explorer.exe vytížení GPU

[JezdiciOko]

Zdravím,
mám problém s průzkuníkem, od zapnutí pc se pohybuje vytížení 20-35% neustále a neklesá to. Dříve jsem takovýto problém nikdy neměl. Ani po násilném ukončení úlohy a následném znovu spuštění žádná změna.


zde log (byl moc velký takže jsem je oba v originále přibalil do přílohy)

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\ramaint.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.3.2.220\WsAppService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Wondershare) C:\Program Files (x86)\Wondershare\dr.fone toolkit for Android\Library\DriverInstaller\DriverInstall.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
() C:\Program Files\FACEIT Client\faceitclient.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(The Document Foundation) C:\Program Files\LibreOffice 5\program\sbase.exe
(The Document Foundation) C:\Program Files\LibreOffice 5\program\soffice.exe
(The Document Foundation) C:\Program Files\LibreOffice 5\program\soffice.bin
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft® Windows® Operating System) C:\Windows\System32\Taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\MARTY\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2017-03-28] (Microsoft Corporation)
HKLM\...\Run: [LogMeIn GUI] => C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe [423424 2017-04-07] (LogMeIn, Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [303928 2017-03-22] (Apple Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [67896 2017-03-16] (Apple Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5883912 2017-03-02] (LogMeIn Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKU\S-1-5-21-2594704389-838260344-3551713440-1001\...\Run: [Google Update] => C:\Users\MARTY\AppData\Local\Google\Update\1.3.33.3\GoogleUpdateCore.exe [599632 2017-04-13] (Google Inc.)
HKU\S-1-5-21-2594704389-838260344-3551713440-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3019552 2017-03-23] (Valve Corporation)
HKU\S-1-5-21-2594704389-838260344-3551713440-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4299968 2016-06-22] (Disc Soft Ltd)
HKU\S-1-5-21-2594704389-838260344-3551713440-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3044848 2017-02-14] (Electronic Arts)
HKU\S-1-5-21-2594704389-838260344-3551713440-1001\...\Run: [WallpaperEngine] => "G:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\wallpaper64.exe" -silent
HKU\S-1-5-21-2594704389-838260344-3551713440-1001\...\Run: [SideSync] => C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe [10952880 2016-03-18] ()
HKU\S-1-5-21-2594704389-838260344-3551713440-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27545048 2017-03-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2594704389-838260344-3551713440-1001\...\Run: [GoogleChromeAutoLaunch_2939A334336E671C2781BB3CDD156FDD] => C:\Users\MARTY\AppData\Local\Google\Chrome\Application\chrome.exe [1111896 2017-03-29] (Google Inc.)
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> No File
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> No File
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> No File
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> No File
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2016-11-24]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)
Startup: C:\Users\MARTY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Steam Account Manager.exe [2017-04-09] ()
GroupPolicy: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\..\Interfaces\{3c72874c-9bc4-4cee-8dc3-aa7c9733a1ee}: [DhcpNameServer] 192.168.31.1

Internet Explorer:
==================
HKU\S-1-5-21-2594704389-838260344-3551713440-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2017-03-06] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-03-06] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-03-23] (Oracle Corporation)
BHO-x32: Microsoft Web Test Recorder 14.0 Helper -> {b924f0b4-0b3c-49c0-bab2-213fb9ebd1d3} -> C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2015-07-07] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-04-04] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-03-23] (Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-03-06] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-03-06] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-03-06] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-03-06] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-03-06] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-03-06] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-03-06] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-03-06] (Microsoft Corporation)

