VIRY.CZ

Po 14 dnech fungovani (stehovani, internet od viagia - u nich pry vse ok), najednou vypadl internet a zadna sluzba na PC nefunguje (prohlizec, dropbox apod). Sitove pripojeni zadny problem nehlasi, Opravit sitove pripojeni nepomaha. Zkousel jsem i jinou sitovou kartu, kabel ...

Pokud pripojim notebook internet funguje naprosto bez problemu ...

Umeite pls poradit? Vir je posledi zachrana

ADWcleaner nehlasi nic podezreleho

Dekuji

Log
Logfile of random's system information tool 1.10 (written by random/random)
Run by rdx at 2016-12-11 17:39:31
Microsoft Windows 10 Pro
System drive C: has 845 GB (89%) free of 953 GB
Total RAM: 16339 MB (83% free)

HijackThis download failed

======Listing Processes======

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\atiesrxx.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Tablet\Wacom\WTabletServicePro.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe"
dashost.exe {103558b3-7243-46ba-8899c1a763770488}
C:\Windows\system32\DbxSvc.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe"
"C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe"
C:\Windows\system32\svchost.exe -k appmodel

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Popcorn Time\Updater.exe"
"C:\Program Files\Saitek\DirectOutput\DirectOutputService.exe"
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding

"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey FC251B14-A71C-40F9-ABE3-B0E27D7DB0F4 -Reinvoke
C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\sysWOW64\wbem\wmiprvse.exe -Embedding

C:\Windows\System32\WinLogon.exe -SpecialSession
"dwm.exe"
atieclxx
sihost.exe
"c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe"
C:\Windows\Explorer.EXE
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe"
"C:\Program Files\Tablet\Wacom\WacomHost.exe" "C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe" au
"C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe"
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe" au
C:\Windows\system32\SettingSyncHost.exe -Embedding
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\SmartTechnology\Software\ProfilerU.exe"
"C:\Program Files\SmartTechnology\Software\SaiMfd.exe"
"C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe" atlogon
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
C:\Windows\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files\Windows Defender\MSASCui.exe"
C:\Windows\system32\DllHost.exe /Processid:{BA126F01-2166-11D1-B1D0-00805FC1270E}

"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-67925f7e-b4f0-42d7-b7c3-d30954a4cb41 -SystemEventPortName:HostProcess-56da5df5-5fee-4b8b-9ebf-66b62d025e32 -IoCancelEventPortName:HostProcess-43f9c2c9-c21b-4368-86bc-772cd3b967f2 -NonStateChangingEventPortName:HostProcess-a402c6db-c99f-48fd-8e2e-0a259720bba1 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:4ca75275-7aba-47f3-baf0-a63e3a359ac3 -DeviceGroupId:WpdFsGroup
"C:\totalcmd9\TOTALCMD64.EXE"
C:\Windows\system32\wbem\wmiprvse.exe
taskeng.exe {219F2045-441E-411D-9979-F52868B1ACC9}
"C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /ua /installsource scheduler
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"G:\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\rdx\AppData\Roaming\Mozilla\Firefox\Profiles\jh9y235l.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "about:blank"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.207 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@wacom.com/wtPlugin,version=2.1.0.7]
"Description"=WebTablet Plugin API
"Path"=C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\wacom.com/WacomTabletPlugin]
"Description"=
"Path"=C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.207 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@wacom.com/wtPlugin,version=2.1.0.7]
"Description"=WebTablet Plugin API
"Path"=C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\wacom.com/WacomTabletPlugin]
"Description"=
"Path"=C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll


