Blokace Instalací

[matesss]

Dobrý den, potřeboval bych pomoc asi s virem .... Ať instaluji jakoukoliv hru v průběhu se zasekne a nejde s tím hnout.

Zde zasílam FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-01-2016
Ran by Matee-es (administrator) on MATEE-ES-PC (23-01-2016 16:22:44)
Running from C:\Users\Matee-es\Downloads
Loaded Profiles: Matee-es (Available Profiles: Matee-es & Administrator)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech, Inc.) C:\Program Files\Logitech\SolarApp\L4301_Solar.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(CyberLink) D:\Programy\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe
(CyberLink) D:\Programy\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
() C:\Windows\DAODx.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Nero AG) D:\Programy\HTCDriver\HSMServiceEntry.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Piriform Ltd) C:\Program Files (x86)\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() D:\Programy\HTCDriver\HTC Sync\adb.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Program Files (x86)\Everything\Everything.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
( ) Y:\setup.exe
() C:\Users\Matee-es\AppData\Local\Temp\is-6R3MQ.tmp\setup.tmp
(Microsoft Corporation) C:\Windows\System32\GWX\GWXUX.exe
(Microsoft Corporation) C:\Windows\System32\WerFault.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2757424 2015-11-12] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9608224 2009-11-17] (Realtek Semiconductor)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-20] (AVAST Software)
HKLM-x32\...\Run: [Everything] => C:\Program Files (x86)\Everything\Everything.exe [602624 2009-03-13] ()
HKU\S-1-5-21-267086268-3466889054-1500657365-1000\...\Run: [CCleaner Monitoring] => C:\Program Files (x86)\CCleaner\CCleaner64.exe [7063832 2014-11-22] (Piriform Ltd)
HKU\S-1-5-21-267086268-3466889054-1500657365-1000\...\Run: [GoogleChromeAutoLaunch_E24797801E268EF59764FAA50CDC344E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [748360 2016-01-12] (Google Inc.)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
SSODL-x32: IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - D:\Programy\Stardock\Object Desktop\IconPackager\iprepair.dll (Stardock.net, Inc)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-12-20] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{08567F56-1788-4191-933B-4A7AA916A049}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-267086268-3466889054-1500657365-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
HKU\S-1-5-21-267086268-3466889054-1500657365-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-11-30] (AVAST Software)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-10-29] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-30] (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-10-29] (Oracle Corporation)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-20] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-20] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-07-11] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-10-29] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-10-29] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-14] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-14] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: No Name - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-01-12] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: No Name - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-01-12] [not signed]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Session Restore: Default -> is enabled.
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.7.771\_platform_specific\win_x86\widevinecdmadapter.dll => No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\pdf.dll => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll => No File
CHR Plugin: (Java Deployment Toolkit 8.0.400.26) - C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll => No File
CHR Plugin: (Java(TM) Platform SE 8 U40) - C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll => No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll => No File
CHR Profile: C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Překladač Google) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2015-11-17]
CHR Extension: (Angry Birds) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2015-05-21]
CHR Extension: (Dr.Web Anti-Virus Link Checker) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\aleggpabliehgbeagmfhnodcijcmbonb [2015-11-23]
