Erpresservirus RSA-2048 Virus, Recovery_file

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-05-2015
Ran by Schurik at 2015-05-10 23:36:23
Running from C:\Users\Schurik\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-685501648-3840924338-99120847-500 - Administrator - Disabled)
Gast (S-1-5-21-685501648-3840924338-99120847-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-685501648-3840924338-99120847-1002 - Limited - Enabled)
Schurik (S-1-5-21-685501648-3840924338-99120847-1000 - Administrator - Enabled) => C:\Users\Schurik

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-685501648-3840924338-99120847-1000\...\uTorrent) (Version: 3.4.2.38913 - BitTorrent Inc.)
Ace Stream Media 3.0.2 (HKU\S-1-5-21-685501648-3840924338-99120847-1000\...\AceStream) (Version: 3.0.2 - Ace Stream Media) <==== ATTENTION!
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{F37C2975-92EA-59CA-59E6-50E56F0E76DD}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Avira (HKLM-x32\...\{b5675cc4-ab8b-4945-8c1d-4c5479556d6a}) (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.10.434 - Avira Operations GmbH & Co. KG)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.4.1.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - )
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.)
Canon MG5300 series Benutzerregistrierung (HKLM-x32\...\Canon MG5300 series Benutzerregistrierung) (Version:  - )
Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version:  - Canon Inc.)
Canon MG5300 series On-screen Manual (HKLM-x32\...\Canon MG5300 series On-screen Manual) (Version:  - )
Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version:  - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Dropbox (HKU\S-1-5-21-685501648-3840924338-99120847-1000\...\Dropbox) (Version: 3.4.6 - Dropbox, Inc.)
EA Sports FIFA World (HKLM-x32\...\{8F9AC744-EEF6-43DB-A4B6-FA1A18F1C640}) (Version: 7.1.0.50515 - Electronic Arts, Inc.)
EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.6.0.0 - Electronic Arts)
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version:  - Ubisoft)
Final Fantasy VIII (HKLM-x32\...\Final Fantasy VIII_is1) (Version:  - )
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
gnuplot 5.0 patchlevel 0 (HKLM\...\{AB419AC3-9BC1-4EC5-A75B-4D8870DD651F}_is1) (Version: 5.0 patchlevel 0 - gnuplot development team)
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Network Connections 18.5.54.0 (HKLM\...\PROSetDX) (Version: 18.5.54.0 - Intel)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
Java 7 Update 67 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417067FF}) (Version: 7.0.670 - Oracle)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Java SE Development Kit 7 Update 67 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170670}) (Version: 1.7.0.670 - Oracle)
Java SE Development Kit 8 Update 45 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180450}) (Version: 8.0.450.14 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
JetBrains PyCharm 4.0.4 (HKLM-x32\...\PyCharm 4.0.4) (Version: 139.1001 - JetBrains s.r.o.)
K-Lite Codec Pack 10.4.5 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.4.5 - )
Logitech Gaming Software 8.57 (HKLM\...\Logitech Gaming Software) (Version: 8.57.145 - Logitech Inc.)
MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{9A52C8BA-FF30-4983-8BC1-3D2FFCF7CEE9}) (Version: 7.0.1.27 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.1.27 - MAGIX AG) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MSI Afterburner 3.0.1 (HKLM-x32\...\Afterburner) (Version: 3.0.1 - MSI Co., LTD)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
Ori and the Blind Forest (HKLM-x32\...\Ori and the Blind Forest_is1) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 9.3.10.4710 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.214.2 - Tracker Software Products Ltd)
Project 64 version 2.1.0.1 (HKLM-x32\...\Project 64_is1) (Version: 2.1.0.1 - )