C:\Users\rdx\AppData\Roaming\Mozilla\Firefox\Profiles\jh9y235l.default\extensions\
{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-06-14 163528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2016-06-14 1741104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BoxSync"=C:\Program Files\Box\Box Sync\BoxSync.exe [2016-09-15 6450920]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-07-07 8497368]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-05-25 500936]
"ACUW09EN"=C:\Program Files\ACD Systems\ACDSee Ultimate\9.0\acdIDInTouch2.exe [2016-06-09 2099656]
"ProfilerU"=C:\Program Files\SmartTechnology\Software\ProfilerU.exe [2016-01-21 454656]
"SaiMfd"=C:\Program Files\SmartTechnology\Software\SaiMfd.exe [2016-01-21 157696]
"StartCN"=C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [2016-07-18 6626696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"GarminExpressTrayApp"=C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [2016-11-29 1407912]
"World of Warships"=C:\Games\World_of_Warships\WargamingGameUpdater.exe [2016-12-05 3134216]
"ACDSeeCommanderUltimate9"=C:\Program Files\ACD Systems\ACDSee Ultimate\9.0\ACDSeeCommanderUltimate9.exe [2016-06-15 3146936]
"icq.desktop"=C:\Users\rdx\AppData\Roaming\ICQ\bin\icq.exe [2016-12-04 26346632]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dropbox"=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2016-11-28 25838592]
"PlaysTV"=C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [2016-08-09 71440]
"Raptr"=C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [2016-08-05 58640]
"Zwift"=C:\Program Files (x86)\Zwift\ZwiftLauncher.exe [2016-09-29 1234840]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"PreRun"=C:\Program Files (x86)\Gigabyte\AppCenter\PreRun.exe [2013-04-29 8192]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-12-11 17:37:54 ----D---- C:\rsit
2016-12-11 17:37:54 ----D---- C:\Program Files\trend micro
2016-12-09 18:26:14 ----A---- C:\Windows\system32\drivers\L1C63x64.sys
2016-11-28 15:05:42 ----A---- C:\Windows\system32\drivers\dbx-stable.sys
2016-11-28 15:05:42 ----A---- C:\Windows\system32\drivers\dbx-dev.sys
2016-11-28 15:05:42 ----A---- C:\Windows\system32\drivers\dbx-canary.sys
2016-11-28 15:05:42 ----A---- C:\Windows\system32\DbxSvc.exe
2016-11-26 00:21:00 ----D---- C:\Windows\system32\P
2016-11-25 22:19:22 ----D---- C:\Windows\LastGood.Tmp
2016-11-22 18:29:46 ----AD---- C:\Program Files (x86)\Mozilla Thunderbird
2016-11-18 18:23:48 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2016-11-18 18:23:48 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2016-11-18 18:23:48 ----A---- C:\Windows\system32\XAudio2_7.dll
2016-11-18 18:23:48 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2016-11-18 18:23:47 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2016-11-18 18:23:47 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2016-11-18 18:23:46 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2016-11-18 18:23:46 ----A---- C:\Windows\system32\xinput1_3.dll
2016-11-18 18:23:18 ----AD---- C:\Program Files (x86)\Zwift
2016-11-16 22:46:15 ----D---- C:\Users\rdx\AppData\Roaming\Mazda
2016-11-16 22:46:15 ----D---- C:\Program Files (x86)\Mazda
2016-11-16 21:28:51 ----D---- C:\Users\rdx\AppData\Roaming\Line 6
2016-11-16 21:28:51 ----A---- C:\Windows\GearBox.ini
2016-11-16 21:25:46 ----D---- C:\ProgramData\Line 6
2016-11-16 21:25:40 ----AD---- C:\Program Files (x86)\Line6
2016-11-15 20:56:10 ----AD---- C:\Program Files (x86)\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2016-12-11 17:39:24 ----D---- C:\Windows\Prefetch
2016-12-11 17:39:11 ----D---- C:\Windows\System32
2016-12-11 17:39:11 ----D---- C:\Windows\INF
2016-12-11 17:39:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-12-11 17:37:54 ----RD---- C:\Program Files
2016-12-11 17:37:34 ----D---- C:\Windows\Temp
2016-12-11 17:14:58 ----D---- C:\Windows\system32\NDF
2016-12-11 17:13:01 ----D---- C:\Windows\system32\drivers
2016-12-11 17:02:02 ----D---- C:\Windows\system32\DriverStore
2016-12-11 16:55:14 ----D---- C:\Windows\Microsoft.NET
2016-12-11 16:45:04 ----D---- C:\Windows\system32\sru
2016-12-10 23:25:17 ----D---- C:\Program Files (x86)\Steam
2016-12-10 20:17:00 ----D---- C:\Download
2016-12-09 17:59:03 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2016-12-09 17:58:59 ----SHD---- C:\Windows\Installer
2016-12-09 17:58:57 ----HD---- C:\ProgramData
2016-12-09 17:44:19 ----AD---- C:\Program Files (x86)\TeamViewer
2016-12-09 08:15:51 ----SHD---- C:\System Volume Information
2016-12-08 09:29:29 ----D---- C:\Windows\system32\CatRoot
2016-12-08 09:10:30 ----D---- C:\ProgramData\Downloaded Installations
2016-12-04 20:32:47 ----D---- C:\Users\rdx\AppData\Roaming\ICQ
2016-12-03 20:53:47 ----RSD---- C:\Windows\Fonts
2016-12-03 18:45:46 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-02 07:22:29 ----D---- C:\ProgramData\Package Cache
2016-12-02 07:22:18 ----AD---- C:\Program Files (x86)\Garmin
2016-12-02 07:22:04 ----D---- C:\Windows\system32\Tasks
2016-12-01 22:40:12 ----D---- C:\Program Files (x86)\Dropbox
2016-11-27 22:25:09 ----D---- C:\Users\rdx\AppData\Roaming\TeamViewer
2016-11-27 02:10:58 ----D---- C:\Windows
2016-11-25 22:19:45 ----D---- C:\Windows\SysWOW64
2016-11-25 22:18:51 ----D---- C:\Program Files (x86)\VulkanRT
2016-11-25 22:18:48 ----AD---- C:\Program Files\AMD
2016-11-23 07:16:55 ----RD---- C:\Program Files (x86)
2016-11-18 21:30:47 ----D---- C:\Users\rdx\AppData\Roaming\goldencheetah.org
2016-11-16 21:28:57 ----D---- C:\Program Files (x86)\Common Files
2016-11-13 22:26:12 ----D---- C:\Windows\system32\WDI
2016-11-13 22:23:54 ----D---- C:\Windows\Minidump

