Kontrola logu, RAM 70-80%
Napsal: 12 čer 2016 16:03
Dobrý den, pokud by si někdo udělal čas a omrknul můj log, byl bych velice vděčný. RAM usage mám kolem 70-80% což sem nikdy nemíval, při poslechu hudby z youtube a následném zminimalizováním se mi zpravidla video kousne a načítá do nekonečna dokud nedám F5. Po zapnutí PC mi vyskakuje toto: http://s33.postimg.org/62mcb4uhb/A1262016.jpg
Jsem tu asi po 4 letech, poprosil bych o přesný postup, PC jinak bez jakékoliv údržby, žadný antivir, ccleaner, defragmentace,..
Log z FRST:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:12-06-2016
Ran by Domi (administrator) on DOMI-PC (12-06-2016 16:26:10)
Running from C:\Users\Domi\Desktop
Loaded Profiles: Domi (Available Profiles: Domi)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
() C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
(NEC Electronics Corporation) C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
() C:\Program Files (x86)\Gaming Keyboard\OSD.exe
(Disc Soft Ltd) D:\Programs\DAEMON Tools Lite\DiscSoftBusService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\smart6\timelock\AlarmClock.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(VideoLAN) D:\Programs\VLC\vlc.exe
(forum.viry.cz) C:\Users\Domi\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10135584 2010-03-26] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-05-02] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [XMouseButtonControl] => D:\Programs\X mouse\XMouseButtonControl.exe [1127408 2015-10-19] (Highresolution Enterprises)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2009-10-21] (NEC Electronics Corporation)
HKLM-x32\...\Run: [VICTORY Gaming Keyboard] => C:\Program Files (x86)\Gaming Keyboard\Monitor.exe [270336 2013-04-09] ()
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\Run: [DAEMON Tools Lite Automount] => D:\Programs\DAEMON Tools Lite\DTAgent.exe [4179288 2015-11-18] (Disc Soft Ltd)
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [52142720 2016-04-29] (Skype Technologies S.A.)
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\Run: [OneDrive] => C:\Users\Domi\AppData\Roaming\6rm1IVRhdCQ2RsI0CgKIcUcnF7EQ.exe [141824 2016-03-09] (Microsoft Corporation)
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\RunOnce: [Microsoft Corporation fIhVGHSeDdAJgPFL] => C:\Users\Domi\AppData\Roaming\fIhVGHSeDdAJgPFL.exe [1389044 2016-06-12] ()
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\RunOnce: [Microsoft Corporation JJYiJgUBWMZZeifY] => C:\Users\Domi\AppData\Roaming\JJYiJgUBWMZZeifY.exe [1126900 2016-06-12] ()
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\CurrentVersion\Windows: [Load] C:\Users\Domi\AppData\Local\Temp\pNpLP.pif <===== ATTENTION
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\MountPoints2: G - G:\autorun.exe
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\MountPoints2: {9eb71208-dbc2-11e5-ab47-1c6f65912ec0} - I:\_DSII.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2015-11-21] (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 213.211.45.3 212.96.160.7
Tcpip\..\Interfaces\{CF483389-F9C7-4474-9A1E-ABC1E4F66DB1}: [DhcpNameServer] 213.211.45.3 212.96.160.7
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-739486496-4182284736-1743313898-1000 -> DefaultScope {2935A2D4-4ADB-4558-84C0-D3EE5EEB05F0} URL =
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> D:\Programs\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Programs\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Domi\AppData\Roaming\Mozilla\Firefox\Profiles\8q7295m7.default
FF Homepage: hxxp://google.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-13] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> D:\Programs\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-13] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-05-20] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-05-20] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin HKU\S-1-5-21-739486496-4182284736-1743313898-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Domi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-03-11] (Unity Technologies ApS)
FF Extension: Greasemonkey - C:\Users\Domi\AppData\Roaming\Mozilla\Firefox\Profiles\8q7295m7.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-04-29]
FF Extension: MEGA - C:\Users\Domi\AppData\Roaming\Mozilla\Firefox\Profiles\8q7295m7.default\Extensions\firefox@mega.co.nz.xpi [2015-12-02] [not signed]
FF Extension: Adblock Plus - C:\Users\Domi\AppData\Roaming\Mozilla\Firefox\Profiles\8q7295m7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28]
Chrome:
=======
CHR Profile: C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-22]
CHR Extension: (Disk Google) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-28]
CHR Extension: (YouTube) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-22]
CHR Extension: (Vyhledávání Google) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-22]
CHR Extension: (Tampermonkey) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2016-06-11]
CHR Extension: (Dokumenty Google offline) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-30]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]
