Kolísavý internet

[Energizer7]

Zdravím.
Poslední dobou mi hodně kolísá internet a chci zjistit, jestli je chyba na mé starně.
Děkuji za kontrolu logu.
Hezký zbytek večera.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-12-2015
Ran by salve (administrator) on DESKTOP-7BUT05K (04-01-2016 21:23:06)
Running from C:\Users\salve\Desktop
Loaded Profiles: salve (Available Profiles: salve)
Platform: Windows 10 Pro (X64) Language: Angličtina (Spojené státy)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Disc Soft Ltd) E:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Apple Inc.) E:\iTunes\iTunesHelper.exe
(© 2015 Microsoft Corporation) C:\Users\salve\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1512.24020.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Windows\System32\Speech_OneCore\Common\SpeechRuntime.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\salve\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-08-03] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2655520 2015-10-12] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => E:\iTunes\iTunesHelper.exe [170256 2015-10-16] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6111312 2015-11-06] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-11-09] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.)
HKU\S-1-5-21-3606073540-1249033599-1861149769-1001\...\Run: [MK LOL] => C:\Program Files (x86)\MKJogo\MK IM\Bin\MKIM.exe [1092296 2015-08-15] ()
HKU\S-1-5-21-3606073540-1249033599-1861149769-1001\...\Run: [BingSvc] => C:\Users\salve\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-3606073540-1249033599-1861149769-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8551848 2015-10-19] (Piriform Ltd)
HKU\S-1-5-21-3606073540-1249033599-1861149769-1001\...\Run: [EADM] => E:\Program Files (x86)\Origin\Origin.exe [3639280 2015-12-17] (Electronic Arts)
HKU\S-1-5-21-3606073540-1249033599-1861149769-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50378880 2015-12-17] (Skype Technologies S.A.)
HKU\S-1-5-21-3606073540-1249033599-1861149769-1001\...\Run: [DAEMON Tools Lite Automount] => E:\Program Files\DAEMON Tools Lite\DTAgent.exe [4179288 2015-11-30] (Disc Soft Ltd)
HKU\S-1-5-21-3606073540-1249033599-1861149769-1001\...\MountPoints2: {466657a7-39ff-11e5-9bc2-806e6f6e6963} - "D:\setup.exe"
HKU\S-1-5-21-3606073540-1249033599-1861149769-1001\...\MountPoints2: {fd951706-ac7c-11e5-9c03-d43d7eecf4bb} - "F:\Setup.exe"
HKU\S-1-5-21-3606073540-1249033599-1861149769-1001\...\MountPoints2: {fd95173a-ac7c-11e5-9c03-d43d7eecf4bb} - "G:\RunGame.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-08-03] (AVAST Software)
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.88.1
Tcpip\..\Interfaces\{bf12604e-dc8e-421b-8c1d-e9dded786aa6}: [DhcpNameServer] 192.168.88.1
Tcpip\..\Interfaces\{c9a99295-da77-4a12-b673-798dc234dd8a}: [DhcpNameServer] 7.254.254.254

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/?clid=22668
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3606073540-1249033599-1861149769-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
HKU\S-1-5-21-3606073540-1249033599-1861149769-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/?clid=22668
HKU\S-1-5-21-3606073540-1249033599-1861149769-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.seznam.cz/?clid=22668
SearchScopes: HKLM-x32 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKLM-x32 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3606073540-1249033599-1861149769-1001 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3606073540-1249033599-1861149769-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=SL5MDF&PC=SL5M ... -SearchBox
SearchScopes: HKU\S-1-5-21-3606073540-1249033599-1861149769-1001 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-11-18] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-12-04] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-03] (AVAST Software)
BHO: No Name -> {968ABB9A-7ABD-49E0-8C08-E9458498E5FA} -> No File
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-11-10] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-04] (Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-11-18] (Microsoft Corporation)
BHO-x32: Microsoft Web Test Recorder 12.0 Helper -> {432dd630-7e03-4c97-9d62-b99f52df4fc2} -> E:\VisualStudio2013\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2013-10-05] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-03] (AVAST Software)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-11-10] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2015-02-17] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-3606073540-1249033599-1861149769-1001 -> hxxp://www.google.com

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-04] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-04] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-08] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-18] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npnxgameEU.dll [2015-12-26] (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-05] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-05] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3606073540-1249033599-1861149769-1001: @my.com/Games -> C:\Users\salve\AppData\Local\MyComGames\NPMyComDetector.dll [No File]
FF Plugin HKU\S-1-5-21-3606073540-1249033599-1861149769-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\salve\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [No File]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-11-18] (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-10]