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6.1 - Project64)
Python 3.4.2 (HKLM-x32\...\{2583CDBA-8A53-4622-BB67-1D163714C1B4}) (Version: 3.4.16349 - Python Software Foundation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7004 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)
SimCity 2000 Special Edition (HKLM-x32\...\{59D2C751-F7BE-4E9F-9C8C-1F16013802C7}) (Version: 2.0.0.1 - Electronic Arts)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SopCast 3.5.0 (HKLM-x32\...\SopCast) (Version: 3.5.0 - www.sopcast.com)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeX Live 2014 (HKU\S-1-5-21-685501648-3840924338-99120847-1000\...\TeXLive2014) (Version: 2014 - )
Texmaker (HKLM-x32\...\Texmaker) (Version:  - )
TortoiseSVN 1.8.10.26129 (64 bit) (HKLM\...\{A9E679EC-8FD4-49D8-A5A5-ACE462515A9E}) (Version: 1.8.26129 - TortoiseSVN)
Ultra Street Fighter IV (HKLM-x32\...\VWx0cmFTdHJlZXRGaWdodGVySVY=_is1) (Version: 1 - )
Unity (HKLM-x32\...\Unity) (Version: 4.5.3f3 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-685501648-3840924338-99120847-1000\...\UnityWebPlayer) (Version: 4.5.3f3 - Unity Technologies ApS)
Update for Skype for Business 2015 (KB2889853) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUS_{CBCC2FD8-7DFE-4752-95B5-2E447C226F45}) (Version:  - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft)
VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden
Vim 7.4 (self-installing) (HKLM\...\Vim 7.4) (Version:  - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-685501648-3840924338-99120847-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Schurik\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-685501648-3840924338-99120847-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Schurik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-685501648-3840924338-99120847-1000_Classes\CLSID\{F6BF8414-962C-40FE-90F1-B80A7E72DB9A}\InprocServer32 -> C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}\vmstorfltres.dll ()
CustomCLSID: HKU\S-1-5-21-685501648-3840924338-99120847-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Schurik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-685501648-3840924338-99120847-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Schurik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-685501648-3840924338-99120847-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Schurik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-685501648-3840924338-99120847-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Schurik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-685501648-3840924338-99120847-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Schurik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-685501648-3840924338-99120847-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Schurik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-685501648-3840924338-99120847-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Schurik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-685501648-3840924338-99120847-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Schurik\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {3E08A4A8-06A8-4CCA-873D-F0C81E998C12} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {6AA95F28-D5A0-4FBF-B7F5-6102BDC6BC94} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {70FDC623-4848-44FB-AFAB-5F1A91B4FE14} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {7B5B73E8-438C-407B-92BB-F5B2F6BF474A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {9214E57F-A546-452A-A64B-15EFE3EB375C} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {A7206224-DAE2-4F9B-B588-29F7F7A1DA37} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {BAE998A4-7937-441A-95CE-99F186A9CDC0} - System32\Tasks\Abelssoft\CheckDriveBackgroundGuard => C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe
Task: {D5846DB9-B3AD-421F-AA2D-433990A765F6} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)

