Preventivní kontrola notebooku

[marquesb51]

Dobrý den,
prosím o preventivní kontrolu notebooku Lenovo Y580. S počítačem nejsou žádné žávažnější problémy, za zmínku stojí pouze občasné delší načtení programů po spuštění systému (Win 8.1),
kdy je HDD (1 TB, 5400 RPM) vytížen na 100 % procesem svchost.exe. Není to nic závažného, bootování je rychlé, nicméně např. disk druhého PC (starší) není tolik vytěžován procesem svchost.exe.
Děkuji za kontrolu

Log z FRST zde:


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-12-2015
Ran by Marek (administrator) on MAREK-NTB (03-01-2016 13:53:15)
Running from C:\Users\Marek\Desktop
Loaded Profiles: Marek (Available Profiles: Marek)
Platform: Windows 8.1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Intel Corporation) C:\Program Files\PTC\Creo 3.0\M030\Common Files\x86e_win64\cma\Bin\IntelMPI\smpd-intel-4.0.3.009-x64.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2016\Moldflow\bin\mitsijm.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Connectify) C:\Program Files (x86)\Connectify\ConnectifyService.exe
(Connectify) C:\Program Files (x86)\Connectify\Connectifyd.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Akamai Technologies, Inc.) C:\Users\Marek\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Marek\AppData\Local\Akamai\netsession_win.exe
(KARPOLAN) C:\Program Files (x86)\Keyboard LEDs\KeyboardLeds.exe
(Spotify Ltd) C:\Users\Marek\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe
() C:\Users\Marek\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(forum.viry.cz) C:\Users\Marek\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3113592 2015-08-26] (Logitech, Inc.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-07] (Realtek Semiconductor)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17111056 2015-09-27] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [193008 2015-09-27] (Lenovo(beijing) Limited)
HKLM\...\Run: [RtsFT] => C:\Windows\RTFTrack.exe [6334096 2012-09-28] (Realtek semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2655520 2015-11-05] (NVIDIA Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-2799171281-1836920862-2753578075-1001\...\Run: [Autodesk Sync] => [X]
HKU\S-1-5-21-2799171281-1836920862-2753578075-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Marek\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2799171281-1836920862-2753578075-1001\...\Run: [KeyboardLeds.exe] => C:\Program Files (x86)\Keyboard LEDs\KeyboardLeds.exe [912896 2012-09-06] (KARPOLAN)
HKU\S-1-5-21-2799171281-1836920862-2753578075-1001\...\Run: [AlcoholAutomount] => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
HKU\S-1-5-21-2799171281-1836920862-2753578075-1001\...\Run: [Spotify Web Helper] => C:\Users\Marek\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2030912 2015-10-25] (Spotify Ltd)
HKU\S-1-5-21-2799171281-1836920862-2753578075-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Marek\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2799171281-1836920862-2753578075-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Marek\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-21-2799171281-1836920862-2753578075-1001\...\Policies\Explorer: []
HKU\S-1-5-21-2799171281-1836920862-2753578075-1001\...\MountPoints2: {08698f6e-a3e7-11e5-8297-20689d9d50e8} - "I:\setup.exe"
HKU\S-1-5-21-2799171281-1836920862-2753578075-1001\...\MountPoints2: {9278e790-6794-11e5-8257-20689d9d50e8} - "G:\setup.exe"
HKU\S-1-5-21-2799171281-1836920862-2753578075-1001\...\MountPoints2: {951243c6-735b-11e5-826c-20689d9d50e8} - "H:\setup.exe"
HKU\S-1-5-18\...\Run: [Autodesk Sync] => [X]
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [177600 2015-11-05] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [155792 2015-11-05] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Marek\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Marek\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Marek\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Marek\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Marek\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Marek\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2015-09-27]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\Marek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled [2015-10-14] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{4A850DFE-7A89-43AE-85FB-C14383E1C310}: [DhcpNameServer] 147.229.190.143 147.229.191.143
Tcpip\..\Interfaces\{9DCC9498-09AE-4605-BA12-038FC60C9D6C}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
HKU\S-1-5-21-2799171281-1836920862-2753578075-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=12
SearchScopes: HKU\S-1-5-21-2799171281-1836920862-2753578075-1001 -> DefaultScope {20D2BC93-79E0-48EA-9088-1A14BB7426D8} URL = hxxps://www.google.com/search?q={searchTerms}&s ... utEncoding?}
SearchScopes: HKU\S-1-5-21-2799171281-1836920862-2753578075-1001 -> {20D2BC93-79E0-48EA-9088-1A14BB7426D8} URL = hxxps://www.google.com/search?q={searchTerms}&s ... utEncoding?}