Chrome:
=======
CHR HomePage: Default -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/","hxxp://www.spsoa.cz/", ... 773B026C06"
CHR DefaultSearchURL: Default -> hxxp://www.google.com/search?q={searchTerms}&i ... hannel=rcs
CHR DefaultSearchKeyword: Default -> google.com_
CHR DefaultSuggestURL: Default -> hxxp://suggestqueries.google.com/complete/search?q={searchTerms}
CHR Profile: C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-12]
CHR Extension: (Dokumenty Google) - C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-12]
CHR Extension: (Disk Google) - C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Vyhledávání Google) - C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Lounge Assistant) - C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Extensions\enjonnlehciedbcidabdglnnihcncbml [2016-01-02]
CHR Extension: (Tabulky Google) - C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-12]
CHR Extension: (Dokumenty Google offline) - C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18]
CHR Extension: (AdBlock) - C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-12-03]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-12]
CHR Extension: (Gmail) - C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-12]
CHR HKU\S-1-5-21-3606073540-1249033599-1861149769-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-08-03]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-08-03]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-08-03] (AVAST Software)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2015-10-27] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; E:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1368408 2015-11-30] (Disc Soft Ltd)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156384 2015-10-12] (NVIDIA Corporation)
R2 HiSuiteOuc64.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe [138544 2015-05-20] ()
R2 HuaweiHiSuiteService64.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe [192304 2015-05-20] ()
S2 KMSServerService; C:\WINDOWS\KMSServerService\KMS Server Service.exe [211968 2015-08-12] (My Digital Life Forums) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-11-12] (LogMeIn, Inc.)
S2 MBAMService; E:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1873696 2015-10-12] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5568288 2015-10-12] (NVIDIA Corporation)
S3 Origin Client Service; E:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2015-12-17] (Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2015-12-02] ()
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [981184 2015-07-12] (@ByELDI) [File not signed]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6889232 2015-12-14] (TeamViewer GmbH)
S3 TunngleService; E:\Program Files (x86)\Tunngle\TnglCtrl.exe [815088 2015-12-23] (Tunngle.net GmbH)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-08-03] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-08-03] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-08-03] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-08-03] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1059656 2015-11-06] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449992 2015-11-06] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150672 2015-08-03] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-08-03] (AVAST Software)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-12-27] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [46392 2015-12-27] (Disc Soft Ltd)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2015-11-12] (LogMeIn Inc.)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2015-05-07] (Huawei Technologies Co., Ltd.)
R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [47008 2015-08-03] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [193336 2015-10-15] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20768 2015-10-12] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek )
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [214016 2015-07-10] (Microsoft Corporation)
R3 tap0901t; C:\Windows\System32\drivers\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
S3 xhunter1; \??\C:\WINDOWS\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-04 21:23 - 2016-01-04 21:23 - 00022789 _____ C:\Users\salve\Desktop\FRST.txt
2016-01-04 21:23 - 2016-01-04 21:23 - 00000000 ____D C:\FRST
2016-01-04 21:22 - 2016-01-04 21:21 - 02370560 _____ (Farbar) C:\Users\salve\Desktop\FRST64.exe
2016-01-04 21:22 - 2016-01-04 21:21 - 00112640 _____ (forum.viry.cz) C:\Users\salve\Desktop\FRSTLauncher.exe
2016-01-04 21:07 - 2016-01-04 21:07 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-7BUT05K_salve_HistoryPrediction.bin
2016-01-02 21:28 - 2016-01-02 21:37 - 00000080 _____ C:\Users\salve\Desktop\uTorrent.lnk
2016-01-02 21:28 - 2016-01-02 21:37 - 00000080 _____ C:\Users\salve\Desktop\AbsoluteDrift - zástupce.lnk