==================== Loaded Modules (whitelisted) ==============

2014-05-30 23:20 - 2014-06-22 16:14 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-12-17 22:31 - 2014-12-17 22:31 - 00076032 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll
2014-12-17 22:30 - 2014-12-17 22:30 - 00088832 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll
2014-09-18 09:23 - 2014-09-18 09:23 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2014-10-14 20:51 - 2014-10-14 20:51 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-09-18 09:23 - 2014-09-18 09:23 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2014-10-14 20:51 - 2014-10-14 20:51 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2015-03-03 22:23 - 2015-02-28 04:23 - 00022824 _____ () C:\Users\Schurik\AppData\Roaming\AceWebExtension\updater\ace_web_extension.exe
2015-05-10 20:53 - 2015-05-10 20:53 - 00353792 _____ () C:\Users\Schurik\AppData\Local\jocdeuw.exe
2015-03-03 22:23 - 2011-06-12 15:09 - 00038400 _____ () C:\Users\Schurik\AppData\Roaming\AceWebExtension\updater\lib\_socket.pyd
2015-03-03 22:23 - 2011-06-12 15:09 - 00720896 _____ () C:\Users\Schurik\AppData\Roaming\AceWebExtension\updater\lib\_ssl.pyd
2015-03-03 22:23 - 2014-01-23 14:37 - 00036352 _____ () C:\Users\Schurik\AppData\Roaming\AceWebExtension\updater\lib\_psutil_mswindows.pyd
2015-03-03 22:23 - 2012-02-07 19:37 - 00098816 _____ () C:\Users\Schurik\AppData\Roaming\AceWebExtension\updater\lib\win32api.pyd
2015-03-03 22:23 - 2012-02-07 19:35 - 00110080 _____ () C:\Users\Schurik\AppData\Roaming\AceWebExtension\updater\lib\pywintypes27.dll
2015-03-03 22:23 - 2012-02-07 19:38 - 00358912 _____ () C:\Users\Schurik\AppData\Roaming\AceWebExtension\updater\lib\pythoncom27.dll
2015-03-03 22:23 - 2012-02-07 19:42 - 00266240 _____ () C:\Users\Schurik\AppData\Roaming\AceWebExtension\updater\lib\win32com.shell.shell.pyd
2015-03-03 22:23 - 2011-06-12 15:06 - 00287232 _____ () C:\Users\Schurik\AppData\Roaming\AceWebExtension\updater\lib\_hashlib.pyd
2015-03-03 22:23 - 2011-06-12 15:06 - 00106496 _____ () C:\Users\Schurik\AppData\Roaming\AceWebExtension\updater\lib\_ctypes.pyd
2015-03-03 22:23 - 2010-10-11 00:23 - 00723968 _____ () C:\Users\Schurik\AppData\Roaming\AceWebExtension\updater\lib\apsw.pyd
2015-03-03 22:23 - 2011-01-19 00:56 - 00334336 _____ () C:\Users\Schurik\AppData\Roaming\AceWebExtension\updater\lib\M2Crypto.__m2crypto.pyd
2015-03-03 22:23 - 2011-06-12 15:06 - 00011776 _____ () C:\Users\Schurik\AppData\Roaming\AceWebExtension\updater\lib\select.pyd
2015-03-03 22:23 - 2011-06-12 15:06 - 00152576 _____ () C:\Users\Schurik\AppData\Roaming\AceWebExtension\updater\lib\pyexpat.pyd
2015-03-03 22:23 - 2011-06-12 15:06 - 00688128 _____ () C:\Users\Schurik\AppData\Roaming\AceWebExtension\updater\lib\unicodedata.pyd
2014-05-15 20:13 - 2013-09-03 16:52 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-12-17 21:53 - 2014-12-17 21:53 - 00065792 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub32.dll
2014-12-17 21:53 - 2014-12-17 21:53 - 00071936 _____ () C:\Program Files\TortoiseSVN\bin\libsasl32.dll
2015-02-10 12:00 - 2015-02-10 12:00 - 16852144 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Schurik\Desktop\2.Semester.lnk:com.dropbox.attributes

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-685501648-3840924338-99120847-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Schurik\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1 - 192.168.0.2