CHR Extension: (Sports Heads Football Championship) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcimfbgmgkllffdhglbgmadfkdmfeodf [2015-05-21]
CHR Extension: (Chrome Safe Guard) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfpoaihndjklkeidejbgjaadeidhfenm [2015-12-08]
CHR Extension: (Poper Blocker) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkkbcggnhapdmkeljlodobbkopceiche [2015-05-21]
CHR Extension: (Slinky Elegantní) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmanlajnpdncmhfkiccmbgeocgbncfln [2015-09-28]
CHR Extension: (Vocabla - budovat svou slovní zásobu) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdnfmoippfkddcakmbeaglgjcfcfcfmk [2015-05-21]
CHR Extension: (Adblock Plus) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-01-05]
CHR Extension: (Adblock na Youtube™) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2015-10-15]
CHR Extension: (Videostream for Google Chromecast™) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnciopoikihiagdjbjpnocolokfelagl [2016-01-23]
CHR Extension: (Right Click Translate) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaicajmpgflbeffjbbceeicjiejgdjif [2015-05-21]
CHR Extension: (Video Downloader professional) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2015-11-25]
CHR Extension: (AdBlock) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-01-20]
CHR Extension: (Adblock for Pirate Bay) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\imkpamgpfalmdaikobnkefcmmkpgljjd [2015-05-21]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-23]
CHR Extension: (Hover Zoom) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\nonjdcjchghhkdoolnlbekcfllmednbl [2015-11-27]
CHR Extension: (Můj motiv Chrome) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2015-08-26]
CHR Extension: (VLC Media Player) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojhjeebcjodcgpogndkmhknbhcnlmbfk [2015-09-04]
CHR Extension: (Rychlý přesun Google) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc [2015-11-25]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-30]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-20] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [5561368 2015-12-20] (Avast Software)
R2 CyberLink PowerDVD 13 Media Server Monitor Service; D:\Programy\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-07-05] (CyberLink)
R2 CyberLink PowerDVD 13 Media Server Service; D:\Programy\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [327432 2013-07-05] (CyberLink)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156400 2015-11-12] (NVIDIA Corporation)
R2 HTCMonitorService; D:\Programy\HTCDriver\HSMServiceEntry.exe [87368 2014-06-27] (Nero AG)
R2 L4301_Solar; C:\Program Files\Logitech\SolarApp\L4301_Solar.exe [405744 2013-01-30] (Logitech, Inc.)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-11-12] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8133424 2015-11-12] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5915440 2015-11-12] (NVIDIA Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [File not signed]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-11-16] ()
S3 Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software) [File not signed]
S3 WatAdminSvc; C:\Windows\system32\Wat\WatAdminSvc.exe [1255736 2015-03-22] () [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-12-20] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-12-20] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-12-20] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-12-20] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-12-20] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1065208 2016-01-20] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [464256 2016-01-20] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2015-12-20] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-12-20] (AVAST Software)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [113280 2010-02-03] (ITE )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [147088 2015-12-20] (AVAST Software)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19760 2015-11-12] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [11376 2003-09-02] () [File not signed]
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [310904 2015-12-20] (Avast Software)
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
S3 XFDriver64; D:\software PC\Xfire2\XFDriver64.sys [17160 2013-03-14] (XFire)