CHR Extension: (Gmail) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-22]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 DES2 Service; C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe [68136 2009-06-17] ()
R3 Disc Soft Lite Bus Service; D:\Programs\DAEMON Tools Lite\DiscSoftBusService.exe [1369432 2015-11-18] (Disc Soft Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-05-02] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-05-02] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-05-02] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-05-02] (NVIDIA Corporation)
R2 Smart TimeLock; C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [114688 2009-10-13] (Gigabyte Technology CO., LTD.) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7032080 2016-05-12] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 OVPNService; "C:\Users\Domi\AppData\Local\TotalVPN\OVPN.Service.exe" [X]
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-11-22] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47160 2015-11-22] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2016-01-30] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-05-02] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
S3 AVFSFilter; system32\DRIVERS\avfsfilter.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-06-12 16:26 - 2016-06-12 16:26 - 00013656 _____ C:\Users\Domi\Desktop\FRST.txt
2016-06-12 16:25 - 2016-06-12 16:26 - 00000000 ____D C:\FRST
2016-06-12 16:24 - 2016-06-12 16:24 - 00112640 _____ (forum.viry.cz) C:\Users\Domi\Desktop\FRSTLauncher.exe
2016-06-12 16:23 - 2016-06-12 16:24 - 02385408 _____ (Farbar) C:\Users\Domi\Desktop\FRST64.exe
2016-06-12 16:02 - 2016-06-12 16:02 - 00000000 ____D C:\Windows\pss
2016-06-12 15:51 - 2016-06-12 15:51 - 00000000 ____D C:\Users\Domi\Desktop\FeelsBadMan
2016-06-10 16:01 - 2016-06-12 09:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-06-06 22:56 - 2016-06-06 13:05 - 00750320 ___SH (AutoIt Team) C:\Users\Domi\AppData\Roaming\cRgJdSBcOOcfFKLEcRNYZ.exe
2016-06-06 22:56 - 2016-06-06 13:05 - 00702480 ___SH C:\Users\Domi\AppData\Roaming\AagLNbYcYcaT
2016-06-06 22:56 - 2016-06-06 13:05 - 00029579 ___SH C:\Users\Domi\AppData\Roaming\WfOQVVbLJhdVQDcREbc
2016-06-06 22:50 - 2016-06-06 22:50 - 00005125 _____ C:\Users\Domi\AppData\Local\recently-used.xbel
2016-06-06 22:30 - 2016-06-06 22:30 - 00000000 ____D C:\Users\Domi\.thumbnails
2016-06-06 22:18 - 2016-06-06 22:50 - 00000000 ____D C:\Users\Domi\AppData\Local\gtk-2.0
2016-06-06 22:10 - 2016-06-06 22:58 - 00000000 ____D C:\Users\Domi\.gimp-2.8
2016-06-06 22:10 - 2016-06-06 22:10 - 00000926 _____ C:\Users\Domi\Desktop\GIMP 2.lnk
2016-06-06 22:10 - 2016-06-06 22:10 - 00000894 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2016-06-06 22:10 - 2016-06-06 22:10 - 00000000 ____D C:\Users\Domi\AppData\Local\gegl-0.2
2016-06-06 22:10 - 2016-06-06 22:10 - 00000000 ____D C:\Users\Domi\AppData\Local\fontconfig
2016-06-06 22:09 - 2016-06-06 22:10 - 00000000 ____D C:\Program Files\GIMP 2
2016-06-06 22:01 - 2016-06-06 22:01 - 00000132 _____ C:\Users\Domi\AppData\Roaming\Adobe Formát Targa CS6 – předvolby
2016-06-04 01:04 - 2016-06-04 01:03 - 00750320 ___SH (AutoIt Team) C:\Users\Domi\AppData\Roaming\FZMLIObdiiFhcfZRbDKdh.cmd
2016-06-04 01:04 - 2016-06-04 01:03 - 00702480 ___SH C:\Users\Domi\AppData\Roaming\ibDMYBQKYPQR
2016-06-04 01:04 - 2016-06-04 01:03 - 00029912 ___SH C:\Users\Domi\AppData\Roaming\iEdSASSMdRHXEYIeCNY
2016-06-01 18:25 - 2016-06-01 18:25 - 00000000 ___RD C:\Users\Domi\Documents\Notes
2016-06-01 16:41 - 2016-03-11 12:21 - 00039040 _____ (The OpenVPN Project) C:\Windows\system32\Drivers\tap0901.sys
2016-05-30 16:52 - 2016-05-20 03:45 - 00113208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-05-30 16:51 - 2016-05-21 23:10 - 01581624 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2016-05-30 16:51 - 2016-05-21 23:10 - 00141256 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-05-30 16:51 - 2016-05-21 23:10 - 00046024 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 39979576 _____ C:\Windows\system32\nvcompiler.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 35117112 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 31600696 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 25372096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 21794064 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 21336720 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 18138232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 17732936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 13412408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-05-30 16:51 - 2016-05-20 09:01 - 10642728 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 08733096 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 03447232 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 03001792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 01922496 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436822.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 01573432 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436822.