Počítač zamrzne pri nečinnosti

[michalt91]

Počítač zamŕza pri nečinnosti, je nutný tvrdý reštart. Niekedy ale zamrzne na určitú dobu aj počas práce ale po nejakej dobe nabehne.


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 13-03-2017
Ran by Michal (administrator) on MICHAL (14-03-2017 10:42:06)
Running from D:\Desktop
Loaded Profiles: Michal (Available Profiles: Michal)
Platform: Windows 8.1 Pro (Update) (X64) Language: Angličtina (USA)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Windows\KMS-R@1n.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(O&O Software GmbH) C:\Program Files\OO Software\Defrag\oodag.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Connectify) C:\Program Files (x86)\Connectify\ConnectifyService.exe
(Connectify) C:\Program Files (x86)\Connectify\Connectifyd.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Connectify) C:\Program Files (x86)\Connectify\Connectify.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
(Kairos Technologies Ltd) C:\Program Files (x86)\KairosPlanet\KairosPlanet.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Connectify) C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe\livecomm.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIC.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIC.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17111056 2014-12-11] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [193008 2014-12-11] (Lenovo(beijing) Limited)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16781824 2017-02-14] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1483264 2017-02-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1483264 2017-02-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1483264 2017-02-14] (Realtek Semiconductor)
HKLM\...\Run: [OODefragTray] => C:\Program Files\OO Software\Defrag\oodtray.exe [5128904 2016-11-03] (O&O Software GmbH)
HKLM\...\Run: [RtsFT] => C:\Windows\RTFTrack.exe [5158144 2016-10-09] (Realtek semiconductor)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Connectify Hotspot] => C:\Program Files (x86)\Connectify\Connectify.exe [4131384 2016-12-14] (Connectify)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2017-01-19] (Apple Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [408888 2014-10-08] (Power Software Ltd)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2377159320-826319336-1296422701-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-2377159320-826319336-1296422701-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-2377159320-826319336-1296422701-1001\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-2377159320-826319336-1296422701-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2377159320-826319336-1296422701-1001\...\Run: [Lync] => C:\Program Files (x86)\Microsoft Office\Office15\lync.exe [24172752 2017-01-27] (Microsoft Corporation)
HKU\S-1-5-21-2377159320-826319336-1296422701-1001\...\Run: [Google Update] => C:\Users\Michal\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe [601752 2016-12-16] (Google Inc.)
HKU\S-1-5-21-2377159320-826319336-1296422701-1001\...\Run: [KairosPlanet] => C:\Program Files (x86)\KairosPlanet\KairosPlanet.exe [2530304 2016-06-14] (Kairos Technologies Ltd)
HKU\S-1-5-21-2377159320-826319336-1296422701-1001\...\MountPoints2: F - "F:\setup.exe"
HKU\S-1-5-21-2377159320-826319336-1296422701-1001\...\MountPoints2: G - "G:\Madden08.exe"
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [170360 2017-02-23] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [148016 2017-02-23] (NVIDIA Corporation)
AppInit_DLLs-x32: , C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [148016 2017-02-23] (NVIDIA Corporation)
IFEO\OSppSvc.exe: [Debugger] KMS-R@1nHook.exe
IFEO\SppExtComObj.exe: [Debugger] KMS-R@1nHook.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\O&O Defrag Tray.lnk [2016-11-11]
ShortcutTarget: O&O Defrag Tray.lnk -> C:\Windows\Installer\{B30EBF12-4268-45F5-8948-99C983025151}\app_icon.ico ()
Startup: C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Badoo TB 1.0.6.lnk [2015-01-23]
ShortcutTarget: Badoo TB 1.0.6.lnk -> C:\ProgramData\{20ce5ceb-cc74-da87-20ce-e5cebcc773af}\Badoo TB 1.0.6.exe (No File)
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\..\Interfaces\{C3668277-9EDE-4418-8C97-3D971B3A3217}: [DhcpNameServer] 158.195.6.2 158.195.6.3 158.195.4.3

