Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-10-2017
Ran by [removed] (02-10-2017 16:25:10)
Running from C:\Users\[removed]\Downloads
Windows 10 Home Version 1511 (X64) (2016-01-05 20:55:48)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3763233370-3072659706-313367089-500 - Administrator - Disabled)
Claudia (S-1-5-21-3763233370-3072659706-313367089-1001 - Administrator - Enabled) => C:\Users\Claudia
DefaultAccount (S-1-5-21-3763233370-3072659706-313367089-503 - Limited - Disabled)
Guest (S-1-5-21-3763233370-3072659706-313367089-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3763233370-3072659706-313367089-1041 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-3763233370-3072659706-313367089-1001\...\uTorrent) (Version: 3.5.0.43916 - BitTorrent Inc.)
Acer Backup Manager (HKLM-x32\...\InstallShield_{9DDDF20E-9FD1-4434-A43E-E7889DBC9420}) (Version: 4.0.0.0059 - NTI Corporation)
Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3007 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3006 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3011 - Acer Incorporated)
AcerCloud (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.01.3115 - Acer Incorporated)
AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.00.3201 - Acer Incorporated)
Adobe Digital Editions 4.5 (HKLM-x32\...\Adobe Digital Editions 4.5) (Version: 4.5.5 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.130 - Adobe Systems Incorporated)
Adobe Flash Player 27 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 27.0.0.130 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.22) - Italiano (HKLM-x32\...\{AC76BA86-7AD7-1040-7B44-AB0000000001}) (Version: 11.0.22 - Adobe Systems Incorporated)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.6.2310 - AVAST Software)
Backup Manager v4 (HKLM-x32\...\{9DDDF20E-9FD1-4434-A43E-E7889DBC9420}) (Version: 4.0.0.0059 - NTI Corporation) Hidden
BlackArmor Discovery (HKLM-x32\...\{B52480BF-CCED-4DD4-8DC2-28BB750D703E}) (Version: 1.40.1041.002 - Seagate) Hidden
BlackArmor Discovery (HKLM-x32\...\InstallShield_{B52480BF-CCED-4DD4-8DC2-28BB750D703E}) (Version: 1.40.1041.002 - Seagate)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom Card Reader Driver Installer (HKLM\...\{F0A7DF2F-0BE0-470F-B137-D7A19F977189}) (Version: 15.4.4.2 - Broadcom Corporation)
Broadcom Wireless Utility (HKLM\...\{4CDA59B9-7AD3-4283-9F5C-BC469FF975B6}) (Version: 6.30.59.20 - Broadcom Corporation)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.4.1.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - ‪Canon Inc.‬)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version:  - ‪Canon Inc.‬)
Canon MG4200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG4200_series) (Version: 1.01 - Canon Inc.)
Canon MG4200 series On-screen Manual (HKLM-x32\...\Canon MG4200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.)
Canon MP Navigator EX 1.0 (HKLM-x32\...\MP Navigator EX 1.0) (Version:  - )
Canon MP520 series (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP520_series) (Version:  - )
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.2 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.0.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.0.0 - Canon Inc.)
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version:  - )
Classic Shell (HKLM\...\{7F34ADBE-77C0-47A0-BBC6-B3DA16CE8E68}) (Version: 3.6.7 - IvoSoft)
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.01.3107 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.01.3107 - Acer Incorporated)
clear.fi SDK - Video 2 (HKLM-x32\...\{EBA33CAD-E071-48d5-A168-FBA4EEB42E93}) (Version: 2.1.1910 - CyberLink Corp.) Hidden
clear.fi SDK- Movie 2 (HKLM-x32\...\{35DA427D-BB23-49B8-9AFD-CFFCFE3B708D}) (Version: 2.1.1910 - CyberLink Corp.) Hidden
CyberLink MediaEspresso 6.5 (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3103_44819 - CyberLink Corp.)
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.1830 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
Dropbox (HKLM-x32\...\Dropbox) (Version: 35.4.20 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.59.1 - Dropbox, Inc.) Hidden
eBay Worldwide (HKLM-x32\...\{A694AF57-9891-4D62-824C-7E55A1361A14}) (Version: 2.3.0630 - OEM)
ELAN Touchpad 11.15.0.18_X64 (HKLM\...\Elantech) (Version: 11.15.0.18 - ELAN Microelectronic Corp.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
HFSExplorer 0.23.1 (HKLM-x32\...\HFSExplorer) (Version: 0.23.1 - Catacombae Software)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3004 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
iTunes (HKLM\...\{1CF5754A-545B-4360-BFDE-2847BC728DFC}) (Version: 11.2.0.115 - Apple Inc.)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