2016-01-02 21:23 - 2016-01-04 20:00 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-01-02 21:23 - 2016-01-02 21:37 - 00000826 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-01-02 21:23 - 2016-01-02 21:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-01-02 21:23 - 2016-01-02 21:23 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-01-02 21:23 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-01-02 21:23 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-01-02 21:23 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2016-01-02 16:57 - 2016-01-02 16:57 - 00867752 _____ (Akeo Consulting (hxxp://akeo.ie)) C:\Users\salve\Desktop\rufus-2.6.exe
2016-01-02 16:00 - 2016-01-02 16:00 - 01013931 _____ C:\Users\salve\Desktop\Zacatek (3).pdf
2016-01-02 15:10 - 2016-01-02 18:22 - 00000000 ____D C:\Users\salve\Desktop\EAP
2016-01-02 14:43 - 2016-01-02 21:37 - 00000877 _____ C:\Users\Public\Desktop\Enterprise Architect.lnk
2016-01-02 14:43 - 2016-01-02 14:59 - 00000000 ____D C:\Users\salve\AppData\Roaming\Sparx Systems
2016-01-02 14:43 - 2016-01-02 14:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Enterprise Architect 12
2016-01-02 14:42 - 2016-01-02 14:43 - 50180096 _____ C:\Users\salve\Desktop\easetup.msi
2016-01-02 14:40 - 2016-01-02 14:40 - 01013931 _____ C:\Users\salve\Desktop\Zacatek (2).pdf
2016-01-02 13:07 - 2016-01-02 13:07 - 00292490 _____ C:\Users\salve\Desktop\zdravotnicka_psychlogie-haluzikova.pdf
2015-12-28 00:36 - 2016-01-04 20:04 - 00000000 ____D C:\Users\salve\AppData\Local\LogMeIn Hamachi
2015-12-28 00:36 - 2015-12-28 00:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-12-28 00:36 - 2015-12-28 00:36 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2015-12-28 00:15 - 2016-01-02 21:37 - 00000745 _____ C:\Users\Public\Desktop\Tunngle.lnk
2015-12-28 00:15 - 2015-12-28 00:22 - 00000000 ____D C:\ProgramData\Tunngle
2015-12-28 00:15 - 2015-12-28 00:15 - 00000000 ____D C:\Users\Public\Documents\Tunngle
2015-12-28 00:15 - 2015-12-28 00:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tunngle
2015-12-27 23:37 - 2015-12-28 00:19 - 00000000 _____ C:\WINDOWS\SysWOW64\Access.dat
2015-12-27 23:36 - 2015-12-28 00:22 - 00000000 ____D C:\Users\salve\AppData\Roaming\Tunngle
2015-12-27 23:36 - 2015-12-27 23:36 - 00000000 ____D C:\Users\salve\Documents\Tunngle
2015-12-27 23:35 - 2015-12-27 23:35 - 00000000 ____D C:\Users\salve\AppData\Local\LogMeIn
2015-12-27 23:35 - 2015-12-27 23:35 - 00000000 ____D C:\ProgramData\LogMeIn
2015-12-27 22:57 - 2015-12-27 22:57 - 00000000 ____D C:\Users\salve\AppData\Local\Disc_Soft_Ltd
2015-12-27 22:54 - 2015-12-27 23:06 - 00000000 ____D C:\Users\salve\AppData\Local\NFS Underground 2
2015-12-27 22:50 - 2016-01-02 21:37 - 00001116 _____ C:\Users\Public\Desktop\Need for Speed Underground 2.lnk
2015-12-27 22:50 - 2015-12-27 22:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES
2015-12-27 22:46 - 2016-01-04 20:04 - 00000000 ____D C:\Users\salve\AppData\Roaming\DAEMON Tools Lite
2015-12-27 22:46 - 2016-01-02 21:37 - 00000878 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2015-12-27 22:46 - 2015-12-27 22:46 - 00046392 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtliteusbbus.sys
2015-12-27 22:46 - 2015-12-27 22:46 - 00030264 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtlitescsibus.sys
2015-12-27 22:46 - 2015-12-27 22:46 - 00000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2015-12-27 22:46 - 2015-12-27 22:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2015-12-27 22:46 - 2015-12-27 22:46 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2015-12-27 22:45 - 2015-12-27 22:45 - 01709792 _____ (Disc Soft Ltd.) C:\Users\salve\Desktop\DTLiteInstaller.exe
2015-12-27 22:18 - 2015-12-27 22:18 - 00017042 _____ C:\Users\salve\Desktop\[CzT]Need_for_speed_Underground_2_HD_CZ_ (1).torrent
2015-12-27 11:51 - 2015-12-27 11:51 - 00000146 _____ C:\WINDOWS\SysWOW64\r3dlog.txt
2015-12-26 23:19 - 2015-12-26 23:28 - 00000000 ____D C:\Users\salve\AppData\Local\NXEPassportClient
2015-12-26 22:33 - 2016-01-02 21:37 - 00000843 _____ C:\Users\Public\Desktop\Combat Arms EU.lnk
2015-12-26 22:33 - 2015-12-26 22:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon
2015-12-26 22:30 - 2015-12-26 22:30 - 00000000 ____D C:\ProgramData\NexonEU
2015-12-24 21:38 - 2015-12-26 22:01 - 00421888 _____ (NEXON Inc.) C:\WINDOWS\NEXON_EU_DownloaderUpdater.exe
2015-12-24 21:38 - 2015-12-24 21:38 - 00003302 _____ C:\WINDOWS\System32\Tasks\{4982217D-3DFD-4BBD-AB60-B60E28B114A0}
2015-12-24 21:38 - 2015-12-24 21:38 - 00000000 ____D C:\Nexon
2015-12-22 10:42 - 2016-01-02 21:37 - 00000258 __RSH C:\ProgramData\ntuser.pol
2015-12-22 09:35 - 2015-12-22 09:35 - 00000000 ____D C:\Users\salve\Desktop\Nová složka
2015-12-19 17:48 - 2016-01-02 21:37 - 00000635 _____ C:\Users\Public\Desktop\The-Lost-Island.lnk
2015-12-19 17:48 - 2015-12-19 17:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The-Lost-Island
2015-12-15 15:57 - 2016-01-04 20:04 - 00000000 ____D C:\Users\salve\AppData\Roaming\TeamViewer
2015-12-15 15:57 - 2016-01-02 21:37 - 00001104 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2015-12-15 15:57 - 2016-01-02 21:37 - 00001098 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2015-12-15 15:57 - 2015-12-15 15:57 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-12-13 19:43 - 2015-12-13 19:45 - 00000000 ____D C:\Users\salve\AppData\Roaming\PioneerLog