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00984512 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00911416 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00770496 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00708032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00669952 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00565392 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00501384 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00476848 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00423360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00422240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00394912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00379448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00177952 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00155768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00153232 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00131584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00000594 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-05-30 16:51 - 2016-05-20 09:01 - 00000594 _____ C:\Windows\system32\nv-vk64.json
2016-05-24 23:01 - 2016-05-24 23:02 - 00000089 _____ C:\Users\Domi\Desktop\Celestial-World WAREZ.txt
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-06-12 16:25 - 2015-11-21 20:07 - 00000000 ____D C:\Users\Domi\AppData\Roaming\Skype
2016-06-12 16:09 - 2015-11-22 00:44 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-06-12 16:03 - 2015-11-22 03:33 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-06-12 15:50 - 2015-11-22 00:04 - 00000000 ____D C:\Users\Domi\Desktop\B!tches
2016-06-12 15:49 - 2015-11-21 23:38 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-06-12 15:28 - 2016-04-03 15:52 - 00000000 ____D C:\Users\Domi\Desktop\Leggings
2016-06-12 15:18 - 2015-11-21 19:13 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-06-12 14:13 - 2015-11-21 20:11 - 00000000 ____D C:\Users\Domi\AppData\Roaming\vlc
2016-06-12 12:42 - 2009-07-14 06:45 - 00014224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-06-12 12:42 - 2009-07-14 06:45 - 00014224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-06-12 12:33 - 2009-07-14 17:18 - 00668866 _____ C:\Windows\system32\perfh005.dat
2016-06-12 12:33 - 2009-07-14 17:18 - 00141526 _____ C:\Windows\system32\perfc005.dat
2016-06-12 12:33 - 2009-07-14 07:13 - 01584554 _____ C:\Windows\system32\PerfStringBackup.INI
2016-06-12 12:33 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-06-12 12:27 - 2016-03-10 00:44 - 01126900 ___SH C:\Users\Domi\AppData\Roaming\JJYiJgUBWMZZeifY.exe
2016-06-12 12:27 - 2016-03-10 00:35 - 01389044 ___SH C:\Users\Domi\AppData\Roaming\fIhVGHSeDdAJgPFL.exe
2016-06-12 12:27 - 2016-01-30 23:39 - 00000000 ____D C:\Users\Domi\AppData\Local\CrashDumps
2016-06-12 12:27 - 2015-11-22 00:44 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-06-12 12:27 - 2015-11-21 19:23 - 00000000 ____D C:\ProgramData\NVIDIA
2016-06-12 12:27 - 2015-11-21 19:21 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2016-06-12 12:27 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-12 09:27 - 2016-03-10 00:44 - 00000000 ____D C:\Users\Domi\AppData\Roaming\A4843402-2DB8-4C7B-8629-2083EC21CB29
2016-06-12 09:11 - 2015-11-21 19:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-06-09 15:11 - 2015-11-22 00:44 - 00002195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-09 15:11 - 2015-11-22 00:44 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-06-06 22:30 - 2015-11-21 19:07 - 00000000 ____D C:\Users\Domi
2016-06-05 02:27 - 2016-04-30 23:26 - 00000000 ____D C:\Users\Domi\AppData\Roaming\TS3Client
2016-06-01 18:26 - 2015-11-24 19:27 - 00000000 ____D C:\Users\Domi\Desktop\Celestial-World 2.0
2016-06-01 16:47 - 2015-11-24 18:14 - 00000000 ____D C:\Program Files (x86)\0uo7qo4pjf
2016-06-01 16:41 - 2015-12-22 10:19 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-06-01 16:41 - 2015-11-21 20:07 - 00000000 ____D C:\ProgramData\Skype
2016-05-30 16:53 - 2015-11-21 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-05-30 16:53 - 2015-11-21 19:23 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-05-27 02:59 - 2015-11-22 00:34 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-05-27 02:59 - 2015-11-22 00:34 - 00000000 ___SD C:\Windows\system32\GWX
2016-05-26 21:44 - 2015-12-27 05:27 - 00001527 _____ C:\Users\Domi\Desktop\aaaa.txt
2016-05-20 09:01 - 2016-02-27 01:10 - 17236560 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-05-20 09:01 - 2015-11-21 20:27 - 03825384 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-05-20 09:01 - 2015-11-10 03:51 - 19110968 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-05-20 09:01 - 2015-11-10 03:51 - 16693208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-05-20 09:01 - 2015-11-10 03:47 - 14293592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-05-20 09:01 - 2015-11-10 03:44 - 03383448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-05-20 09:01 - 2015-11-10 02:13 - 00039124 _____ C:\Windows\system32\nvinfo.pb