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-03-06] (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-03-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-03-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-03-06] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-03-06] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin HKU\S-1-5-21-2594704389-838260344-3551713440-1001: @tools.google.com/Google Update;version=3 -> C:\Users\MARTY\AppData\Local\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-13] (Google Inc.)
FF Plugin HKU\S-1-5-21-2594704389-838260344-3551713440-1001: @tools.google.com/Google Update;version=9 -> C:\Users\MARTY\AppData\Local\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-13] (Google Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxps://www.facebook.com/profile.php?id=1476106 ... 16&fref=ts
CHR StartupUrls: Default -> "hxxps://www.google.cz/","hxxp://facebook.com/", ... gmail.com/"
CHR Profile: C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default [2017-04-18]
CHR Extension: (Prezentace Google) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-08-03]
CHR Extension: (Dokumenty Google) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-08-03]
CHR Extension: (Disk Google) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-08-03]
CHR Extension: (YouTube) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-08-03]
CHR Extension: (DownAlbum) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgjnhhjpfcdhbhlcmmjppicjmgfkppok [2017-04-14]
CHR Extension: (Steam Inventory Helper) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2017-04-14]
CHR Extension: (Gladiatus Crazy Add On) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfbmiedjenagoegiiabjfjpkhfocifkp [2017-02-17]
CHR Extension: (Tabulky Google) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-08-03]
CHR Extension: (LoungeDestroyer) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl [2017-01-31]
CHR Extension: (Dokumenty Google offline) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-08-03]
CHR Extension: (AdBlock) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-04-13]
CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2017-04-18]
CHR Extension: (NetBeans Connector) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\hafdlehgocfcodbgjnpecfajgkeejnaa [2016-08-03]
CHR Extension: (Steam Ninja!) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\iafjcapblconlangblamhojmlpbdebhn [2016-11-15]
CHR Extension: (Infinite HD App) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\laealigljflmglcgncipdbmbjgjdpiim [2016-08-03]
CHR Extension: (Dingit Infinite HD App) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\llnhnfikffkjbdnfallfpgikamegbbag [2016-08-03]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Oddshot) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\olnoeeagkgpkplnhmnnlgodjnjgckhja [2017-04-04]
CHR Extension: (Gmail) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-08-03]
CHR Extension: (Chrome Media Router) - C:\Users\MARTY\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-01]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-03-17] (Apple Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1465352 2017-01-13] ()
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3737792 2017-03-26] (Microsoft Corporation)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072 2016-06-22] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [409128 2017-03-30] (EasyAntiCheat Ltd)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3416584 2017-03-02] (LogMeIn Inc.)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2017-02-27] (LogMeIn, Inc.)
R2 LMIMaint; C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe [509416 2017-04-07] (LogMeIn, Inc.)
R2 LogMeIn; C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe [407424 2011-09-16] (LogMeIn, Inc.)
S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [5741064 2016-05-15] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-02-23] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-02-23] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-02-23] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2017-02-14] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2184208 2017-02-14] (Electronic Arts)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-11-22] (Microsoft Corporation)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10216688 2016-11-28] (TeamViewer GmbH)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [838128 2016-12-15] (Tunngle.net GmbH)
R2 VIAKaraokeService; C:\WINDOWS\system32\viakaraokesrv.exe [36504 2015-06-22] (VIA Technologies, Inc.)
S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [108776 2016-07-26] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2017-03-28] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2017-03-28] (Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.3.2.220\WsAppService.exe [441344 2017-01-05] (Wondershare) [File not signed]
R2 WsDrvInst; C:\Program Files (x86)\Wondershare\dr.fone toolkit for Android\Library\DriverInstaller\DriverInstall.exe [124048 2017-01-05] (Wondershare)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 CH341SER_A64; C:\WINDOWS\System32\Drivers\CH341S64.SYS [59904 2015-01-26] (www.winchiphead.com)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-08-27] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-08-27] (Disc Soft Ltd)
R1 FACEIT; C:\WINDOWS\System32\Drivers\FACEIT.sys [5968376 2017-04-15] ()
R3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2016-11-11] (LogMeIn Inc.)
R1 HWiNFO32; C:\WINDOWS\SysWoW64\drivers\HWiNFO64A.SYS [27552 2017-01-02] (REALiX(tm))
R2 LMIInfo; C:\WINDOWS\system32\drivers\LMIInfo.sys [30432 2017-01-11] (LogMeIn, Inc.)