2015-12-13 19:43 - 2015-12-13 19:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pioneer
2015-12-13 19:43 - 2015-12-13 19:43 - 00000000 ____D C:\Program Files (x86)\Pioneer
2015-12-13 19:40 - 2015-12-13 19:40 - 00000000 ____D C:\Users\salve\Documents\rekordbox
2015-12-13 19:40 - 2015-12-13 19:40 - 00000000 ____D C:\Users\salve\AppData\Roaming\Pioneer
2015-12-13 19:40 - 2015-12-13 19:40 - 00000000 ____D C:\Users\Public\Documents\Pioneer DJ
2015-12-13 19:40 - 2015-12-13 19:40 - 00000000 ____D C:\ProgramData\SafeNet Sentinel
2015-12-13 19:38 - 2016-01-02 21:37 - 00000645 _____ C:\Users\salve\Desktop\rekordbox.lnk
2015-12-13 19:38 - 2015-12-13 19:38 - 00000000 ____D C:\Users\salve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pioneer
2015-12-12 18:19 - 2015-12-16 21:30 - 00000000 ____D C:\Users\salve\AppData\Roaming\Audacity
2015-12-12 18:18 - 2016-01-02 21:37 - 00000757 _____ C:\Users\Public\Desktop\Audacity.lnk
2015-12-12 18:18 - 2016-01-02 21:37 - 00000757 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2015-12-11 17:31 - 2016-01-02 21:37 - 00000756 _____ C:\Users\Public\Desktop\World of Tanks.lnk
2015-12-11 17:31 - 2015-12-11 17:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
2015-12-10 23:15 - 2016-01-02 21:37 - 00000833 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2015-12-10 23:15 - 2015-12-10 23:15 - 01199856 _____ ( ) C:\Users\salve\Desktop\hwmonitor_1.28.exe
2015-12-10 23:15 - 2015-12-10 23:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2015-12-10 23:09 - 2015-12-10 23:09 - 00330853 _____ C:\Users\salve\Desktop\RealTemp_370.zip
2015-12-10 21:22 - 2015-12-10 21:22 - 00137191 _____ C:\Users\salve\Desktop\bagr-ramenoZadani.rar
2015-12-10 20:07 - 2015-12-10 20:07 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-10 20:07 - 2015-12-10 20:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-10 14:36 - 2015-12-10 14:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-09 20:08 - 2015-12-09 20:08 - 00889750 _____ C:\Users\salve\Desktop\BagrPROzmrdy.c4d
2015-12-09 15:46 - 2015-12-01 08:01 - 02115936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-12-09 15:46 - 2015-12-01 07:03 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\gpuenergydrv.sys
2015-12-09 15:46 - 2015-12-01 06:54 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2015-12-09 15:46 - 2015-12-01 06:51 - 07523840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2015-12-09 15:46 - 2015-12-01 06:49 - 04792320 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-12-09 15:46 - 2015-12-01 06:02 - 03580416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-12-09 15:46 - 2015-12-01 05:59 - 05455360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2015-12-09 15:46 - 2015-11-25 06:42 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-12-09 15:46 - 2015-11-25 06:42 - 00168288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.exe
2015-12-09 15:46 - 2015-11-25 06:41 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-12-09 15:46 - 2015-11-25 06:40 - 00516448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-12-09 15:46 - 2015-11-25 06:33 - 03622272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-09 15:46 - 2015-11-25 06:32 - 00113184 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2015-12-09 15:46 - 2015-11-25 06:27 - 01366680 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-12-09 15:46 - 2015-11-25 06:12 - 04047288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-12-09 15:46 - 2015-11-25 06:11 - 01532984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-12-09 15:46 - 2015-11-25 06:09 - 01310880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-12-09 15:46 - 2015-11-25 06:01 - 02879024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-09 15:46 - 2015-11-25 05:59 - 00092992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2015-12-09 15:46 - 2015-11-25 05:49 - 01569280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2015-12-09 15:46 - 2015-11-25 05:49 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
2015-12-09 15:46 - 2015-11-25 05:49 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-09 15:46 - 2015-11-25 05:49 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
2015-12-09 15:46 - 2015-11-25 05:48 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EthernetMediaManager.dll
2015-12-09 15:46 - 2015-11-25 05:48 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMediaManager.dll
2015-12-09 15:46 - 2015-11-25 05:44 - 21872640 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-09 15:46 - 2015-11-25 05:42 - 24592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-09 15:46 - 2015-11-25 05:37 - 02350592 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-12-09 15:46 - 2015-11-25 05:36 - 01710592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2015-12-09 15:46 - 2015-11-25 05:36 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