2016-05-20 04:11 - 2016-01-30 23:36 - 00531904 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-05-20 04:11 - 2016-01-30 23:36 - 00083512 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-05-20 04:11 - 2015-11-21 19:23 - 06346688 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-05-20 04:11 - 2015-11-21 19:23 - 02454976 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-05-20 04:11 - 2015-11-21 19:23 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-05-20 04:11 - 2015-11-21 19:23 - 01352760 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-05-20 04:11 - 2015-11-21 19:23 - 00393784 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-05-20 04:11 - 2015-11-21 19:23 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-05-19 01:25 - 2015-11-21 19:23 - 06448223 _____ C:\Windows\system32\nvcoproc.bin
2016-05-17 23:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\LiveKernelReports
2016-05-16 02:24 - 2016-05-12 02:35 - 00000659 _____ C:\Users\Domi\Desktop\DMG TEST.txt
2016-05-13 03:00 - 2015-11-21 19:25 - 00000000 ____D C:\Windows\system32\appraiser
2016-05-13 00:49 - 2015-11-21 23:38 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-05-13 00:49 - 2015-11-21 23:38 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-13 00:49 - 2015-11-21 23:38 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
==================== Files in the root of some directories =======
2016-03-06 18:26 - 2016-03-09 22:48 - 0141824 _____ (Microsoft Corporation) C:\Users\Domi\AppData\Roaming\6rm1IVRhdCQ2RsI0CgKIcUcnF7EQ.exe
2016-06-06 22:56 - 2016-06-06 13:05 - 0702480 ___SH () C:\Users\Domi\AppData\Roaming\AagLNbYcYcaT
2016-06-06 22:01 - 2016-06-06 22:01 - 0000132 _____ () C:\Users\Domi\AppData\Roaming\Adobe Formát Targa CS6 – předvolby
2016-03-06 01:30 - 2016-03-06 01:30 - 0745336 ___SH (AutoIt Team) C:\Users\Domi\AppData\Roaming\conhost.exe
2016-06-06 22:56 - 2016-06-06 13:05 - 0750320 ___SH (AutoIt Team) C:\Users\Domi\AppData\Roaming\cRgJdSBcOOcfFKLEcRNYZ.exe
2016-03-10 00:35 - 2016-06-12 12:27 - 1389044 ___SH () C:\Users\Domi\AppData\Roaming\fIhVGHSeDdAJgPFL.exe
2016-06-04 01:04 - 2016-06-04 01:03 - 0750320 ___SH (AutoIt Team) C:\Users\Domi\AppData\Roaming\FZMLIObdiiFhcfZRbDKdh.cmd
2016-06-04 01:04 - 2016-06-04 01:03 - 0702480 ___SH () C:\Users\Domi\AppData\Roaming\ibDMYBQKYPQR
2016-06-04 01:04 - 2016-06-04 01:03 - 0029912 ___SH () C:\Users\Domi\AppData\Roaming\iEdSASSMdRHXEYIeCNY
2016-03-10 00:44 - 2016-06-12 12:27 - 1126900 ___SH () C:\Users\Domi\AppData\Roaming\JJYiJgUBWMZZeifY.exe
2016-03-06 01:30 - 2016-03-06 01:30 - 0069123 ___SH () C:\Users\Domi\AppData\Roaming\MGEdfbSTGBFZDKGGLRJ.au3
2016-03-06 01:30 - 2016-03-06 01:30 - 0064528 ___SH () C:\Users\Domi\AppData\Roaming\WbaAPdGRIIUaDWbHe
2016-06-06 22:56 - 2016-06-06 13:05 - 0029579 ___SH () C:\Users\Domi\AppData\Roaming\WfOQVVbLJhdVQDcREbc
2016-06-06 22:50 - 2016-06-06 22:50 - 0005125 _____ () C:\Users\Domi\AppData\Local\recently-used.xbel
2015-12-02 01:48 - 2015-12-02 01:48 - 0000391 ____H () C:\ProgramData\1-0-0-0.txt
Some files in TEMP:
====================
C:\Users\Domi\AppData\Local\Temp\091a0935c4876ba3102b5d8100e4034c.dll
C:\Users\Domi\AppData\Local\Temp\11304.exe
C:\Users\Domi\AppData\Local\Temp\11788.exe
C:\Users\Domi\AppData\Local\Temp\23859.exe
C:\Users\Domi\AppData\Local\Temp\26427.exe
C:\Users\Domi\AppData\Local\Temp\29939.exe
C:\Users\Domi\AppData\Local\Temp\32853.exe
C:\Users\Domi\AppData\Local\Temp\41420.exe
C:\Users\Domi\AppData\Local\Temp\42552.exe
C:\Users\Domi\AppData\Local\Temp\52998.exe
C:\Users\Domi\AppData\Local\Temp\54441.exe
C:\Users\Domi\AppData\Local\Temp\54941.exe
C:\Users\Domi\AppData\Local\Temp\59868.exe
C:\Users\Domi\AppData\Local\Temp\62687.exe
C:\Users\Domi\AppData\Local\Temp\65748.exe
C:\Users\Domi\AppData\Local\Temp\68810.exe
C:\Users\Domi\AppData\Local\Temp\69997.exe
C:\Users\Domi\AppData\Local\Temp\77748.exe
C:\Users\Domi\AppData\Local\Temp\BingBarSetup-Partner.exe
C:\Users\Domi\AppData\Local\Temp\bitool.dll
C:\Users\Domi\AppData\Local\Temp\conhost.exe
C:\Users\Domi\AppData\Local\Temp\drm_dyndata_7330016.dll
C:\Users\Domi\AppData\Local\Temp\DWj3h.exe
C:\Users\Domi\AppData\Local\Temp\ed6e8e8c4b588010c8f64663407c6196.dll
C:\Users\Domi\AppData\Local\Temp\gpgupdate.exe
C:\Users\Domi\AppData\Local\Temp\Molt.exe
C:\Users\Domi\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Domi\AppData\Local\Temp\nvStInst.exe
C:\Users\Domi\AppData\Local\Temp\Overwatch.exe
C:\Users\Domi\AppData\Local\Temp\patchw32.dll
C:\Users\Domi\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Domi\AppData\Local\Temp\Uninstall.exe
C:\Users\Domi\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Domi\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Domi\AppData\Local\Temp\_is33A2.exe
C:\Users\Domi\AppData\Local\Temp\_is7445.exe
C:\Users\Domi\AppData\Local\Temp\_isDF88.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Domi\Desktop" je 3626 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager
"C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCU
"C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup
C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler
"C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OneDrive
C:\Users\Domi\AppData\Roaming\6rm1IVRhdCQ2RsI0CgKIcUcnF7EQ.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Domi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^TotalVPN.lnk
C:\Users\Domi\AppData\Local\TotalVPN\TotalVPN.exe startup [x]
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Jsem tu asi po 4 letech, poprosil bych o přesný postup, PC jinak bez jakékoliv údržby, žadný antivir, ccleaner, defragmentace,..