KB4023057 (HKLM\...\{ED06689A-33B7-4D35-8F76-36A82CD03406}) (Version: 2.3.0.0 - Microsoft Corporation)
Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.4 - Acer Inc.)
LG Bluetooth Drivers (HKLM-x32\...\{AC7EE5F1-0DE4-4256-8E43-92B73C8E6019}) (Version: 1.1 - LG Electronics)
LG United Mobile Driver (HKLM-x32\...\{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}) (Version: 3.8.1 - LG Electronics)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3003 - Acer Incorporated)
McAfee Safe Connect (HKLM-x32\...\{54EB2499-4B4F-4AE5-9D1E-CCAE9D6ED880}) (Version: 1.3.1.128 - McAfee, Inc)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3763233370-3072659706-313367089-1001\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools per Office Runtime (x64) - Language Pack - ITA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ITA) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Movie Maker (HKLM-x32\...\{312F7EE7-37D0-484D-B974-0CE1B8560C79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 42.0 (x86 it) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 it)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MyWinLocker (HKLM\...\{0B78ECB0-1A6B-4E6D-89D7-0E7CE77F0427}) (Version: 4.0.14.35 - Egis Technology Inc.) Hidden
MyWinLocker 4 (HKLM-x32\...\{39F15B50-A977-4CA6-B1C3-6A8724CDA025}) (Version: 4.0.14.35 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.24 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.24 - Egis Technology Inc.)
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.01.3200 - Acer)
Office Addin 2003 (HKLM-x32\...\{1FCC073B-CC01-4443-AD20-E559F66E6E83}) (Version: 2.01.3200 - Acer)
OpenOffice 4.0.1 (HKLM-x32\...\{03F15CFC-BA7D-48B8-AA16-7F152BA27547}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.22.2815 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Raccolta foto (HKLM-x32\...\{86A1CEAD-EF47-47BB-AE79-DA8C09E15382}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6657 - Realtek Semiconductor Corp.)
Registrazione utente Canon MG4200 series (HKLM-x32\...\Registrazione utente Canon MG4200 series) (Version:  - Canon Inc.‎)
Rimozione di CopyTrans Suite solamente (HKU\S-1-5-21-3763233370-3072659706-313367089-1001\...\CopyTrans Suite) (Version: 4.006 - WindSolutions)
SafeZone Stable 4.58.2552.909 (HKLM-x32\...\SafeZone 4.58.2552.909) (Version: 4.58.2552.909 - Avast Software) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Shredder (HKLM\...\{1F557316-CFC0-41BD-AFF7-8BC49CE444D7}) (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (HKLM-x32\...\{C2695E83-CF1D-43D1-84FE-B3BEC561012A}) (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Spotify (HKU\S-1-5-21-3763233370-3072659706-313367089-1001\...\Spotify) (Version: 1.0.64.399.g4637b02a - Spotify AB)
Supporto applicazioni Apple (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0410-1000-0000000FF1CE}_Office15.PROPLUSR_{F0251A43-AD36-4A86-8C10-B86802E999FD}) (Version:  - Microsoft)
Urban Rivals version 4.8.3 (HKLM-x32\...\{8648AE1B-D30A-4014-A61B-35AAF5317205}_is1) (Version: 4.8.3 - Acute Games - Boostr)
VideoReDo TVSuite Version 4.21.6.674 (HKLM-x32\...\VideoReDo4_is1) (Version:  - DRD Systems, Inc.)
Visual Studio 2005 Tools per Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version:  - )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-09-07] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-09-07] (AVAST Software)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-04-12] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-04-12] (IvoSoft)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-09-07] (AVAST Software)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2006-12-11] ()
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2007-03-01] ()
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-09-07] (AVAST Software)
ContextMenuHandlers3: [MWLIVShellExt] -> {B1B294FE-EC1E-4fef-AF68-D34CE3E38157} => C:\Program Files (x86)\EgisTec MyWinLocker\x64\MWLIVShellExt.dll [2012-07-12] (Egis Technology Inc. )
ContextMenuHandlers3: [ShredderContextMenu] -> {521065F1-DE6C-4E46-BBCB-89B0D0BE860D} => C:\Program Files (x86)\EgisTec Shredder\x64\ShredderContextMenu.dll [2011-03-29] (Egis Technology Inc.)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2006-12-11] ()
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2007-03-01] ()
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2015-06-01] (Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-09-07] (AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2006-12-11] ()
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2007-03-01] ()