2015-12-09 15:46 - 2015-11-25 05:35 - 00929792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-12-09 15:46 - 2015-11-25 05:35 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
2015-12-09 15:46 - 2015-11-25 05:34 - 12504576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-09 15:46 - 2015-11-25 05:31 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll
2015-12-09 15:46 - 2015-11-25 05:30 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll
2015-12-09 15:46 - 2015-11-25 05:30 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-12-09 15:46 - 2015-11-25 05:30 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2015-12-09 15:46 - 2015-11-25 05:29 - 01649152 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-12-09 15:46 - 2015-11-25 05:29 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll
2015-12-09 15:46 - 2015-11-25 05:28 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-12-09 15:46 - 2015-11-25 05:28 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-12-09 15:46 - 2015-11-25 05:27 - 02180608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-12-09 15:46 - 2015-11-25 05:26 - 00849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2015-12-09 15:46 - 2015-11-25 05:26 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-12-09 15:46 - 2015-11-25 05:25 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-12-09 15:46 - 2015-11-25 05:25 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2015-12-09 15:46 - 2015-11-25 05:23 - 19323392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-09 15:46 - 2015-11-25 05:23 - 03588096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-09 15:46 - 2015-11-25 05:23 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-12-09 15:46 - 2015-11-25 05:22 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-12-09 15:46 - 2015-11-25 05:22 - 01383424 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-09 15:46 - 2015-11-25 05:22 - 00603648 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll
2015-12-09 15:46 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeoqw.dll
2015-12-09 15:46 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZST.DLL
2015-12-09 15:46 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZEL.DLL
2015-12-09 15:46 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZE.DLL
2015-12-09 15:46 - 2015-11-25 05:19 - 01795584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-12-09 15:46 - 2015-11-25 05:19 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2015-12-09 15:46 - 2015-11-25 05:18 - 01233920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2015-12-09 15:46 - 2015-11-25 05:17 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-12-09 15:46 - 2015-11-25 05:16 - 01442816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2015-12-09 15:46 - 2015-11-25 05:16 - 00786432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
2015-12-09 15:46 - 2015-11-25 05:13 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-12-09 15:46 - 2015-11-25 05:11 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ninput.dll
2015-12-09 15:46 - 2015-11-25 05:10 - 18801664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-09 15:46 - 2015-11-25 05:10 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-12-09 15:46 - 2015-11-25 05:10 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-12-09 15:46 - 2015-11-25 05:10 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-12-09 15:46 - 2015-11-25 05:08 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2015-12-09 15:46 - 2015-11-25 05:07 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
2015-12-09 15:46 - 2015-11-25 05:05 - 11263488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-09 15:46 - 2015-11-25 05:04 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-12-09 15:46 - 2015-11-25 05:04 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll
2015-12-09 15:46 - 2015-11-25 05:04 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-12-09 15:46 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeoqw.dll
2015-12-09 15:46 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZST.DLL
2015-12-09 15:46 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZEL.DLL
2015-12-09 15:46 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZE.DLL
2015-12-09 15:46 - 2015-11-25 03:52 - 00775312 _____ C:\WINDOWS\SysWOW64\locale.nls
2015-12-09 15:46 - 2015-11-25 03:52 - 00775312 _____ C:\WINDOWS\system32\locale.nls
2015-12-07 18:06 - 2015-12-07 18:06 - 00000000 ____D C:\Users\salve\AppData\Roaming\ImgBurn
2015-12-07 17:56 - 2016-01-02 21:37 - 00000831 _____ C:\Users\Public\Desktop\ImgBurn.lnk
2015-12-07 17:56 - 2016-01-02 21:37 - 00000831 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk
2015-12-07 17:56 - 2015-12-07 17:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
2015-12-07 09:53 - 2015-12-07 09:53 - 00000000 ____D C:\Users\salve\Documents\Nová složka (3)
2015-12-07 09:25 - 2015-12-07 09:25 - 00000000 ____D C:\Users\salve\Documents\Nová složka (2)
2015-12-07 09:25 - 2015-12-07 09:25 - 00000000 ____D C:\Users\salve\Documents\Nová složka
2015-12-06 15:23 - 2015-12-06 15:23 - 00000000 ____D C:\Users\salve\AppData\Roaming\.minecraft

