Prosím o kontrolu logu
Napsal: 07 bře 2016 12:21
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by piego (administrator) on DESKTOP-KR1HMAQ (07-03-2016 12:15:28)
Running from C:\Users\piego\Desktop
Loaded Profiles: piego (Available Profiles: piego)
Platform: Windows 10 Pro Version 1511 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Macrovision Corporation) C:\Program Files (x86)\Realtek\Audio\Drivers\HDADrv\Setup.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(forum.viry.cz) C:\Users\piego\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)
HKU\S-1-5-21-976120650-2553915292-391218413-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3014224 2016-02-04] (Valve Corporation)
HKU\S-1-5-21-976120650-2553915292-391218413-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8641240 2016-02-12] (Piriform Ltd)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 80.250.1.162 80.250.1.155
Tcpip\..\Interfaces\{4c9707b9-0515-47b7-9d93-fb3349d1199a}: [DhcpNameServer] 80.250.1.162 80.250.1.155
Internet Explorer:
==================
HKU\S-1-5-21-976120650-2553915292-391218413-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
SearchScopes: HKU\S-1-5-21-976120650-2553915292-391218413-1001 -> DefaultScope {BCADEA27-724D-452B-8136-511F7A0C1949} URL = hxxps://www.google.com/search?q={searchTerms}&s ... utEncoding?}
SearchScopes: HKU\S-1-5-21-976120650-2553915292-391218413-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-976120650-2553915292-391218413-1001 -> {BCADEA27-724D-452B-8136-511F7A0C1949} URL = hxxps://www.google.com/search?q={searchTerms}&s ... utEncoding?}
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-17] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-17] (Oracle Corporation)
FireFox:
========
FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-02-17] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-02-17] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-02-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-02-23] (NVIDIA Corporation)
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1325088 2016-01-29] ()
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6474112 2016-02-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2609024 2016-02-17] (NVIDIA Corporation)
R2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [10752 2016-02-28] () [File not signed]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 dtultrascsibus; C:\Windows\System32\drivers\dtultrascsibus.sys [30264 2015-08-19] (Disc Soft Ltd)
S3 dtultrausbbus; C:\Windows\System32\drivers\dtultrausbbus.sys [47160 2015-08-19] (Disc Soft Ltd)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-01-26] (REALiX(tm))
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28032 2016-02-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [935168 2016-01-26] (Realtek )
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
S3 cpuz139; \??\C:\Users\piego\AppData\Local\Temp\cpuz139\cpuz139_x64.sys [X]
S3 GPU-Z; \??\C:\Users\piego\AppData\Local\Temp\GPU-Z.sys [X]
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-03-07 12:15 - 2016-03-07 12:15 - 00008315 _____ C:\Users\piego\Desktop\FRST.txt
2016-03-07 12:14 - 2016-03-07 12:15 - 00000000 ____D C:\FRST
2016-03-07 12:13 - 2016-03-07 12:13 - 02374144 _____ (Farbar) C:\Users\piego\Desktop\FRST64.exe
2016-03-07 12:11 - 2016-03-07 12:10 - 00112640 _____ (forum.viry.cz) C:\Users\piego\Desktop\FRSTLauncher.exe
2016-03-07 11:54 - 2016-03-07 11:58 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-07 11:46 - 2016-03-07 11:46 - 00309596 _____ C:\WINDOWS\Minidump\030716-21734-01.dmp
2016-03-07 09:28 - 2016-03-07 09:28 - 00000000 ____D C:\Users\piego\Documents\Games
2016-03-06 08:23 - 2016-03-06 08:23 - 00409884 _____ C:\WINDOWS\Minidump\030616-20031-01.dmp
2016-03-06 07:27 - 2016-03-06 07:27 - 00282148 _____ C:\WINDOWS\Minidump\030616-27781-01.dmp
2016-03-05 19:34 - 2016-03-05 19:35 - 00000000 ____D C:\Users\piego\Documents\Crack f4
2016-03-04 15:46 - 2016-03-04 15:46 - 00290404 _____ C:\WINDOWS\Minidump\030416-28187-01.dmp
2016-03-02 19:01 - 2016-03-07 11:46 - 498254597 _____ C:\WINDOWS\MEMORY.DMP
2016-03-02 19:01 - 2016-03-02 19:01 - 00389508 _____ C:\WINDOWS\Minidump\030216-28343-01.dmp
2016-03-02 09:49 - 2016-02-23 20:59 - 00111672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2016-03-02 09:47 - 2016-02-24 00:57 - 42983480 _____ C:\WINDOWS\system32\nvcompiler.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 37616184 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 31120952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 24944064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 21201784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 20742072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 17631304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 17224472 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 17117128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 02541504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 02187712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 01924152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436200.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 01571776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436200.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00950328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00880576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00786688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00747064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00689600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00632336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00601936 _____ C:\WINDOWS\system32\nvmcumd.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00541184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00445912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00425016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00383424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00379448 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00378968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00346560 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00316960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00175552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00153208 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00151368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2016-02-28 12:25 - 2016-02-28 12:25 - 00000000 ____D C:\Users\piego\Desktop\samsung