SearchScopes: HKU\S-1-5-21-2799171281-1836920862-2753578075-1001 -> {320E847C-D5DD-4EF1-80CC-0EC899CA2E7E} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... kSearch_12
SearchScopes: HKU\S-1-5-21-2799171281-1836920862-2753578075-1001 -> {3A711A89-3AB7-427B-AD9C-1C69B94C4B17} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... kSearch_12
SearchScopes: HKU\S-1-5-21-2799171281-1836920862-2753578075-1001 -> {40437D9C-363A-4418-A805-70C7A2ECE019} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12
SearchScopes: HKU\S-1-5-21-2799171281-1836920862-2753578075-1001 -> {40F73DB8-9AAB-478D-8DE7-10D08E79F7CD} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid=QuickSearch_12
SearchScopes: HKU\S-1-5-21-2799171281-1836920862-2753578075-1001 -> {4E797BA1-647A-40C0-9441-E875F87F0B54} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_12
SearchScopes: HKU\S-1-5-21-2799171281-1836920862-2753578075-1001 -> {5AF620B0-454E-4400-8519-9514C8601293} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_12
SearchScopes: HKU\S-1-5-21-2799171281-1836920862-2753578075-1001 -> {62ADDE33-FDED-4533-BF05-8394CDDDBFE1} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... kSearch_12
SearchScopes: HKU\S-1-5-21-2799171281-1836920862-2753578075-1001 -> {A11F1314-1A91-4AA5-8C22-3BFDADDAD511} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_12
SearchScopes: HKU\S-1-5-21-2799171281-1836920862-2753578075-1001 -> {D8B37579-653C-4E68-8530-790812D121A7} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_12
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-27] (Oracle Corporation)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-27] (Oracle Corporation)
IE Session Restore: HKU\S-1-5-21-2799171281-1836920862-2753578075-1001 -> is enabled.

FireFox:
========
FF ProfilePath: C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\6ig7ns52.default
FF Homepage: http://www.google.cz
FF Session Restore: -> is enabled.
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2015-12-29] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2015-12-29] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-27] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-08-10] (Nero AG)
FF Plugin-x32: @ptc.com/IsoView -> C:\Program Files (x86)\Common Files\PTC\npisoview.dll [2014-10-29] (PTC Inc.)
FF Plugin-x32: @ptc.com/ProductViewLite -> C:\Program Files (x86)\Common Files\PTC\np6_pvapplite9.dll [2014-10-29] (PTC)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-01] (Microsoft Corporation)
FF SearchPlugin: C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\6ig7ns52.default\searchplugins\googletranslate.xml [2015-09-27]
FF SearchPlugin: C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\6ig7ns52.default\searchplugins\kickassto.xml [2015-09-27]
FF SearchPlugin: C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\6ig7ns52.default\searchplugins\vyhledvn-vide-ve-slub-youtube.xml [2015-11-22]
FF SearchPlugin: C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\6ig7ns52.default\searchplugins\wikipedia-eng.xml [2015-09-27]
FF Extension: Copy Plain Text 2 - C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\6ig7ns52.default\extensions\copyplaintext@teo.pl.xpi [2015-09-27]
FF Extension: S3.Google Translator - C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\6ig7ns52.default\extensions\s3google@translator.xpi [2015-12-21]
FF Extension: Tab Mix Plus - C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\6ig7ns52.default\extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2015-12-29]
FF Extension: Adblock Plus - C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\6ig7ns52.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-12-15]
FF Extension: Theme Font & Size Changer - C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\6ig7ns52.default\Extensions\{f69e22c7-bc50-414a-9269-0f5c344cd94c}.xpi [2016-01-01]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-09-27] [not signed]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/ig/redirectdomain?brand=KMOH&bmod=KMOH
CHR StartupUrls: Default -> "hxxp://www.google.com/ig/redirectdomain?brand=KMOH&bmod=KMOH"
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-27]
CHR Extension: (Dokumenty Google) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-27]
CHR Extension: (Disk Google) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-05]
CHR Extension: (YouTube) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]
CHR Extension: (Adblock Plus) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-12-21]
CHR Extension: (Vyhledávání Google) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-05]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2015-09-27]
CHR Extension: (Tabulky Google) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-27]
CHR Extension: (Dokumenty Google offline) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-29]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-27]
CHR Extension: (Gmail) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-27]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1136520 2015-09-07] (Autodesk Inc.)
