Preventivní kontrola

Zpráva

HoLoW · #1 Příspěvek od **HoLoW** » 07 říj 2015 14:41

Dobrý den . . rád bych vás požádal o preventivní kontrolu

děkuji . . .
Přikládám log

Logfile of random's system information tool 1.10 (written by random/random)
Run by Honza at 2015-10-07 15:37:23
Microsoft Windows 10 Home
System drive C: has 922 GB (64%) free of 1430 GB
Total RAM: 8174 MB (74% free)

HijackThis download failed

======Listing Processes======

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k apphost
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\svchost.exe -k iissvcs
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
dashost.exe {d9606d81-b0f3-4844-ac529d112c2fb6c1}
C:\WINDOWS\system32\wbem\wmiprvse.exe

"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\WINDOWS\system32\svchost.exe -k SDRSVC
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"dwm.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" b08d6ff7-9fe0-485a-a68d-2b9b1f00e380
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Users\Honza\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\Restore Desktop\RestoreDesktop.exe"
"C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe" -quickstart
"C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe" "-quickstart" "-env:OOO_CWD=2C:\\Program Files (x86)\\OpenOffice.org 3\\program"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"

"C:\Program Files (x86)\Origin\Origin.exe"
"fontdrvhost.exe"
"C:\Program Files (x86)\Origin\OriginClientService.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe27_ Global\UsGthrCtrlFltPipeMssGthrPipe27 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 616 620 628 8192 624
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Honza\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\2v354g31.default-1391862899672

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.google.com"
prefs.js - "keyword.URL" - "http://www.google.com/search?btnG=Google+Search&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobeï¿½ Flashï¿½ Player 19.0.0.185 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobeï¿½ Flashï¿½ Player 19.0.0.185 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll

C:\Program Files (x86)\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npwachk.dll
QuickTimePlugin.class

C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\2v354g31.default-1391862899672\searchplugins\
wikipedia-en.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-06-24 8492800]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-09-22 4035152]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-07-24 2634896]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2015-07-24 1710568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-10-30 6501656]
"OneDrive"=C:\Users\Honza\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-08-08 382144]
"RestoreDesktop"=C:\Program Files (x86)\Restore Desktop\RestoreDesktop.exe [2003-03-11 45056]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-09-13 59720]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888]

C:\Users\Honza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.4.1.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-07 15:37:23 ----D---- C:\rsit
2015-10-07 15:37:23 ----D---- C:\Program Files\trend micro
2015-10-01 10:15:54 ----D---- C:\Program Files (x86)\Origin
2015-10-01 09:35:15 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-09-28 18:02:40 ----D---- C:\Users\Honza\AppData\Roaming\MPC-HC
2015-09-28 12:57:15 ----D---- C:\Users\Honza\AppData\Roaming\OpenCandy
2015-09-28 12:56:35 ----D---- C:\WINDOWS\SYSWOW64\Codecs
2015-09-28 11:32:44 ----D---- C:\ProgramData\Apple Computer
2015-09-24 17:09:51 ----A---- C:\WINDOWS\SYSWOW64\nvStreaming.exe
2015-09-24 17:03:14 ----D---- C:\NVIDIA
2015-09-20 19:27:58 ----D---- C:\Users\Honza\AppData\Roaming\uTorrent
2015-09-20 11:12:53 ----D---- C:\Program Files\Reason
2015-09-16 10:36:47 ----D---- C:\WINDOWS\system32\SleepStudy
2015-09-15 11:43:50 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2015-09-15 11:43:50 ----A---- C:\WINDOWS\SYSWOW64\nvspbridge.dll
2015-09-15 11:43:50 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2015-09-15 11:43:50 ----A---- C:\WINDOWS\system32\nvspbridge64.dll
2015-09-15 11:39:12 ----A---- C:\WINDOWS\SYSWOW64\nvaudcap32v.dll
2015-09-15 11:39:12 ----A---- C:\WINDOWS\system32\nvhdap64.dll
2015-09-15 11:39:12 ----A---- C:\WINDOWS\system32\nvaudcap64v.dll
2015-09-15 11:39:12 ----A---- C:\WINDOWS\system32\drivers\nvvad64v.sys
2015-09-15 11:39:11 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2015-09-15 11:39:11 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2015-09-15 11:39:11 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2015-09-15 11:39:11 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2015-09-15 11:39:11 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2015-09-15 11:39:11 ----A---- C:\WINDOWS\system32\nvopencl.dll
2015-09-15 11:39:11 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2015-09-15 11:39:11 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2015-09-15 11:39:10 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2015-09-15 11:39:10 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2015-09-15 11:39:10 ----A---- C:\WINDOWS\system32\nvinitx.dll
2015-09-15 11:39:10 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2015-09-15 11:39:09 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2015-09-15 11:39:09 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2015-09-15 11:39:06 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2015-09-15 11:39:06 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2015-09-15 11:39:06 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2015-09-15 11:39:06 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2015-09-15 11:39:06 ----A---- C:\WINDOWS\system32\nvcuda.dll
2015-09-15 11:39:05 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2015-09-15 11:39:05 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2015-09-09 15:30:28 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-09-09 15:30:26 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-09-09 15:30:25 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-09-09 15:30:24 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-09-09 15:30:23 ----A---- C:\WINDOWS\system32\shell32.dll
2015-09-09 15:30:21 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-09-09 15:30:19 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-09-09 15:30:19 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-09-09 15:30:17 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-09-09 15:30:17 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-09-09 15:30:16 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-09-09 15:30:16 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-09-09 15:30:16 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-09-09 15:30:15 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-09-09 15:30:15 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2015-09-09 15:30:15 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-09-09 15:30:15 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-09-09 15:30:15 ----A---- C:\WINDOWS\system32\authui.dll
2015-09-09 15:30:14 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-09 15:30:13 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2015-09-09 15:30:13 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-09-09 15:30:13 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-09-09 15:30:13 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-09-09 15:30:12 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2015-09-09 15:30:11 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-09-09 15:30:11 ----A---- C:\WINDOWS\system32\jscript.dll
2015-09-09 15:30:10 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2015-09-09 15:30:10 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2015-09-09 15:30:10 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-09-09 15:30:10 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-09-09 15:30:10 ----A---- C:\WINDOWS\system32\SettingSync.dll
2015-09-09 15:30:10 ----A---- C:\WINDOWS\system32\reseteng.dll
2015-09-09 15:30:10 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-09-09 15:30:09 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-09-09 15:30:09 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-09-09 15:30:09 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-09-09 15:30:09 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-09-09 15:30:09 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-09-09 15:30:09 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2015-09-09 15:30:09 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2015-09-09 15:30:08 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-09-09 15:30:08 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2015-09-09 15:30:08 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-09-09 15:30:08 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2015-09-09 15:30:08 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-09-09 15:30:08 ----A---- C:\WINDOWS\system32\ci.dll
2015-09-09 15:30:08 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-09-09 15:30:07 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2015-09-09 15:30:07 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-09-09 15:30:07 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2015-09-09 15:30:07 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2015-09-09 15:30:07 ----A---- C:\WINDOWS\system32\shacct.dll
2015-09-09 15:30:07 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2015-09-09 15:30:06 ----A---- C:\WINDOWS\system32\WcnNetsh.dll
2015-09-09 15:30:06 ----A---- C:\WINDOWS\system32\aitstatic.exe
2015-09-09 15:30:06 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-09-09 15:30:05 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2015-09-09 15:30:05 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2015-09-09 15:30:05 ----A---- C:\WINDOWS\system32\wfdprov.dll
2015-09-09 15:30:05 ----A---- C:\WINDOWS\system32\WcnApi.dll
2015-09-09 15:30:05 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-09-09 15:30:05 ----A---- C:\WINDOWS\system32\dafWCN.dll
2015-09-09 15:30:04 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2015-09-09 15:30:04 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2015-09-09 15:30:04 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll
2015-09-09 15:30:04 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-09-09 15:30:04 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2015-09-09 15:30:04 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2015-09-09 15:30:04 ----A---- C:\WINDOWS\system32\fdWCN.dll
2015-09-09 15:30:04 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-09-09 15:30:04 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-09-09 15:30:03 ----A---- C:\WINDOWS\system32\atmlib.dll