R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; D:\Programy\PowerDVD13\Common\NavFilter\000.fcl [130320 2013-07-05] (CyberLink Corp.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-23 16:21 - 2016-01-23 16:21 - 02370560 _____ (Farbar) C:\Users\Matee-es\Downloads\FRST64.exe
2016-01-23 16:14 - 2016-01-23 16:14 - 00000885 _____ C:\Users\Public\Desktop\Mortal Kombat Complete Edition.lnk
2016-01-23 16:14 - 2016-01-23 16:14 - 00000868 _____ C:\Users\Public\Desktop\Cat-A-Cat Games.lnk
2016-01-23 16:14 - 2016-01-23 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mortal Kombat Complete Edition
2016-01-23 15:57 - 2016-01-23 15:57 - 00017608 _____ C:\Users\Matee-es\Downloads\[CzT]The_Sims_4_2014_CZ_.torrent
2016-01-23 13:17 - 2016-01-23 15:07 - 00000713 _____ C:\Users\Public\Desktop\The Sims 4.lnk
2016-01-23 11:20 - 2016-01-23 11:20 - 00021529 _____ C:\Users\Matee-es\Downloads\[CzT]The_Sims_4_Navsteva_v_laznich_The_Sims_4_Spa_Day_2015_CZ_.torrent
2016-01-23 11:20 - 2016-01-23 11:20 - 00017907 _____ C:\Users\Matee-es\Downloads\[CzT]The_Sims_4_Prepychovy_vecirek_The_Sims_4_Luxury_Party_Stuff_2015_CZ_.torrent
2016-01-23 11:19 - 2016-01-23 11:19 - 00026745 _____ C:\Users\Matee-es\Downloads\[CzT]The_Sims_4_Deluxe_Edition_12_2015_CZ_.torrent
2016-01-23 11:12 - 2016-01-23 11:12 - 00011654 _____ C:\Users\Matee-es\Downloads\[CzT]Street_Fighter_X_Tekken_CZ_2012_.torrent
2016-01-23 10:01 - 2016-01-23 10:01 - 00048532 _____ C:\Users\Matee-es\Downloads\[CzT]Mortal_Kombat_Komplete_Edition_2013_.torrent
2016-01-22 18:45 - 2016-01-22 18:45 - 00000812 _____ C:\Users\Public\Desktop\Stepmania.lnk
2016-01-22 18:34 - 2016-01-22 19:44 - 1242913495 _____ C:\Users\Matee-es\Downloads\Známé-písničky-do-StepMania.rar
2016-01-22 18:10 - 2016-01-22 18:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StepMania
2016-01-22 18:10 - 2016-01-22 18:10 - 00000788 _____ C:\Users\Matee-es\Desktop\Play StepMania 3.9.lnk
2016-01-22 18:10 - 2016-01-22 18:10 - 00000788 _____ C:\Users\Administrator\Desktop\Play StepMania 3.9.lnk
2016-01-22 17:22 - 2016-01-22 17:22 - 00019145 _____ C:\Users\Matee-es\Downloads\[CzT]Dexter_Dexter_7_serie_CZ_.torrent
2016-01-22 17:02 - 2016-01-22 17:02 - 00000000 ____D C:\Users\Matee-es\Documents\Aspyr
2016-01-22 17:02 - 2016-01-22 17:02 - 00000000 ____D C:\Users\Matee-es\AppData\Local\Aspyr
2016-01-21 15:43 - 2016-01-21 15:43 - 00047730 _____ C:\Users\Matee-es\Downloads\[CzT]Hawaii_5_0_Hawaii_Five_0_2_serie_CZ_WebRip_.torrent
2016-01-21 13:55 - 2016-01-21 13:55 - 00018317 _____ C:\Users\Matee-es\Downloads\[CzT]Nebezpecne_pokuseni_Knock_Knock_2015_CZ_.torrent
2016-01-21 13:45 - 2016-01-21 13:45 - 00058206 _____ C:\Users\Matee-es\Downloads\[CzT]Hawaii_5_0_Hawaii_Five_0_1_serie_2010_CZ_TvRip_.torrent
2016-01-19 20:08 - 2016-01-19 20:08 - 00020623 _____ C:\Users\Matee-es\Downloads\[CzT]Vecne_mlada_The_Age_Of_Adaline_2015_CZ_.torrent
2016-01-19 20:04 - 2016-01-19 20:04 - 00015335 _____ C:\Users\Matee-es\Downloads\[CzT]Je_proste_bajecna_She_s_Funny_That_Way_2014_CZ_.torrent
2016-01-19 14:25 - 2016-01-19 14:25 - 00017127 _____ C:\Users\Matee-es\Downloads\[CzT]Guitar_hero_III_Legend_Of_Rock_PC_.torrent
2016-01-18 21:05 - 2016-01-18 21:05 - 00000891 _____ C:\Users\Matee-es\Desktop\Rainman Origins.lnk
2016-01-18 19:49 - 2016-01-18 19:51 - 00001659 _____ C:\Users\Matee-es\Desktop\New Downloads.lnk
2016-01-18 18:48 - 2016-01-18 18:48 - 00000000 ____D C:\ProgramData\Orbit
2016-01-18 18:46 - 2016-01-18 18:46 - 00000738 _____ C:\Users\Matee-es\Desktop\Rayman Legends.lnk
2016-01-18 18:46 - 2016-01-18 18:46 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\Rayman Legends
2016-01-18 18:42 - 2016-01-18 18:42 - 45383260 _____ C:\Users\Matee-es\Downloads\Rayman-Legends-CZ.zip
2016-01-18 18:24 - 2016-01-18 18:24 - 00029544 _____ C:\Users\Matee-es\Downloads\[CzT]Rayman_Legends_2013_.torrent
2016-01-18 18:24 - 2016-01-18 18:24 - 00019365 _____ C:\Users\Matee-es\Downloads\[CzT]Rayman_Origins_CZ_2012_.torrent
2016-01-18 18:24 - 2016-01-18 18:24 - 00016092 _____ C:\Users\Matee-es\Downloads\[CzT]Rayman_Legends_2013_CZ_.torrent
2016-01-18 11:42 - 2016-01-18 11:45 - 45699754 _____ C:\Users\Matee-es\Downloads\Válek---Moderní-diagnostické-metody-1---kontrastní-vyšetření-trávicí-trubice.pdf
2016-01-16 10:41 - 2016-01-16 10:41 - 17376260 _____ C:\Users\Matee-es\Downloads\HTC-Mobile-Driver-v4.17.0.001.zip
2016-01-16 10:38 - 2016-01-23 16:12 - 00000000 ____D C:\Users\Matee-es\AppData\Local\HTC MediaHub
2016-01-16 10:38 - 2016-01-16 10:44 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\HTC