2016-02-28 12:09 - 2016-02-28 12:16 - 00000000 ____D C:\Users\piego\Desktop\nokia
2016-02-28 10:13 - 2016-02-28 10:18 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-02-28 10:13 - 2016-02-28 10:14 - 00000000 ___HD C:\Program Files (x86)\Temp
2016-02-28 10:09 - 2016-02-28 10:09 - 00000000 ____D C:\WINDOWS\%LOCALAPPDATA%
2016-02-28 09:59 - 2016-02-28 09:59 - 00000914 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2016-02-28 09:59 - 2016-02-28 09:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2016-02-28 09:59 - 2016-02-28 09:59 - 00000000 ____D C:\Program Files\CPUID
2016-02-25 18:23 - 2016-02-25 18:23 - 00002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2016-02-25 18:23 - 2016-02-25 18:23 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-02-25 18:23 - 2016-02-25 18:23 - 00000000 ____D C:\Program Files\CCleaner
2016-02-23 10:39 - 2016-02-23 10:39 - 00001511 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2016-02-23 10:38 - 2016-02-17 07:40 - 01903344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2016-02-23 10:38 - 2016-02-17 07:40 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2016-02-23 10:38 - 2016-02-17 07:40 - 01571624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2016-02-23 10:38 - 2016-02-17 07:40 - 01316184 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2016-02-23 10:38 - 2016-02-17 07:40 - 00112216 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2016-02-22 19:08 - 2016-02-22 19:55 - 00000000 ____D C:\Users\piego\Desktop\tablet
2016-02-22 19:06 - 2016-02-22 19:06 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-02-22 18:50 - 2016-02-22 18:50 - 00000221 _____ C:\Users\piego\Desktop\Borderlands 2.url
2016-02-19 18:58 - 2016-02-19 18:58 - 00000931 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2016-02-19 18:58 - 2016-02-19 18:58 - 00000000 ____D C:\Users\piego\AppData\Local\Black_Tree_Gaming
2016-02-19 18:58 - 2016-02-19 18:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2016-02-19 18:58 - 2016-02-19 18:58 - 00000000 ____D C:\Program Files\Nexus Mod Manager
2016-02-18 10:25 - 2016-02-18 10:30 - 00000000 ____D C:\Users\piego\Desktop\fotky starej ericsson
2016-02-17 19:29 - 2016-02-17 19:29 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2016-02-17 19:29 - 2016-02-17 19:29 - 00000000 ____D C:\Users\piego\AppData\Roaming\Sun
2016-02-17 19:29 - 2016-02-17 19:29 - 00000000 ____D C:\ProgramData\Oracle
2016-02-17 19:29 - 2016-02-17 19:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-02-17 19:29 - 2016-02-17 19:29 - 00000000 ____D C:\Program Files (x86)\Java
2016-02-17 14:31 - 2016-02-17 14:31 - 00000531 _____ C:\Users\piego\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hudba.lnk
2016-02-17 08:55 - 2016-03-02 09:26 - 00000000 ____D C:\Users\piego\AppData\Roaming\uTorrent
2016-02-17 08:55 - 2016-02-17 08:55 - 00000000 ____D C:\Users\piego\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2016-02-16 20:37 - 2016-02-09 09:25 - 01924152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436191.dll
2016-02-16 20:37 - 2016-02-09 09:25 - 01573432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436191.dll
2016-02-11 20:03 - 2016-03-07 12:12 - 00000000 ____D C:\Users\piego\AppData\Local\CrashDumps
2016-02-11 17:56 - 2016-01-29 07:57 - 04502352 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-02-11 17:56 - 2016-01-29 07:33 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-02-11 17:56 - 2016-01-27 07:15 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-02-11 17:56 - 2016-01-27 07:15 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-02-11 17:56 - 2016-01-27 07:01 - 07476064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-02-11 17:56 - 2016-01-27 07:01 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-02-11 17:56 - 2016-01-27 07:01 - 01819720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-02-11 17:56 - 2016-01-27 06:59 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-02-11 17:56 - 2016-01-27 06:57 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-02-11 17:56 - 2016-01-27 06:57 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-02-11 17:56 - 2016-01-27 06:57 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-02-11 17:56 - 2016-01-27 06:56 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-02-11 17:56 - 2016-01-27 06:55 - 05242496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-02-11 17:56 - 2016-01-27 06:55 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2016-02-11 17:56 - 2016-01-27 06:54 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-02-11 17:56 - 2016-01-27 06:46 - 02606824 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-02-11 17:56 - 2016-01-27 06:46 - 01270072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-02-11 17:56 - 2016-01-27 06:45 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-02-11 17:56 - 2016-01-27 06:45 - 06605544 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-02-11 17:56 - 2016-01-27 06:44 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-02-11 17:56 - 2016-01-27 06:44 - 00085320 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2016-02-11 17:56 - 2016-01-27 06:43 - 00359776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-02-11 17:56 - 2016-01-27 06:37 - 01998176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-02-11 17:56 - 2016-01-27 06:37 - 00576352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-02-11 17:56 - 2016-01-27 06:21 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