======List of files/folders modified in the last 1 month======

2015-10-07 15:37:23 ----RD---- C:\Program Files
2015-10-07 15:36:51 ----D---- C:\WINDOWS\Temp
2015-10-07 15:27:59 ----D---- C:\Games
2015-10-07 15:27:15 ----D---- C:\ProgramData\Origin
2015-10-07 15:12:58 ----D---- C:\WINDOWS\system32\sru
2015-10-07 15:12:30 ----D---- C:\WINDOWS\System32
2015-10-06 17:42:16 ----D---- C:\WINDOWS\Prefetch
2015-10-06 17:19:06 ----D---- C:\WINDOWS\system32\config
2015-10-06 17:17:07 ----SHD---- C:\WINDOWS\Installer
2015-10-06 17:17:07 ----SHD---- C:\Config.Msi
2015-10-06 17:16:17 ----RD---- C:\Program Files (x86)
2015-10-06 17:16:17 ----D---- C:\Program Files (x86)\Common Files
2015-10-06 17:16:16 ----D---- C:\ProgramData\Adobe
2015-10-06 17:16:00 ----D---- C:\WINDOWS\SysWOW64
2015-10-05 19:58:24 ----D---- C:\WINDOWS\INF
2015-10-05 19:54:24 ----D---- C:\Program Files (x86)\Battle.net
2015-10-05 19:54:01 ----D---- C:\WINDOWS\system32\Tasks
2015-10-05 19:42:10 ----SHD---- C:\System Volume Information
2015-10-04 11:13:32 ----D---- C:\WINDOWS\CbsTemp
2015-10-01 10:58:02 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-01 10:15:57 ----D---- C:\ProgramData\Electronic Arts
2015-10-01 09:24:05 ----D---- C:\WINDOWS\system32\catroot2
2015-10-01 09:23:16 ----D---- C:\WINDOWS\WinSxS
2015-09-30 13:09:22 ----D---- C:\WINDOWS\system32\NDF
2015-09-30 09:49:34 ----D---- C:\WINDOWS\Tasks
2015-09-30 09:18:45 ----D---- C:\Program Files (x86)\Restore Desktop
2015-09-30 09:18:04 ----HD---- C:\ProgramData
2015-09-28 12:46:59 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-28 12:44:03 ----D---- C:\WINDOWS\system32\drivers
2015-09-28 12:44:00 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-09-28 11:33:06 ----D---- C:\Program Files\Internet Explorer
2015-09-28 11:33:01 ----D---- C:\Program Files (x86)\QuickTime
2015-09-26 12:29:32 ----D---- C:\WINDOWS\Microsoft.NET
2015-09-26 12:29:15 ----RSD---- C:\WINDOWS\assembly
2015-09-25 19:56:26 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2015-09-25 19:54:12 ----D---- C:\Windows
2015-09-25 19:53:14 ----D---- C:\ProgramData\NVIDIA
2015-09-25 19:49:47 ----D---- C:\WINDOWS\system32\oobe
2015-09-25 19:49:47 ----D---- C:\WINDOWS\system32\appraiser
2015-09-25 19:49:45 ----D---- C:\WINDOWS\AppPatch
2015-09-25 19:49:44 ----D---- C:\Program Files\Windows Journal
2015-09-25 19:49:43 ----D---- C:\WINDOWS\system32\DriverStore
2015-09-24 19:55:23 ----D---- C:\WINDOWS\system32\MRT
2015-09-24 19:52:30 ----D---- C:\WINDOWS\debug
2015-09-24 18:22:29 ----D---- C:\WINDOWS\Logs
2015-09-24 17:10:10 ----D---- C:\ProgramData\NVIDIA Corporation
2015-09-22 18:32:32 ----D---- C:\Users\Honza\AppData\Roaming\Media Player Classic
2015-09-22 17:09:03 ----D---- C:\WINDOWS\system32\drivers\etc
2015-09-22 16:52:17 ----D---- C:\WINDOWS\SoftwareDistribution
2015-09-22 16:02:13 ----D---- C:\WINDOWS\system32\WinBioDatabase
2015-09-18 09:47:45 ----D---- C:\Program Files (x86)\Hearthstone
2015-09-17 08:53:36 ----D---- C:\WINDOWS\system32\wbem
2015-09-17 08:52:33 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-09-17 08:52:33 ----D---- C:\WINDOWS\security
2015-09-17 08:52:33 ----D---- C:\Users\Honza\AppData\Roaming\Winamp
2015-09-17 08:51:54 ----HD---- C:\Program Files\WindowsApps
2015-09-17 08:49:59 ----D---- C:\WINDOWS\registration
2015-09-15 18:12:10 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-09-15 11:43:50 ----D---- C:\Program Files\NVIDIA Corporation
2015-09-15 11:43:49 ----D---- C:\Program Files (x86)\NVIDIA Corporation