2016-01-16 10:38 - 2016-01-16 10:38 - 00000000 ____D C:\Users\Matee-es\Documents\HTC
2016-01-16 10:38 - 2016-01-16 10:38 - 00000000 ____D C:\ProgramData\HTC
2016-01-16 10:36 - 2016-01-16 10:36 - 146699704 _____ (HTC) C:\Users\Matee-es\Downloads\setup_3.1.64.0_htc.exe
2016-01-16 10:34 - 2016-01-16 10:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC
2016-01-16 10:33 - 2016-01-16 10:34 - 00000000 ____D C:\Program Files (x86)\HTC
2016-01-16 10:33 - 2016-01-16 10:33 - 15541656 _____ (HTC Corporation ) C:\Users\Matee-es\Downloads\HTCDriver.exe
2016-01-16 10:33 - 2016-01-16 10:33 - 00000000 ____D C:\Program Files (x86)\Spirent Communications
2016-01-15 18:16 - 2016-01-15 18:16 - 00020309 _____ C:\Users\Matee-es\Downloads\[CzT]Posledni_lovec_carodejnic_The_Last_Witch_Hunter_2015_WebRip_1080p_.torrent
2016-01-15 18:14 - 2016-01-15 18:14 - 00004746 _____ C:\Users\Matee-es\Downloads\[CzT]Cena_moci_The_Runner_2015_CZ_.torrent
2016-01-15 18:13 - 2016-01-15 18:13 - 00013718 _____ C:\Users\Matee-es\Downloads\[CzT]Stazista_The_Intern_2015_CZ_.torrent
2016-01-15 13:06 - 2016-01-19 14:33 - 00000000 ____D C:\Users\Matee-es\Desktop\Club select
2016-01-15 09:57 - 2016-01-15 09:57 - 01923994 _____ C:\Users\Matee-es\Downloads\rainbow-mappack_2.7z
2016-01-15 09:56 - 2016-01-15 09:56 - 00005327 _____ C:\Users\Matee-es\Downloads\3916475-2408566a963154dfeb50a875462b1bca9b5476a8.zip
2016-01-15 09:55 - 2016-01-15 09:55 - 140811793 _____ C:\Users\Matee-es\Downloads\promod_map_collection_r3.rar
2016-01-13 19:44 - 2016-01-13 19:44 - 00000856 _____ C:\Users\Matee-es\Desktop\The Treasures of Montezuma 4.lnk
2016-01-13 19:44 - 2016-01-13 19:44 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Treasures of Montezuma 4
2016-01-13 19:42 - 2016-01-13 19:42 - 00017612 _____ C:\Users\Matee-es\Downloads\[CzT]Herkules_Hercules.torrent
2016-01-13 19:14 - 2016-01-13 19:14 - 00024076 _____ C:\Users\Matee-es\Downloads\[CzT]Herkules_Hercules_1997_CZ_SK_EN_1080p_.torrent
2016-01-12 12:47 - 2015-10-11 10:20 - 00000673 _____ C:\Users\Matee-es\Desktop\Counter-Strike 1.6.lnk
2016-01-12 12:46 - 2015-09-28 10:22 - 00000749 _____ C:\Users\Matee-es\Desktop\Far Cry 4.lnk
2016-01-12 10:07 - 2016-01-12 10:07 - 31973976 _____ (MiniTool Solution Ltd. ) C:\Users\Matee-es\Downloads\pwfree9 (1).exe
2016-01-12 09:59 - 2016-01-12 09:59 - 00012151 _____ C:\Users\Matee-es\Downloads\[CzT]MiniTool_Partition_Wizard_Professional_8_1_1_Portable_.torrent
2016-01-12 09:56 - 2016-01-12 09:57 - 07265213 _____ C:\Users\Matee-es\Downloads\Partition Wizard.rar
2016-01-12 09:54 - 2015-01-14 11:28 - 03066880 _____ C:\Windows\system32\pwNative.exe
2016-01-12 09:54 - 2013-09-30 16:26 - 00019152 ____N C:\Windows\system32\pwdrvio.sys
2016-01-12 09:54 - 2013-09-30 16:26 - 00012504 ____N C:\Windows\system32\pwdspio.sys
2016-01-12 09:53 - 2016-01-12 09:54 - 00000000 ____D C:\Program Files (x86)\MiniTool Partition Wizard Free 9.0
2016-01-12 09:53 - 2016-01-12 09:53 - 00001193 _____ C:\Users\Public\Desktop\MiniTool Partition Wizard Free.lnk
2016-01-12 09:53 - 2016-01-12 09:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Partition Wizard Free 9.0
2016-01-12 09:52 - 2016-01-12 09:52 - 31973976 _____ (MiniTool Solution Ltd. ) C:\Users\Matee-es\Downloads\pwfree9.exe
2016-01-12 09:44 - 2016-01-12 09:45 - 21222996 _____ C:\Users\Matee-es\Downloads\DM_ProDemo.zip
2016-01-12 09:13 - 2016-01-12 09:13 - 00000000 ____D C:\Users\Matee-es\AppData\Local\Apps\2.0
2016-01-12 08:53 - 2016-01-12 08:53 - 00882431 _____ C:\Users\Matee-es\Downloads\HxDSetupCSY.zip
2016-01-12 08:53 - 2016-01-12 08:53 - 00871928 _____ C:\Users\Matee-es\Downloads\HxDSetupCHS.zip
2016-01-12 08:41 - 2016-01-12 08:41 - 22090624 _____ (LSoft Technologies Inc ) C:\Users\Matee-es\Downloads\PartRecoveryToolkit-Setup.exe
2016-01-12 08:41 - 2016-01-12 08:41 - 00000000 ____D C:\Program Files\LSoft Technologies
2016-01-12 08:35 - 2016-01-12 08:35 - 02856744 _____ C:\Users\Matee-es\Downloads\gdbnt.zip
2016-01-12 08:35 - 2016-01-12 08:35 - 00001850 _____ C:\ProgramData\Microsoft\Windows\Start Menu\GetDataBack for NTFS.lnk
2016-01-12 08:35 - 2016-01-12 08:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Runtime Software
2016-01-12 08:35 - 2016-01-12 08:35 - 00000000 ____D C:\Program Files (x86)\Runtime Software
2016-01-12 08:31 - 2016-01-12 08:32 - 18889008 _____ (Kroll Ontrack Inc. ) C:\Users\Matee-es\Downloads\ER_WIN_PRO (1).exe
2016-01-12 08:25 - 2016-01-12 08:25 - 00198944 _____ (Acronis) C:\Windows\system32\Drivers\snapman.sys
2016-01-12 08:22 - 2016-01-12 08:23 - 74022136 _____ (Acronis) C:\Users\Matee-es\Downloads\dd_d_c.exe