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [{12D437E7-96F6-4FB4-AEC8-072AE8F813C5}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{7B47209A-5ED4-47E6-B063-AA81E36FABD9}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [TCP Query User{B0F7BC89-AB94-4931-81C0-02DCB4C07A8E}G:\games\far cry 3\far cry 3\bin\farcry3.exe] => (Block) G:\games\far cry 3\far cry 3\bin\farcry3.exe
FirewallRules: [UDP Query User{0AFE0068-37CE-4B6E-A2EA-C4C49A896491}G:\games\far cry 3\far cry 3\bin\farcry3.exe] => (Block) G:\games\far cry 3\far cry 3\bin\farcry3.exe
FirewallRules: [TCP Query User{1AD888D1-AE55-4484-A1BA-7E212890A2D3}G:\games\far cry 3\far cry 3\bin\farcry3_d3d11.exe] => (Allow) G:\games\far cry 3\far cry 3\bin\farcry3_d3d11.exe
FirewallRules: [UDP Query User{80A0C4AB-EC55-4140-922B-3E19F9FD3A52}G:\games\far cry 3\far cry 3\bin\farcry3_d3d11.exe] => (Allow) G:\games\far cry 3\far cry 3\bin\farcry3_d3d11.exe
FirewallRules: [TCP Query User{B9C40037-97D0-459D-B9BB-C80DC56C7746}G:\games\fifa 14\game\fifa14.exe] => (Allow) G:\games\fifa 14\game\fifa14.exe
FirewallRules: [UDP Query User{5627D917-4182-40D5-BC28-CD37312F08B9}G:\games\fifa 14\game\fifa14.exe] => (Allow) G:\games\fifa 14\game\fifa14.exe
FirewallRules: [TCP Query User{30F44D20-629C-4A18-97AD-AC5E70375A71}G:\games\wolfenstein - the new order\wolfneworder_x64.exe] => (Block) G:\games\wolfenstein - the new order\wolfneworder_x64.exe
FirewallRules: [UDP Query User{AD8A7728-7DE8-4D3E-9427-E6F53450BB5C}G:\games\wolfenstein - the new order\wolfneworder_x64.exe] => (Block) G:\games\wolfenstein - the new order\wolfneworder_x64.exe
FirewallRules: [{45C7C0F2-0D01-49A3-A71C-AFE365C12963}] => (Allow) C:\Users\Schurik\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{D891548C-09FD-4DA3-A5DE-5F52CC87CE18}] => (Allow) C:\Users\Schurik\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{3F0BF60A-CEE5-4EBE-AE8E-08EA4A742250}G:\downloads\watch_dogs-deluxe.edition-sc\bin\watch_dogs.exe] => (Allow) G:\downloads\watch_dogs-deluxe.edition-sc\bin\watch_dogs.exe
FirewallRules: [UDP Query User{9D3B9BAF-11EA-4216-BF04-15A67FD8BC82}G:\downloads\watch_dogs-deluxe.edition-sc\bin\watch_dogs.exe] => (Allow) G:\downloads\watch_dogs-deluxe.edition-sc\bin\watch_dogs.exe
FirewallRules: [{17E6E5F2-0DEB-4639-A840-8E4A423F69B7}] => (Allow) G:\Games\Watch Dogs\bin\Watch_Dogs.exe
FirewallRules: [{FC9441E0-B04F-4EE4-B574-CAEE20F21444}] => (Allow) G:\Games\Watch Dogs\bin\Watch_Dogs.exe
FirewallRules: [{88CD147E-57BA-4C3D-9C23-4B32ACDFE928}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{9945BC85-360B-4207-9365-9F80A724CDFF}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{0E6475C6-526E-485E-9895-EF674EB478B3}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{F086F436-5B3A-44B1-9271-F0C9CFF7F84A}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{2334C8C5-6C5F-4917-B601-CF3DA79BD139}] => (Allow) G:\Games\Battlefield 3\bf3.exe
FirewallRules: [{2BC67F7A-669E-4A07-8744-EEF8955E5BCE}] => (Allow) G:\Games\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{05D3BBC0-3CD8-4498-8040-461BE83798A9}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe
FirewallRules: [UDP Query User{A8A793D3-2F74-4318-827F-0A17ACC2B1D2}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe
FirewallRules: [TCP Query User{AC8C9E75-BBF5-41A3-A366-BE6BDC8E41CF}G:\games\far cry 3\far cry 3 - blood dragon\bin\fc3_blooddragon.exe] => (Block) G:\games\far cry 3\far cry 3 - blood dragon\bin\fc3_blooddragon.exe