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [2011-08-04 62496]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2011-08-04 146432]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R2 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2011-08-09 202576]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2011-08-04 187632]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320]
R3 MEIx64;@oem23.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2010-10-19 56344]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-08-08 175104]
R3 NVHDA;@oem34.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2015-07-25 204648]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-07-23 11142984]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-07-24 19600]
R3 nvvad_WaveExtensible;@oem36.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-07-03 47976]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-07-10 587264]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\WINDOWS\system32\DRIVERS\EpfwLWF.sys [2011-08-04 38288]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-07-10 32256]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-07-17 934752]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-07-14 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 27488]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Microsoft USB Serial Driver; C:\WINDOWS\System32\drivers\usbser.sys [2015-07-24 67072]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2011-09-22 974944]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-07-24 1155216]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-20 325656]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-08-08 26112]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-07-24 1871504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-07-24 5544592]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-07-23 937800]
R2 OneSyncSvc_Session4;Hostitel synchronizace_Session4; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-07-23 410768]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-10-01 2078216]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc_Session7;Hostitel synchronizace_Session7; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-30 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-10-01 147624]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session4;Data kontaktů_Session4; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session7;Data kontaktů_Session7; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-07-12 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-05-15 837824]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session4;Úložiště uživatelských dat_Session4; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session7;Úložiště uživatelských dat_Session7; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc_Session4;Přístup k uživatelským datům_Session4; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc_Session7;Přístup k uživatelským datům_Session7; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-07-10 50352]

-----------------EOF-----------------

#2 Příspěvek od **altrok** » 08 říj 2015 14:51

Krasny den Vam preju

Jsou s PC nejake konkretni problemy ci jde opravdu jen o preventivku?

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

ukoncete vsechny programy
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Scan, pote na Cleaning
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner[Cx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

HoLoW · #3 Příspěvek od **HoLoW** » 08 říj 2015 17:03

Skutečně jen preventivka .

Přidávám log

# AdwCleaner v5.012 - Logfile created 08/10/2015 at 17:56:04
# Updated 08/10/2015 by Xplode
# Database : 2015-10-04.3 [Local]
# Operating system : Windows 10 Home (x64)
# Username : Honza - HONZA-PC
# Running from : C:\Users\Honza\Desktop\adwcleaner_5.012.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

[-] Folder Deleted : C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc
[-] Folder Deleted : C:\Users\Honza\AppData\Roaming\OpenCandy
[-] Folder Deleted : C:\Users\Honza\AppData\Roaming\RPEng

***** [ Files ] *****

[-] File Deleted : C:\END

***** [ DLLs ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Clients\StartMenuInternet\Torch
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{525F116F-04AD-40A2-AE2F-A0C4E1AFEF98}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{9852A670-F845-491B-9BE6-EBD841B8A613}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{ACE4747B-35BD-4E97-9DD7-1D4245B0695C}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{CE77C59C-CFD2-429F-868C-8B04D23F94CA}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{F544E0F5-CA3C-47EA-A64D-35FCF1602396}

***** [ Web browsers ] *****

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1756 bytes] ##########

#4 Příspěvek od **altrok** » 08 říj 2015 18:29

Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

HoLoW · #5 Příspěvek od **HoLoW** » 08 říj 2015 23:49

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:08-10-2015
Ran by Honza (administrator) on HONZA-PC (09-10-2015 00:45:07)
Running from C:\Users\Honza\Desktop
Loaded Profiles: Honza (Available Profiles: Honza & DefaultAppPool)
Platform: Windows 10 Home (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [4035152 2011-09-22] (ESET)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-24] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKU\S-1-5-21-1025233422-2582190980-4078685208-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-30] (Piriform Ltd)
HKU\S-1-5-21-1025233422-2582190980-4078685208-1000\...\Run: [RestoreDesktop] => C:\Program Files (x86)\Restore Desktop\RestoreDesktop.exe
HKU\S-1-5-21-1025233422-2582190980-4078685208-1000\...\MountPoints2: {3ce48e0c-5db6-11e4-95f1-5404a6b4f80b} - "F:\HTC_Sync_Manager_PC.exe"
Startup: C:\Users\Honza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk [2012-11-14]
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{e741a71d-c2ea-4a9f-ada2-bc3f54b13b21}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-1025233422-2582190980-4078685208-1000 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&r ... {startPage}
SearchScopes: HKU\S-1-5-21-1025233422-2582190980-4078685208-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&r ... {startPage}