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2016-04-23 87552]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 amdacpksd;ACP Kernel Service Driver; \??\C:\Windows\system32\drivers\amdacpksd.sys [2016-07-25 313760]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\Windows\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2016-10-01 26559504]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2016-10-01 527264]
R3 AtiHDAudioService;@oem38.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdWT6.sys [2016-07-24 101376]
R3 dc3d;@oem10.inf,%dc3d.SvcDesc%;MS Hardware Device Detection Driver (USB); C:\Windows\System32\drivers\dc3d.sys [2015-12-09 95024]
R3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2016-12-09 26192]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-07-07 4514008]
R3 libusb0;libusb-win32 - Kernel Driver 04/08/2011 1.2.4.0; C:\Windows\system32\DRIVERS\libusb0.sys [2013-09-23 44480]
R3 Point64;@oem17.inf,%point64.SvcDesc%;Microsoft Mouse and Keyboard Center Filter Driver; C:\Windows\System32\drivers\point64.sys [2015-12-09 68904]
R3 SaiMini;SaiMini; C:\Windows\System32\drivers\SaiMini.sys [2016-01-27 23968]
R3 SaiNtBus;SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [2016-01-27 51616]
S0 amdkmafd;@oem36.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter; C:\Windows\System32\drivers\amdkmafd.sys [2016-08-18 49448]
S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\Windows\System32\drivers\storufs.sys [2015-10-30 34144]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\Windows\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\Windows\System32\drivers\capimg.sys [2016-04-27 117248]
S3 dbx;dbx; C:\Windows\system32\DRIVERS\dbx.sys []
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 hidkmdf;@oem22.inf,%hidkmdf.SVCDESC%;KMDF Driver; C:\Windows\System32\drivers\hidkmdf.sys [2016-03-03 13776]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\Windows\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\Windows\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 KillerEth;@oem2.inf,%RIVET.Service.DispName%;NDIS Miniport Driver for Killer e2200 PCI-E Ehternet Controller; C:\Windows\System32\drivers\e22w10x64.sys [2015-09-03 158272]
S3 L1C;@oem3.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C63x64.sys [2013-07-18 130248]
S3 L6TPortA;@oem33.inf,%L6TPortA_DDI.SvcDesc%;Service - Line 6 TonePort UX1; C:\Windows\System32\Drivers\L6TPortA64.sys [2015-08-21 777728]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 npusbio;npusbio; C:\Windows\System32\Drivers\npusbio_x64.sys [2015-12-11 38400]
S3 ReFSv1;ReFSv1; C:\Windows\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\Windows\System32\drivers\rt640x64.sys [2015-10-30 589824]
S3 SaiK0762;SaiK0762; C:\Windows\System32\drivers\SaiK0762.sys [2016-01-27 181920]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\Windows\System32\Drivers\UcmCx.sys [2016-04-23 63488]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\Windows\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\Windows\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\Windows\system32\drivers\ufx01000.sys [2016-05-28 258912]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\Windows\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\Windows\System32\drivers\ufxsynopsys.sys [2016-09-07 131424]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-10-21 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2016-10-01 295840]
R2 amdacpusrsvc;ACP User Service; C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe [2016-07-18 121856]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R2 DbxSvc;DbxSvc; C:\Windows\system32\DbxSvc.exe [2016-11-28 42096]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2015-10-30 43944]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R2 gadjservice;GIGABYTE Adjust; C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [2015-04-14 16896]
R2 OneSyncSvc_23b2135;Hostitel synchronizace_23b2135; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R2 PlaysService;Plays.tv Update Service; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [2016-08-09 32528]
R2 SaiDOutput;Saitek DirectOutput; C:\Program Files\Saitek\DirectOutput\DirectOutputService.exe [2016-01-21 235008]
R2 TeamViewer;TeamViewer 11; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2016-09-20 7500048]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2015-10-30 43944]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2015-10-30 43944]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2015-10-30 43944]
R3 PimIndexMaintenanceSvc_23b2135;Data kontaktů_23b2135; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 dbupdate;Dropbox Update Service (dbupdate); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-07-15 143144]
S2 Garmin Device Interaction Service;Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [2016-11-29 1029648]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-22 154440]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2992d88f;Hostitel synchronizace_2992d88f; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2a7aebb;Hostitel synchronizace_2a7aebb; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_5a760;Hostitel synchronizace_5a760; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_5b50e56;Hostitel synchronizace_5b50e56; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_a511d9d;Hostitel synchronizace_a511d9d; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_be16c9;Hostitel synchronizace_be16c9; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_caf9447;Hostitel synchronizace_caf9447; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_e0ce9c8;Hostitel synchronizace_e0ce9c8; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-09 270016]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 BoxSyncUpdateService;Box Sync Update Service; C:\Program Files\Box\Box Sync\SyncUpdaterService.exe [2016-05-23 37264]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 dbupdatem;Dropbox Update Service (dbupdatem); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-07-15 143144]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-22 154440]
S3 HwmRecordService;HwmRecordService; C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe [2015-07-01 62784]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_23b2135;Služba zasílání zpráv_23b2135; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2992d88f;Služba zasílání zpráv_2992d88f; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2a7aebb;Služba zasílání zpráv_2a7aebb; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_5b50e56;Služba zasílání zpráv_5b50e56; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_a511d9d;Služba zasílání zpráv_a511d9d; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_be16c9;Služba zasílání zpráv_be16c9; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_caf9447;Služba zasílání zpráv_caf9447; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_e0ce9c8;Služba zasílání zpráv_e0ce9c8; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-12-01 172488]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 178760]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_2992d88f;Data kontaktů_2992d88f; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_2a7aebb;Data kontaktů_2a7aebb; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_5b50e56;Data kontaktů_5b50e56; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_a511d9d;Data kontaktů_a511d9d; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_be16c9;Data kontaktů_be16c9; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_caf9447;Data kontaktů_caf9447; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_e0ce9c8;Data kontaktů_e0ce9c8; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\Windows\System32\SensorDataService.exe [2016-09-07 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-10-13 1459488]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\Windows\system32\TieringEngineService.exe [2015-10-30 290304]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\Windows\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