FirewallRules: [UDP Query User{6E3CF460-87A3-41E5-988C-7E7EB63061A2}G:\games\far cry 3\far cry 3 - blood dragon\bin\fc3_blooddragon.exe] => (Block) G:\games\far cry 3\far cry 3 - blood dragon\bin\fc3_blooddragon.exe
FirewallRules: [TCP Query User{53EB99C7-31B8-4C0B-B449-65657E3526CF}G:\games\far cry 3\far cry 3 - blood dragon\bin\fc3_blooddragon_d3d11.exe] => (Block) G:\games\far cry 3\far cry 3 - blood dragon\bin\fc3_blooddragon_d3d11.exe
FirewallRules: [UDP Query User{64F13023-A308-45BC-8B79-C8F9FE9DA044}G:\games\far cry 3\far cry 3 - blood dragon\bin\fc3_blooddragon_d3d11.exe] => (Block) G:\games\far cry 3\far cry 3 - blood dragon\bin\fc3_blooddragon_d3d11.exe
FirewallRules: [TCP Query User{9E653D63-AC1C-422D-A63E-6F3611E65353}C:\users\schurik\appdata\local\temp\gw2.exe] => (Allow) C:\users\schurik\appdata\local\temp\gw2.exe
FirewallRules: [UDP Query User{AE18F315-12E8-4FD2-ABB6-BABB79693D78}C:\users\schurik\appdata\local\temp\gw2.exe] => (Allow) C:\users\schurik\appdata\local\temp\gw2.exe
FirewallRules: [TCP Query User{98629E6A-CCF0-4873-8D35-8F0D5F5810A4}D:\games\guild wars 2\gw2.exe] => (Allow) D:\games\guild wars 2\gw2.exe
FirewallRules: [UDP Query User{860D5408-6DEC-4B46-9C8D-2CAEB670D709}D:\games\guild wars 2\gw2.exe] => (Allow) D:\games\guild wars 2\gw2.exe
FirewallRules: [TCP Query User{F159E608-BE11-416E-BCB3-9BECC0410F88}D:\games\the witcher 2 enhanced edition\bin\witcher2.exe] => (Allow) D:\games\the witcher 2 enhanced edition\bin\witcher2.exe
FirewallRules: [UDP Query User{9D92751D-B14E-469B-BEF4-595EFD944876}D:\games\the witcher 2 enhanced edition\bin\witcher2.exe] => (Allow) D:\games\the witcher 2 enhanced edition\bin\witcher2.exe
FirewallRules: [{E68BCC60-1007-4EDF-A842-9DC701964473}] => (Block) D:\games\the witcher 2 enhanced edition\bin\witcher2.exe
FirewallRules: [{B0776142-A65F-4379-A793-FF34DCF5ED24}] => (Block) D:\games\the witcher 2 enhanced edition\bin\witcher2.exe
FirewallRules: [TCP Query User{DB560F47-4A33-44AB-8C19-DDE7C74EAB76}D:\games\fifa 14\game\fifa14.exe] => (Block) D:\games\fifa 14\game\fifa14.exe
FirewallRules: [UDP Query User{AAF10946-1E09-4A33-81ED-9E7103A51DC3}D:\games\fifa 14\game\fifa14.exe] => (Block) D:\games\fifa 14\game\fifa14.exe
FirewallRules: [TCP Query User{58DB5FF2-4BA7-4E2C-B9F5-5A554FB55269}C:\users\schurik\appdata\local\jdownloader 2.0\jdownloader2.exe] => (Allow) C:\users\schurik\appdata\local\jdownloader 2.0\jdownloader2.exe
FirewallRules: [UDP Query User{F680823E-D404-499D-95CE-5B6D6A560003}C:\users\schurik\appdata\local\jdownloader 2.0\jdownloader2.exe] => (Allow) C:\users\schurik\appdata\local\jdownloader 2.0\jdownloader2.exe
FirewallRules: [TCP Query User{C2B2D87B-553C-49CC-AE51-CDB5EE4158CE}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [UDP Query User{BB283C4C-AC9E-4C01-B38E-F09ADFE0A28B}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [TCP Query User{55F738C6-1D54-4AD5-9EB4-744FA9636ED0}C:\windows\system32\javaw.exe] => (Allow) C:\windows\system32\javaw.exe
FirewallRules: [UDP Query User{C677CDAB-84D2-48AF-B9AC-506C78D0E1B8}C:\windows\system32\javaw.exe] => (Allow) C:\windows\system32\javaw.exe
FirewallRules: [{2A72BFDD-BD4E-40B6-BD45-0EAC3171B31C}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{B8E8FB92-D7F3-422E-AAB5-B865110A48F5}] => (Allow) LPort=2869
FirewallRules: [{78854708-82D2-4B52-A5EE-04E0B54E45C0}] => (Allow) LPort=1900
