\Users\EUROMA~1\AppData\Local\Temp\is-9QIE5.tmp\PixPlant_3.0.8_x64_2015__ENG_P4R4D4.tmp
Путь сбойного модуля: C:\WINDOWS\System32\KERNELBASE.dll
Идентификатор отчета: f0caf530-9d84-406c-8d68-74e39f162381
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (09/30/2018 10:38:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: PixPlant_3.0.8_x64_2015__ENG_P4R4D4.tmp, версия: 51.52.0.0, метка времени: 0x2a425e19
Имя сбойного модуля: unknown, версия: 0.0.0.0, метка времени: 0x00000000
Код исключения: 0xc00001a5
Смещение ошибки: 0x03ef565b
Идентификатор сбойного процесса: 0x4938
Время запуска сбойного приложения: 0x01d458f529b13086
Путь сбойного приложения: C:\Users\EUROMA~1\AppData\Local\Temp\is-9QIE5.tmp\PixPlant_3.0.8_x64_2015__ENG_P4R4D4.tmp
Путь сбойного модуля: unknown
Идентификатор отчета: 9723998f-ca81-468a-a2b3-1ad0c4d2ffa2
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (09/30/2018 09:54:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: WSCommCntr4.exe, версия: 4.0.3.0, метка времени: 0x54c11932
Имя сбойного модуля: ucrtbase.dll, версия: 10.0.17134.254, метка времени: 0xea85cc89
Код исключения: 0xc0000409
Смещение ошибки: 0x000000000006e55e
Идентификатор сбойного процесса: 0x73c
Время запуска сбойного приложения: 0x01d458eeb9db0ff3
Путь сбойного приложения: C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\Lib\WSCommCntr4.exe
Путь сбойного модуля: C:\WINDOWS\System32\ucrtbase.dll
Идентификатор отчета: 18555df7-ade6-407e-bd74-93f8f599678d
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (09/30/2018 09:52:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: WSCommCntr4.exe, версия: 4.0.3.0, метка времени: 0x54c11932
Имя сбойного модуля: ucrtbase.dll, версия: 10.0.17134.254, метка времени: 0xea85cc89
Код исключения: 0xc0000409
Смещение ошибки: 0x000000000006e55e
Идентификатор сбойного процесса: 0x37c4
Время запуска сбойного приложения: 0x01d458ee9c5d73ff
Путь сбойного приложения: C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\Lib\WSCommCntr4.exe
Путь сбойного модуля: C:\WINDOWS\System32\ucrtbase.dll
Идентификатор отчета: e17bfef4-c315-4082-928e-2f5a8d225206
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (09/30/2018 09:46:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: WSCommCntr4.exe, версия: 4.0.3.0, метка времени: 0x54c11932
Имя сбойного модуля: ucrtbase.dll, версия: 10.0.17134.254, метка времени: 0xea85cc89
Код исключения: 0xc0000409
Смещение ошибки: 0x000000000006e55e
Идентификатор сбойного процесса: 0x107c
Время запуска сбойного приложения: 0x01d458ae554d260e
Путь сбойного приложения: C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\Lib\WSCommCntr4.exe
Путь сбойного модуля: C:\WINDOWS\System32\ucrtbase.dll
Идентификатор отчета: 09fbaca0-566c-4959-9607-a5f2c96c97ce
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (09/30/2018 10:49:43 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: 5KPlayer.exe, версия: 5.2.0.0, метка времени: 0x5b6423f7
Имя сбойного модуля: 5KPlayer.exe, версия: 5.2.0.0, метка времени: 0x5b6423f7
Код исключения: 0xc0000005
Смещение ошибки: 0x00acab8b
Идентификатор сбойного процесса: 0x2dd4
Время запуска сбойного приложения: 0x01d4569ccdfd7ecd
Путь сбойного приложения: C:\Program Files (x86)\DearMob\5KPlayer\5KPlayer.exe
Путь сбойного модуля: C:\Program Files (x86)\DearMob\5KPlayer\5KPlayer.exe
Идентификатор отчета: 6bd29310-124b-4609-892b-dd56e4a09f12
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:


System errors:
=============
Error: (09/30/2018 11:21:50 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Запуск для приложения COM-сервера с CLSID 
Windows.SecurityCenter.WscBrokerManager
 и APPID 
Недоступно
 пользователю NT AUTHORITY\СИСТЕМА с ИД безопасности (S-1-5-18) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.