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0043E3B8-EA09-4F55-8A7A-D0D0971BA90C} - System32\Tasks\DropboxUpdateTaskMachineUA =>  [Argument = /ua /installsource scheduler] <==== ATTENTION
Task: {0088F2BB-BB57-4F64-8ACF-379772BD3F14} - System32\Tasks\User_Feed_Synchronization-{6049597C-64FF-472F-8A5B-3EAA566E9F60} =>  [Argument = sync]
Task: {08629A58-75ED-46AA-8646-8C7015698215} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sihboot =>  [Argument = /boot]
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask =>  [Argument = WSClient.dll,RefreshBannedAppsList]
Task: {0CFE2E40-6A97-48C5-9F38-DE82315CF1B0} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig =>  [Argument = config upnphost start= auto]
Task: {0D248323-97AC-4D7E-884D-618EB6EB1B51} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install =>  [Argument = StartInstall]
Task: {0F850B53-0AAA-4C3A-A7FD-EF6ADCE8D431} - System32\Tasks\Microsoft\Windows\rempl\shell-unlock =>  [Argument = /RunUsoScanOnly]
Task: {1019C551-2754-49DE-92EC-89A66F1794C0} - System32\Tasks\Adobe Flash Player PPAPI Notifier =>  [Argument = -check pepperplugin]
Task: {12684429-A047-480D-98F2-C8DA0BA5C30C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {1A438DBA-6F47-44D6-8207-124A92E1597E} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState =>  [Argument = Windows.Storage.ApplicationData.dll,CleanupTemporaryState]
Task: {22DF95EE-A3BC-4A00-8468-0FF46BF970FC} - System32\Tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting =>  [Argument = -upload]
Task: {25EB60D8-6471-4F72-A9B9-BD20FF8173FB} - System32\Tasks\ALUAgent =>  
Task: {27A4209D-0B7E-4902-B5E1-2079FD83402F} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {27FE05E7-EB04-4A04-9ECC-CDE98C09E0BB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack =>  [Argument = scan upload mininterval:2880]
Task: {2B307AD0-33EA-4DB6-81B3-05FEADBE1140} - System32\Tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization =>  [Argument = -c -h -g -# -m 8 -i 13500]
Task: {30FA897C-AFB6-43C6-BAC0-4A8E20E13362} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot =>  [Argument = ResumeUpdate]
Task: {3122B001-FF55-4AEA-A256-FD04410BDDDF} - System32\Tasks\Apple\AppleSoftwareUpdate =>  [Argument = -task]
Task: {312FF1F9-70DF-4AD8-A326-C6543372A814} - System32\Tasks\Power Management =>  
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join =>  [Argument = join]
Task: {37307B43-41DC-4BBE-BF3B-9B1631BEE311} - System32\Tasks\Microsoft\Windows\MUI\LPRemove =>  
Task: {3C8B6AFE-5002-4CB0-B793-7B369DE7C2CB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {4091B647-0CA4-4D7B-9EDB-FAECFABED488} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {4208A7BF-D622-476E-A1A3-F9EB2719ECD4} - System32\Tasks\Microsoft\Windows\Management\Provisioning\Logon =>  [Argument = /turn 5]
Task: {43744BF4-03F7-4B73-87FC-2BA232F6D655} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser =>  
Task: {48E4EF46-2962-499E-B496-FD87DEFA9D4D} - System32\Tasks\Microsoft\Windows\Feedback\Siuf\DmClient =>  
Task: {4BC5D02D-368A-405A-B471-F9CAB6666731} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start =>  [Argument = start wuauserv]
Task: {4C5A8A03-2384-464F-AEAA-F58928D854D8} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics =>  [Argument = -z]
Task: {4CC3129C-0D97-494D-B9A1-48ABFBD93331} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network =>  [Argument = start wuauserv]
Task: {4E4954A6-C22F-4537-87FE-9A696B7BF9C4} - System32\Tasks\Microsoft\Windows\Location\WindowsActionDialog =>  
Task: {511783DE-E306-4E62-A70B-50A545F0BFAF} - System32\Tasks\ALU =>  [Argument = -auto]
Task: {52362630-34B3-46AA-8508-9857D8B13B4F} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask =>  [Argument = sysmain.dll,PfSvWsSwapAssessmentTask]
Task: {57ED60D2-6B0B-4069-90B4-50B067491212} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime =>  [Argument = start w32time task_started]
Task: {58746B17-07DE-4B2D-BA61-A24EDC98173C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {618E2C40-8B40-491A-9735-A89136B054AB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {61E97BCB-528E-4B3C-A43A-CDFC978E48E7} - System32\Tasks\Microsoft\Windows\AppID\PolicyConverter =>  
Task: {6B696BCF-C866-41CA-B4E4-3D19FB1E9250} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceManagerTask =>  [Argument = /Repair]
Task: {6C8C258C-B93A-4D18-A5FF-F585DCB92999} - System32\Tasks\EgisUpdate =>  [Argument = -d]
Task: {70A81CCD-F7A4-4153-895D-29190569321C} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3763233370-3072659706-313367089-1001 =>  
Task: {73F84A2E-E267-44CD-AE43-26F5FADC07BC} - System32\Tasks\Microsoft\Windows\WS\License Validation =>  [Argument = WSClient.dll,WSpTLR licensing]
Task: {7464E64D-F916-44C4-8B4D-8285C95325A1} - System32\Tasks\Microsoft\Windows\WCM\WiFiTask =>  
Task: {7506EE3F-10D4-4FCF-9DDD-77B8FF1182D4} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask =>  
Task: {78671CDF-D649-4239-8217-0966FA021CCF} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\OatTask =>  
Task: {7A0FF756-2C15-4AAF-BF95-1E3671C5BD77} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install =>  [Argument = StartInstall]
Task: {7AE1BCAC-061D-4672-BACB-88BC74CE1D7A} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater =>  [Argument = -maintenance]
Task: {7BC12C89-A012-46EA-B9EB-052EB5CD4326} - System32\Tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary =>  
Task: {7BD8F44E-530D-41CF-B1D0-B9BB0B0C1C73} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone =>  
Task: {845FFDFE-2905-4837-A06B-BF77C5849B81} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {860F596C-A1D8-4651-B747-D134041D80AD} - System32\Tasks\Microsoft\Windows\DiskFootprint\StorageSense =>  [Argument = %windir%\system32\StorageUsage.dll,GetStorageUsageInfo]