2016-02-11 17:56 - 2016-01-27 06:15 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll
2016-02-11 17:56 - 2016-01-27 06:13 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-02-11 17:56 - 2016-01-27 06:12 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-02-11 17:56 - 2016-01-27 06:11 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2016-02-11 17:56 - 2016-01-27 06:10 - 22394368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-02-11 17:56 - 2016-01-27 06:10 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2016-02-11 17:56 - 2016-01-27 06:08 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-11 17:56 - 2016-01-27 06:08 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll
2016-02-11 17:56 - 2016-01-27 06:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll
2016-02-11 17:56 - 2016-01-27 06:05 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-02-11 17:56 - 2016-01-27 06:05 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-02-11 17:56 - 2016-01-27 06:05 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-02-11 17:56 - 2016-01-27 06:05 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-02-11 17:56 - 2016-01-27 06:04 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-02-11 17:56 - 2016-01-27 06:04 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-02-11 17:56 - 2016-01-27 06:03 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-02-11 17:56 - 2016-01-27 06:02 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-02-11 17:56 - 2016-01-27 06:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-02-11 17:56 - 2016-01-27 05:59 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll
2016-02-11 17:56 - 2016-01-27 05:58 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-02-11 17:56 - 2016-01-27 05:57 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-02-11 17:56 - 2016-01-27 05:55 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-02-11 17:56 - 2016-01-27 05:55 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-02-11 17:56 - 2016-01-27 05:54 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-02-11 17:56 - 2016-01-27 05:52 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-02-11 17:56 - 2016-01-27 05:50 - 02230784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-02-11 17:56 - 2016-01-27 05:50 - 01504768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-02-11 17:56 - 2016-01-27 05:50 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-02-11 17:56 - 2016-01-27 05:49 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-02-11 17:56 - 2016-01-27 05:48 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-02-11 17:56 - 2016-01-27 05:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll
2016-02-11 17:56 - 2016-01-27 05:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-02-11 17:56 - 2016-01-27 05:41 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-02-11 17:56 - 2016-01-27 05:39 - 02275328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-02-11 17:56 - 2016-01-27 05:38 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-02-11 17:56 - 2016-01-27 05:38 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-02-11 17:56 - 2016-01-27 05:37 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-02-11 17:56 - 2016-01-27 05:36 - 02757120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-02-11 17:56 - 2016-01-27 05:32 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-02-11 17:56 - 2016-01-27 05:31 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2016-02-08 18:31 - 2016-02-08 18:31 - 00000000 ____D C:\Users\piego\AppData\LocalLow\Heroes and Generals
2016-02-08 18:21 - 2016-02-08 18:21 - 00000000 ____D C:\Users\piego\AppData\Roaming\HeroesAndGeneralsDesktop
2016-02-08 16:54 - 2016-02-08 16:54 - 00000222 _____ C:\Users\piego\Desktop\Heroes & Generals.url
2016-02-08 07:57 - 2016-02-08 07:57 - 00000000 ____D C:\Users\piego\AppData\Roaming\NVIDIA
2016-02-08 07:55 - 2016-02-08 07:55 - 00001093 _____ C:\Users\piego\Desktop\TechPowerUp GPU-Z.lnk
2016-02-08 07:55 - 2016-02-08 07:55 - 00000000 ____D C:\Program Files (x86)\GPU-Z
2016-02-08 07:53 - 2016-03-07 12:01 - 00003142 _____ C:\WINDOWS\System32\Tasks\MSIAfterburner
2016-02-06 19:16 - 2016-02-07 20:12 - 00000000 ____D C:\Users\piego\Desktop\sett witcher3
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-03-07 12:11 - 2016-01-26 12:19 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-07 11:59 - 2016-01-26 13:56 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-07 11:59 - 2016-01-26 12:37 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-03-07 11:58 - 2016-01-26 12:14 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-03-07 11:47 - 2016-01-26 12:44 - 00000000 ____D C:\Users\piego
2016-03-07 11:46 - 2016-01-27 16:56 - 00000000 ____D C:\WINDOWS\Minidump
2016-03-07 08:50 - 2016-01-26 13:28 - 00004208 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{60535463-F75D-45E0-956D-76C749FB2509}
2016-03-07 08:49 - 2016-01-26 12:26 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-03-05 20:17 - 2015-09-23 19:46 - 00000000 ____D C:\Users\piego\Documents\My Games
2016-03-05 19:43 - 2016-01-20 14:19 - 00000000 ____D C:\Users\piego\Desktop\Fallout4
2016-03-05 18:29 - 2016-01-26 12:26 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-03 15:44 - 2016-01-29 13:36 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-03 15:21 - 2016-01-29 13:39 - 00000000 ____D C:\Users\piego\AppData\Local\Steam