2016-01-12 08:22 - 2016-01-12 08:22 - 116955136 _____ C:\Users\Matee-es\Downloads\gparted-live-0.5.2-1.iso
2016-01-12 08:17 - 2016-01-12 08:17 - 00000000 ____D C:\Users\Matee-es\licman
2016-01-12 08:17 - 2016-01-12 08:17 - 00000000 ____D C:\Users\Matee-es\ERPro64
2016-01-12 08:16 - 2016-01-12 08:16 - 18889008 _____ (Kroll Ontrack Inc. ) C:\Users\Matee-es\Downloads\ER_WIN_PRO.exe
2016-01-12 08:06 - 2016-01-12 08:06 - 03865296 _____ (QueTek Consulting Corporation) C:\Users\Matee-es\Downloads\32fsu42.exe
2016-01-12 08:06 - 2016-01-12 08:06 - 03865296 _____ (QueTek Consulting Corporation) C:\Users\Matee-es\Downloads\32fsu42 (1).exe
2016-01-12 08:05 - 2016-01-12 08:05 - 00000000 ____D C:\Partition Images
2016-01-12 08:01 - 2016-01-12 08:01 - 00000920 _____ C:\Users\Matee-es\Downloads\[CzT]File_Scavenger_3_2_Profesional.torrent
2016-01-12 08:00 - 2016-01-12 08:00 - 00740448 _____ (Smart PC Solutions ) C:\Users\Matee-es\Downloads\partitionrecovery.exe
2016-01-12 07:53 - 2016-01-12 07:53 - 12444088 _____ C:\Users\Matee-es\Downloads\testdisk-7.0.win.zip
2016-01-12 07:52 - 2016-01-12 07:52 - 01728221 _____ (A-FF Data Recovery ) C:\Users\Matee-es\Downloads\Nepotvrzeno 594648.crdownload
2016-01-12 07:48 - 2015-12-20 09:18 - 00451040 _____ (AVAST Software) C:\Windows\system32\Drivers\asw8983.tmp
2016-01-12 07:48 - 2015-12-20 09:18 - 00097648 _____ (AVAST Software) C:\Windows\system32\Drivers\asw8971.tmp
2016-01-12 07:48 - 2015-12-20 09:18 - 00028144 _____ (AVAST Software) C:\Windows\system32\Drivers\asw894E.tmp
2016-01-12 07:48 - 2015-12-20 09:17 - 01055560 _____ (AVAST Software) C:\Windows\system32\Drivers\asw895F.tmp
2016-01-12 07:48 - 2015-12-20 09:17 - 00386096 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-01-12 07:48 - 2015-12-20 09:17 - 00273784 _____ (AVAST Software) C:\Windows\system32\Drivers\asw8993.tmp
2016-01-12 07:48 - 2015-12-20 09:17 - 00155304 _____ (AVAST Software) C:\Windows\system32\Drivers\asw8994.tmp
2016-01-12 07:48 - 2015-12-20 09:17 - 00147088 _____ (AVAST Software) C:\Windows\system32\Drivers\ngv890F.tmp
2016-01-12 07:48 - 2015-12-20 09:17 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\asw896F.tmp
2016-01-12 07:48 - 2015-12-20 09:17 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\asw8982.tmp
2016-01-12 07:48 - 2015-12-20 09:17 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\asw8970.tmp
2016-01-11 18:32 - 2016-01-11 19:53 - 462477257 _____ C:\Users\Matee-es\Downloads\TTOM4.PowerVr.zip
2016-01-11 18:32 - 2016-01-11 18:37 - 35143650 _____ C:\Users\Matee-es\Downloads\TTOM4.PowerVr.apk
2016-01-11 18:30 - 2016-01-11 18:30 - 00483328 _____ C:\Users\Matee-es\Downloads\Nepotvrzeno 47931.crdownload
2016-01-11 18:29 - 2016-01-11 19:40 - 376394662 _____ C:\Users\Matee-es\Downloads\The-Treasures-Of-Montezuma-4-1.0.0-Adreno_Revdl.com.rar
2016-01-11 18:25 - 2016-01-11 18:45 - 57071638 _____ C:\Users\Matee-es\Downloads\com.alawar.treasuresofmontezuma3.zip
2016-01-11 18:25 - 2016-01-11 18:28 - 07421594 _____ C:\Users\Matee-es\Downloads\treasures-of-montezuma3-v1.1.0_apkone.net.apk
2016-01-11 18:25 - 2016-01-11 18:25 - 00503808 _____ C:\Users\Matee-es\Downloads\Nepotvrzeno 313118.crdownload
2016-01-11 18:24 - 2016-01-11 18:24 - 00503808 _____ C:\Users\Matee-es\Downloads\Nepotvrzeno 300393.crdownload
2016-01-11 17:42 - 2016-01-11 17:42 - 00017061 _____ C:\Users\Matee-es\Downloads\[CzT]Chaos_Reborn_2015_.torrent
2016-01-11 14:52 - 2016-01-11 14:52 - 00300960 _____ C:\Users\Matee-es\Downloads\cstrike_40.rar
2016-01-11 13:56 - 2016-01-11 13:56 - 00000000 ____D C:\Users\Matee-es\AppData\Local\GWX
2016-01-11 07:58 - 2016-01-11 08:00 - 00000000 ____D C:\Users\Matee-es\Documents\BFH
2016-01-11 07:33 - 2016-01-11 07:33 - 00003440 _____ C:\Users\Matee-es\Downloads\[CzT]Windows_Super_Aktivator_XP_Vista_7_.torrent
2016-01-11 07:32 - 2016-01-11 07:32 - 00009596 _____ C:\Users\Matee-es\Downloads\[CzT]Windows_7_aktivator_Loader_Extreme_Edition (1).torrent
2016-01-11 07:32 - 2016-01-11 07:32 - 00002655 _____ C:\Users\Matee-es\Downloads\[CzT]Aktivatory_Legalizatory_Windows_XP_Vista_7 (2).torrent
2016-01-09 20:00 - 2016-01-09 20:00 - 00014773 _____ C:\Users\Matee-es\Downloads\[CzT]A_Walk_in_the_Woods_2015_.torrent
2016-01-09 19:59 - 2016-01-09 19:59 - 00017598 _____ C:\Users\Matee-es\Downloads\[CzT]Stazista_The_Intern_2015_.torrent
2016-01-08 21:59 - 2016-01-08 21:59 - 05121680 _____ (Tunngle.net GmbH ) C:\Users\Matee-es\Downloads\Tunngle_Setup_v5.8.4.exe
2016-01-08 10:34 - 2016-01-12 07:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield Hardline