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-04 21:23 - 2015-07-10 10:05 - 00000000 ____D C:\Windows
2016-01-04 21:08 - 2015-08-03 11:15 - 00000000 ____D C:\Users\salve\AppData\Roaming\Skype
2016-01-04 20:45 - 2015-08-12 19:25 - 00000992 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-04 20:04 - 2015-07-10 12:02 - 00000000 ____D C:\WINDOWS\INF
2016-01-04 15:32 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-01-04 15:27 - 2015-08-03 10:04 - 00004168 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{1C96FCA0-7594-4F98-A3EE-68DDA299684A}
2016-01-04 15:24 - 2015-08-12 19:25 - 00000988 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-03 21:11 - 2015-08-10 16:17 - 00779204 _____ C:\WINDOWS\system32\perfh005.dat
2016-01-03 21:11 - 2015-08-10 16:17 - 00166558 _____ C:\WINDOWS\system32\perfc005.dat
2016-01-03 21:11 - 2015-08-03 08:59 - 01864296 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-02 21:37 - 2015-12-04 15:48 - 00001481 _____ C:\Users\Public\Desktop\iTunes.lnk
2016-01-02 21:37 - 2015-12-02 21:17 - 00000745 _____ C:\Users\Public\Desktop\HiSuite.lnk
2016-01-02 21:37 - 2015-12-02 20:57 - 00000553 _____ C:\Users\Public\Desktop\Fraps.lnk
2016-01-02 21:37 - 2015-12-02 09:43 - 00000898 _____ C:\Users\Public\Desktop\Battlefield 3.lnk
2016-01-02 21:37 - 2015-11-30 18:54 - 00000737 _____ C:\Users\Public\Desktop\Origin.lnk
2016-01-02 21:37 - 2015-11-29 15:47 - 00002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-01-02 21:37 - 2015-11-29 15:47 - 00002118 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-01-02 21:37 - 2015-11-28 18:16 - 00000797 _____ C:\Users\Public\Desktop\GIMP 2.lnk
2016-01-02 21:37 - 2015-11-28 18:16 - 00000797 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2016-01-02 21:37 - 2015-11-17 19:42 - 00000587 _____ C:\Users\Public\Desktop\Laroxion Metin 2014.lnk
2016-01-02 21:37 - 2015-11-16 13:08 - 00000846 _____ C:\Users\salve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Launcher.lnk
2016-01-02 21:37 - 2015-11-15 12:45 - 00002204 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2016-01-02 21:37 - 2015-11-15 10:50 - 00000712 _____ C:\Users\salve\Desktop\Fallout 4.lnk
2016-01-02 21:37 - 2015-11-12 19:30 - 00000901 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-01-02 21:37 - 2015-11-10 16:54 - 00002599 _____ C:\Users\salve\Desktop\Windows 7 USB DVD Download Tool.lnk
2016-01-02 21:37 - 2015-10-30 11:24 - 00000697 _____ C:\Users\Public\Desktop\Grand Theft Auto V.lnk
2016-01-02 21:37 - 2015-10-07 20:00 - 00001668 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Software Deals.lnk
2016-01-02 21:37 - 2015-09-23 20:19 - 00000592 _____ C:\Users\salve\Desktop\PSPad.lnk
2016-01-02 21:37 - 2015-09-20 20:02 - 00000687 _____ C:\Users\Public\Desktop\Need for Speed Most Wanted 2012.lnk
2016-01-02 21:37 - 2015-09-13 19:54 - 00000813 _____ C:\Users\Public\Desktop\Aureria Classic.lnk
2016-01-02 21:37 - 2015-09-05 11:56 - 00000535 _____ C:\Users\Public\Desktop\Play Assetto Corsa.lnk
2016-01-02 21:37 - 2015-08-31 07:55 - 00000455 _____ C:\Users\Public\Desktop\Autobahn Police Simulator.lnk
2016-01-02 21:37 - 2015-08-31 07:55 - 00000455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autobahn Police Simulator.lnk
2016-01-02 21:37 - 2015-08-30 21:44 - 00000630 _____ C:\Users\Public\Desktop\Guild Wars 2.lnk
2016-01-02 21:37 - 2015-08-24 11:02 - 00001094 _____ C:\Users\Public\Desktop\Rocket League.lnk
2016-01-02 21:37 - 2015-08-19 09:03 - 00001148 _____ C:\Users\salve\Desktop\fifa14.lnk
2016-01-02 21:37 - 2015-08-17 11:45 - 00002523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-01-02 21:37 - 2015-08-13 07:53 - 00001149 _____ C:\Users\salve\Desktop\Internet Explorer.lnk
2016-01-02 21:37 - 2015-08-12 20:43 - 00000938 _____ C:\Users\Public\Desktop\Euro Truck Simulator 2.lnk
2016-01-02 21:37 - 2015-08-12 19:33 - 00001080 _____ C:\Users\salve\Desktop\SpeedFan.lnk
2016-01-02 21:37 - 2015-08-04 14:22 - 00000862 _____ C:\Users\Public\Desktop\Ashampoo Burning Studio 6 FREE.lnk
2016-01-02 21:37 - 2015-08-04 13:31 - 00000768 _____ C:\Users\salve\Desktop\Technic - Shortcut.lnk