FireFox:
========
FF ProfilePath: C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\2v354g31.default-1391862899672
FF NewTab: hxxp://www.google.com/
FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q=
FF SearchEngineOrder.1: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-30] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-30] ()
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-07-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-07-23] (NVIDIA Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-09-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-09-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-09-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-09-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-09-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2011-12-09] (Nullsoft, Inc.)
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2012-05-15]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Profile: C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-08]
CHR Extension: (Google Drive) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-01-09]
CHR Extension: (YouTube) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-01-09]
CHR Extension: (Google Search) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-01-09]
CHR Extension: (Gmail) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-01-09]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [974944 2011-09-22] (ESET)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216 2015-07-24] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 MSMQ; C:\Windows\system32\mqsvc.exe [26112 2015-08-08] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-24] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592 2015-07-24] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2078216 2015-10-01] (Electronic Arts)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [84480 2015-08-08] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [578560 2015-08-08] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [202576 2011-08-09] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [146432 2011-08-04] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [187632 2011-08-04] (ESET)
S1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [38288 2011-08-04] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62496 2011-08-04] (ESET)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [175104 2015-08-08] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-07-24] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47976 2015-07-03] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek )
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
U3 idsvc; no ImagePath
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
U3 wpcsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-09 00:45 - 2015-10-09 00:45 - 00011243 _____ C:\Users\Honza\Desktop\FRST.txt
2015-10-09 00:43 - 2015-10-09 00:44 - 02194944 _____ (Farbar) C:\Users\Honza\Desktop\FRST64.exe
2015-10-08 17:58 - 2015-10-08 17:58 - 00016148 _____ C:\WINDOWS\system32\HONZA-PC_Honza_HistoryPrediction.bin
2015-10-08 17:54 - 2015-10-08 17:55 - 01682432 _____ C:\Users\Honza\Desktop\adwcleaner_5.012.exe
2015-10-07 16:19 - 2015-10-07 16:19 - 00000000 ____D C:\Users\Honza\Documents\FIFA 16 Demo
2015-10-07 16:08 - 2015-10-07 16:08 - 00000796 _____ C:\Users\Public\Desktop\DEMO FIFA 16.lnk
2015-10-07 16:08 - 2015-10-07 16:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DEMO FIFA 16
2015-10-07 15:37 - 2015-10-07 15:37 - 00000000 ____D C:\rsit
2015-10-07 15:37 - 2015-10-07 15:37 - 00000000 ____D C:\Program Files\trend micro
2015-10-07 15:36 - 2015-10-07 15:37 - 01222144 _____ C:\Users\Honza\Desktop\RSITx64.exe
2015-10-05 19:54 - 2015-10-05 19:54 - 00003380 _____ C:\WINDOWS\System32\Tasks\{5CF3A831-0C8F-4C98-87B8-9F5272B52E42}
2015-10-01 10:17 - 2015-10-01 10:19 - 00000000 ____D C:\Users\Honza\AppData\Local\Origin
2015-10-01 10:15 - 2015-10-01 10:17 - 00000000 ____D C:\Program Files (x86)\Origin
2015-10-01 10:15 - 2015-10-01 10:15 - 00001052 _____ C:\Users\Public\Desktop\Origin.lnk
2015-10-01 10:15 - 2015-10-01 10:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-10-01 09:35 - 2015-10-08 17:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-09-30 09:49 - 2015-10-09 00:18 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-09-30 09:49 - 2015-09-30 09:49 - 00003890 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-09-30 09:44 - 2015-09-30 09:44 - 00001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-09-30 09:44 - 2015-09-30 09:44 - 00001220 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-09-28 18:02 - 2015-09-28 18:02 - 00000000 ____D C:\Users\Honza\AppData\Roaming\MPC-HC
2015-09-28 12:44 - 2015-09-28 12:44 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-09-28 11:33 - 2015-09-28 11:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-09-28 11:32 - 2015-09-28 11:32 - 00000000 ____D C:\ProgramData\Apple Computer
2015-09-24 19:45 - 2015-09-24 19:46 - 00000000 ____D C:\Users\Honza\Documents\FIFA 16
2015-09-24 17:30 - 2015-10-08 22:13 - 00004198 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{41E5F4C7-3E75-4299-9E05-A5619ED06CBD}
2015-09-24 17:13 - 2015-09-24 17:13 - 00017437 _____ C:\WINDOWS\DirectX.log
2015-09-24 17:10 - 2015-09-24 17:10 - 00002210 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2015-09-24 17:09 - 2015-07-23 02:44 - 00572048 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-09-24 17:04 - 2015-09-28 12:44 - 00000832 _____ C:\WINDOWS\setupact.log
2015-09-24 17:04 - 2015-09-24 17:04 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-09-24 17:03 - 2015-09-24 17:03 - 00000000 ____D C:\NVIDIA
2015-09-22 17:49 - 2015-09-22 17:53 - 00000000 ____D C:\Users\Honza\Documents\FIFA 15
2015-09-22 17:43 - 2015-09-22 17:48 - 00000734 _____ C:\Users\Public\Desktop\FIFA 15.lnk
2015-09-22 16:52 - 2015-10-09 00:12 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-09-22 16:48 - 2015-10-08 17:57 - 00014360 _____ C:\WINDOWS\PFRO.log
2015-09-21 14:59 - 2015-09-20 19:54 - 00045595 _____ C:\Users\Honza\Desktop\doctor.who.2005.s09e01.hdtv.x264-tla.srt
2015-09-21 14:59 - 2015-09-20 19:37 - 280909380 _____ C:\Users\Honza\Desktop\doctor.who.2005.s09e01.hdtv.x264-tla.mp4
2015-09-20 19:27 - 2015-09-30 09:17 - 00000000 ____D C:\Users\Honza\AppData\Roaming\uTorrent
2015-09-20 19:27 - 2015-09-20 19:27 - 00001033 _____ C:\Users\Honza\Desktop\µTorrent.lnk
2015-09-20 11:12 - 2015-09-20 11:14 - 00000000 ____D C:\Program Files\Reason
2015-09-16 10:36 - 2015-09-16 10:36 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-09-15 11:43 - 2015-09-24 17:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-09-15 11:43 - 2015-07-24 06:21 - 01756608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2015-09-15 11:43 - 2015-07-24 06:21 - 01710568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2015-09-15 11:43 - 2015-07-24 06:21 - 01423304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2015-09-15 11:43 - 2015-07-24 06:21 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2015-09-15 11:39 - 2015-07-25 02:14 - 00040280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 42730312 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 37749064 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 30518928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 22973584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 16160440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 16011680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 14511608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 13274904 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 11843384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 02360976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 