S4 LMIRfsClientNP; no ImagePath
R3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] ()
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_b67dc924fff8de6d\nvlddmkm.sys [14199224 2017-01-04] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-02-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2017-02-23] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-02-23] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek )
R3 SensorsSimulatorDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [216064 2016-07-16] (Microsoft Corporation)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [41824 2016-11-03] (SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [45928 2017-01-10] (SteelSeries ApS)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 tap0901t; C:\WINDOWS\System32\drivers\tap0901t.sys [48824 2016-04-26] (Tunngle.net GmbH)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [36832 2017-02-17] (Wellbia.com Co., Ltd.)
S3 X6va063; \??\C:\WINDOWS\SysWoW64\Drivers\X6va063 [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-04-18 17:52 - 2017-04-18 17:53 - 00026769 _____ C:\Users\MARTY\Desktop\FRST.txt
2017-04-18 17:52 - 2017-04-18 17:52 - 00000000 ____D C:\FRST
2017-04-18 17:52 - 2017-04-18 17:51 - 02424832 _____ (Farbar) C:\Users\MARTY\Desktop\FRST64.exe
2017-04-18 17:51 - 2017-04-18 17:51 - 02424832 _____ (Farbar) C:\Users\MARTY\Downloads\FRST64.exe
2017-04-18 17:51 - 2017-04-18 17:50 - 00112640 _____ (forum.viry.cz) C:\Users\MARTY\Desktop\FRSTLauncher.exe
2017-04-18 17:50 - 2017-04-18 17:50 - 00112640 _____ (forum.viry.cz) C:\Users\MARTY\Downloads\FRSTLauncher.exe
2017-04-18 15:40 - 2017-04-18 17:43 - 00003296 _____ C:\Users\MARTY\Desktop\Nová databáze.odb
2017-04-18 15:40 - 2017-04-18 15:40 - 00003290 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-04-18 15:40 - 2017-04-18 15:40 - 00002432 _____ C:\Users\MARTY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-04-18 15:40 - 2017-04-18 15:40 - 00000016 _____ C:\Users\MARTY\Desktop\Nová databáze.odb.lck
2017-04-18 15:39 - 2017-04-18 15:39 - 00000000 ____D C:\Users\MARTY\AppData\Roaming\LibreOffice
2017-04-18 15:37 - 2017-04-18 15:37 - 00001177 _____ C:\Users\Public\Desktop\LibreOffice 5.3.lnk
2017-04-18 15:37 - 2017-04-18 15:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.3
2017-04-18 15:36 - 2017-04-18 15:37 - 00000000 ____D C:\Program Files\LibreOffice 5
2017-04-18 15:34 - 2017-04-18 15:35 - 244117504 _____ C:\Users\MARTY\Downloads\LibreOffice_5.3.2_Win_x64.msi
2017-04-17 19:34 - 2017-04-17 19:39 - 1175323904 _____ C:\Users\MARTY\Downloads\ubuntu-mate-16.04.2-desktop-armhf-raspberry-pi.img.xz
2017-04-17 18:42 - 2017-04-17 18:42 - 06286748 _____ C:\Users\MARTY\Downloads\SDFormatterv4 (1).zip
2017-04-17 18:40 - 2017-04-17 18:40 - 00077824 _____ ( ) C:\Users\MARTY\Downloads\guiformat.exe
2017-04-17 17:49 - 2017-04-17 18:14 - 1426079794 _____ C:\Users\MARTY\Downloads\NOOBS_v2_4_0.zip
2017-04-17 17:30 - 2017-04-17 17:30 - 12567188 _____ (ImageWriter Developers ) C:\Users\MARTY\Downloads\win32diskimager-1.0.0-install (1).exe
2017-04-17 17:30 - 2017-04-17 17:30 - 00000779 _____ C:\Users\MARTY\Desktop\Hudba – zástupce.lnk
2017-04-17 17:30 - 2017-04-17 17:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image Writer
2017-04-17 17:30 - 2017-04-17 17:30 - 00000000 ____D C:\Program Files (x86)\ImageWriter
2017-04-17 17:28 - 2017-04-10 10:58 - 1297862656 _____ C:\Users\MARTY\Desktop\2017-04-10-raspbian-jessie-lite.img
2017-04-17 17:20 - 2017-04-17 17:20 - 00046130 _____ C:\Users\MARTY\Downloads\SteamAchievementManager63_hotfix.zip
2017-04-17 16:49 - 2017-04-17 16:55 - 733790208 _____ C:\Users\MARTY\Downloads\Cela_(2000)_akcni-drama-thriller_Jennifer_Lopez_avi_cz_dabing_SUPER_BestOf_film!.avi
2017-04-15 22:56 - 2017-04-15 22:56 - 00013055 _____ C:\Users\MARTY\Downloads\CS-Condition-Zero.zip
2017-04-15 15:21 - 2017-04-15 15:21 - 03932808 _____ C:\Users\MARTY\Downloads\Debug (2).rar
2017-04-15 15:21 - 2017-04-15 15:21 - 03932808 _____ C:\Users\MARTY\Downloads\Debug (1).rar
2017-04-15 13:51 - 2017-04-01 20:52 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-04-15 13:51 - 2017-04-01 20:52 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-04-15 13:39 - 2017-04-15 13:43 - 00000000 ____D C:\Program Files\FACEIT Client
2017-04-15 13:39 - 2017-04-15 13:39 - 16693736 _____ (FACEIT LTD ) C:\Users\MARTY\Downloads\FACEITInstaller_64.exe
2017-04-15 13:39 - 2017-04-15 13:39 - 05968376 _____ C:\WINDOWS\system32\Drivers\FACEIT.sys
2017-04-15 13:39 - 2017-04-15 13:39 - 00003336 _____ C:\WINDOWS\System32\Tasks\FACEIT Client
2017-04-15 13:39 - 2017-04-15 13:39 - 00000928 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FACEIT Client.lnk
2017-04-15 13:39 - 2017-04-15 13:39 - 00000916 _____ C:\Users\Public\Desktop\FACEIT Client.lnk
2017-04-14 21:18 - 2017-04-14 21:19 - 12567188 _____ (ImageWriter Developers ) C:\Users\MARTY\Downloads\win32diskimager-1.0.0-install.exe
2017-04-14 21:17 - 2017-04-14 21:22 - 307785777 _____ C:\Users\MARTY\Downloads\2017-04-10-raspbian-jessie-lite.zip
2017-04-14 20:55 - 2017-04-14 20:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PuTTY (64-bit)
2017-04-14 20:55 - 2017-04-14 20:55 - 00000000 ____D C:\Program Files\PuTTY
2017-04-14 20:54 - 2017-04-14 20:55 - 03044352 _____ C:\Users\MARTY\Downloads\putty-64bit-0.68-installer.msi
2017-04-14 20:54 - 2017-04-14 20:54 - 00004401 _____ C:\Users\MARTY\Downloads\SteamHourBoost2FA-master.zip
2017-04-13 01:32 - 2017-04-13 01:32 - 00167104 _____ C:\Users\MARTY\Downloads\hentaiware17_4_11_mpgh.net.rar
2017-04-12 21:58 - 2017-04-12 21:58 - 00585942 _____ C:\Users\MARTY\Downloads\Release_mpgh.net (1).rar
2017-04-12 21:20 - 2017-03-28 08:04 - 02262776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