Internet Explorer:
==================
HKU\S-1-5-21-2377159320-826319336-1296422701-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-15] (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-11-15] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-15] (Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-15] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-15] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\b6fbw52o.default-1457520679872 [2017-03-14]
FF Extension: (Adblock Plus) - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\b6fbw52o.default-1457520679872\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_221.dll [2017-02-14] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-15] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-15] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_221.dll [2017-02-14] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-15] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-15] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-02-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-02-23] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2377159320-826319336-1296422701-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\Michal\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-2377159320-826319336-1296422701-1001: @talk.google.com/O1DPlugin -> C:\Users\Michal\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-2377159320-826319336-1296422701-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Michal\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2377159320-826319336-1296422701-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Michal\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2377159320-826319336-1296422701-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Michal\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-18] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2016-07-19] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Michal\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Michal\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R2 Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [257592 2016-12-14] (Connectify)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [395024 2016-12-27] (EasyAntiCheat Ltd)
R2 KMS-R@1n; C:\Windows\KMS-R@1n.exe [26112 2017-02-14] () [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-02-23] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-02-23] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462784 2017-02-23] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-02-23] (NVIDIA Corporation)
R2 OODefragAgent; C:\Program Files\OO Software\Defrag\oodag.exe [1735368 2016-11-03] (O&O Software GmbH)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [4307192 2016-10-09] (Qualcomm Atheros Communications, Inc.)
R1 cfywlan1; C:\Windows\system32\DRIVERS\cfywlan1.sys [36736 2015-12-05] (Connectify)
R1 cnnctfy3; C:\Windows\system32\DRIVERS\cnnctfy3.sys [43872 2015-12-05] (Connectify)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77408 2017-03-03] ()
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2016-01-05] (REALiX(tm))
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [186304 2017-03-14] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [111544 2017-03-14] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2017-03-14] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [251840 2017-03-14] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [92088 2017-03-14] (Malwarebytes)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-02-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47672 2017-01-06] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57792 2017-01-20] (NVIDIA Corporation)
S3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [418784 2017-02-14] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [3127552 2016-10-09] (Realtek Semiconductor Corp.)
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [163644 2016-02-01] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-14] (Synaptics Incorporated)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 WinDivert1.1; C:\Program Files\KMSpico\WinDivert.sys [35376 2014-12-11] (Basil Projects)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-03-14 10:41 - 2017-03-14 10:42 - 00000000 ____D C:\FRST
2017-03-12 08:03 - 2017-03-12 08:03 - 00297456 _____ C:\Windows\Minidump\031217-27234-01.dmp
2017-03-10 10:05 - 2017-03-10 10:05 - 00000000 ____D C:\Windows\SysWOW64\NV
2017-03-10 10:05 - 2017-03-10 10:05 - 00000000 ____D C:\Windows\system32\NV
2017-03-10 10:05 - 2017-03-10 10:05 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-03-10 10:05 - 2017-02-23 09:17 - 00136064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-03-10 10:05 - 2017-01-26 01:13 - 00103936 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-03-10 10:05 - 2017-01-26 01:12 - 00326656 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-03-10 10:05 - 2017-01-26 01:09 - 00322560 _____ C:\Windows\system32\vulkan-1.dll
2017-03-10 10:05 - 2017-01-26 01:09 - 00118272 _____ C:\Windows\system32\vulkaninfo.exe
2017-03-10 10:03 - 2017-03-10 10:04 - 00000000 ____D C:\Windows\LastGood.Tmp