02164040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 01165192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 01061008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 01053000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 00991152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 00983368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 00976528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 00176904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 00155280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 00150832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-09-15 11:39 - 2015-07-23 06:02 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-09-15 11:39 - 2015-07-03 06:28 - 00069992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2015-09-15 11:39 - 2015-07-03 06:28 - 00065896 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2015-09-15 11:39 - 2015-07-03 06:28 - 00047976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2015-09-09 15:30 - 2015-09-02 03:20 - 00077400 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-09-09 15:30 - 2015-09-02 02:25 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-09-09 15:30 - 2015-09-02 02:25 - 01382912 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-09-09 15:30 - 2015-08-27 08:36 - 03620736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-09-09 15:30 - 2015-08-27 08:32 - 00608936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-09-09 15:30 - 2015-08-27 08:04 - 21874688 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-09-09 15:30 - 2015-08-27 07:59 - 02880032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-09-09 15:30 - 2015-08-27 07:55 - 24594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-09-09 15:30 - 2015-08-27 07:54 - 00541248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-09-09 15:30 - 2015-08-27 07:54 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-09-09 15:30 - 2015-08-27 07:51 - 02350592 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-09-09 15:30 - 2015-08-27 07:51 - 01774592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-09 15:30 - 2015-08-27 07:49 - 01008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-09-09 15:30 - 2015-08-27 07:47 - 12503552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-09-09 15:30 - 2015-08-27 07:43 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-09-09 15:30 - 2015-08-27 07:43 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-09-09 15:30 - 2015-08-27 07:42 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2015-09-09 15:30 - 2015-08-27 07:42 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-09-09 15:30 - 2015-08-27 07:42 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2015-09-09 15:30 - 2015-08-27 07:42 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2015-09-09 15:30 - 2015-08-27 07:39 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-09-09 15:30 - 2015-08-27 07:23 - 19324416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-09-09 15:30 - 2015-08-27 07:23 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-09-09 15:30 - 2015-08-27 07:16 - 18806272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-09-09 15:30 - 2015-08-27 07:16 - 02153472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-09-09 15:30 - 2015-08-27 07:16 - 01612288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2015-09-09 15:30 - 2015-08-27 07:12 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-09-09 15:30 - 2015-08-27 07:12 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-09-09 15:30 - 2015-08-27 07:11 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2015-09-09 15:30 - 2015-08-27 07:11 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2015-09-09 15:30 - 2015-08-27 07:09 - 11262464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-09-09 15:30 - 2015-08-27 07:08 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-09-09 15:30 - 2015-08-20 08:07 - 08019296 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-09-09 15:30 - 2015-08-20 08:06 - 00609592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-09-09 15:30 - 2015-08-20 08:02 - 22324656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-09-09 15:30 - 2015-08-20 07:26 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-09-09 15:30 - 2015-08-20 07:21 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-09-09 15:30 - 2015-08-20 07:16 - 20857848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-09-09 15:30 - 2015-08-20 07:13 - 02235904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-09-09 15:30 - 2015-08-18 09:56 - 02498808 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-09-09 15:30 - 2015-08-18 09:55 - 00373072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2015-09-09 15:30 - 2015-08-18 09:54 - 01396064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-09-09 15:30 - 2015-08-18 09:27 - 01771592 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-09-09 15:30 - 2015-08-18 09:24 - 00963920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-09-09 15:30 - 2015-08-18 09:13 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
2015-09-09 15:30 - 2015-08-18 09:13 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2015-09-09 15:30 - 2015-08-18 09:12 - 02225664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-09-09 15:30 - 2015-08-18 09:07 - 02226688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2015-09-09 15:30 - 2015-08-18 09:04 - 01234944 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2015-09-09 15:30 - 2015-08-18 09:04 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-09-09 15:30 - 2015-08-18 08:59 - 01294336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcnwiz.dll
2015-09-09 15:30 - 2015-08-18 08:59 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll
2015-09-09 15:30 - 2015-08-18 08:58 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2015-09-09 15:30 - 2015-08-18 08:58 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWCN.dll
2015-09-09 15:30 - 2015-08-18 08:58 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWCN.dll
2015-09-09 15:30 - 2015-08-18 08:58 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnNetsh.dll
2015-09-09 15:30 - 2015-08-18 08:57 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2015-09-09 15:30 - 2015-08-18 08:56 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2015-09-09 15:30 - 2015-08-18 08:55 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-09-09 15:30 - 2015-08-18 08:54 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2015-09-09 15:30 - 2015-08-18 08:54 - 00247296 _____ C:\WINDOWS\system32\facecredentialprovider.dll
2015-09-09 15:30 - 2015-08-18 08:52 - 01888768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-09-09 15:30 - 2015-08-18 08:50 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-09-09 15:30 - 2015-08-18 08:49 - 01061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2015-09-09 15:30 - 2015-08-18 08:49 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2015-09-09 15:30 - 2015-08-18 08:49 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2015-09-09 15:30 - 2015-08-18 08:36 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcnwiz.dll
2015-09-09 15:30 - 2015-08-18 08:35 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll
2015-09-09 15:30 - 2015-08-18 08:35 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWCN.dll
2015-09-09 15:30 - 2015-08-18 08:34 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2015-09-09 15:30 - 2015-08-18 08:29 - 01593344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-09-09 15:30 - 2015-08-18 08:26 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2015-09-09 15:30 - 2015-08-18 06:44 - 00008847 _____ C:\WINDOWS\system32\ResPriHMImageList