Log z FRST:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:12-06-2016
Ran by Domi (administrator) on DOMI-PC (12-06-2016 16:26:10)
Running from C:\Users\Domi\Desktop
Loaded Profiles: Domi (Available Profiles: Domi)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
() C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
(NEC Electronics Corporation) C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
() C:\Program Files (x86)\Gaming Keyboard\OSD.exe
(Disc Soft Ltd) D:\Programs\DAEMON Tools Lite\DiscSoftBusService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\smart6\timelock\AlarmClock.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(VideoLAN) D:\Programs\VLC\vlc.exe
(forum.viry.cz) C:\Users\Domi\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10135584 2010-03-26] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-05-02] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [XMouseButtonControl] => D:\Programs\X mouse\XMouseButtonControl.exe [1127408 2015-10-19] (Highresolution Enterprises)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2009-10-21] (NEC Electronics Corporation)
HKLM-x32\...\Run: [VICTORY Gaming Keyboard] => C:\Program Files (x86)\Gaming Keyboard\Monitor.exe [270336 2013-04-09] ()
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\Run: [DAEMON Tools Lite Automount] => D:\Programs\DAEMON Tools Lite\DTAgent.exe [4179288 2015-11-18] (Disc Soft Ltd)
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [52142720 2016-04-29] (Skype Technologies S.A.)
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\Run: [OneDrive] => C:\Users\Domi\AppData\Roaming\6rm1IVRhdCQ2RsI0CgKIcUcnF7EQ.exe [141824 2016-03-09] (Microsoft Corporation)
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\RunOnce: [Microsoft Corporation fIhVGHSeDdAJgPFL] => C:\Users\Domi\AppData\Roaming\fIhVGHSeDdAJgPFL.exe [1389044 2016-06-12] ()
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\RunOnce: [Microsoft Corporation JJYiJgUBWMZZeifY] => C:\Users\Domi\AppData\Roaming\JJYiJgUBWMZZeifY.exe [1126900 2016-06-12] ()
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\CurrentVersion\Windows: [Load] C:\Users\Domi\AppData\Local\Temp\pNpLP.pif <===== ATTENTION
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\MountPoints2: G - G:\autorun.exe
HKU\S-1-5-21-739486496-4182284736-1743313898-1000\...\MountPoints2: {9eb71208-dbc2-11e5-ab47-1c6f65912ec0} - I:\_DSII.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2015-11-21] (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 213.211.45.3 212.96.160.7
Tcpip\..\Interfaces\{CF483389-F9C7-4474-9A1E-ABC1E4F66DB1}: [DhcpNameServer] 213.211.45.3 212.96.160.7
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-739486496-4182284736-1743313898-1000 -> DefaultScope {2935A2D4-4ADB-4558-84C0-D3EE5EEB05F0} URL =
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> D:\Programs\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Programs\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Domi\AppData\Roaming\Mozilla\Firefox\Profiles\8q7295m7.default
FF Homepage: hxxp://google.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-13] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> D:\Programs\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-13] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-05-20] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-05-20] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin HKU\S-1-5-21-739486496-4182284736-1743313898-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Domi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-03-11] (Unity Technologies ApS)
FF Extension: Greasemonkey - C:\Users\Domi\AppData\Roaming\Mozilla\Firefox\Profiles\8q7295m7.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-04-29]
FF Extension: MEGA - C:\Users\Domi\AppData\Roaming\Mozilla\Firefox\Profiles\8q7295m7.default\Extensions\firefox@mega.co.nz.xpi [2015-12-02] [not signed]
FF Extension: Adblock Plus - C:\Users\Domi\AppData\Roaming\Mozilla\Firefox\Profiles\8q7295m7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28]
Chrome:
=======
CHR Profile: C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-22]
CHR Extension: (Disk Google) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-28]
CHR Extension: (YouTube) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-22]
CHR Extension: (Vyhledávání Google) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-22]
CHR Extension: (Tampermonkey) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2016-06-11]
CHR Extension: (Dokumenty Google offline) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-30]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]
CHR Extension: (Gmail) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-22]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 DES2 Service; C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe [68136 2009-06-17] ()
R3 Disc Soft Lite Bus Service; D:\Programs\DAEMON Tools Lite\DiscSoftBusService.exe [1369432 2015-11-18] (Disc Soft Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-05-02] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-05-02] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-05-02] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-05-02] (NVIDIA Corporation)