2017-03-10 10:02 - 2017-02-23 11:34 - 40192056 _____ C:\Windows\system32\nvcompiler.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 35272760 _____ C:\Windows\SysWOW64\nvcompiler.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 34950592 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 28223544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 19883088 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 19007344 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 17281112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 14674712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 14429240 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2017-03-10 10:02 - 2017-02-23 11:34 - 13377072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 11122912 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 11019888 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 09306312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 08990256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 03625408 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 03185600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 01985080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437878.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 01589696 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437878.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 01051584 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 00989120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 00959424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 00912440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 00687408 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 00611384 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 00576008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 00503920 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 00500792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 00425288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 00153184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 00131720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2017-03-10 10:02 - 2017-02-23 11:34 - 00038336 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2017-03-04 22:43 - 2017-03-04 22:43 - 00000000 ____D C:\Users\Michal\ansel
2017-03-04 22:34 - 2016-12-27 10:23 - 00395024 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe
2017-03-04 22:29 - 2017-03-04 22:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Watch_Dogs 2
2017-03-04 22:03 - 2017-03-04 22:28 - 00000000 ____D C:\Program Files (x86)\Watch_Dogs 2
2017-03-04 21:57 - 2017-03-04 21:57 - 00412872 _____ C:\Windows\Minidump\030417-61734-01.dmp
2017-03-04 21:56 - 2017-03-12 08:03 - 338123383 _____ C:\Windows\MEMORY.DMP
2017-03-02 12:40 - 2017-03-02 12:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-03-02 12:37 - 2017-03-02 12:40 - 00000000 ____D C:\Program Files\iTunes
2017-03-02 12:37 - 2017-03-02 12:37 - 00000000 ____D C:\Program Files\iPod
2017-03-02 12:37 - 2017-03-02 12:37 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2017-03-01 23:42 - 2017-03-02 12:37 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2017-02-16 11:42 - 2017-02-16 11:42 - 00000000 ____D C:\Users\Michal\AppData\Local\ElevatedDiagnostics
2017-02-14 22:08 - 2017-02-10 01:52 - 01983424 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437866.dll
2017-02-14 22:08 - 2017-02-10 01:52 - 01589696 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437866.dll
2017-02-14 21:21 - 2017-01-20 19:39 - 00057792 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-02-14 20:15 - 2017-02-14 20:15 - 00026112 _____ C:\Windows\KMS-R@1n.exe
2017-02-14 20:15 - 2017-02-14 20:15 - 00005120 _____ C:\Windows\KMS-R@1nHook.exe
2017-02-14 20:15 - 2017-02-14 20:15 - 00004096 _____ C:\Windows\KMS-R@1nHook.dll
2017-02-14 20:15 - 2017-02-14 20:15 - 00000000 ____D C:\Windows\System32\Tasks\R@1n-KMS
2017-02-14 20:15 - 2017-02-14 20:15 - 00000000 ____D C:\Users\Michal\AppData\Local\mpress
2017-02-14 14:31 - 2017-02-14 14:31 - 72520712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2017-02-14 14:31 - 2017-02-14 14:31 - 09124224 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2017-02-14 14:31 - 2017-02-14 14:31 - 07172912 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 07096184 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 06264632 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 05545472 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2017-02-14 14:31 - 2017-02-14 14:31 - 05347000 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 03503048 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 03302272 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 03203584 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 03203424 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 03014144 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2017-02-14 14:31 - 2017-02-14 14:31 - 02201600 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 02050176 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 01965808 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 01959600 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 01780616 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 01591056 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 01508928 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 01353824 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 01133584 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00965024 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00743960 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00727432 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00708312 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00689880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00678176 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00677672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00574752 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00532376 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00504304 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00447720 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00445400 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00441264 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00387312 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00378384 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00362048 