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-09 00:45 - 2014-02-18 20:29 - 00000000 ____D C:\FRST
2015-10-08 23:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sru
2015-10-08 18:04 - 2015-08-08 19:59 - 02030468 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-08 18:04 - 2015-07-10 18:02 - 00838918 _____ C:\WINDOWS\system32\perfh005.dat
2015-10-08 18:04 - 2015-07-10 18:02 - 00191246 _____ C:\WINDOWS\system32\perfc005.dat
2015-10-08 17:57 - 2015-07-10 14:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-10-08 17:57 - 2012-05-16 18:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-08 17:57 - 2012-05-15 14:47 - 00000000 ____D C:\ProgramData\NVIDIA
2015-10-08 17:56 - 2015-07-10 11:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-10-08 17:56 - 2014-02-18 21:54 - 00000000 ____D C:\AdwCleaner
2015-10-08 16:14 - 2012-11-07 19:47 - 00000000 ____D C:\ProgramData\Origin
2015-10-07 15:27 - 2015-08-09 13:06 - 00000000 ____D C:\Games
2015-10-06 17:16 - 2012-09-17 18:39 - 00000000 ____D C:\ProgramData\Adobe
2015-10-05 19:54 - 2014-08-19 22:25 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-10-05 19:48 - 2014-08-19 22:25 - 00000000 ____D C:\Users\Honza\AppData\Local\Battle.net
2015-10-05 19:42 - 2012-10-14 22:12 - 00000000 ____D C:\Users\Honza\AppData\Local\Adobe
2015-10-04 11:13 - 2015-07-10 12:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-10-02 10:41 - 2015-09-08 14:55 - 00003468 _____ C:\WINDOWS\System32\Tasks\ESET Windows 10 upgrade – Refresh settings
2015-10-01 10:15 - 2013-09-26 15:43 - 00000000 ____D C:\ProgramData\Electronic Arts
2015-09-30 13:09 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-09-30 10:43 - 2014-12-14 20:18 - 00000000 ____D C:\Users\Honza\Desktop\Serialy
2015-09-28 13:43 - 2012-07-05 20:10 - 00000000 ____D C:\Users\Honza\Desktop\Movies
2015-09-28 13:11 - 2012-05-18 15:36 - 00000000 ___RD C:\Users\Honza\Desktop\Anime
2015-09-28 11:33 - 2013-01-14 10:27 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-09-25 19:52 - 2015-07-10 14:20 - 00214784 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-09-25 19:49 - 2015-07-10 18:05 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-25 19:49 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-09-25 19:49 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-09-25 16:12 - 2012-05-16 23:44 - 00000359 _____ C:\Users\Honza\Desktop\Počítač.lnk
2015-09-24 19:55 - 2015-08-23 16:59 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-09-24 17:30 - 2015-02-17 11:36 - 00000000 __SHD C:\Users\Honza\AppData\LocalLow\EmieUserList
2015-09-24 17:30 - 2014-11-08 14:30 - 00000000 __SHD C:\Users\Honza\AppData\Local\EmieUserList
2015-09-24 17:30 - 2014-11-08 14:30 - 00000000 __SHD C:\Users\Honza\AppData\Local\EmieSiteList
2015-09-24 17:30 - 2014-08-31 13:54 - 00000000 __SHD C:\Users\Honza\AppData\LocalLow\EmieSiteList
2015-09-24 17:10 - 2015-08-08 19:53 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-09-22 18:32 - 2012-05-18 15:35 - 00000000 ____D C:\Users\Honza\AppData\Roaming\Media Player Classic
2015-09-22 16:02 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-09-20 15:09 - 2015-07-10 13:04 - 00000826 _____ C:\WINDOWS\system32\Drivers\etc\$RUXA8H3
2015-09-19 01:39 - 2015-08-08 20:00 - 00000000 ____D C:\Users\Honza
2015-09-18 09:47 - 2014-08-19 22:26 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2015-09-17 08:52 - 2015-08-23 19:29 - 00000000 ____D C:\Users\DefaultAppPool
2015-09-17 08:52 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-09-17 08:52 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\security
2015-09-17 08:52 - 2012-05-16 18:21 - 00000000 ____D C:\Users\Honza\AppData\Roaming\Winamp
2015-09-17 08:49 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\registration
2015-09-15 18:12 - 2015-07-10 13:06 - 00812008 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-09-15 18:12 - 2015-07-10 13:06 - 00178152 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-09-15 11:43 - 2015-08-08 19:53 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-09-15 11:43 - 2015-08-08 19:53 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