Task: {86D751B5-3CF1-462D-829D-E66556659AC9} - System32\Tasks\GoogleUpdateTaskMachineCore =>  [Argument = /c] <==== ATTENTION
Task: {9089EA4F-742C-44D3-952F-6BB13F6568AC} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {90D79106-3D12-40AF-A9BA-231F2327770C} - System32\Tasks\Microsoft\Windows\DUSM\dusmtask =>  
Task: {916DBB1B-7694-48DC-AB9C-3DC26DBAA631} - System32\Tasks\PMMUpdate =>  
Task: {94ED5F86-2701-4681-81EA-048C611157FF} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {97601E9E-9C9C-415D-B81D-9F86ACA7CDC5} - System32\Tasks\Microsoft\Windows\Defrag\ScheduledDefrag =>  [Argument = -c -h -o -$]
Task: {9A414B5C-BA8B-47B5-A368-80F3D316BA34} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector =>  [Argument = dfdts.dll,DfdGetDefaultPolicyAndSMART]
Task: {9FFB29C5-38ED-47CB-B89B-EA84708EBA65} - System32\Tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup =>  
Task: {A4D1B478-9D9D-489F-98BF-846F21D1EA6C} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers =>  [Argument = 6]
Task: {AD0E5421-B5BE-45AE-B859-D95B000DE272} - System32\Tasks\DropboxUpdateTaskMachineCore =>  [Argument = /c] <==== ATTENTION
Task: {AF8621E4-DD0A-4E22-AEBD-D252114A7D89} - System32\Tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask =>  [Argument = /offerraupdate]
Task: {AFABB2D7-61C6-47DC-8D29-7E2C220FDAD0} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {B0AF4FEF-5079-423E-8788-F40FF198E957} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver =>  
Task: {B0B1EFB4-58E3-47BD-B6C1-04CAB17CE358} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {B3DD4C81-C4AC-4263-806F-E5B540C1B26A} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup =>  [Argument = /autoclean /d %systemdrive%]
Task: {B4A5B97B-E0F1-4984-ADA4-432088751E1B} - System32\Tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo =>  
Task: {B58CD507-C9EB-48B8-81F2-AADF9066ED42} - System32\Tasks\GoogleUpdateTaskMachineUA =>  [Argument = /ua /installsource scheduler] <==== ATTENTION
Task: {B800F472-327F-472D-86A2-F311423E0663} - System32\Tasks\Avast Emergency Update =>  
Task: {BD587D97-70DD-4428-B5D7-AE9CF34770F6} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn =>  [Argument = scan upload]
Task: {BFA5AEE5-5BE2-4363-8831-6DA428FEF98C} - System32\Tasks\Adobe Acrobat Update Task =>  
Task: {C349BB67-3672-4975-AE02-517BAD9318EE} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sih =>  
Task: {C4E89737-E6D8-4D86-B15E-50A93654BBC1} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange =>  [Argument = bfe.dll,BfeOnServiceStartTypeChange]
Task: {C7752DC6-148D-4AB0-93E1-D84AEB7AA014} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask =>  [Argument = $(Arg0)]
Task: {CA4BE44E-107E-4B2D-91AF-FC3B077B02FC} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser =>  
Task: {CCB9989F-1DE4-4992-A1D1-6100AD98E80D} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat =>  
Task: {CD9C35D3-F7FF-47ED-94C5-D87DABC436C1} - System32\Tasks\Recovery Management\Notification =>  
Task: {D2286DBC-5863-4439-B4C3-185B76004141} - System32\Tasks\DeviceDetector =>  
Task: {D30F2647-F462-491F-98CB-43E583FBB303} - System32\Tasks\SafeZone scheduled Autoupdate 1475917315 =>  [Argument = --scheduledautoupdate $(Arg0)]
Task: {DAAFAEC3-BC03-44D7-A77D-05760FE578AD} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup =>  [Argument = %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask]
Task: {DB458018-DEBA-4577-AB8B-EA1506110FB8} - System32\Tasks\Microsoft\Windows\Location\Notifications =>  
Task: {E16F0887-6833-4473-8EF2-9388DE1D1D79} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display =>  [Argument = Display]
Task: {E506F4C9-20BB-40AE-AD65-2304E5EF9B80} - System32\Tasks\Microsoft\Windows\Clip\License Validation =>  [Argument = -p -s -o]
Task: {E5217668-D921-4907-8CE1-276EABA44515} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan =>  [Argument = StartScan]
Task: {E7D61507-58B7-44DC-8D1E-932F96FC2D62} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator =>  
Task: {EDB3A5B7-0556-45A2-9A38-7264C2C244A8} - System32\Tasks\Microsoft\Windows\rempl\shell =>  
Task: {EE911E2B-20B9-4314-A294-66C18EB5B75D} - System32\Tasks\{12A838C6-5DB6-4445-90C3-FD4F02ACDC81} =>  [Argument = -a "C:\Program Files (x86)\GOG.com\Neverwinter Nights Diamond Edition\nwn.exe" -d "C:\Program Files (x86)\GOG.com\Neverwinter Nights Diamond Edition\"]
Task: {EF3EC7C4-1CB5-43F1-A074-D1D74BB07D7A} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor =>  
Task: {EFB2C913-BFA0-4FB9-8130-48BEE6BD1B12} - System32\Tasks\Microsoft\Windows\NlaSvc\WiFiTask =>  [Argument = nla]
Task: {F2341244-5F02-41C5-BA40-4FBADCD67206} - System32\Tasks\Microsoft\Windows\Autochk\Proxy =>  [Argument = /d acproxy.dll,PerformAutochkOperations]
Task: {F4BF89A9-8488-4988-B163-F7F0341D521B} - System32\Tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck =>  
Task: {F5E1D9DB-B89D-4856-84E4-A577889FE40B} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {F62B8B7F-155F-4428-AB3A-607D7E04C27D} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot =>  [Argument = ReadyToReboot]
Task: {F775C69D-FE09-4105-8F98-5DC6D956FA4E} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join =>  
Task: {FA625267-66E0-464A-AE95-8754007E78AD} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot =>  [Argument = Reboot]
Task: {FB1868EE-5CA8-4DE9-A8B1-6171EB0EDB5A} - System32\Tasks\Microsoft\Windows\SystemRestore\SR =>  [Argument = ExecuteScheduledSPPCreation]
Task: {FC52F032-45F0-4B04-99DA-5A5F43CB0392} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask =>  [Argument = Startupscan.dll,SusRunTask]