R2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [31160 2015-02-05] (Autodesk, Inc.)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-08-08] (Broadcom Corporation.)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [976600 2013-08-19] (Broadcom Corporation.)
R2 Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [256568 2015-11-30] (Connectify)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [382312 2015-11-17] (Digital Wave Ltd.)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-08-27] (Intel Corporation)
R2 impi_smpd; C:\Program Files\PTC\Creo 3.0\M030\Common Files\x86e_win64\cma\Bin\IntelMPI\smpd-intel-4.0.3.009-x64.exe [1611168 2015-10-10] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 mitsijm2016; C:\Program Files\Autodesk\Inventor 2016\Moldflow\bin\mitsijm.exe [968480 2014-09-30] (Autodesk, Inc.)
S4 NitroDriverReadSpool10; C:\Program Files\Nitro\Pro 10\NitroPDFDriverService10x64.exe [324760 2015-07-03] (Nitro PDF Software)
S4 NitroUpdateService; C:\Program Files\Nitro\Pro 10\Nitro_UpdateService.exe [418968 2015-07-03] ()
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2099720 2015-12-01] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2016-01-02] ()
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [737984 2015-08-30] (@ByELDI) [File not signed]
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-08-08] (Broadcom Corporation.)
R1 cfywlan1; C:\Windows\system32\DRIVERS\cfywlan1.sys [36736 2015-12-07] (Connectify)
R1 cnnctfy3; C:\Windows\system32\DRIVERS\cnnctfy3.sys [43872 2015-12-07] (Connectify)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-09-27] (Disc Soft Ltd)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [27552 2015-09-27] (REALiX(tm))
R1 LUMDriver; C:\Windows\system32\drivers\LUMDriver.sys [24848 2008-01-02] (IBM)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)
S3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8229264 2012-09-28] (Realtek Semiconductor Corp.)
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-14] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2015-10-05] (Duplex Secure Ltd.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 WinDivert1.1; C:\Program Files\KMSpico\WinDivert.sys [35376 2015-09-27] (Basil Projects)
S3 clwvd6; \SystemRoot\system32\DRIVERS\clwvd6.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-03 13:53 - 2016-01-03 13:53 - 00023831 _____ C:\Users\Marek\Desktop\FRST.txt
2016-01-03 13:52 - 2016-01-03 13:53 - 00000000 ____D C:\FRST
2016-01-03 13:51 - 2016-01-03 13:51 - 00112640 _____ (forum.viry.cz) C:\Users\Marek\Desktop\FRSTLauncher.exe
2016-01-03 13:50 - 2016-01-03 13:50 - 02370560 _____ (Farbar) C:\Users\Marek\Desktop\FRST64.exe
2016-01-02 22:55 - 2016-01-02 22:55 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled
2016-01-02 22:55 - 2016-01-02 22:55 - 00000000 ____D C:\ProgramData\ProductData
2016-01-02 22:54 - 2016-01-03 11:46 - 00003244 _____ C:\Windows\System32\Tasks\Driver Booster Scheduler
2016-01-02 22:54 - 2016-01-03 11:46 - 00002876 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Marek)
2016-01-02 22:54 - 2016-01-02 22:55 - 00000000 ____D C:\Users\Marek\AppData\LocalLow\IObit
2016-01-02 22:54 - 2016-01-02 22:54 - 00000000 ____D C:\Users\Marek\AppData\Roaming\IObit
2016-01-02 22:54 - 2016-01-02 22:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3
2016-01-02 22:54 - 2016-01-02 22:54 - 00000000 ____D C:\ProgramData\IObit
2016-01-02 22:54 - 2016-01-02 22:54 - 00000000 ____D C:\Program Files (x86)\IObit
2016-01-02 22:36 - 2016-01-02 22:36 - 00000000 ____D C:\Users\Marek\AppData\Local\NVIDIA
2016-01-02 22:30 - 2016-01-02 22:30 - 00000000 ____D C:\Windows\SysWOW64\NV
2016-01-02 22:30 - 2016-01-02 22:30 - 00000000 ____D C:\Windows\system32\NV
2016-01-02 22:30 - 2016-01-02 22:30 - 00000000 ____D C:\ProgramData\NVIDIA