2016-03-02 09:50 - 2016-01-29 20:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-03-02 09:50 - 2016-01-26 13:55 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-03-02 09:49 - 2016-01-26 12:25 - 00000000 ____D C:\WINDOWS\INF
2016-03-02 08:47 - 2015-09-27 07:08 - 00828928 ___SH C:\Users\piego\Desktop\Thumbs.db
2016-02-29 17:28 - 2016-01-26 18:23 - 00000000 ____D C:\Users\piego\AppData\Local\ElevatedDiagnostics
2016-02-28 12:12 - 2016-01-26 12:50 - 01771468 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-28 12:12 - 2016-01-26 12:31 - 00750030 _____ C:\WINDOWS\system32\perfh005.dat
2016-02-28 12:12 - 2016-01-26 12:31 - 00150654 _____ C:\WINDOWS\system32\perfc005.dat
2016-02-28 10:19 - 2016-01-26 13:32 - 00002223 _____ C:\Users\Public\Desktop\Driver Booster 3.lnk
2016-02-28 10:18 - 2016-01-26 13:14 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-02-28 10:13 - 2016-01-26 13:54 - 00000000 ____D C:\WINDOWS\system32\DAX2
2016-02-28 10:11 - 2016-01-26 13:15 - 00000000 ____D C:\Program Files (x86)\Intel
2016-02-26 11:08 - 2015-11-21 16:04 - 00000000 ____D C:\Users\piego\Documents\Nexus Mod Manager
2016-02-26 11:07 - 2016-01-29 20:40 - 00000000 ____D C:\Users\piego\AppData\Local\Fallout4
2016-02-26 10:55 - 2015-11-24 03:09 - 00000447 _____ C:\Users\piego\Desktop\ShadowBoost.ini
2016-02-25 19:32 - 2016-01-21 19:39 - 00000000 ____D C:\Users\piego\Documents\The Witcher 3
2016-02-25 18:29 - 2016-01-26 12:34 - 00000000 ___DC C:\WINDOWS\Panther
2016-02-25 02:04 - 2016-01-26 13:55 - 12479040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2016-02-24 00:57 - 2016-01-29 20:12 - 14115136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2016-02-24 00:57 - 2016-01-29 20:12 - 03649760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2016-02-24 00:57 - 2016-01-26 13:55 - 19779456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2016-02-24 00:57 - 2016-01-26 13:55 - 17175056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2016-02-24 00:57 - 2016-01-26 13:55 - 03231360 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2016-02-24 00:57 - 2016-01-26 13:55 - 00035832 _____ C:\WINDOWS\system32\nvinfo.pb
2016-02-23 21:28 - 2016-01-29 20:13 - 00530368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2016-02-23 21:28 - 2016-01-29 20:13 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2016-02-23 21:28 - 2016-01-26 13:56 - 06368824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2016-02-23 21:28 - 2016-01-26 13:56 - 06154909 _____ C:\WINDOWS\system32\nvcoproc.bin
2016-02-23 21:28 - 2016-01-26 13:56 - 02993720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2016-02-23 21:28 - 2016-01-26 13:56 - 02563128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2016-02-23 21:28 - 2016-01-26 13:56 - 01263040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2016-02-23 21:28 - 2016-01-26 13:56 - 00393784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2016-02-23 21:28 - 2016-01-26 13:56 - 00071224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2016-02-23 10:39 - 2016-01-29 20:15 - 00000000 ____D C:\Users\piego\AppData\Local\NVIDIA Corporation
2016-02-23 10:39 - 2016-01-29 20:15 - 00000000 ____D C:\Users\piego\AppData\Local\NVIDIA
2016-02-23 10:38 - 2016-01-26 13:55 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-02-23 10:38 - 2016-01-26 13:55 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-02-23 10:31 - 2016-01-26 12:26 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-02-23 09:55 - 2016-01-26 13:33 - 00000000 ____D C:\ProgramData\ProductData
2016-02-20 20:31 - 2016-01-26 16:58 - 00000000 ____D C:\Users\piego\AppData\Local\Skyrim
2016-02-19 18:52 - 2016-01-26 17:07 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2016-02-17 19:29 - 2015-10-01 08:10 - 00000000 ____D C:\Users\piego\.oracle_jre_usage
2016-02-17 08:55 - 2015-12-22 17:34 - 00001040 _____ C:\Users\piego\Desktop\µTorrent.lnk
2016-02-14 19:26 - 2016-01-29 20:13 - 00001967 _____ C:\Users\piego\Desktop\witcher3 – zástupce.lnk
2016-02-14 19:20 - 2016-01-26 14:12 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-02-14 19:19 - 2016-01-26 14:12 - 146614896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-02-13 17:49 - 2016-01-26 12:26 - 00000000 ____D C:\WINDOWS\rescache
2016-02-11 19:40 - 2015-08-19 08:36 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-02-11 19:38 - 2016-01-26 12:26 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-08 07:58 - 2016-01-26 17:07 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
==================== Files in the root of some directories =======
2016-02-04 09:09 - 2016-02-04 09:09 - 0000017 _____ () C:\Users\piego\AppData\Local\resmon.resmoncfg
2016-01-26 13:54 - 2016-01-26 13:54 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Some files in TEMP:
====================
C:\Users\piego\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-02-26 17:35
==================== End of FRST.txt ============================
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:451.66 GB) (Free:155.47 GB) NTFS
Drive e: (DATA) (Fixed) (Total:479.36 GB) (Free:189.6 GB) NTFS
Available physical RAM: 2628.36 MB
Total physical RAM: 4094.49 MB
Percentage of memory in use: 35%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: AB856D89)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=451.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=479.4 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\Users\piego:Heroes & Generals [38]
==================== Security Center ==================
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\piego\Desktop" je 5270 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
==================== End Of Log ==============================