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


Shortcut: C:\Users\Claudia\Favorites\Acer\Acer.lnk -> hxxp://www.acer.com

==================== Loaded Modules (Whitelisted) ==============

2017-09-07 15:19 - 2017-09-07 15:19 - 000067408 _____ () C:\Program Files\AVAST Software\Avast\x64\module_lifetime.dll
2015-10-30 09:18 - 2015-10-30 09:18 - 000185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-10-06 21:49 - 2016-03-29 12:20 - 002656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-01-06 10:12 - 2015-12-07 06:14 - 000093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-10-06 21:48 - 2016-04-23 06:25 - 000472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-10-06 21:48 - 2016-04-23 06:02 - 007992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-10-06 21:47 - 2016-04-23 05:58 - 000591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-10-06 21:49 - 2016-04-23 05:58 - 002483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-10-06 21:49 - 2016-04-23 06:01 - 004089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-06-01 22:00 - 2015-06-01 22:00 - 000102912 _____ () C:\Windows\System32\IccLibDll_x64.dll
2016-10-06 23:27 - 2016-10-06 23:28 - 000144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2017-09-27 19:48 - 2017-09-21 09:29 - 004022616 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll
2017-09-27 19:48 - 2017-09-21 09:29 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll
2012-08-22 23:26 - 2012-08-22 23:26 - 000465384 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2012-08-22 23:25 - 2012-08-22 23:25 - 000125504 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2012-08-22 23:26 - 2012-08-22 23:26 - 000155712 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\VolumeSnapshot.dll
2012-08-22 23:25 - 2012-08-22 23:25 - 000118336 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\Online.dll
2012-08-22 23:25 - 2012-08-22 23:25 - 001081408 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2012-08-22 23:25 - 2012-08-22 23:25 - 000052288 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OsSettingPort.dll
2012-08-22 23:26 - 2012-08-22 23:26 - 000727616 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OutlookShadow.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 000073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 001044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-09-05 15:40 - 2012-06-25 19:41 - 001198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2017-09-07 15:19 - 2017-09-07 15:19 - 000167096 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-09-07 15:19 - 2017-09-07 15:19 - 000059040 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll
2017-08-11 19:12 - 2017-08-11 19:12 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-09-07 15:19 - 2017-09-07 15:19 - 000211904 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-09-07 15:19 - 2017-09-07 15:19 - 000241960 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-09-07 15:18 - 2017-09-07 15:18 - 000233768 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-09-07 15:19 - 2017-09-07 15:19 - 000685688 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-10-02 15:32 - 2017-10-02 15:32 - 005890352 _____ () C:\Program Files\AVAST Software\Avast\defs\17100200\algo.dll
2016-10-06 23:27 - 2016-10-06 23:28 - 000141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-10-06 23:27 - 2016-10-06 23:28 - 022284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2017-09-21 15:10 - 2017-09-20 18:48 - 000771904 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll
2017-09-21 15:10 - 2017-09-20 18:48 - 001804608 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_crashpad.dll
2017-09-21 15:10 - 2017-09-20 18:49 - 000023872 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_bootstrap.dll
2017-09-21 15:10 - 2017-09-20 18:48 - 000100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000020800 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2017-09-21 15:10 - 2017-09-20 18:49 - 000021848 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000125904 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2017-09-21 15:10 - 2017-09-20 18:49 - 001862992 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2017-09-21 15:10 - 2017-09-20 18:49 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2017-09-21 15:10 - 2017-09-20 18:48 - 000105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2017-09-21 15:10 - 2017-09-20 18:49 - 000062784 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2017-09-21 15:10 - 2017-09-20 18:49 - 000040248 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000392656 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2017-09-21 15:10 - 2017-09-20 18:50 - 000392512 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000026056 _____ () C:\Program Files (x86)\Dropbox\Client\win32job.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2017-09-21 15:10 - 2017-09-20 18:49 - 000022336 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000023368 _____ () C:\Program Files (x86)\Dropbox\Client\winshell.compiled._winshell.pyd