==================== Files in the root of some directories =======

2012-07-26 17:15 - 2012-10-14 21:56 - 0002298 _____ () C:\Users\Honza\AppData\Roaming\ASSDraw3.cfg
2012-05-18 16:10 - 2012-05-18 16:10 - 0000600 _____ () C:\Users\Honza\AppData\Roaming\winscp.rnd
2012-06-08 17:43 - 2012-06-08 17:45 - 0001248 _____ () C:\Users\Honza\AppData\Local\SRDownloader.nast
2015-08-08 19:53 - 2015-08-08 19:53 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Honza\AppData\Local\Temp\BRSVC_393953421_hlp.exe
C:\Users\Honza\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Honza\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Honza\AppData\Local\Temp\nvStInst.exe
C:\Users\Honza\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-10-04 01:15

==================== End of FRST.txt ============================

#6 Příspěvek od **altrok** » 09 říj 2015 09:16

Pouzivani stare verze ESET Smart Security 5 ma nejaky duvod? Doporucuji provest aktualizaci na aktualni verzi 9.

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu bude na plose ulozen fixlog, jehoz obsah vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CreateRestorePoint:
CloseProcesses:
File: C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
File: C:\Program Files\Common Files\AV\ESET Smart Security 5.0\upgrade.exe
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-24] (NVIDIA Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKU\S-1-5-21-1025233422-2582190980-4078685208-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-30] (Piriform Ltd)
HKU\S-1-5-21-1025233422-2582190980-4078685208-1000\...\MountPoints2: {3ce48e0c-5db6-11e4-95f1-5404a6b4f80b} - "F:\HTC_Sync_Manager_PC.exe"
Startup: C:\Users\Honza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk [2012-11-14]
SearchScopes: HKLM-x32 -> DefaultScope value is missing
U3 idsvc; no ImagePath
2015-10-07 15:37 - 2015-10-07 15:37 - 00000000 ____D C:\rsit
2015-10-07 15:37 - 2015-10-07 15:37 - 00000000 ____D C:\Program Files\trend micro
2015-10-07 15:36 - 2015-10-07 15:37 - 01222144 _____ C:\Users\Honza\Desktop\RSITx64.exe
2015-08-08 19:53 - 2015-08-08 19:53 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Task: {0573A68E-3117-4FCA-BE86-A25A3AA7466D} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {2232F25E-CBB7-49C0-A468-69AC276CC2D2} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {3D7321C1-D042-4AEC-B129-477A4CE1E909} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {4BC04A8B-21EC-4C98-9CAD-8160DF73C334} - System32\Tasks\{5CF3A831-0C8F-4C98-87B8-9F5272B52E42} => pcalua.exe -a "C:\ProgramData\Battle.net\Agent\Blizzard Uninstaller.exe" -c --lang=enGB --uid=battle.net --displayname="Battle.net"
Task: {5A0B7674-EF9E-404E-AC31-BA6DB1A018CE} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {5CB355C5-B1FF-43AA-957A-4443A2BF3E15} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {6484CE67-2256-41F5-81C9-F827E9A4CCB8} - System32\Tasks\{78CB1C55-C558-4001-8083-F7D460328D4F} => pcalua.exe -a "C:\Program Files (x86)\GamePark\Setup_2018.exe" -d "C:\Program Files (x86)\GamePark"
Task: {99D0B937-4B39-4F55-870D-7DCAC73760BC} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {9C279E08-F521-4F96-84FD-96F7AB3BCB93} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {9D4CA8BE-7B54-4088-A18A-E7C295662345} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {C626A0C3-230A-4E09-8C01-79A5E5F842AA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {CFDC9984-F899-4ED1-82A5-C65C5D0F8B79} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {FE7C675F-4D28-4812-B398-B3B061804801} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\TEMP:8CE646EE
Hosts:
EmptyTemp:
End

HoLoW · #7 Příspěvek od **HoLoW** » 09 říj 2015 14:44

Fix result of Farbar Recovery Scan Tool (x64) Version:08-10-2015
Ran by Honza (2015-10-09 15:31:22) Run:2
Running from C:\Users\Honza\Desktop
Loaded Profiles: Honza (Available Profiles: Honza & DefaultAppPool)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
File: C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
File: C:\Program Files\Common Files\AV\ESET Smart Security 5.0\upgrade.exe
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-24] (NVIDIA Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKU\S-1-5-21-1025233422-2582190980-4078685208-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-30] (Piriform Ltd)
HKU\S-1-5-21-1025233422-2582190980-4078685208-1000\...\MountPoints2: {3ce48e0c-5db6-11e4-95f1-5404a6b4f80b} - "F:\HTC_Sync_Manager_PC.exe"
Startup: C:\Users\Honza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk [2012-11-14]
SearchScopes: HKLM-x32 -> DefaultScope value is missing
U3 idsvc; no ImagePath
2015-10-07 15:37 - 2015-10-07 15:37 - 00000000 ____D C:\rsit
2015-10-07 15:37 - 2015-10-07 15:37 - 00000000 ____D C:\Program Files\trend micro
2015-10-07 15:36 - 2015-10-07 15:37 - 01222144 _____ C:\Users\Honza\Desktop\RSITx64.exe
2015-08-08 19:53 - 2015-08-08 19:53 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Task: {0573A68E-3117-4FCA-BE86-A25A3AA7466D} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {2232F25E-CBB7-49C0-A468-69AC276CC2D2} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {3D7321C1-D042-4AEC-B129-477A4CE1E909} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {4BC04A8B-21EC-4C98-9CAD-8160DF73C334} - System32\Tasks\{5CF3A831-0C8F-4C98-87B8-9F5272B52E42} => pcalua.exe -a "C:\ProgramData\Battle.net\Agent\Blizzard Uninstaller.exe" -c --lang=enGB --uid=battle.net --displayname="Battle.net"
Task: {5A0B7674-EF9E-404E-AC31-BA6DB1A018CE} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {5CB355C5-B1FF-43AA-957A-4443A2BF3E15} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {6484CE67-2256-41F5-81C9-F827E9A4CCB8} - System32\Tasks\{78CB1C55-C558-4001-8083-F7D460328D4F} => pcalua.exe -a "C:\Program Files (x86)\GamePark\Setup_2018.exe" -d "C:\Program Files (x86)\GamePark"
Task: {99D0B937-4B39-4F55-870D-7DCAC73760BC} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {9C279E08-F521-4F96-84FD-96F7AB3BCB93} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {9D4CA8BE-7B54-4088-A18A-E7C295662345} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {C626A0C3-230A-4E09-8C01-79A5E5F842AA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {CFDC9984-F899-4ED1-82A5-C65C5D0F8B79} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {FE7C675F-4D28-4812-B398-B3B061804801} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\TEMP:8CE646EE
Hosts:
EmptyTemp:
End
*****************

Restore point was successfully created.
Processes closed successfully.