FirewallRules: [{C232E524-B8CA-4399-A8D5-2B4EDE0F0867}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe
FirewallRules: [{3A913843-2146-454D-AC2C-A3EE6FE716D7}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe
FirewallRules: [TCP Query User{A320104D-7F79-4162-92BF-F16717061342}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe
FirewallRules: [UDP Query User{458A71D2-2D59-468E-BEEE-2042C1133238}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe
FirewallRules: [TCP Query User{66DFF566-5072-4F4C-A584-DBEE5082972C}C:\program files (x86)\unity\monodevelop\bin\monodevelop.exe] => (Allow) C:\program files (x86)\unity\monodevelop\bin\monodevelop.exe
FirewallRules: [UDP Query User{DDD250AB-5A89-4A20-8DC9-845886E77D3F}C:\program files (x86)\unity\monodevelop\bin\monodevelop.exe] => (Allow) C:\program files (x86)\unity\monodevelop\bin\monodevelop.exe
FirewallRules: [TCP Query User{CB0CA5BF-015C-48B3-B539-DF487ABA709A}D:\games\fifa 15 demo\fifa15_demo.exe] => (Allow) D:\games\fifa 15 demo\fifa15_demo.exe
FirewallRules: [UDP Query User{D2042A4A-1A06-4D33-9666-4E18985D997E}D:\games\fifa 15 demo\fifa15_demo.exe] => (Allow) D:\games\fifa 15 demo\fifa15_demo.exe
FirewallRules: [{89F74F23-D949-4BD8-8D1B-AAC671328DFB}] => (Allow) C:\Program Files (x86)\OkayFreedom\polipo\node.exe
FirewallRules: [TCP Query User{A77263E7-64F3-4B01-A452-FF292FA6B6CE}D:\games\fifa 15\fifa15.exe] => (Allow) D:\games\fifa 15\fifa15.exe
FirewallRules: [UDP Query User{95D480EA-B8A3-4B79-ABCB-05C497AD1253}D:\games\fifa 15\fifa15.exe] => (Allow) D:\games\fifa 15\fifa15.exe
FirewallRules: [{D7087CE4-10D1-4856-A88C-5E48D6295DED}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BBBA6056-2861-4C59-B71A-3E8A64DC03B2}] => (Allow) LPort=3569
FirewallRules: [{280A9B0B-1EEE-4CB1-BF38-1E7D86BA4C1E}] => (Allow) LPort=9946
FirewallRules: [{67830440-3429-4385-A710-5DAC585D1557}] => (Allow) LPort=9988
FirewallRules: [{554EF047-C6ED-488A-AFE0-A5B15A3BC3F8}] => (Allow) LPort=42124
FirewallRules: [{20FB4BF9-C7B3-436C-A0AE-4ACBA7DDCA19}] => (Allow) LPort=3659
FirewallRules: [{F5103DE7-1F07-43C0-91CA-A8874C3E9BEF}] => (Allow) LPort=9565
FirewallRules: [{16510246-A120-4C0E-AF95-76B64B5A1EB2}] => (Allow) LPort=9570
FirewallRules: [TCP Query User{08C04D49-9B04-4A3A-BCC5-04306D61D602}C:\users\schurik\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\schurik\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [UDP Query User{AEB182C1-09B8-4124-A866-E02EFBB267FE}C:\users\schurik\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\schurik\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [{0FA0336A-3E69-4E04-B777-35F9454FE7E5}] => (Allow) D:\Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{638D37E6-FFF5-4A41-9966-BF129CA6E517}] => (Allow) D:\Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{05488E8E-9DFB-4F8A-825E-8A4E9E023288}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{BE399EC5-B510-4791-B954-36F2EBD654A8}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{8DAC0421-F951-4CFA-BA72-2C7201C007CA}] => (Allow) D:\Games\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{030EE791-06FA-45B8-8EA3-822F2A62AAC9}] => (Allow) D:\Games\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{CE087496-BF05-4C36-818F-793417C64CAF}] => (Allow) D:\Games\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{16B4B41C-0B23-4AF6-970F-5BE5312F542D}] => (Allow) D:\Games\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{1D819DCC-1C7E-42F7-AFCA-170337BE43B0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BEB679FF-10AA-41F2-AAC3-B3AAC15E920E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{FDD8E575-87DD-4577-B296-D982680056DA}C:\program files (x86)\jetbrains\pycharm 4.0.4\bin\pycharm.exe] => (Allow) C:\program files (x86)\jetbrains\pycharm 4.0.4\bin\pycharm.exe