[JezdiciOko]

Přílohy

[Rudy]

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

[JezdiciOko]

děkuji za rychlou reakci,


# AdwCleaner v6.045 - Logfile created 18/04/2017 at 18:43:37
# Updated on 28/03/2017 by Malwarebytes
# Database : 2017-04-18.1 [Server]
# Operating System : Windows 10 (X64)
# Username : MARTY - DESKTOP-SEJ9T6S
# Running from : C:\Users\MARTY\Downloads\adwcleaner_6.045.exe
# Mode: Scan
# Support : https://www.malwarebytes.com/support



***** [ Services ] *****

No malicious services found.


***** [ Folders ] *****

No malicious folders found.


***** [ Files ] *****

No malicious files found.


***** [ DLL ] *****

No malicious DLLs found.


***** [ WMI ] *****

No malicious keys found.


***** [ Shortcuts ] *****

No infected shortcut found.


***** [ Scheduled Tasks ] *****

Task Found: LaunchPreSignup


***** [ Registry ] *****

Key Found: HKU\S-1-5-21-2594704389-838260344-3551713440-1001\Software\PRODUCTSETUP
Key Found: HKU\S-1-5-21-2594704389-838260344-3551713440-1001\Software\csastats
Key Found: HKCU\Software\PRODUCTSETUP
Key Found: HKCU\Software\csastats
Key Found: [x64] HKCU\Software\PRODUCTSETUP
Key Found: [x64] HKCU\Software\csastats
Key Found: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
Key Found: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
Key Found: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
Key Found: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com


***** [ Web browsers ] *****

No malicious Firefox based browser items found.
No malicious Chromium based browser items found.

*************************

C:\AdwCleaner\AdwCleaner[S0].txt - [1630 Bytes] - [18/04/2017 18:43:37]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1703 Bytes] ##########

[Rudy]

ADW nemazal, neklikl jste na mazání. Zkuste ještě jednou.