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00343704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00330560 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00327448 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00321712 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00321712 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00310416 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00272712 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00253896 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00253864 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00252872 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00231912 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00221968 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00214832 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00209536 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00192976 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00166200 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00151784 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00134200 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00122320 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00118592 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00110984 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00090912 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00088344 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00088320 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00084616 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00083624 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2017-02-14 14:31 - 2017-02-14 14:31 - 00023688 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2017-02-14 14:29 - 2017-02-14 14:29 - 09891328 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RsCRIcon.dll
2017-02-14 14:29 - 2017-02-14 14:29 - 04332032 _____ (Realtek Semiconductor Corp.) C:\Windows\RtCRU64.exe
2017-02-14 14:29 - 2017-02-14 14:29 - 00954368 _____ (Realtek ) C:\Windows\system32\Drivers\Rt630x64.sys
2017-02-14 14:29 - 2017-02-14 14:29 - 00418784 _____ (Realsil Semiconductor Corporation) C:\Windows\system32\Drivers\RtsUer.sys
2017-02-14 14:29 - 2017-02-14 14:29 - 00084480 _____ (Realtek Semiconductor.) C:\Windows\system32\RtCRX64.dll
2017-02-14 14:29 - 2017-02-14 14:29 - 00082536 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2017-02-14 09:59 - 2017-02-03 18:37 - 00093360 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-02-14 09:59 - 2017-02-02 15:37 - 00650752 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-02-14 09:59 - 2017-01-18 15:35 - 01609216 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-02-14 09:59 - 2017-01-18 15:35 - 01286144 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-02-14 09:59 - 2017-01-18 15:35 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-02-14 09:59 - 2017-01-18 15:35 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-02-14 09:59 - 2017-01-18 15:35 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2017-02-14 09:59 - 2017-01-18 15:35 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-02-14 09:59 - 2017-01-18 15:35 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-02-13 11:30 - 2017-02-13 11:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-03-14 10:40 - 2017-01-29 10:14 - 00092088 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-03-14 10:26 - 2016-11-18 20:58 - 00000000 ____D C:\Users\Michal\AppData\LocalLow\Mozilla
2017-03-14 10:26 - 2014-12-11 11:27 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-03-14 10:18 - 2014-12-11 11:38 - 00000000 ____D C:\ProgramData\NVIDIA
2017-03-14 10:12 - 2016-10-20 19:52 - 00000000 ____D C:\Program Files (x86)\KairosPlanet
2017-03-14 10:11 - 2014-12-20 20:12 - 00000000 ___RD C:\Users\Michal\iCloudDrive
2017-03-14 10:10 - 2014-12-13 20:51 - 00000000 __RDO C:\Users\Michal\OneDrive
2017-03-14 10:07 - 2017-01-29 10:14 - 00251840 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-03-14 10:07 - 2017-01-29 10:14 - 00186304 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-03-14 10:07 - 2017-01-29 10:14 - 00111544 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-03-14 10:07 - 2017-01-29 10:14 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-03-14 10:06 - 2014-12-11 10:47 - 00000000 ____D C:\Users\Michal
2017-03-14 10:05 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-13 13:13 - 2016-06-25 18:58 - 00000000 ____D C:\Users\Michal\AppData\Roaming\vlc
2017-03-12 14:10 - 2014-12-11 10:47 - 00000000 ____D C:\Users\Michal\AppData\Local\Packages
2017-03-12 11:16 - 2014-12-11 10:52 - 01736954 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-12 08:12 - 2015-01-17 23:53 - 00000506 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2017-03-12 08:03 - 2015-12-03 21:14 - 00000000 ____D C:\Windows\Minidump
2017-03-12 00:38 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2017-03-11 17:21 - 2016-01-10 12:15 - 00000000 ____D C:\Users\Michal\AppData\Local\CrashDumps
2017-03-10 13:39 - 2014-12-11 10:54 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2377159320-826319336-1296422701-1001
2017-03-10 10:06 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2017-03-10 10:02 - 2014-12-11 10:54 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-03-10 09:27 - 2016-12-15 19:00 - 00004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-10 09:27 - 2016-11-24 17:53 - 00003852 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-10 09:26 - 2016-11-24 17:53 - 00003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-10 09:26 - 2016-11-24 17:53 - 00003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-10 09:26 - 2016-11-24 17:53 - 00003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-10 09:26 - 2016-11-24 17:53 - 00003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-10 09:26 - 2016-11-24 17:53 - 00003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-10 09:26 - 2014-12-11 10:54 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-03-10 09:26 - 2014-12-11 10:54 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-03-05 22:08 - 2016-10-20 19:53 - 00000000 ____D C:\Users\Michal\AppData\Local\WinApp