2017-09-21 15:10 - 2017-09-20 18:49 - 000023368 _____ () C:\Program Files (x86)\Dropbox\Client\crashpad.compiled._Crashpad.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000082264 _____ () C:\Program Files (x86)\Dropbox\Client\winenumhandles.compiled._WinEnumHandles.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000025432 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2017-09-21 15:10 - 2017-09-20 18:49 - 001796920 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000084424 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2017-09-21 15:10 - 2017-09-20 18:49 - 001956152 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 003859264 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000154440 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2017-09-21 15:10 - 2017-09-20 18:49 - 000521024 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000045888 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineCore.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000042304 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000131384 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000218944 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2017-09-21 15:10 - 2017-09-20 18:49 - 000204096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000054608 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000069968 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000021848 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd
2017-09-21 15:10 - 2017-09-20 18:49 - 000027488 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000349128 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000101184 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000023896 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2017-09-21 15:10 - 2017-09-20 18:49 - 000025936 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2017-09-21 15:10 - 2017-09-20 18:49 - 000033112 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
2017-09-21 15:10 - 2017-09-20 18:48 - 000293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
2017-09-21 15:10 - 2017-09-20 18:49 - 000181056 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2017-09-21 15:10 - 2017-09-20 18:50 - 000030536 _____ () C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.pyd
2017-09-21 15:10 - 2017-09-20 18:49 - 000024368 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.DLL
2017-09-21 15:10 - 2017-09-20 18:49 - 001638200 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2017-09-21 15:10 - 2017-09-20 18:50 - 000026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000545080 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000359224 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2017-09-21 15:10 - 2017-09-20 18:50 - 000038208 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngine.pyd
2017-06-16 10:31 - 2017-10-02 15:23 - 071818864 _____ () C:\Users\Claudia\AppData\Roaming\Spotify\libcef.dll
2017-06-16 10:31 - 2017-10-02 15:23 - 002969200 _____ () C:\Users\Claudia\AppData\Roaming\Spotify\libglesv2.dll
2017-06-16 10:31 - 2017-10-02 15:23 - 000086640 _____ () C:\Users\Claudia\AppData\Roaming\Spotify\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:0888F409 [286]
AlternateDataStreams: C:\ProgramData\Temp:3241739E [135]
AlternateDataStreams: C:\ProgramData\Temp:3440EB47 [728]
AlternateDataStreams: C:\ProgramData\Temp:66633281 [135]
AlternateDataStreams: C:\ProgramData\Temp:CF61CE5A [133]
AlternateDataStreams: C:\ProgramData\Temp:D8A1AC56 [133]
AlternateDataStreams: C:\Users\Claudia\Downloads\Claudia Cavalier.JPG:com.dropbox.attributes [209]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3763233370-3072659706-313367089-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Claudia\Downloads\11229687_1110354058979952_2799124739640285770_n.jpg
DNS Servers: [removed]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{43CFF055-EC98-4C23-B8C7-3C53942507AD}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BC107615-485C-4744-B360-693476376BF1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{B8BDD305-3650-424F-90C1-2068E02523E8}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{CDD28240-B4D6-4E20-9218-019B6E7004C1}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{F169E0BF-6C67-4FDC-8DC6-EDA617EF6AF2}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [UDP Query User{7703C9B0-10E8-48D6-A720-E5914BD14387}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{17A32AC7-0637-4B75-954F-0238F009395E}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{288F2B9C-FCBD-4ECA-BE6E-1105E56B705D}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{4BC72FF4-E17E-4327-A328-83D7BE95A2BD}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{55B932CD-509D-4547-859A-E34B2D4B00EB}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{6DAA51D7-8185-4256-98CC-63F74137A003}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{8B4D919B-883B-4CF8-8E1F-026ED73E7D73}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F42925DB-AB81-4EE7-A6F3-D696A6E03C36}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{FD99F181-E34D-4B68-984D-83510F45343B}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD9.EXE
FirewallRules: [{FF2F68ED-71CB-4B23-B259-C77A5214697C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{12541D90-335F-459A-A56F-4A3C2BC92F65}] => (Allow) C:\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{E2AAB4F0-2661-4124-BC23-E6FAB687A6C5}] => (Allow) C:\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{76E77616-EDE7-43FD-BF88-7AA4A6CC90EC}] => (Allow) LPort=1900
FirewallRules: [{A05025B1-DF5C-4D61-997A-9C27DD26D114}] => (Allow) LPort=2869
FirewallRules: [{1B242535-1BCC-4E8B-8249-21F1D46CA5C4}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{BCCA1402-DA11-42EB-A219-056B8D576292}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [{BD830E27-F4F2-46F8-8B54-8D348F833B88}] => (Allow) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManager.exe
FirewallRules: [{40B39A82-F52D-4959-873E-2F235674A88C}] => (Allow) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
FirewallRules: [{D30EBD92-D612-4E92-86A8-48FB85C65E0A}] => (Allow) C:\Program Files (x86)\NTI\Acer Backup Manager\FileExplorer.exe
FirewallRules: [{ADDBF182-37FF-4AC0-9398-DF0BC75BBE95}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe
FirewallRules: [{B6F268FC-9A76-47C0-8EEF-6E9E67FCE028}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe
FirewallRules: [{A12B4F51-087D-4DF9-8E7A-2B951DE9A57E}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe
FirewallRules: [{5AE981A2-E6B9-4FB8-8491-16457F0B56BA}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe
FirewallRules: [{54830A33-2BFF-45C6-8D86-00E84467D1A7}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK21\Video\VideoPlayer.exe
FirewallRules: [{15CE46B6-068C-43EC-B37A-CA1F214F6CAF}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK21\Video\MusicPlayer.exe
FirewallRules: [{1F62C777-5CB0-4696-A1ED-4658ED677155}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK21\Movie\PlayMovie.exe
FirewallRules: [{F52AECFC-6830-412D-96C4-30EF36DCB0CF}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe
FirewallRules: [{F253F4C6-F781-436E-89CB-EC255DD03DFC}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe
FirewallRules: [{F773DA77-550C-4804-97FC-8FC2D6916825}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe
FirewallRules: [{36D1FE84-D0E5-47D4-821A-2F5AA956A8E9}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe
FirewallRules: [{D57A0E22-3C46-4763-9035-77B5E0B651B9}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\ccd.exe
FirewallRules: [{FB4F3BCB-C6B9-4CFD-A67F-9FE77E51B8A3}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\ccd.exe
FirewallRules: [{23038A32-85CC-41C9-B2F5-CBE4F4250C30}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{C6E084E8-650E-417F-816C-B393EB160761}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{DC737DDB-22A8-48E0-A752-698520CA4D47}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{56DD32B5-9259-4482-8AA6-5242926A03E9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{BDAD9453-508B-44BE-8BA6-7703E50000A7}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{2B5C20B0-40F2-49F6-BC51-564A297D5D47}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{A984FE46-A561-4622-B83F-163805B6CA8B}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{B8DE737F-215C-4048-B210-849031DC08D3}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [TCP Query User{B3E83B2B-6E75-446E-A9AE-B53DBEFAB384}C:\program files (x86)\electronic arts\eadm\core.exe] => (Block) C:\program files (x86)\electronic arts\eadm\core.exe
FirewallRules: [UDP Query User{D7DB0F2C-B5A9-445C-A890-56B7C2E7EBC4}C:\program files (x86)\electronic arts\eadm\core.exe] => (Block) C:\program files (x86)\electronic arts\eadm\core.exe
FirewallRules: [TCP Query User{439B50B1-3C8F-41B3-978D-44D97D5EC701}C:\program files (x86)\electronic arts\eadm\core.exe] => (Allow) C:\program files (x86)\electronic arts\eadm\core.exe
FirewallRules: [UDP Query User{DFE3747D-A06E-4BCE-AEC9-46A6C94FEDE1}C:\program files (x86)\electronic arts\eadm\core.exe] => (Allow) C:\program files (x86)\electronic arts\eadm\core.exe
FirewallRules: [{D626BD37-4862-4D17-B7EA-4F72F1FF1845}] => (Allow) C:\Users\Claudia\AppData\Local\iLivid\iLivid.exe
FirewallRules: [{5E394B9C-76AD-42D2-AD4E-CCF1EAC2E040}] => (Allow) C:\Users\Claudia\AppData\Local\iLivid\iLivid.exe
FirewallRules: [TCP Query User{A9840EF2-1DBA-4F36-9625-D258179499D8}C:\program files (x86)\seagate\blackarmor discovery\blackarmor discovery.exe] => (Allow) C:\program files (x86)\seagate\blackarmor discovery\blackarmor discovery.exe
FirewallRules: [UDP Query User{26D1C92C-6191-4208-9806-1F55DDB17169}C:\program files (x86)\seagate\blackarmor discovery\blackarmor discovery.exe] => (Allow) C:\program files (x86)\seagate\blackarmor discovery\blackarmor discovery.exe
FirewallRules: [{8FC45EC9-51B6-4D61-BA4C-0514D624297F}] => (Block) C:\program files (x86)\seagate\blackarmor discovery\blackarmor discovery.exe
FirewallRules: [{EAD69B03-6ECF-49DC-B998-A0D120DF4C5B}] => (Block) C:\program files (x86)\seagate\blackarmor discovery\blackarmor discovery.exe
FirewallRules: [TCP Query User{599A3A54-D494-4A50-8678-A6AE13A9661B}C:\users\claudia\appdata\local\temp\kmsnano\qemu-system-i386.exe] => (Allow) C:\users\claudia\appdata\local\temp\kmsnano\qemu-system-i386.exe
FirewallRules: [UDP Query User{C3443021-2ADB-45BE-B239-FA0A13435F88}C:\users\claudia\appdata\local\temp\kmsnano\qemu-system-i386.exe] => (Allow) C:\users\claudia\appdata\local\temp\kmsnano\qemu-system-i386.exe
FirewallRules: [TCP Query User{5C036001-F9E3-436B-A439-E2A3B5128FD3}C:\users\claudia\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\claudia\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{5B149777-2E96-4AE9-B831-4D5E937510FA}C:\users\claudia\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\claudia\appdata\roaming\spotify\spotify.exe
FirewallRules: [{3B30A133-D097-440C-A7A0-E18AA58EDECE}] => (Allow) C:\Users\Claudia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{93D7EFA7-F0B3-471C-84D7-4D55DCC46D7C}] => (Allow) C:\Users\Claudia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E53768FD-14A4-4931-9664-E7A05F5A27DC}] => (Allow) C:\Users\Claudia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E19C5506-9393-4655-BB13-54D20536D19E}] => (Allow) C:\Users\Claudia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{485BC462-F502-4768-AC07-F8CF41F567E6}] => (Allow) C:\Users\Claudia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{4AC961BE-ABE4-44CE-B63A-6D1000845AD4}] => (Allow) C:\Users\Claudia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{9D973C46-4164-47BD-8C00-333384BCE5F8}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909\SZBrowser.exe
FirewallRules: [{5139ACCC-A644-433C-BE48-55D7FD7D7859}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909_0\SZBrowser.exe
FirewallRules: [{F842E198-9D8E-45A6-9389-249910C2F76C}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{BD1B036A-FA96-4DCA-ACBD-D4D721323E46}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