R2 Smart TimeLock; C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [114688 2009-10-13] (Gigabyte Technology CO., LTD.) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7032080 2016-05-12] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 OVPNService; "C:\Users\Domi\AppData\Local\TotalVPN\OVPN.Service.exe" [X]
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-11-22] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47160 2015-11-22] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2016-01-30] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-05-02] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
S3 AVFSFilter; system32\DRIVERS\avfsfilter.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-06-12 16:26 - 2016-06-12 16:26 - 00013656 _____ C:\Users\Domi\Desktop\FRST.txt
2016-06-12 16:25 - 2016-06-12 16:26 - 00000000 ____D C:\FRST
2016-06-12 16:24 - 2016-06-12 16:24 - 00112640 _____ (forum.viry.cz) C:\Users\Domi\Desktop\FRSTLauncher.exe
2016-06-12 16:23 - 2016-06-12 16:24 - 02385408 _____ (Farbar) C:\Users\Domi\Desktop\FRST64.exe
2016-06-12 16:02 - 2016-06-12 16:02 - 00000000 ____D C:\Windows\pss
2016-06-12 15:51 - 2016-06-12 15:51 - 00000000 ____D C:\Users\Domi\Desktop\FeelsBadMan
2016-06-10 16:01 - 2016-06-12 09:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-06-06 22:56 - 2016-06-06 13:05 - 00750320 ___SH (AutoIt Team) C:\Users\Domi\AppData\Roaming\cRgJdSBcOOcfFKLEcRNYZ.exe
2016-06-06 22:56 - 2016-06-06 13:05 - 00702480 ___SH C:\Users\Domi\AppData\Roaming\AagLNbYcYcaT
2016-06-06 22:56 - 2016-06-06 13:05 - 00029579 ___SH C:\Users\Domi\AppData\Roaming\WfOQVVbLJhdVQDcREbc
2016-06-06 22:50 - 2016-06-06 22:50 - 00005125 _____ C:\Users\Domi\AppData\Local\recently-used.xbel
2016-06-06 22:30 - 2016-06-06 22:30 - 00000000 ____D C:\Users\Domi\.thumbnails
2016-06-06 22:18 - 2016-06-06 22:50 - 00000000 ____D C:\Users\Domi\AppData\Local\gtk-2.0
2016-06-06 22:10 - 2016-06-06 22:58 - 00000000 ____D C:\Users\Domi\.gimp-2.8
2016-06-06 22:10 - 2016-06-06 22:10 - 00000926 _____ C:\Users\Domi\Desktop\GIMP 2.lnk
2016-06-06 22:10 - 2016-06-06 22:10 - 00000894 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2016-06-06 22:10 - 2016-06-06 22:10 - 00000000 ____D C:\Users\Domi\AppData\Local\gegl-0.2
2016-06-06 22:10 - 2016-06-06 22:10 - 00000000 ____D C:\Users\Domi\AppData\Local\fontconfig
2016-06-06 22:09 - 2016-06-06 22:10 - 00000000 ____D C:\Program Files\GIMP 2
2016-06-06 22:01 - 2016-06-06 22:01 - 00000132 _____ C:\Users\Domi\AppData\Roaming\Adobe Formát Targa CS6 – předvolby
2016-06-04 01:04 - 2016-06-04 01:03 - 00750320 ___SH (AutoIt Team) C:\Users\Domi\AppData\Roaming\FZMLIObdiiFhcfZRbDKdh.cmd
2016-06-04 01:04 - 2016-06-04 01:03 - 00702480 ___SH C:\Users\Domi\AppData\Roaming\ibDMYBQKYPQR
2016-06-04 01:04 - 2016-06-04 01:03 - 00029912 ___SH C:\Users\Domi\AppData\Roaming\iEdSASSMdRHXEYIeCNY
2016-06-01 18:25 - 2016-06-01 18:25 - 00000000 ___RD C:\Users\Domi\Documents\Notes
2016-06-01 16:41 - 2016-03-11 12:21 - 00039040 _____ (The OpenVPN Project) C:\Windows\system32\Drivers\tap0901.sys
2016-05-30 16:52 - 2016-05-20 03:45 - 00113208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-05-30 16:51 - 2016-05-21 23:10 - 01581624 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2016-05-30 16:51 - 2016-05-21 23:10 - 00141256 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-05-30 16:51 - 2016-05-21 23:10 - 00046024 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 39979576 _____ C:\Windows\system32\nvcompiler.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 35117112 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 31600696 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 25372096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 21794064 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 21336720 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 18138232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 17732936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 13412408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-05-30 16:51 - 2016-05-20 09:01 - 10642728 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 08733096 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 03447232 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 03001792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 01922496 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436822.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 01573432 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436822.