2016-01-02 22:29 - 2015-11-05 16:13 - 06358648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-01-02 22:29 - 2015-11-05 16:13 - 02983032 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-01-02 22:29 - 2015-11-05 16:13 - 02554488 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-01-02 22:29 - 2015-11-05 16:13 - 00938616 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-01-02 22:29 - 2015-11-05 16:13 - 00523568 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-01-02 22:29 - 2015-11-05 16:13 - 00385328 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-01-02 22:29 - 2015-11-05 16:13 - 00114296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\oemdspif.dll
2016-01-02 22:29 - 2015-11-05 16:13 - 00074872 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-01-02 22:29 - 2015-11-05 16:13 - 00062584 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-01-02 22:29 - 2015-10-28 08:42 - 06027430 _____ C:\Windows\system32\nvcoproc.bin
2016-01-02 22:28 - 2016-01-02 22:28 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-01-02 22:22 - 2015-11-05 18:13 - 42914096 _____ C:\Windows\system32\nvcompiler.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 37882488 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 22308656 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 18362160 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 17515208 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 16553568 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 15717864 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 15121784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 14835872 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 13527248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 12770752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 12034248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 11130488 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-01-02 22:22 - 2015-11-05 18:13 - 03579000 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 03158736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 02870392 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 02490488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 01905272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435891.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 01564792 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435891.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 00877360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 00861816 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 00689272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 00673912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 00500872 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 00467912 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 00422240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 00413816 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 00388208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 00369272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 00177600 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 00155792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-01-02 22:22 - 2015-11-05 18:13 - 00031352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2016-01-02 17:30 - 2016-01-02 17:32 - 00000000 ____D C:\Users\Marek\Documents\Battlefield 3
2016-01-02 17:30 - 2016-01-02 17:30 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2016-01-02 17:30 - 2016-01-02 17:30 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-01-02 17:30 - 2016-01-02 17:30 - 00075136 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2016-01-02 17:30 - 2016-01-02 17:30 - 00000000 ____D C:\Users\Marek\AppData\Local\PunkBuster