2016-01-08 10:34 - 2016-01-08 10:34 - 00000724 _____ C:\Users\Public\Desktop\Battlefield Hardline.lnk
2016-01-08 08:03 - 2016-01-12 07:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter-Strike Global Offensive
2016-01-08 08:03 - 2016-01-08 08:03 - 00001021 _____ C:\Users\Matee-es\Desktop\Counter-Strike Global Offensive.lnk
2016-01-08 07:57 - 2016-01-08 07:57 - 00013943 _____ C:\Users\Matee-es\Downloads\[CzT]Counter_Strike_Global_Offensive_v1_32_9_0_2014_CZ_.torrent
2016-01-07 17:24 - 2016-01-07 17:24 - 00094965 _____ C:\Users\Matee-es\Downloads\[CzT]Misfits_Zmetci_Misfits_5_serie_720p_TVRip_.torrent
2016-01-07 17:24 - 2016-01-07 17:24 - 00018176 _____ C:\Users\Matee-es\Downloads\[CzT]Misfits_Zmetci_Misfits_5_serie_CZ_TVRip_.torrent
2016-01-07 09:48 - 2016-01-07 09:48 - 00000000 ____D C:\Program Files (x86)\LenovoUsbDriver
2016-01-07 09:41 - 2016-01-18 19:53 - 00000000 ___RD C:\Users\Matee-es\Desktop\Smr. Upali
2016-01-07 08:18 - 2016-01-07 08:18 - 00718901 _____ C:\Users\Matee-es\Downloads\fallout_4_v10v1130_plus_19_trainer_fixed (1).zip
2016-01-07 08:04 - 2016-01-07 08:04 - 04082430 _____ C:\Users\Matee-es\Downloads\Fallout 4 V1.1.29.0.0 Trainer +12.rar
2016-01-07 07:53 - 2016-01-07 07:53 - 00003022 _____ C:\Windows\System32\Tasks\{134FA2BF-A167-4403-9FC2-06C1DC833640}
2016-01-05 11:49 - 2016-01-05 11:49 - 00012232 _____ C:\Users\Matee-es\Downloads\[CzT]To_byl_zitra_flam_2_Hot_Tub_Time_Machine_2_2015_CZ_.torrent
2016-01-05 11:44 - 2016-01-05 11:44 - 00019956 _____ C:\Users\Matee-es\Downloads\[CzT]Papirova_mesta_Paper_Towns_2015_CZ_.torrent
2016-01-05 11:41 - 2016-01-05 11:41 - 00011768 _____ C:\Users\Matee-es\Downloads\[CzT]Sherlock_Prizracna_nevesta_Sherlock_The_Abominable_Bride_2016_CZ_TvRip_.torrent
2016-01-05 11:35 - 2016-01-05 11:35 - 00013463 _____ C:\Users\Matee-es\Downloads\[CzT]Bojovnik_Southpaw_2015_CZ_.torrent
2016-01-04 11:59 - 2016-01-04 11:59 - 00019477 _____ C:\Users\Matee-es\Downloads\[CzT]Ospala_dira_Sleepy_Hollow_S02E01_Tohle_je_valka_CZ_TvRip_720p_.torrent
2016-01-04 11:57 - 2016-01-04 11:57 - 00019283 _____ C:\Users\Matee-es\Downloads\[CzT]Temny_pripad_True_Detective_1_serie_CZ_TVRip_.torrent
2016-01-04 11:55 - 2016-01-04 11:55 - 00024968 _____ C:\Users\Matee-es\Downloads\[CzT]Ospala_dira_Sleepy_Hollow_2_serie_CZ_TvRip_ (1).torrent
2016-01-03 15:27 - 2016-01-03 15:27 - 06405630 _____ C:\Users\Matee-es\Downloads\Borderlands2_Cz_v1.3_incl_All_DLC.rar
2016-01-03 15:19 - 2016-01-03 15:20 - 01288173 _____ C:\Users\Matee-es\Downloads\saveedit_r39.zip
2016-01-01 12:38 - 2016-01-01 12:38 - 00015870 _____ C:\Users\Matee-es\Downloads\[CzT]Ant_Man_2015_CZ_WebRip_.torrent
2016-01-01 12:37 - 2016-01-01 12:37 - 00011142 _____ C:\Users\Matee-es\Downloads\[CzT]Mission_Impossible_Narod_grazlu_Mission_Impossible_Rogue_Nation_2015_CZ_.torrent
2016-01-01 12:36 - 2016-01-01 12:36 - 00089195 _____ C:\Users\Matee-es\Downloads\[CzT]Martan_The_Martian_2015_1080pHD_.torrent
2015-12-29 21:07 - 2015-12-29 21:07 - 03525330 _____ C:\Users\Matee-es\Downloads\epiros_9.zip
2015-12-29 21:06 - 2015-12-29 21:07 - 12779834 _____ C:\Users\Matee-es\Downloads\foes_from_all_sides_2.zip
2015-12-29 21:05 - 2015-12-29 21:05 - 60593717 _____ C:\Users\Matee-es\Downloads\shantiri_ruins_3.zip
2015-12-28 17:44 - 2015-12-28 17:44 - 91526785 _____ C:\Users\Matee-es\Downloads\seamus_and_faceless_4.zip
2015-12-28 17:42 - 2015-12-28 17:42 - 15358234 _____ C:\Users\Matee-es\Downloads\middle_earth_6.zip
2015-12-28 17:37 - 2015-12-28 17:38 - 113522452 _____ C:\Users\Matee-es\Downloads\titans_pass_8.zip
2015-12-27 21:53 - 2015-12-27 21:53 - 00018804 _____ C:\Users\Matee-es\Downloads\[CzT]Zeme_ztracenych_Land_Of_The_Lost_2009_CZ_.torrent
2015-12-27 19:44 - 2015-12-27 19:44 - 00012347 _____ C:\Users\Matee-es\Downloads\[CzT]Brana_temnoty_Pay_the_Ghost_2015_CZ_.torrent
2015-12-27 16:44 - 2015-12-27 16:44 - 00000000 ____D C:\Users\Matee-es\Documents\Larian Studios
2015-12-27 10:13 - 2015-12-27 10:13 - 00048467 _____ C:\Users\Matee-es\Downloads\[CzT]Divinity_Original_Sin_Enhanced_Edition_2015_CZ_.torrent
2015-12-26 23:17 - 2015-12-26 23:17 - 00039955 _____ C:\Users\Matee-es\Downloads\[CzT]Borderlands_2_GOTY_v1_8_3_61xDLC_EN_CZ_2012_9_2014_.torrent
2015-12-26 23:15 - 2015-12-26 23:15 - 00014916 _____ C:\Users\Matee-es\Downloads\[CzT]Borderlands_The_Pre_Sequel_Update_v1_0_3_3_x_DLC_2014_.torrent
2015-12-26 23:04 - 2015-12-26 23:04 - 00049373 _____ C:\Users\Matee-es\Downloads\[CzT]Divinity_Original_Sin_Enhaced_Edition_Patch_v2_0_99_113_2015_CZ_.torrent