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00984512 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00911416 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00770496 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00708032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00669952 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00565392 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00501384 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00476848 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00423360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00422240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00394912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00379448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00177952 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00155768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00153232 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00131584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-05-30 16:51 - 2016-05-20 09:01 - 00000594 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-05-30 16:51 - 2016-05-20 09:01 - 00000594 _____ C:\Windows\system32\nv-vk64.json
2016-05-24 23:01 - 2016-05-24 23:02 - 00000089 _____ C:\Users\Domi\Desktop\Celestial-World WAREZ.txt
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-06-12 16:25 - 2015-11-21 20:07 - 00000000 ____D C:\Users\Domi\AppData\Roaming\Skype
2016-06-12 16:09 - 2015-11-22 00:44 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-06-12 16:03 - 2015-11-22 03:33 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-06-12 15:50 - 2015-11-22 00:04 - 00000000 ____D C:\Users\Domi\Desktop\B!tches
2016-06-12 15:49 - 2015-11-21 23:38 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-06-12 15:28 - 2016-04-03 15:52 - 00000000 ____D C:\Users\Domi\Desktop\Leggings
2016-06-12 15:18 - 2015-11-21 19:13 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-06-12 14:13 - 2015-11-21 20:11 - 00000000 ____D C:\Users\Domi\AppData\Roaming\vlc
2016-06-12 12:42 - 2009-07-14 06:45 - 00014224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-06-12 12:42 - 2009-07-14 06:45 - 00014224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-06-12 12:33 - 2009-07-14 17:18 - 00668866 _____ C:\Windows\system32\perfh005.dat
2016-06-12 12:33 - 2009-07-14 17:18 - 00141526 _____ C:\Windows\system32\perfc005.dat
2016-06-12 12:33 - 2009-07-14 07:13 - 01584554 _____ C:\Windows\system32\PerfStringBackup.INI
2016-06-12 12:33 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-06-12 12:27 - 2016-03-10 00:44 - 01126900 ___SH C:\Users\Domi\AppData\Roaming\JJYiJgUBWMZZeifY.exe
2016-06-12 12:27 - 2016-03-10 00:35 - 01389044 ___SH C:\Users\Domi\AppData\Roaming\fIhVGHSeDdAJgPFL.exe
2016-06-12 12:27 - 2016-01-30 23:39 - 00000000 ____D C:\Users\Domi\AppData\Local\CrashDumps
2016-06-12 12:27 - 2015-11-22 00:44 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-06-12 12:27 - 2015-11-21 19:23 - 00000000 ____D C:\ProgramData\NVIDIA
2016-06-12 12:27 - 2015-11-21 19:21 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2016-06-12 12:27 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-12 09:27 - 2016-03-10 00:44 - 00000000 ____D C:\Users\Domi\AppData\Roaming\A4843402-2DB8-4C7B-8629-2083EC21CB29
2016-06-12 09:11 - 2015-11-21 19:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-06-09 15:11 - 2015-11-22 00:44 - 00002195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-09 15:11 - 2015-11-22 00:44 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-06-06 22:30 - 2015-11-21 19:07 - 00000000 ____D C:\Users\Domi
2016-06-05 02:27 - 2016-04-30 23:26 - 00000000 ____D C:\Users\Domi\AppData\Roaming\TS3Client
2016-06-01 18:26 - 2015-11-24 19:27 - 00000000 ____D C:\Users\Domi\Desktop\Celestial-World 2.0
2016-06-01 16:47 - 2015-11-24 18:14 - 00000000 ____D C:\Program Files (x86)\0uo7qo4pjf
2016-06-01 16:41 - 2015-12-22 10:19 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-06-01 16:41 - 2015-11-21 20:07 - 00000000 ____D C:\ProgramData\Skype
2016-05-30 16:53 - 2015-11-21 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-05-30 16:53 - 2015-11-21 19:23 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-05-27 02:59 - 2015-11-22 00:34 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-05-27 02:59 - 2015-11-22 00:34 - 00000000 ___SD C:\Windows\system32\GWX
2016-05-26 21:44 - 2015-12-27 05:27 - 00001527 _____ C:\Users\Domi\Desktop\aaaa.txt
2016-05-20 09:01 - 2016-02-27 01:10 - 17236560 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-05-20 09:01 - 2015-11-21 20:27 - 03825384 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-05-20 09:01 - 2015-11-10 03:51 - 19110968 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-05-20 09:01 - 2015-11-10 03:51 - 16693208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-05-20 09:01 - 2015-11-10 03:47 - 14293592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-05-20 09:01 - 2015-11-10 03:44 - 03383448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-05-20 09:01 - 2015-11-10 02:13 - 00039124 _____ C:\Windows\system32\nvinfo.pb
2016-05-20 04:11 - 2016-01-30 23:36 - 00531904 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-05-20 04:11 - 2016-01-30 23:36 - 00083512 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-05-20 04:11 - 2015-11-21 19:23 - 06346688 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-05-20 04:11 - 2015-11-21 19:23 - 02454976 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-05-20 04:11 - 2015-11-21 19:23 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-05-20 04:11 - 2015-11-21 19:23 - 01352760 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-05-20 04:11 - 2015-11-21 19:23 - 00393784 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-05-20 04:11 - 2015-11-21 19:23 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-05-19 01:25 - 2015-11-21 19:23 - 06448223 _____ C:\Windows\system32\nvcoproc.bin