Ran by piego (administrator) on DESKTOP-KR1HMAQ (07-03-2016 12:15:28)
Running from C:\Users\piego\Desktop
Loaded Profiles: piego (Available Profiles: piego)
Platform: Windows 10 Pro Version 1511 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Macrovision Corporation) C:\Program Files (x86)\Realtek\Audio\Drivers\HDADrv\Setup.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(forum.viry.cz) C:\Users\piego\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)
HKU\S-1-5-21-976120650-2553915292-391218413-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3014224 2016-02-04] (Valve Corporation)
HKU\S-1-5-21-976120650-2553915292-391218413-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8641240 2016-02-12] (Piriform Ltd)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 80.250.1.162 80.250.1.155
Tcpip\..\Interfaces\{4c9707b9-0515-47b7-9d93-fb3349d1199a}: [DhcpNameServer] 80.250.1.162 80.250.1.155
Internet Explorer:
==================
HKU\S-1-5-21-976120650-2553915292-391218413-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
SearchScopes: HKU\S-1-5-21-976120650-2553915292-391218413-1001 -> DefaultScope {BCADEA27-724D-452B-8136-511F7A0C1949} URL = hxxps://www.google.com/search?q={searchTerms}&s ... utEncoding?}
SearchScopes: HKU\S-1-5-21-976120650-2553915292-391218413-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-976120650-2553915292-391218413-1001 -> {BCADEA27-724D-452B-8136-511F7A0C1949} URL = hxxps://www.google.com/search?q={searchTerms}&s ... utEncoding?}
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-17] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-17] (Oracle Corporation)
FireFox:
========
FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-02-17] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-02-17] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-02-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-02-23] (NVIDIA Corporation)
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1325088 2016-01-29] ()
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6474112 2016-02-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2609024 2016-02-17] (NVIDIA Corporation)
R2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [10752 2016-02-28] () [File not signed]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 dtultrascsibus; C:\Windows\System32\drivers\dtultrascsibus.sys [30264 2015-08-19] (Disc Soft Ltd)
S3 dtultrausbbus; C:\Windows\System32\drivers\dtultrausbbus.sys [47160 2015-08-19] (Disc Soft Ltd)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-01-26] (REALiX(tm))
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28032 2016-02-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [935168 2016-01-26] (Realtek )
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
S3 cpuz139; \??\C:\Users\piego\AppData\Local\Temp\cpuz139\cpuz139_x64.sys [X]
S3 GPU-Z; \??\C:\Users\piego\AppData\Local\Temp\GPU-Z.sys [X]
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-03-07 12:15 - 2016-03-07 12:15 - 00008315 _____ C:\Users\piego\Desktop\FRST.txt
2016-03-07 12:14 - 2016-03-07 12:15 - 00000000 ____D C:\FRST
2016-03-07 12:13 - 2016-03-07 12:13 - 02374144 _____ (Farbar) C:\Users\piego\Desktop\FRST64.exe
2016-03-07 12:11 - 2016-03-07 12:10 - 00112640 _____ (forum.viry.cz) C:\Users\piego\Desktop\FRSTLauncher.exe
2016-03-07 11:54 - 2016-03-07 11:58 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-07 11:46 - 2016-03-07 11:46 - 00309596 _____ C:\WINDOWS\Minidump\030716-21734-01.dmp
2016-03-07 09:28 - 2016-03-07 09:28 - 00000000 ____D C:\Users\piego\Documents\Games
2016-03-06 08:23 - 2016-03-06 08:23 - 00409884 _____ C:\WINDOWS\Minidump\030616-20031-01.dmp
2016-03-06 07:27 - 2016-03-06 07:27 - 00282148 _____ C:\WINDOWS\Minidump\030616-27781-01.dmp
2016-03-05 19:34 - 2016-03-05 19:35 - 00000000 ____D C:\Users\piego\Documents\Crack f4
2016-03-04 15:46 - 2016-03-04 15:46 - 00290404 _____ C:\WINDOWS\Minidump\030416-28187-01.dmp
2016-03-02 19:01 - 2016-03-07 11:46 - 498254597 _____ C:\WINDOWS\MEMORY.DMP
2016-03-02 19:01 - 2016-03-02 19:01 - 00389508 _____ C:\WINDOWS\Minidump\030216-28343-01.dmp
2016-03-02 09:49 - 2016-02-23 20:59 - 00111672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2016-03-02 09:47 - 2016-02-24 00:57 - 42983480 _____ C:\WINDOWS\system32\nvcompiler.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 37616184 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 31120952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 24944064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 21201784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 20742072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 17631304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 17224472 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 17117128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 02541504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 02187712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 01924152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436200.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 01571776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436200.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00950328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00880576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00786688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00747064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00689600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00632336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00601936 _____ C:\WINDOWS\system32\nvmcumd.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00541184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00445912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00425016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00383424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00379448 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00378968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00346560 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00316960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00175552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00153208 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00151368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2016-03-02 09:47 - 2016-02-24 00:57 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2016-02-28 12:25 - 2016-02-28 12:25 - 00000000 ____D C:\Users\piego\Desktop\samsung