2016-01-02 21:37 - 2015-08-03 20:54 - 00001176 _____ C:\Users\salve\Desktop\VycraftujTo Minecraft.lnk
2016-01-02 21:37 - 2015-08-03 18:11 - 00000935 _____ C:\Users\salve\Desktop\Sniper 3.lnk
2016-01-02 21:37 - 2015-08-03 18:05 - 00001061 _____ C:\Users\salve\Desktop\European Bus Simulator 2012.lnk
2016-01-02 21:37 - 2015-08-03 11:15 - 00002652 _____ C:\Users\Public\Desktop\Skype.lnk
2016-01-02 21:37 - 2015-08-03 11:10 - 00002416 _____ C:\Users\salve\Desktop\lel.lnk
2016-01-02 21:37 - 2015-08-03 10:11 - 00001448 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2016-01-02 21:37 - 2015-08-03 10:10 - 00000000 ____D C:\ProgramData\NVIDIA
2016-01-02 21:37 - 2015-08-03 09:09 - 00002005 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-01-02 21:37 - 2015-08-03 08:55 - 00002389 _____ C:\Users\salve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-01-02 21:37 - 2015-08-03 08:54 - 00001027 _____ C:\Users\salve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optional Features.lnk
2016-01-02 21:37 - 2015-07-10 13:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-02 21:37 - 2015-07-10 12:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-01-02 21:36 - 2015-07-10 10:05 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-01-02 21:28 - 2015-08-03 10:25 - 00000000 ____D C:\Users\salve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2016-01-02 19:43 - 2015-07-10 12:04 - 00000000 ___HD C:\Program Files\WindowsApps
2016-01-02 13:08 - 2015-08-03 08:53 - 00000000 ____D C:\Users\salve\AppData\Local\Packages
2015-12-30 14:36 - 2015-07-10 11:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-28 23:44 - 2015-08-03 09:09 - 00004280 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-12-28 01:51 - 2015-08-03 08:53 - 00000000 ____D C:\Users\salve
2015-12-28 00:19 - 2015-08-03 08:53 - 00000000 ____D C:\Users\salve\AppData\Local\VirtualStore
2015-12-28 00:19 - 2015-07-10 13:20 - 00345136 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-26 09:58 - 2015-07-10 12:06 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-12-26 09:58 - 2015-07-10 12:06 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-25 19:04 - 2015-08-03 08:55 - 00000000 ___RD C:\Users\salve\OneDrive
2015-12-22 14:47 - 2015-12-02 13:30 - 00348360 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2015-12-22 14:47 - 2015-12-02 09:43 - 00348360 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2015-12-22 14:47 - 2015-12-02 09:43 - 00280904 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2015-12-22 14:45 - 2015-08-17 08:59 - 00000000 ____D C:\ProgramData\Origin
2015-12-22 10:42 - 2015-07-10 12:04 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2015-12-22 10:42 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2015-12-18 23:27 - 2015-08-03 11:15 - 00000000 ____D C:\ProgramData\Skype
2015-12-12 12:28 - 2015-08-12 19:33 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2015-12-11 19:33 - 2015-10-03 15:31 - 00000000 ____D C:\Users\salve\AppData\Roaming\wargaming.net
2015-12-11 16:25 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\rescache
2015-12-11 12:50 - 2015-10-03 11:54 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-11 12:50 - 2015-10-03 11:54 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-11 12:49 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-10 20:07 - 2015-08-03 11:15 - 00000000 ____D C:\Users\salve\AppData\Local\Skype
2015-12-10 14:51 - 2015-08-03 11:10 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-12-10 14:50 - 2015-08-03 11:08 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-10 14:50 - 2015-07-10 12:04 - 00000269 _____ C:\WINDOWS\win.ini
2015-12-10 14:48 - 2015-10-03 11:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-10 14:46 - 2015-08-12 12:00 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-10 14:38 - 2015-08-12 12:00 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-12-06 20:09 - 2015-08-03 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-12-06 10:56 - 2015-08-17 11:45 - 00000000 ____D C:\ProgramData\Apple Computer
2015-12-06 10:22 - 2015-12-04 15:48 - 00000000 ____D C:\Program Files\iPod