========================= File: C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe ========================

File not signed
MD5: 1CF03C69B49ACB70C722DF92755C0C8C
Creation and modification date: 2005-04-04 00:41 - 2005-04-04 00:41
Size: 0069632
Attributes: ----A
Company Name: Macrovision Corporation
Internal Name: IDriverT
Original Name: IDriverT.exe
Product: InstallShield (R)
Description: IDriverT Module
File Version: 11.00.28844
Product Version: 11.00
Copyright: Copyright (C) 2005 Macrovision Corporation

====== End of File: ======

========================= File: C:\Program Files\Common Files\AV\ESET Smart Security 5.0\upgrade.exe ========================

File is digitally signed
MD5: 62EA3F8AD88601F969C6F9236A69B62E
Creation and modification date: 2015-08-04 14:50 - 2015-09-09 14:49
Size: 0284712
Attributes: ----A
Company Name: ESET
Internal Name:
Original Name:
Product: ESET Windows 10 Update
Description: ESET Windows 10 Update
File Version: 1.2.0.0
Product Version: 1.2.0.0
Copyright: Copyright (c) ESET, spol. s r.o. 1992-2015. All rights reserved.

====== End of File: ======

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\NvBackend => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task => value removed successfully
HKU\S-1-5-21-1025233422-2582190980-4078685208-1000\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value removed successfully
"HKU\S-1-5-21-1025233422-2582190980-4078685208-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3ce48e0c-5db6-11e4-95f1-5404a6b4f80b}" => key removed successfully
HKCR\CLSID\{3ce48e0c-5db6-11e4-95f1-5404a6b4f80b} => key not found.
C:\Users\Honza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk => moved successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
idsvc => service removed successfully
C:\rsit => moved successfully
C:\Program Files\trend micro => moved successfully
C:\Users\Honza\Desktop\RSITx64.exe => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0573A68E-3117-4FCA-BE86-A25A3AA7466D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0573A68E-3117-4FCA-BE86-A25A3AA7466D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2232F25E-CBB7-49C0-A468-69AC276CC2D2}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2232F25E-CBB7-49C0-A468-69AC276CC2D2}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3D7321C1-D042-4AEC-B129-477A4CE1E909}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D7321C1-D042-4AEC-B129-477A4CE1E909}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4BC04A8B-21EC-4C98-9CAD-8160DF73C334}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4BC04A8B-21EC-4C98-9CAD-8160DF73C334}" => key removed successfully
C:\WINDOWS\System32\Tasks\{5CF3A831-0C8F-4C98-87B8-9F5272B52E42} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5CF3A831-0C8F-4C98-87B8-9F5272B52E42}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5A0B7674-EF9E-404E-AC31-BA6DB1A018CE}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5A0B7674-EF9E-404E-AC31-BA6DB1A018CE}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5CB355C5-B1FF-43AA-957A-4443A2BF3E15}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5CB355C5-B1FF-43AA-957A-4443A2BF3E15}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6484CE67-2256-41F5-81C9-F827E9A4CCB8}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6484CE67-2256-41F5-81C9-F827E9A4CCB8}" => key removed successfully
C:\WINDOWS\System32\Tasks\{78CB1C55-C558-4001-8083-F7D460328D4F} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{78CB1C55-C558-4001-8083-F7D460328D4F}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{99D0B937-4B39-4F55-870D-7DCAC73760BC}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{99D0B937-4B39-4F55-870D-7DCAC73760BC}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9C279E08-F521-4F96-84FD-96F7AB3BCB93}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9C279E08-F521-4F96-84FD-96F7AB3BCB93}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9D4CA8BE-7B54-4088-A18A-E7C295662345}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9D4CA8BE-7B54-4088-A18A-E7C295662345}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C626A0C3-230A-4E09-8C01-79A5E5F842AA}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C626A0C3-230A-4E09-8C01-79A5E5F842AA}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CFDC9984-F899-4ED1-82A5-C65C5D0F8B79}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CFDC9984-F899-4ED1-82A5-C65C5D0F8B79}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FE7C675F-4D28-4812-B398-B3B061804801}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FE7C675F-4D28-4812-B398-B3B061804801}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => key removed successfully
C:\ProgramData\TEMP => ":8CE646EE" ADS removed successfully.
Hosts restored successfully.
EmptyTemp: => 39.5 GB temporary data Removed.

The system needed a reboot..

==== End of Fixlog 15:33:46 ====

#8 Příspěvek od **altrok** » 09 říj 2015 16:48

Pouzivani stare verze ESET Smart Security 5 ma nejaky duvod? Doporucuji provest aktualizaci na aktualni verzi 9.

Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
Oznacte jen moznost "Remove disinfection tools"
kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

VIRY.CZ

Preventivní kontrola

Preventivní kontrola

Re: Preventivní kontrola

Re: Preventivní kontrola

Re: Preventivní kontrola

Re: Preventivní kontrola

Re: Preventivní kontrola

Re: Preventivní kontrola

Re: Preventivní kontrola