2016-02-28 12:09 - 2016-02-28 12:16 - 00000000 ____D C:\Users\piego\Desktop\nokia
2016-02-28 10:13 - 2016-02-28 10:18 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-02-28 10:13 - 2016-02-28 10:14 - 00000000 ___HD C:\Program Files (x86)\Temp
2016-02-28 10:09 - 2016-02-28 10:09 - 00000000 ____D C:\WINDOWS\%LOCALAPPDATA%
2016-02-28 09:59 - 2016-02-28 09:59 - 00000914 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2016-02-28 09:59 - 2016-02-28 09:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2016-02-28 09:59 - 2016-02-28 09:59 - 00000000 ____D C:\Program Files\CPUID
2016-02-25 18:23 - 2016-02-25 18:23 - 00002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2016-02-25 18:23 - 2016-02-25 18:23 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-02-25 18:23 - 2016-02-25 18:23 - 00000000 ____D C:\Program Files\CCleaner
2016-02-23 10:39 - 2016-02-23 10:39 - 00001511 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2016-02-23 10:38 - 2016-02-17 07:40 - 01903344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2016-02-23 10:38 - 2016-02-17 07:40 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2016-02-23 10:38 - 2016-02-17 07:40 - 01571624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2016-02-23 10:38 - 2016-02-17 07:40 - 01316184 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2016-02-23 10:38 - 2016-02-17 07:40 - 00112216 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2016-02-22 19:08 - 2016-02-22 19:55 - 00000000 ____D C:\Users\piego\Desktop\tablet
2016-02-22 19:06 - 2016-02-22 19:06 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-02-22 18:50 - 2016-02-22 18:50 - 00000221 _____ C:\Users\piego\Desktop\Borderlands 2.url
2016-02-19 18:58 - 2016-02-19 18:58 - 00000931 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2016-02-19 18:58 - 2016-02-19 18:58 - 00000000 ____D C:\Users\piego\AppData\Local\Black_Tree_Gaming
2016-02-19 18:58 - 2016-02-19 18:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2016-02-19 18:58 - 2016-02-19 18:58 - 00000000 ____D C:\Program Files\Nexus Mod Manager
2016-02-18 10:25 - 2016-02-18 10:30 - 00000000 ____D C:\Users\piego\Desktop\fotky starej ericsson
2016-02-17 19:29 - 2016-02-17 19:29 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2016-02-17 19:29 - 2016-02-17 19:29 - 00000000 ____D C:\Users\piego\AppData\Roaming\Sun
2016-02-17 19:29 - 2016-02-17 19:29 - 00000000 ____D C:\ProgramData\Oracle
2016-02-17 19:29 - 2016-02-17 19:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-02-17 19:29 - 2016-02-17 19:29 - 00000000 ____D C:\Program Files (x86)\Java
2016-02-17 14:31 - 2016-02-17 14:31 - 00000531 _____ C:\Users\piego\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hudba.lnk
2016-02-17 08:55 - 2016-03-02 09:26 - 00000000 ____D C:\Users\piego\AppData\Roaming\uTorrent
2016-02-17 08:55 - 2016-02-17 08:55 - 00000000 ____D C:\Users\piego\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2016-02-16 20:37 - 2016-02-09 09:25 - 01924152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436191.dll
2016-02-16 20:37 - 2016-02-09 09:25 - 01573432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436191.dll
2016-02-11 20:03 - 2016-03-07 12:12 - 00000000 ____D C:\Users\piego\AppData\Local\CrashDumps
2016-02-11 17:56 - 2016-01-29 07:57 - 04502352 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-02-11 17:56 - 2016-01-29 07:33 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-02-11 17:56 - 2016-01-27 07:15 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-02-11 17:56 - 2016-01-27 07:15 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-02-11 17:56 - 2016-01-27 07:01 - 07476064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-02-11 17:56 - 2016-01-27 07:01 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-02-11 17:56 - 2016-01-27 07:01 - 01819720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-02-11 17:56 - 2016-01-27 06:59 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-02-11 17:56 - 2016-01-27 06:57 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-02-11 17:56 - 2016-01-27 06:57 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-02-11 17:56 - 2016-01-27 06:57 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-02-11 17:56 - 2016-01-27 06:56 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-02-11 17:56 - 2016-01-27 06:55 - 05242496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-02-11 17:56 - 2016-01-27 06:55 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2016-02-11 17:56 - 2016-01-27 06:54 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-02-11 17:56 - 2016-01-27 06:46 - 02606824 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-02-11 17:56 - 2016-01-27 06:46 - 01270072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-02-11 17:56 - 2016-01-27 06:45 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-02-11 17:56 - 2016-01-27 06:45 - 06605544 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-02-11 17:56 - 2016-01-27 06:44 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-02-11 17:56 - 2016-01-27 06:44 - 00085320 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2016-02-11 17:56 - 2016-01-27 06:43 - 00359776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-02-11 17:56 - 2016-01-27 06:37 - 01998176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-02-11 17:56 - 2016-01-27 06:37 - 00576352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-02-11 17:56 - 2016-01-27 06:21 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