FirewallRules: [UDP Query User{09FA48C1-BBED-49A5-882C-9BEA972D00C1}C:\program files (x86)\jetbrains\pycharm 4.0.4\bin\pycharm.exe] => (Allow) C:\program files (x86)\jetbrains\pycharm 4.0.4\bin\pycharm.exe
FirewallRules: [TCP Query User{62D3E7A5-E67B-4F00-8D52-E620ADEE9AC7}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{92FBAB8B-1081-48BA-81E2-546719C9B08E}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{A63A9F79-9784-43E2-AD72-EDB5691C11E4}] => (Allow) D:\Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{60495B35-32C8-415A-9FEE-55EAD659FC77}] => (Allow) D:\Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{944624BB-3BCF-4317-BB0E-C6734B77A1F2}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{3A66DFB7-601A-4C25-9319-4273FA363EC0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{41716124-0092-4C84-8656-4249D430CD5A}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{529D2120-7F74-49D7-9721-34C892E7C969}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{67CAB6BE-9B8C-49F0-B79B-EB1D8F28F8A5}C:\program files (x86)\mediamonkey\mediamonkey (non-skinned).exe] => (Allow) C:\program files (x86)\mediamonkey\mediamonkey (non-skinned).exe
FirewallRules: [UDP Query User{4133EC0D-0D38-4D3D-95E0-A929978E2002}C:\program files (x86)\mediamonkey\mediamonkey (non-skinned).exe] => (Allow) C:\program files (x86)\mediamonkey\mediamonkey (non-skinned).exe
FirewallRules: [TCP Query User{3034E784-265B-4402-A61A-10AD1E3B97BD}D:\games\gta v\gta5.exe] => (Allow) D:\games\gta v\gta5.exe
FirewallRules: [UDP Query User{1A6CBC5E-1743-4150-9EF1-33F008DEC725}D:\games\gta v\gta5.exe] => (Allow) D:\games\gta v\gta5.exe
FirewallRules: [TCP Query User{1ED130E6-2CCA-4FB8-BAC1-7C18F04FA37C}C:\users\schurik\desktop\progs\eclipse\eclipse.exe] => (Allow) C:\users\schurik\desktop\progs\eclipse\eclipse.exe
FirewallRules: [UDP Query User{85C73D14-1D8B-412E-8190-EA271B2D9BE8}C:\users\schurik\desktop\progs\eclipse\eclipse.exe] => (Allow) C:\users\schurik\desktop\progs\eclipse\eclipse.exe
FirewallRules: [{DC72DE98-1C83-424B-BE0F-52DC45B9D1D3}] => (Allow) C:\Users\Schurik\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{A6406CB7-4DC5-425C-AD96-FE0911882D9D}] => (Allow) C:\Users\Schurik\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{5489D0F8-F026-42F0-99F4-69B36ABB7719}] => (Allow) D:\Games\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{511AE8A1-659E-4E20-88AA-F660F766F800}] => (Allow) D:\Games\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [TCP Query User{96352ACF-EAB9-40C2-BAF9-C6F3D3D9F8C4}C:\users\schurik\desktop\arduino-1.6.4\java\bin\javaw.exe] => (Allow) C:\users\schurik\desktop\arduino-1.6.4\java\bin\javaw.exe
FirewallRules: [UDP Query User{AD77F6C2-6EE7-4124-812A-32D91BBA1641}C:\users\schurik\desktop\arduino-1.6.4\java\bin\javaw.exe] => (Allow) C:\users\schurik\desktop\arduino-1.6.4\java\bin\javaw.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/10/2015 10:56:44 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.18444 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 5864.  Message ID: [0x2509].