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-23 16:22 - 2015-11-24 20:26 - 00019860 _____ C:\Users\Matee-es\Downloads\FRST.txt
2016-01-23 16:22 - 2015-11-24 20:25 - 00000000 ____D C:\FRST
2016-01-23 16:20 - 2009-07-14 05:45 - 00010288 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-23 16:20 - 2009-07-14 05:45 - 00010288 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-23 16:18 - 2009-07-26 19:41 - 05649910 _____ C:\Windows\system32\perfh005.dat
2016-01-23 16:18 - 2009-07-26 19:41 - 01824196 _____ C:\Windows\system32\perfc005.dat
2016-01-23 16:18 - 2009-07-14 06:13 - 00006460 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-23 16:18 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-01-23 16:12 - 2015-12-02 15:05 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-23 16:12 - 2015-03-21 08:52 - 00000000 ____D C:\ProgramData\NVIDIA
2016-01-23 16:12 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-23 16:10 - 2015-12-02 15:05 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-23 16:10 - 2015-03-20 22:38 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\uTorrent
2016-01-23 15:55 - 2015-03-21 17:21 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-01-23 15:47 - 2015-09-10 19:45 - 00000958 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-01-23 15:43 - 2015-03-21 15:40 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-01-23 09:01 - 2015-12-11 13:33 - 00000000 ____D C:\Program Files (x86)\Everything
2016-01-23 09:01 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2016-01-22 21:01 - 2015-12-17 15:11 - 00000000 ____D C:\Users\Matee-es\Desktop\TopClub
2016-01-22 17:15 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-01-21 13:52 - 2015-03-21 11:11 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\vlc
2016-01-21 13:46 - 2015-09-10 19:33 - 00003852 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1441910025
2016-01-21 13:46 - 2015-08-23 06:03 - 00000000 ____D C:\Program Files (x86)\Opera
2016-01-20 19:48 - 2015-03-21 17:21 - 01065208 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2016-01-20 19:48 - 2015-03-21 17:21 - 00464256 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2016-01-20 15:27 - 2015-09-10 19:45 - 00003964 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-01-20 15:27 - 2015-03-21 15:40 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-01-20 15:27 - 2015-03-21 15:40 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-01-20 15:27 - 2015-03-21 15:40 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-01-18 18:49 - 2015-03-21 11:15 - 00000000 ____D C:\Users\Matee-es\AppData\Local\Ubisoft Game Launcher
2016-01-16 22:32 - 2009-07-14 05:45 - 00419144 _____ C:\Windows\system32\FNTCACHE.DAT
2016-01-16 14:51 - 2015-03-21 13:39 - 00169472 ___SH C:\Users\Matee-es\Documents\Thumbs.db
2016-01-16 10:38 - 2015-03-21 11:12 - 00000000 ____D C:\Users\Matee-es\AppData\Local\Apple Computer
2016-01-16 10:38 - 2015-03-21 11:11 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\Apple Computer
2016-01-16 10:38 - 2015-03-20 22:35 - 00112280 _____ C:\Users\Matee-es\AppData\Local\GDIPFONTCACHEV1.DAT
2016-01-16 10:36 - 2015-03-21 11:12 - 00000000 ____D C:\Users\Matee-es\AppData\Local\Downloaded Installations
2016-01-15 15:49 - 2015-11-28 09:54 - 00000000 ___RD C:\Users\Matee-es\Desktop\mUJ SELCET EDM
2016-01-15 11:29 - 2015-06-26 13:33 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-01-15 11:28 - 2015-11-07 17:34 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-01-13 19:46 - 2015-03-21 11:11 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\AlawarEntertainment
2016-01-12 12:46 - 2015-03-22 13:40 - 00000000 ____D C:\Users\Matee-es\Desktop\G4m35
2016-01-12 12:37 - 2015-05-20 18:26 - 00000000 ____D C:\Program Files (x86)\Acronis
2016-01-12 08:35 - 2015-03-20 22:00 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-01-12 08:34 - 2015-05-20 16:36 - 00000000 ____D C:\ProgramData\Acronis
2016-01-12 08:17 - 2015-03-20 21:49 - 00000000 ____D C:\Users\Matee-es
2016-01-12 07:50 - 2015-12-20 09:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-01-12 07:50 - 2015-12-03 16:54 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-01-12 07:50 - 2015-07-25 09:40 - 00000000 ____D C:\Users\Matee-es\Documents\Camping Manager 2012
2016-01-12 07:50 - 2015-06-05 16:42 - 00000000 ____D C:\Users\Matee-es\AppData\Local\Cyberlink SoftDMA
2016-01-12 07:50 - 2015-04-08 21:05 - 00000000 ___SD C:\Windows\system32\GWX
2016-01-12 07:50 - 2015-04-06 14:42 - 00000000 ____D C:\Users\Matee-es\Desktop\Progs
2016-01-12 07:50 - 2015-03-21 11:11 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\Xfire
2016-01-12 07:50 - 2015-03-21 11:11 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\Winamp
2016-01-12 07:50 - 2015-03-21 11:11 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\streamripper
2016-01-12 07:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2016-01-12 07:49 - 2015-12-20 09:31 - 00003038 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1450600292
2016-01-12 07:47 - 2015-04-08 14:56 - 00000000 ____D C:\Users\Administrator
2016-01-12 07:47 - 2015-03-21 17:26 - 00000000 ____D C:\Users\Matee-es\Documents\Fax
2016-01-08 11:24 - 2015-03-24 21:26 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-01-07 07:53 - 2015-03-20 21:54 - 00000000 ____D C:\Users\Matee-es\AppData\Local\ElevatedDiagnostics
2015-12-27 10:08 - 2015-03-21 17:21 - 00000000 ____D C:\Windows\SysWOW64\vbox
2015-12-27 10:08 - 2015-03-21 17:21 - 00000000 ____D C:\Windows\system32\vbox