2017-03-05 09:47 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp
2017-03-05 09:46 - 2014-12-11 22:00 - 00000000 ____D C:\Windows\system32\MRT
2017-03-05 09:44 - 2014-12-11 22:00 - 138020592 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-03-04 22:43 - 2014-12-11 12:01 - 00000000 ____D C:\Users\Michal\AppData\Roaming\uTorrent
2017-03-04 22:42 - 2015-09-18 10:30 - 00000000 ____D C:\Users\Michal\AppData\LocalLow\uTorrent
2017-03-03 18:25 - 2017-01-29 10:14 - 00077408 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-03-02 12:37 - 2014-12-20 19:31 - 00000000 ____D C:\Program Files\Common Files\Apple
2017-02-26 21:18 - 2014-12-20 20:13 - 00000000 ____D C:\Users\Michal\AppData\Local\BF1B0F9F-84EE-462A-9DD4-4EBD48A570BF.aplzod
2017-02-23 19:35 - 2016-11-24 17:53 - 01880512 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2017-02-23 19:35 - 2016-11-24 17:53 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2017-02-23 19:35 - 2016-11-24 17:53 - 01468864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2017-02-23 19:35 - 2016-11-24 17:53 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2017-02-23 19:35 - 2016-11-24 17:53 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2017-02-23 15:30 - 2016-12-15 19:00 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-02-23 11:34 - 2016-09-27 20:38 - 16399408 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2017-02-23 11:34 - 2016-09-02 07:32 - 00042616 _____ C:\Windows\system32\nvinfo.pb
2017-02-23 11:34 - 2016-01-28 19:47 - 03583744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-02-23 11:34 - 2014-12-11 11:37 - 04064088 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-02-23 11:34 - 2014-12-11 11:37 - 00408272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2017-02-23 11:34 - 2014-12-11 11:37 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2017-02-23 11:34 - 2013-12-26 19:42 - 00492744 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2017-02-23 11:34 - 2013-12-26 19:42 - 00170360 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2017-02-23 09:43 - 2016-11-24 17:53 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2017-02-23 09:28 - 2014-12-11 11:38 - 06401984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-02-23 09:28 - 2014-12-11 11:38 - 02479160 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-02-23 09:28 - 2014-12-11 11:38 - 01764408 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-02-23 09:28 - 2014-12-11 11:38 - 00548288 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-02-23 09:28 - 2014-12-11 11:38 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-02-23 09:28 - 2014-12-11 11:38 - 00146368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\oemdspif.dll
2017-02-23 09:28 - 2014-12-11 11:38 - 00083512 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-02-23 09:28 - 2014-12-11 11:38 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-02-23 07:38 - 2014-12-11 11:38 - 07807027 _____ C:\Windows\system32\nvcoproc.bin
2017-02-22 09:36 - 2015-12-05 21:27 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-21 11:20 - 2016-11-08 19:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
2017-02-21 11:20 - 2016-11-08 19:31 - 00000000 ____D C:\Program Files (x86)\Counter-Strike 1.6
2017-02-16 15:32 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\NDF
2017-02-15 20:48 - 2015-01-11 17:21 - 00000000 ____D C:\Program Files (x86)\Connectify
2017-02-15 06:47 - 2014-12-11 11:24 - 00000000 ____D C:\Windows\SysWOW64\sda
2017-02-15 01:03 - 2015-06-03 00:07 - 00000000 ____D C:\Windows\system32\appraiser
2017-02-14 20:26 - 2014-12-11 11:27 - 00003718 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-02-14 20:26 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-02-14 20:26 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\Macromed
2017-02-14 14:34 - 2016-01-05 16:32 - 00000000 ____D C:\Windows\system32\DAX2
2017-02-14 14:33 - 2014-12-11 23:19 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2017-02-14 14:26 - 2016-01-05 16:21 - 00002914 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Michal)
2017-02-14 09:46 - 2014-12-11 12:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2017-02-14 09:43 - 2013-08-22 14:25 - 00000167 _____ C:\Windows\win.ini
2017-02-13 11:33 - 2016-01-05 16:21 - 00000000 ____D C:\ProgramData\ProductData
2017-02-13 11:12 - 2016-01-05 16:21 - 00000000 ____D C:\Users\Michal\AppData\Roaming\IObit

==================== Files in the root of some directories =======

2015-09-29 19:38 - 2016-04-25 19:53 - 0000132 _____ () C:\Users\Michal\AppData\Roaming\Adobe PNG Format CS6 Prefs
2014-12-11 23:19 - 2014-12-11 23:19 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-12-15 19:01 - 2017-01-24 20:57 - 0005110 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-15 19:01 - 2017-01-24 01:05 - 0005898 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1

Some files in TEMP:
====================
2017-02-14 22:13 - 2017-02-09 23:39 - 0868152 _____ (NVIDIA Corporation) C:\Users\Michal\AppData\Local\Temp\nvSCPAPI64.dll
2017-03-10 10:02 - 2017-02-09 23:39 - 0352704 _____ (NVIDIA Corporation) C:\Users\Michal\AppData\Local\Temp\nvStInst.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-03-07 07:18

==================== End of FRST.txt ============================

[JaRon]

ahoj
odstran z PC nelegalny SW a vycisti PC s NPE https://security.symantec.com/nbrt/npe.aspx