Error: (05/10/2015 10:54:04 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.18444 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 2704.  Message ID: [0x2509].

Error: (05/10/2015 09:58:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2015 09:11:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2015 09:00:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2015 08:52:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2015 03:49:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2015 02:24:46 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154

Error: (05/10/2015 02:16:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/09/2015 09:54:57 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154


System errors:
=============
Error: (05/10/2015 09:54:45 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070663 fehlgeschlagen: Update für Microsoft OneDrive for Business (KB2956185) 64-Bit-Edition

Error: (05/10/2015 09:54:01 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070663 fehlgeschlagen: Update für Microsoft Excel 2013 (KB2965275) 64-Bit-Edition

Error: (05/10/2015 09:54:01 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070663 fehlgeschlagen: Update für Microsoft Office 2013 (KB2899498) 64-Bit-Edition

Error: (05/10/2015 09:53:08 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070663 fehlgeschlagen: Update für Microsoft Lync 2013 (KB2956174) 64-Bit-Edition

Error: (05/10/2015 09:53:08 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070663 fehlgeschlagen: Update für Microsoft Access 2013 (KB2965276) 64-Bit-Edition

Error: (05/10/2015 09:46:46 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070663 fehlgeschlagen: Update für Microsoft Publisher 2013 (KB2883048) 64-Bit-Edition

Error: (05/10/2015 09:45:00 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070663 fehlgeschlagen: Sicherheitsupdate für Microsoft Office 2013 (KB2726958) 64-Bit-Edition

Error: (05/10/2015 09:44:38 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070663 fehlgeschlagen: Sicherheitsupdate für Microsoft Excel 2013 (KB2920753) 64-Bit-Edition

Error: (05/10/2015 09:44:20 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (05/10/2015 09:43:32 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070663 fehlgeschlagen: Sicherheitsupdate für Microsoft Office 2013 (KB2956151) 64-Bit-Edition


Microsoft Office Sessions:
=========================
Error: (05/10/2015 10:56:44 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.18444 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 5864.  Message ID: [0x2509].

Error: (05/10/2015 10:54:04 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.18444 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 2704.  Message ID: [0x2509].

Error: (05/10/2015 09:58:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2015 09:11:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2015 09:00:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2015 08:52:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2015 03:49:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2015 02:24:46 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154

Error: (05/10/2015 02:16:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/09/2015 09:54:57 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz
Percentage of memory in use: 33%
Total physical RAM: 8117.23 MB
Available physical RAM: 5383.4 MB
Total Pagefile: 16232.64 MB
Available Pagefile: 12777.82 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:223.47 GB) (Free:54.47 GB) NTFS
Drive d: (Volume) (Fixed) (Total:886.45 GB) (Free:265.15 GB) NTFS
Drive e: (Volume) (Fixed) (Total:976.56 GB) (Free:154.45 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 223.6 GB) (Disk ID: 4C477055)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: C0F5FF2E)
Partition 1: (Not Active) - (Size=886.5 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=976.6 GB) - (Type=07 NTFS)

==================== End Of Log ============================