2016-01-02 16:43 - 2016-01-02 16:43 - 00000000 ____D C:\Users\Marek\AppData\Roaming\Battlefield 3
2016-01-02 16:43 - 2016-01-02 16:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
2016-01-02 12:25 - 2016-01-02 12:25 - 00327168 _____ C:\Windows\Minidump\010216-23406-01.dmp
2016-01-02 12:24 - 2016-01-02 12:24 - 595598623 _____ C:\Windows\MEMORY.DMP
2015-12-29 18:59 - 2015-12-29 18:59 - 00000537 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiRT Rally.lnk
2015-12-09 15:11 - 2015-12-09 15:11 - 00000000 __SHD C:\ProgramData\DSS
2015-12-09 15:09 - 2015-12-09 15:09 - 00000000 ____D C:\Windows\SysWOW64\xlive
2015-12-09 15:08 - 2015-12-09 15:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2015-12-09 15:08 - 2015-12-09 15:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
2015-12-09 14:58 - 2015-12-09 14:58 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2015-12-09 14:58 - 2015-12-09 14:58 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2015-12-09 14:58 - 2015-12-09 14:58 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2015-12-09 14:58 - 2015-12-09 14:58 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2015-12-09 14:58 - 2015-12-09 14:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Ripple Sound
2015-12-09 14:58 - 2015-12-09 14:58 - 00000000 ____D C:\Program Files (x86)\OpenAL
2015-12-09 14:58 - 2015-12-09 14:58 - 00000000 ____D C:\Program Files (x86)\BRS
2015-12-09 14:58 - 2011-03-19 15:16 - 01417216 _____ (Blue Ripple Sound Limited) C:\Windows\SysWOW64\rapture3d_oal.dll
2015-12-09 14:58 - 2010-09-22 13:12 - 19087360 _____ (Intel Corporation / Blue Ripple Sound Limited) C:\Windows\SysWOW64\mkl_blueripple.dll
2015-12-09 09:27 - 2015-12-09 09:27 - 00000514 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-12-07 19:01 - 2015-12-07 19:01 - 00043872 _____ (Connectify) C:\Windows\system32\Drivers\cnnctfy3.sys
2015-12-07 19:01 - 2015-12-07 19:01 - 00036736 _____ (Connectify) C:\Windows\system32\Drivers\cfywlan1.sys
2015-12-07 19:01 - 2015-12-07 19:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Connectify 2016
2015-12-07 19:00 - 2015-12-21 18:42 - 00000000 ____D C:\Program Files (x86)\Connectify
2015-12-07 19:00 - 2015-12-07 19:02 - 00000000 ____D C:\ProgramData\Connectify
2015-12-07 18:14 - 2015-12-07 18:14 - 00000000 ____D C:\Program Files (x86)\Connectify.exe
2015-12-06 23:44 - 2015-12-06 23:44 - 00001329 _____ C:\Users\Marek\AppData\Roaming\Microsoft\Windows\Start Menu\OpenIV.lnk
2015-12-06 23:44 - 2015-12-06 23:44 - 00000000 ____D C:\Users\Marek\AppData\Roaming\New Technology Studio
2015-12-06 23:44 - 2015-12-06 23:44 - 00000000 ____D C:\Users\Marek\AppData\Local\New Technology Studio

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-03 13:52 - 2013-08-22 14:36 - 00000000 ____D C:\Windows
2016-01-03 13:39 - 2015-09-27 11:39 - 00003974 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{A0B61E7B-2F1A-4BFA-BE4A-803220D6D81B}
2016-01-03 13:01 - 2015-09-27 12:16 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-01-03 11:49 - 2015-11-09 23:12 - 00000000 ____D C:\Users\Marek\AppData\Roaming\Seznam.cz
2016-01-03 11:43 - 2015-09-27 10:29 - 00000000 __SHD C:\Users\Marek\IntelGraphicsProfiles
2016-01-03 11:42 - 2015-09-27 12:40 - 00000976 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-03 11:42 - 2013-08-22 16:36 - 00000000 ___HD C:\Windows\ELAMBKUP
2016-01-03 11:42 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-03 10:39 - 2015-09-27 12:43 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-01-03 10:38 - 2015-09-27 18:25 - 00000000 ____D C:\Users\Marek\AppData\Roaming\uTorrent
2016-01-02 23:24 - 2015-09-27 10:12 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2799171281-1836920862-2753578075-1001
2016-01-02 23:17 - 2015-10-05 21:37 - 00000000 ____D C:\Users\Marek\AppData\Roaming\Nitro