[JezdiciOko]

napsal že nenašel žádné hrozby, potom jsem dal clean restartoval pc a vyskočilo

# AdwCleaner v6.045 - Logfile created 20/04/2017 at 19:51:59
# Updated on 28/03/2017 by Malwarebytes
# Database : 2017-04-19.2 [Server]
# Operating System : Windows 10 (X64)
# Username : MARTY - DESKTOP-SEJ9T6S
# Running from : C:\Users\MARTY\Desktop\adwcleaner_6.045.exe
# Mode: Clean
# Support : https://www.malwarebytes.com/support



***** [ Services ] *****



***** [ Folders ] *****



***** [ Files ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Shortcuts ] *****



***** [ Scheduled Tasks ] *****



***** [ Registry ] *****



***** [ Web browsers ] *****



*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [1882 Bytes] - [18/04/2017 19:06:26]
C:\AdwCleaner\AdwCleaner[C2].txt - [829 Bytes] - [20/04/2017 19:51:59]
C:\AdwCleaner\AdwCleaner[S0].txt - [1798 Bytes] - [18/04/2017 18:43:37]
C:\AdwCleaner\AdwCleaner[S1].txt - [1870 Bytes] - [18/04/2017 19:06:03]
C:\AdwCleaner\AdwCleaner[S2].txt - [1367 Bytes] - [20/04/2017 19:51:48]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1120 Bytes] ##########

[Rudy]

Teď je to OK. Dejte nový log FRST.

[JezdiciOko]

viz příloha

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> No File
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> No File
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> No File
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> No File
GroupPolicy: Restriction <======= ATTENTION
S3 X6va063; \??\C:\WINDOWS\SysWoW64\Drivers\X6va063 [X]
C:\Users\MARTY\AppData\Local\Temp

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Z logu:

Velikost slozky "C:\Users\MARTY\Desktop" je 5420 MB.

To je příliš mnoho a může to způsobovat zpomalení startu systém. Vytvořte v C:\Users\MARTY novou složku, do níž přesuňte všechna data z plochy (kromě zástupců). Na plochu si pak dejte zástupce té složky pro snazší přístup.

[JezdiciOko]

Tu plochu jsem měl hodněkrát i mnohe mvětší, a nikdy to neovlivnovalo využítí procesoru.

Fix result of Farbar Recovery Scan Tool (x64) Version: 23-04-2017 01
Ran by MARTY (24-04-2017 12:04:12) Run:1
Running from C:\Users\MARTY\Desktop
Loaded Profiles: MARTY (Available Profiles: MARTY)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> No File
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> No File
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> No File
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> No File
GroupPolicy: Restriction <======= ATTENTION
S3 X6va063; \??\C:\WINDOWS\SysWoW64\Drivers\X6va063 [X]
C:\Users\MARTY\AppData\Local\Temp

EmptyTemp:
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Pending) => key removed successfully
HKCR\CLSID\{056D528D-CE28-4194-9BA3-BA2E9197FF8C} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Synced) => key removed successfully
HKCR\CLSID\{05B38830-F4E9-4329-978B-1DD28605D202} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Syncing) => key removed successfully
HKCR\CLSID\{0596C850-7BDD-4C9D-AFDF-873BE6890637} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Pending) => key removed successfully
HKCR\Wow6432Node\CLSID\{056D528D-CE28-4194-9BA3-BA2E9197FF8C} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Synced) => key removed successfully
HKCR\Wow6432Node\CLSID\{05B38830-F4E9-4329-978B-1DD28605D202} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Syncing) => key removed successfully
HKCR\Wow6432Node\CLSID\{0596C850-7BDD-4C9D-AFDF-873BE6890637} => key not found.
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
HKLM\System\CurrentControlSet\Services\X6va063 => key removed successfully
X6va063 => service removed successfully

"C:\Users\MARTY\AppData\Local\Temp" folder move:

Could not move "C:\Users\MARTY\AppData\Local\Temp" => Scheduled to move on reboot.


=========== EmptyTemp: ==========

BITS transfer queue => 573661 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 144906668 B
Java, Flash, Steam htmlcache => 465669705 B
Windows/system/drivers => 77013563 B
Edge => 2381748 B
Chrome => 509918524 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 128 B
LocalService => 0 B
NetworkService => 10602 B
MARTY => 187390449 B

RecycleBin => 2769877934 B
EmptyTemp: => 3.9 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 24-04-2017 12:05:58)

C:\Users\MARTY\AppData\Local\Temp => moved successfully

==== End of Fixlog 12:05:59 ====

[Rudy]

Smazáno. Nastala nějaká změna?

[JezdiciOko]

ne stale na 35+

[Rudy]

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.