==================== Files in the root of some directories =======

2015-03-21 11:11 - 2014-11-28 23:18 - 0000093 _____ () C:\Users\Matee-es\AppData\Local\fusioncache.dat
2015-03-21 11:11 - 2014-12-07 18:53 - 0007604 _____ () C:\Users\Matee-es\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll
[2015-12-09 15:42] - [2015-11-10 19:55] - 1008640 ____A (Microsoft Corporation) 8D0F86272C524052236761CABF6E7AFE

C:\Windows\SysWOW64\User32.dll
[2015-12-11 12:57] - [2015-12-11 12:57] - 0833024 ____A (Microsoft Corporation) E01EBE6A0C7B306763667FDC60A0B25A

C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-01-19 11:06

==================== End of FRST.txt ============================

[Rudy]

Zdravím!
Jak je na tom váš oper. systém s legalitou?

[matesss]

Předpokládám že mám legální windows. Vyskakuje mi pravidelně i možnost
update na windows 10.

[Rudy]

Udělekte následující sken:

Stáhněte a spusťte OTL: http://oldtimer.geekstogo.com/OTL.exe . Spusťte, zaškrněte "Pro všechny uživatele", Kontrola na havěť LOP" a Kontrola na hvěť PURITY" a do dolního bílého okna zkopírujte:

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
services.exe
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

%PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
%PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
%PROGRAMFILES%\Opera\opera.exe /md5
%PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5

%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*loader* /s

a klikněte na >Prohledat<. Dejte oby logy.

[matesss]

Po scanu napsal getting out of memory a nedal žadný log ...

[Rudy]

OK. Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

[matesss]

Dobré ráno zde je log

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 24.1.2016
Scan Time: 9:17
Logfile:
Administrator: Yes

Version: 2.2.0.1024
Malware Database: v2016.01.24.02
Rootkit Database: v2016.01.20.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Matee-es

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 391321
Time Elapsed: 4 min, 43 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 2
PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\mtSanlux, , [7cf657e6f8a1e254976aa391f90bf20e],
PUP.Optional.Linkury, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\Application Hosting, , [2f43f5485e3bdd59885bc612768c5aa6],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 1
HackTool.CheatEngine, C:\Users\Matee-es\Downloads\Fallout 4 V1.1.29.0.0 Trainer +12.rar, , [3d35de5fff9aec4aac3b54d4ab5531cf],

Physical Sectors: 0
(No malicious items detected)


(end)

[Rudy]

Nalezené položky smažte.

[matesss]

Smazáno, proběhl restart... Další kroky ?

[Rudy]

Nastala nějaká změna?

[matesss]

Pravděpodobně ne , zkusil jsem znovu instalovat a seklo se to někde v půlce.

[matesss]

Nejaké další typy či možnosti jak s tím pohnout ?

[Rudy]

Dá instalacwe nějakou hlášku, proč nemůže pokračovat? Virový problém to zřejmě nebude.

[matesss]

Vůbec nic nehlásí. Jakakoliv instalace zamrzne pokaždé na náhodně jiném procentu. Instalace se dá potom zavřit jedině přez procesy. Zoušel sem měnit i cíle instalace
ale bez vlivu.

[matesss]

Domnívám se že problém nastal po automatické aktualizaci ...