2016-02-11 17:56 - 2016-01-27 06:15 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll
2016-02-11 17:56 - 2016-01-27 06:13 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-02-11 17:56 - 2016-01-27 06:12 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-02-11 17:56 - 2016-01-27 06:11 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2016-02-11 17:56 - 2016-01-27 06:10 - 22394368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-02-11 17:56 - 2016-01-27 06:10 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2016-02-11 17:56 - 2016-01-27 06:08 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-11 17:56 - 2016-01-27 06:08 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll
2016-02-11 17:56 - 2016-01-27 06:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll
2016-02-11 17:56 - 2016-01-27 06:05 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-02-11 17:56 - 2016-01-27 06:05 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-02-11 17:56 - 2016-01-27 06:05 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-02-11 17:56 - 2016-01-27 06:05 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-02-11 17:56 - 2016-01-27 06:04 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-02-11 17:56 - 2016-01-27 06:04 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-02-11 17:56 - 2016-01-27 06:03 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-02-11 17:56 - 2016-01-27 06:02 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-02-11 17:56 - 2016-01-27 06:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-02-11 17:56 - 2016-01-27 05:59 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll
2016-02-11 17:56 - 2016-01-27 05:58 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-02-11 17:56 - 2016-01-27 05:57 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-02-11 17:56 - 2016-01-27 05:55 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-02-11 17:56 - 2016-01-27 05:55 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-02-11 17:56 - 2016-01-27 05:54 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-02-11 17:56 - 2016-01-27 05:52 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-02-11 17:56 - 2016-01-27 05:50 - 02230784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-02-11 17:56 - 2016-01-27 05:50 - 01504768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-02-11 17:56 - 2016-01-27 05:50 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-02-11 17:56 - 2016-01-27 05:49 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-02-11 17:56 - 2016-01-27 05:48 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-02-11 17:56 - 2016-01-27 05:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll
2016-02-11 17:56 - 2016-01-27 05:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-02-11 17:56 - 2016-01-27 05:41 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-02-11 17:56 - 2016-01-27 05:39 - 02275328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-02-11 17:56 - 2016-01-27 05:38 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-02-11 17:56 - 2016-01-27 05:38 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-02-11 17:56 - 2016-01-27 05:37 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-02-11 17:56 - 2016-01-27 05:36 - 02757120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-02-11 17:56 - 2016-01-27 05:32 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-02-11 17:56 - 2016-01-27 05:31 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2016-02-08 18:31 - 2016-02-08 18:31 - 00000000 ____D C:\Users\piego\AppData\LocalLow\Heroes and Generals
2016-02-08 18:21 - 2016-02-08 18:21 - 00000000 ____D C:\Users\piego\AppData\Roaming\HeroesAndGeneralsDesktop
2016-02-08 16:54 - 2016-02-08 16:54 - 00000222 _____ C:\Users\piego\Desktop\Heroes & Generals.url
2016-02-08 07:57 - 2016-02-08 07:57 - 00000000 ____D C:\Users\piego\AppData\Roaming\NVIDIA
2016-02-08 07:55 - 2016-02-08 07:55 - 00001093 _____ C:\Users\piego\Desktop\TechPowerUp GPU-Z.lnk
2016-02-08 07:55 - 2016-02-08 07:55 - 00000000 ____D C:\Program Files (x86)\GPU-Z
2016-02-08 07:53 - 2016-03-07 12:01 - 00003142 _____ C:\WINDOWS\System32\Tasks\MSIAfterburner
2016-02-06 19:16 - 2016-02-07 20:12 - 00000000 ____D C:\Users\piego\Desktop\sett witcher3
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-03-07 12:11 - 2016-01-26 12:19 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-07 11:59 - 2016-01-26 13:56 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-07 11:59 - 2016-01-26 12:37 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-03-07 11:58 - 2016-01-26 12:14 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-03-07 11:47 - 2016-01-26 12:44 - 00000000 ____D C:\Users\piego
2016-03-07 11:46 - 2016-01-27 16:56 - 00000000 ____D C:\WINDOWS\Minidump
2016-03-07 08:50 - 2016-01-26 13:28 - 00004208 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{60535463-F75D-45E0-956D-76C749FB2509}
2016-03-07 08:49 - 2016-01-26 12:26 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-03-05 20:17 - 2015-09-23 19:46 - 00000000 ____D C:\Users\piego\Documents\My Games
2016-03-05 19:43 - 2016-01-20 14:19 - 00000000 ____D C:\Users\piego\Desktop\Fallout4
2016-03-05 18:29 - 2016-01-26 12:26 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-03 15:44 - 2016-01-29 13:36 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-03 15:21 - 2016-01-29 13:39 - 00000000 ____D C:\Users\piego\AppData\Local\Steam