2016-05-17 23:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\LiveKernelReports
2016-05-16 02:24 - 2016-05-12 02:35 - 00000659 _____ C:\Users\Domi\Desktop\DMG TEST.txt
2016-05-13 03:00 - 2015-11-21 19:25 - 00000000 ____D C:\Windows\system32\appraiser
2016-05-13 00:49 - 2015-11-21 23:38 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-05-13 00:49 - 2015-11-21 23:38 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-13 00:49 - 2015-11-21 23:38 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
==================== Files in the root of some directories =======
2016-03-06 18:26 - 2016-03-09 22:48 - 0141824 _____ (Microsoft Corporation) C:\Users\Domi\AppData\Roaming\6rm1IVRhdCQ2RsI0CgKIcUcnF7EQ.exe
2016-06-06 22:56 - 2016-06-06 13:05 - 0702480 ___SH () C:\Users\Domi\AppData\Roaming\AagLNbYcYcaT
2016-06-06 22:01 - 2016-06-06 22:01 - 0000132 _____ () C:\Users\Domi\AppData\Roaming\Adobe Formát Targa CS6 – předvolby
2016-03-06 01:30 - 2016-03-06 01:30 - 0745336 ___SH (AutoIt Team) C:\Users\Domi\AppData\Roaming\conhost.exe
2016-06-06 22:56 - 2016-06-06 13:05 - 0750320 ___SH (AutoIt Team) C:\Users\Domi\AppData\Roaming\cRgJdSBcOOcfFKLEcRNYZ.exe
2016-03-10 00:35 - 2016-06-12 12:27 - 1389044 ___SH () C:\Users\Domi\AppData\Roaming\fIhVGHSeDdAJgPFL.exe
2016-06-04 01:04 - 2016-06-04 01:03 - 0750320 ___SH (AutoIt Team) C:\Users\Domi\AppData\Roaming\FZMLIObdiiFhcfZRbDKdh.cmd
2016-06-04 01:04 - 2016-06-04 01:03 - 0702480 ___SH () C:\Users\Domi\AppData\Roaming\ibDMYBQKYPQR
2016-06-04 01:04 - 2016-06-04 01:03 - 0029912 ___SH () C:\Users\Domi\AppData\Roaming\iEdSASSMdRHXEYIeCNY
2016-03-10 00:44 - 2016-06-12 12:27 - 1126900 ___SH () C:\Users\Domi\AppData\Roaming\JJYiJgUBWMZZeifY.exe
2016-03-06 01:30 - 2016-03-06 01:30 - 0069123 ___SH () C:\Users\Domi\AppData\Roaming\MGEdfbSTGBFZDKGGLRJ.au3
2016-03-06 01:30 - 2016-03-06 01:30 - 0064528 ___SH () C:\Users\Domi\AppData\Roaming\WbaAPdGRIIUaDWbHe
2016-06-06 22:56 - 2016-06-06 13:05 - 0029579 ___SH () C:\Users\Domi\AppData\Roaming\WfOQVVbLJhdVQDcREbc
2016-06-06 22:50 - 2016-06-06 22:50 - 0005125 _____ () C:\Users\Domi\AppData\Local\recently-used.xbel
2015-12-02 01:48 - 2015-12-02 01:48 - 0000391 ____H () C:\ProgramData\1-0-0-0.txt
Some files in TEMP:
====================
C:\Users\Domi\AppData\Local\Temp\091a0935c4876ba3102b5d8100e4034c.dll
C:\Users\Domi\AppData\Local\Temp\11304.exe
C:\Users\Domi\AppData\Local\Temp\11788.exe
C:\Users\Domi\AppData\Local\Temp\23859.exe
C:\Users\Domi\AppData\Local\Temp\26427.exe
C:\Users\Domi\AppData\Local\Temp\29939.exe
C:\Users\Domi\AppData\Local\Temp\32853.exe
C:\Users\Domi\AppData\Local\Temp\41420.exe
C:\Users\Domi\AppData\Local\Temp\42552.exe
C:\Users\Domi\AppData\Local\Temp\52998.exe
C:\Users\Domi\AppData\Local\Temp\54441.exe
C:\Users\Domi\AppData\Local\Temp\54941.exe
C:\Users\Domi\AppData\Local\Temp\59868.exe
C:\Users\Domi\AppData\Local\Temp\62687.exe
C:\Users\Domi\AppData\Local\Temp\65748.exe
C:\Users\Domi\AppData\Local\Temp\68810.exe
C:\Users\Domi\AppData\Local\Temp\69997.exe
C:\Users\Domi\AppData\Local\Temp\77748.exe
C:\Users\Domi\AppData\Local\Temp\BingBarSetup-Partner.exe
C:\Users\Domi\AppData\Local\Temp\bitool.dll
C:\Users\Domi\AppData\Local\Temp\conhost.exe
C:\Users\Domi\AppData\Local\Temp\drm_dyndata_7330016.dll
C:\Users\Domi\AppData\Local\Temp\DWj3h.exe
C:\Users\Domi\AppData\Local\Temp\ed6e8e8c4b588010c8f64663407c6196.dll
C:\Users\Domi\AppData\Local\Temp\gpgupdate.exe
C:\Users\Domi\AppData\Local\Temp\Molt.exe
C:\Users\Domi\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Domi\AppData\Local\Temp\nvStInst.exe
C:\Users\Domi\AppData\Local\Temp\Overwatch.exe
C:\Users\Domi\AppData\Local\Temp\patchw32.dll
C:\Users\Domi\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Domi\AppData\Local\Temp\Uninstall.exe
C:\Users\Domi\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Domi\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Domi\AppData\Local\Temp\_is33A2.exe
C:\Users\Domi\AppData\Local\Temp\_is7445.exe
C:\Users\Domi\AppData\Local\Temp\_isDF88.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Domi\Desktop" je 3626 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager
"C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCU
"C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup
C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler
"C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OneDrive
C:\Users\Domi\AppData\Roaming\6rm1IVRhdCQ2RsI0CgKIcUcnF7EQ.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Domi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^TotalVPN.lnk
C:\Users\Domi\AppData\Local\TotalVPN\TotalVPN.exe startup [x]
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Nicméně řešit to nemohu, bylo by to proti pravidlům: 