2016-01-02 23:16 - 2015-10-12 15:49 - 00159200 ____T C:\Users\Marek\AppData\Roaming\CrashRpt1402.dll
2016-01-02 23:05 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2016-01-02 23:02 - 2015-10-16 18:29 - 00007636 _____ C:\Users\Marek\AppData\Local\Resmon.ResmonCfg
2016-01-02 22:50 - 2015-09-27 11:56 - 00000000 ___RD C:\Users\Marek\Desktop\Programy a systém
2016-01-02 22:50 - 2015-09-27 10:06 - 00000000 ____D C:\Users\Marek
2016-01-02 22:45 - 2014-03-18 16:33 - 01745984 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-02 22:45 - 2014-03-18 15:54 - 00739924 _____ C:\Windows\system32\perfh005.dat
2016-01-02 22:45 - 2014-03-18 15:54 - 00151610 _____ C:\Windows\system32\perfc005.dat
2016-01-02 22:39 - 2015-09-30 20:10 - 00000000 ____D C:\Hry
2016-01-02 22:39 - 2015-09-27 11:56 - 00000000 ____D C:\Users\Marek\Desktop\Hry
2016-01-02 22:30 - 2015-09-27 10:14 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-01-02 22:30 - 2015-09-27 10:14 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-01-02 22:29 - 2015-10-15 17:13 - 00000000 ____D C:\Windows\LastGood
2016-01-02 22:29 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\Help
2016-01-02 18:33 - 2015-10-09 00:50 - 00000000 ____D C:\Users\Marek\AppData\Local\CrashDumps
2016-01-02 12:25 - 2015-11-14 15:18 - 00000000 ____D C:\Windows\Minidump
2015-12-29 19:47 - 2015-10-15 19:58 - 00000000 ____D C:\Users\Marek\Documents\My Games
2015-12-29 19:47 - 2015-10-15 19:58 - 00000000 ____D C:\ProgramData\Codemasters
2015-12-29 18:01 - 2015-09-27 12:16 - 00003802 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-12-29 17:20 - 2015-09-27 18:20 - 00000000 ____D C:\Users\Marek\AppData\Roaming\DAEMON Tools Lite
2015-12-21 18:42 - 2015-10-19 19:50 - 00000000 ____D C:\Users\Marek\AppData\Roaming\TeamViewer
2015-12-21 18:42 - 2015-10-08 22:47 - 00000000 ____D C:\Program Files (x86)\Steam
2015-12-21 18:41 - 2015-09-27 10:42 - 00000000 ____D C:\Windows\Panther
2015-12-21 18:38 - 2015-09-27 12:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-17 17:14 - 2015-09-30 18:35 - 01841152 ___SH C:\Users\Marek\Desktop\Thumbs.db
2015-12-17 11:53 - 2015-11-01 15:47 - 00000000 ____D C:\Users\Marek\Cloud Sticky Notes
2015-12-16 15:02 - 2015-10-15 17:38 - 00000000 ____D C:\Users\Marek\AppData\Local\Deployment
2015-12-15 12:38 - 2015-09-27 10:07 - 00000000 ____D C:\Users\Marek\AppData\Local\Packages
2015-12-09 10:49 - 2015-09-30 22:25 - 00000000 ____D C:\Users\Marek\AppData\Roaming\DVDVideoSoft
2015-12-09 04:39 - 2015-10-03 19:36 - 00301728 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-12-07 18:48 - 2015-11-21 18:35 - 00000566 _____ C:\Windows\Tasks\MATLAB R2015b Startup Accelerator.job
2015-12-07 18:42 - 2015-11-21 18:35 - 00003736 _____ C:\Windows\System32\Tasks\MATLAB R2015b Startup Accelerator
2015-12-07 18:42 - 2015-10-05 19:04 - 00003100 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2799171281-1836920862-2753578075-1001
2015-12-07 18:09 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-12-06 21:26 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness

==================== Files in the root of some directories =======

2015-10-12 15:49 - 2016-01-02 23:16 - 0159200 ____T () C:\Users\Marek\AppData\Roaming\CrashRpt1402.dll
2015-10-16 18:29 - 2016-01-02 23:02 - 0007636 _____ () C:\Users\Marek\AppData\Local\Resmon.ResmonCfg
2015-09-27 13:17 - 2015-09-27 13:17 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-09-27 18:38 - 2015-09-27 18:38 - 0000133 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\MATLAB R2015b Startup Accelerator.job => C:\Program Files\MATLAB\R2015b\bin\win64\MATLABStartupAccelerator.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Marek\Desktop" je 2 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

[Roli]

Zdravím, copak uděláme s tím nelegálním produktem od Microsoftu ?