Error: (09/30/2018 11:20:23 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-1AI24PD)
Description: Параметры разрешений для конкретного приложения не дают разрешения Локально Активация для приложения COM-сервера с CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 и APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 пользователю DESKTOP-1AI24PD\Euromaxtv с ИД безопасности (S-1-5-21-3715096018-3359421980-3385932631-1001) и адресом LocalHost (с использованием LRPC), выполняемого в контейнере приложения Недоступно с ИД безопасности (Недоступно). Это разрешение безопасности можно изменить с помощью средства администрирования служб компонентов.

Error: (09/30/2018 11:19:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Сбой при запуске службы "SODA Manager" из-за ошибки 
Служба не ответила на запрос своевременно.

Error: (09/30/2018 11:19:48 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Превышение времени ожидания (30000 мс) при ожидании подключения службы "SODA Manager".

Error: (09/30/2018 11:19:23 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-1AI24PD)
Description: Регистрация сервера {9BA05972-F6A8-11CF-A442-00A0C90A8F39} DCOM не выполнена за отведенное время ожидания.

Error: (09/30/2018 11:19:23 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-1AI24PD)
Description: Регистрация сервера {9BA05972-F6A8-11CF-A442-00A0C90A8F39} DCOM не выполнена за отведенное время ожидания.

Error: (09/30/2018 11:18:56 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Служба "Hola Better Internet Updater" неожиданно прервана. Это произошло (раз): 1.

Error: (09/30/2018 11:18:56 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Служба "Hola Better Internet Engine" неожиданно прервана. Это произошло (раз): 1.


Windows Defender:
===================================
Date: 2018-09-20 16:02:29.695
Description: 
При попытке Антивирусная программа "Защитник Windows" загрузить подписи произошла ошибка; будет предпринята попытка отката к последнему работающему набору подписей.
Использованные подписи: Архивный
Код ошибки: 0x80508007
Описание ошибки: Недостаточно свободной оперативной памяти на этом устройстве. Закройте некоторые программы и повторите попытку. Дополнительные сведения о предотвращении нехватки памяти можно найти в центре справки и поддержки. 
Версия подписей: 1.271.146.0;1.271.146.0
Версия подсистемы: 1.1.15000.2

Date: 2018-09-20 16:02:29.070
Description: 
При попытке Антивирусная программа "Защитник Windows" загрузить подписи произошла ошибка; будет предпринята попытка отката к последнему работающему набору подписей.
Использованные подписи: Текущий
Код ошибки: 0x80508007
Описание ошибки: Недостаточно свободной оперативной памяти на этом устройстве. Закройте некоторые программы и повторите попытку. Дополнительные сведения о предотвращении нехватки памяти можно найти в центре справки и поддержки. 
Версия подписей: 1.271.186.0;1.271.186.0
Версия подсистемы: 1.1.15000.2

CodeIntegrity:
===================================

Date: 2018-09-30 23:20:25.633
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\product_info.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-09-30 23:11:32.701
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\product_info.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-09-30 22:41:05.055
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\product_info.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-09-30 15:26:22.114
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\product_info.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-09-27 23:00:37.417
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\product_info.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-09-26 09:47:28.836
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\product_info.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-09-24 07:31:56.825
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\product_info.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-09-20 20:20:45.117
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\product_info.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
Percentage of memory in use: 27%
Total physical RAM: 16332.22 MB
Available physical RAM: 11841.46 MB
Total Virtual: 19332.22 MB
Available Virtual: 12102.04 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:231.44 GB) (Free:57 GB) NTFS
Drive e: (Зарезервировано системой) (Fixed) (Total:0.49 GB) (Free:0.46 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive h: (Transcend) (Fixed) (Total:931.51 GB) (Free:382.24 GB) NTFS

\\?\Volume{40d94a58-0000-0000-0000-c0fb39000000}\ () (Fixed) (Total:0.48 GB) (Free:0.08 GB) NTFS
\\?\Volume{40d94a58-0000-0000-0000-401a3a000000}\ () (Fixed) (Total:0.47 GB) (Free:0.08 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 232.9 GB) (Disk ID: 40D94A58)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=231.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=487 MB) - (Type=27)
Partition 4: (Not Active) - (Size=485 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 00171646)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================