==================== Files in the root of some directories =======

2015-09-05 12:14 - 2015-09-05 12:14 - 0000040 _____ () C:\Users\salve\AppData\Roaming\ludus.key
2015-11-29 15:40 - 2015-11-29 15:40 - 0003301 _____ () C:\Users\salve\AppData\Local\recently-used.xbel
2015-10-10 07:21 - 2015-11-24 10:57 - 0000098 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Files to move or delete:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-01-04 17:46

==================== End of FRST.txt ============================



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:55.12 GB) (Free:1.95 GB) NTFS
Drive d: (J_CCSA_X64FRE_EN-US_DV5) (CDROM) (Total:3.8 GB) (Free:0 GB) UDF
Drive e: (DATA) (Fixed) (Total:698.63 GB) (Free:21.72 GB) NTFS

Available physical RAM: 5649.64 MB
Total physical RAM: 8120.05 MB
Percentage of memory in use: 30%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 55.9 GB) (Disk ID: F1E19164)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=55.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 698.6 GB) (Disk ID: 81320DFF)
Partition 1: (Active) - (Size=698.6 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\salve\Desktop" je 241 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]


==================== End Of Log ==============================

[Rudy]

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

[Energizer7]

Přikládám log z AdwCleaneru

# AdwCleaner v5.028 - Logfile created 05/01/2016 at 19:24:21
# Updated 04/01/2016 by Xplode
# Database : 2016-01-04.2 [Server]
# Operating system : Windows 10 Pro (x64)
# Username : salve - DESKTOP-7BUT05K
# Running from : E:\adwcleaner_5.028.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : Service KMSELDI

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\kmspico
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\kmspico
[-] Folder Deleted : C:\Users\salve\AppData\Local\globalUpdate
[-] Folder Deleted : C:\Users\salve\AppData\Roaming\eCyber

***** [ Files ] *****

[-] File Deleted : C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
[-] File Deleted : C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.azlyrics.com_0.localstorage
[-] File Deleted : C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.azlyrics.com_0.localstorage-journal
[-] File Deleted : C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.lyricsfreak.com_0.localstorage
[-] File Deleted : C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.lyricsfreak.com_0.localstorage-journal
[-] File Deleted : C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage
[-] File Deleted : C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage-journal
[-] File Deleted : C:\Users\salve\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\eBay.lnk
[-] File Deleted : C:\Users\salve\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Picexa.lnk
[-] File Deleted : C:\WINDOWS\Reimage.ini

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8772EB82-7261-4CD9-8A86-DE155B461D9E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{5ADB067E-40D9-49AD-BDFC-2DBD725D3842}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8772EB82-7261-4CD9-8A86-DE155B461D9E}
[-] Key Deleted : HKCU\Software\GlobalUpdate
[-] Key Deleted : HKCU\Software\Reimage
[-] Key Deleted : HKCU\Software\WEBAPP
[-] Key Deleted : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
[-] Key Deleted : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
[-] Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
[-] Key Deleted : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
[-] Key Deleted : HKLM\SOFTWARE\hdcode
[-] Key Deleted : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
[-] Key Deleted : HKLM\SOFTWARE\TSv
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Your Software Deals_is1
[-] Key Deleted : [x64] HKLM\SOFTWARE\Reimage
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
[-] Key Deleted : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GLOBALUPDATE.EXE
[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\inst.shoppingate.info
[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\istartsurf.com
[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\shoppingate.info
[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.istartsurf.com
[-] Key Deleted : HKCU\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\inst.shoppingate.info
[-] Key Deleted : HKCU\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\istartsurf.com
[-] Key Deleted : HKCU\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\shoppingate.info
[-] Key Deleted : HKCU\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.istartsurf.com

***** [ Web browsers ] *****

[-] [C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : istart.webssearches.com
[-] [C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystart.incredibar.com
[-] [C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask search
[-] [C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : spintires.en.softonic.com
[-] [C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : websearch.ask.com
[-] [C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : serafenergy.com
[-] [C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : websearch
[-] [C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : istartsurf
[-] [C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : delta-homes
[-] [C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : omniboxes
[-] [C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : fvp.slu.cz
[-] [C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://www.omniboxes.com/?type=hp&ts=144835904 ... 773B026C06
[-] [C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider] Deleted : hxxp://www.omniboxes.com/webfavicon.ico
[-] [C:\Users\salve\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : fcfenmboojpjinhpgggodefccipikbpd

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [10531 bytes] ##########

[Rudy]

Dejte nový log FRST.