16-06-2017 13:59:01 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215
09-09-2017 13:57:25 Punto di controllo pianificato
21-09-2017 15:09:55 Programma di installazione dei moduli di Windows

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/02/2017 03:59:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7672

Error: (10/02/2017 03:59:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7672

Error: (10/02/2017 03:59:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (10/02/2017 03:59:50 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5734

Error: (10/02/2017 03:59:50 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5734

Error: (10/02/2017 03:59:50 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (10/02/2017 03:59:49 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4578

Error: (10/02/2017 03:59:49 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4578

Error: (10/02/2017 03:59:49 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (10/02/2017 03:59:47 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3453


System errors:
=============
Error: (10/02/2017 04:08:01 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: Il server {784E29F4-5EBE-4279-9948-1E8FE941646D} non ha effettuato la registrazione con DCOM nel tempo richiesto.

Error: (10/02/2017 03:59:37 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Le impostazioni delle autorizzazioni impostazioni specifiche dell'applicazione non concedono l'autorizzazione di Attivazione in Locale per l'applicazione server COM con CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 e APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 all'utente NT AUTHORITY\SID SYSTEM (S-1-5-18) dall'indirizzo LocalHost (tramite LRPC) in esecuzione nel SID del contenitore di applicazioni Non disponibile (Non disponibile). Per modificare tale autorizzazione di sicurezza, è possibile utilizzare lo strumento amministrativo Servizi componenti.

Error: (10/02/2017 03:24:49 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: Il server {784E29F4-5EBE-4279-9948-1E8FE941646D} non ha effettuato la registrazione con DCOM nel tempo richiesto.

Error: (10/01/2017 12:09:16 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Timeout (30000 millisecondi) durante l'attesa della connessione del servizio Sincronizza host_dbb8184.

Error: (10/01/2017 12:09:16 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Timeout (30000 millisecondi) durante l'attesa della connessione del servizio Archiviazione dati utente_dbb8184.

Error: (10/01/2017 12:09:16 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Tentativo di eseguire un'azione di correzione (Riavvia il servizio) dopo l'arresto imprevista del servizio Archiviazione dati utente_dbb8184. Tentativo non riuscito per l'errore: 
Un'istanza del servizio è già in esecuzione.

Error: (10/01/2017 12:09:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Il servizio Accesso dati utente_dbb8184 è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 10000 millisecondi: Riavvia il servizio.

Error: (10/01/2017 12:09:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Il servizio Archiviazione dati utente_dbb8184 è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 10000 millisecondi: Riavvia il servizio.

Error: (10/01/2017 12:09:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Il servizio Dati contatti_dbb8184 è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 10000 millisecondi: Riavvia il servizio.

Error: (10/01/2017 12:09:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Il servizio Sincronizza host_dbb8184 è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 10000 millisecondi: Riavvia il servizio.


CodeIntegrity:
===================================
  Date: 2017-06-16 14:02:00.914
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-10-08 11:22:33.982
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-10-08 00:07:44.763
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-10-06 22:49:09.192
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-02-13 14:25:12.733
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-02-12 19:49:49.826
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-02-10 18:01:52.094
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-02-08 21:36:21.326
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-02-01 08:05:56.495
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-02-01 08:02:44.229
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info =========================== 

Processor: Intel(R) Celeron(R) CPU 887 @ 1.50GHz
Percentage of memory in use: 81%
Total physical RAM: 3909.28 MB
Available physical RAM: 731.52 MB
Total Virtual: 6981.28 MB
Available Virtual: 2835.46 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:446.71 GB) (Free:304.67 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: EAD54AC2)

Partition: GPT.

==================== End of Addition.txt ============================