2016-03-02 09:50 - 2016-01-29 20:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-03-02 09:50 - 2016-01-26 13:55 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-03-02 09:49 - 2016-01-26 12:25 - 00000000 ____D C:\WINDOWS\INF
2016-03-02 08:47 - 2015-09-27 07:08 - 00828928 ___SH C:\Users\piego\Desktop\Thumbs.db
2016-02-29 17:28 - 2016-01-26 18:23 - 00000000 ____D C:\Users\piego\AppData\Local\ElevatedDiagnostics
2016-02-28 12:12 - 2016-01-26 12:50 - 01771468 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-28 12:12 - 2016-01-26 12:31 - 00750030 _____ C:\WINDOWS\system32\perfh005.dat
2016-02-28 12:12 - 2016-01-26 12:31 - 00150654 _____ C:\WINDOWS\system32\perfc005.dat
2016-02-28 10:19 - 2016-01-26 13:32 - 00002223 _____ C:\Users\Public\Desktop\Driver Booster 3.lnk
2016-02-28 10:18 - 2016-01-26 13:14 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-02-28 10:13 - 2016-01-26 13:54 - 00000000 ____D C:\WINDOWS\system32\DAX2
2016-02-28 10:11 - 2016-01-26 13:15 - 00000000 ____D C:\Program Files (x86)\Intel
2016-02-26 11:08 - 2015-11-21 16:04 - 00000000 ____D C:\Users\piego\Documents\Nexus Mod Manager
2016-02-26 11:07 - 2016-01-29 20:40 - 00000000 ____D C:\Users\piego\AppData\Local\Fallout4
2016-02-26 10:55 - 2015-11-24 03:09 - 00000447 _____ C:\Users\piego\Desktop\ShadowBoost.ini
2016-02-25 19:32 - 2016-01-21 19:39 - 00000000 ____D C:\Users\piego\Documents\The Witcher 3
2016-02-25 18:29 - 2016-01-26 12:34 - 00000000 ___DC C:\WINDOWS\Panther
2016-02-25 02:04 - 2016-01-26 13:55 - 12479040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2016-02-24 00:57 - 2016-01-29 20:12 - 14115136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2016-02-24 00:57 - 2016-01-29 20:12 - 03649760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2016-02-24 00:57 - 2016-01-26 13:55 - 19779456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2016-02-24 00:57 - 2016-01-26 13:55 - 17175056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2016-02-24 00:57 - 2016-01-26 13:55 - 03231360 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2016-02-24 00:57 - 2016-01-26 13:55 - 00035832 _____ C:\WINDOWS\system32\nvinfo.pb
2016-02-23 21:28 - 2016-01-29 20:13 - 00530368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2016-02-23 21:28 - 2016-01-29 20:13 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2016-02-23 21:28 - 2016-01-26 13:56 - 06368824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2016-02-23 21:28 - 2016-01-26 13:56 - 06154909 _____ C:\WINDOWS\system32\nvcoproc.bin
2016-02-23 21:28 - 2016-01-26 13:56 - 02993720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2016-02-23 21:28 - 2016-01-26 13:56 - 02563128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2016-02-23 21:28 - 2016-01-26 13:56 - 01263040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2016-02-23 21:28 - 2016-01-26 13:56 - 00393784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2016-02-23 21:28 - 2016-01-26 13:56 - 00071224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2016-02-23 10:39 - 2016-01-29 20:15 - 00000000 ____D C:\Users\piego\AppData\Local\NVIDIA Corporation
2016-02-23 10:39 - 2016-01-29 20:15 - 00000000 ____D C:\Users\piego\AppData\Local\NVIDIA
2016-02-23 10:38 - 2016-01-26 13:55 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-02-23 10:38 - 2016-01-26 13:55 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-02-23 10:31 - 2016-01-26 12:26 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-02-23 09:55 - 2016-01-26 13:33 - 00000000 ____D C:\ProgramData\ProductData
2016-02-20 20:31 - 2016-01-26 16:58 - 00000000 ____D C:\Users\piego\AppData\Local\Skyrim
2016-02-19 18:52 - 2016-01-26 17:07 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2016-02-17 19:29 - 2015-10-01 08:10 - 00000000 ____D C:\Users\piego\.oracle_jre_usage
2016-02-17 08:55 - 2015-12-22 17:34 - 00001040 _____ C:\Users\piego\Desktop\µTorrent.lnk
2016-02-14 19:26 - 2016-01-29 20:13 - 00001967 _____ C:\Users\piego\Desktop\witcher3 – zástupce.lnk
2016-02-14 19:20 - 2016-01-26 14:12 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-02-14 19:19 - 2016-01-26 14:12 - 146614896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-02-13 17:49 - 2016-01-26 12:26 - 00000000 ____D C:\WINDOWS\rescache
2016-02-11 19:40 - 2015-08-19 08:36 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-02-11 19:38 - 2016-01-26 12:26 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-08 07:58 - 2016-01-26 17:07 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
==================== Files in the root of some directories =======
2016-02-04 09:09 - 2016-02-04 09:09 - 0000017 _____ () C:\Users\piego\AppData\Local\resmon.resmoncfg
2016-01-26 13:54 - 2016-01-26 13:54 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Some files in TEMP:
====================
C:\Users\piego\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-02-26 17:35
==================== End of FRST.txt ============================
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:451.66 GB) (Free:155.47 GB) NTFS
Drive e: (DATA) (Fixed) (Total:479.36 GB) (Free:189.6 GB) NTFS
Available physical RAM: 2628.36 MB
Total physical RAM: 4094.49 MB
Percentage of memory in use: 35%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: AB856D89)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=451.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=479.4 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\Users\piego:Heroes & Generals [38]
==================== Security Center ==================
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\piego\Desktop" je 5270 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
==================== End Of Log ==============================