AdwCleaner log

# AdwCleaner v6.040 - Log vytvořen 11/12/2016 v 18:29:05
# Aktualizováno dne 02/12/2016 z Malwarebytes
# Databáze : 2016-12-02.1 [Místní]
# Operační systém : Windows 10 Pro (X64)
# Uživatelské jméno : rdx - RDXPC
# Spuštěno z : C:\Users\rdx\Desktop\adwcleaner_6.040.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****



***** [ Složky ] *****



***** [ Soubory ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupci ] *****



***** [ Naplánované úlohy ] *****



***** [ Registry ] *****



***** [ Prohlížeče ] *****



*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [1029 Bajty] - [11/12/2016 18:08:11]
C:\AdwCleaner\AdwCleaner[C2].txt - [859 Bajty] - [11/12/2016 18:29:05]
C:\AdwCleaner\AdwCleaner[S0].txt - [1327 Bajty] - [11/12/2016 18:07:52]
C:\AdwCleaner\AdwCleaner[S1].txt - [1503 Bajty] - [11/12/2016 18:28:56]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1077 Bajty] ##########

Toto je OK. Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

Log:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 07-12-2016
Ran by rdx (administrator) on RDXPC (11-12-2016 19:24:34)
Running from C:\Users\rdx\Desktop
Loaded Profiles: rdx (Available Profiles: rdx)
Platform: Windows 10 Pro Version 1511 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
() C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe
(Garmin Ltd. or its subsidiaries) C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
(Advanced Micro Devices) C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Saitek) C:\Program Files\Saitek\DirectOutput\DirectOutputService.exe
(Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.23941.0_x64__8wekyb3d8bbwe\Video.UI.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1608.2213.0_x64__8wekyb3d8bbwe\Calculator.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Ghisler Software GmbH) C:\totalcmd9\TOTALCMD64.EXE

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BoxSync] => C:\Program Files\Box\Box Sync\BoxSync.exe [6450920 2016-09-15] (Box, Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8497368 2015-07-07] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-05-25] (Adobe Systems Incorporated)
HKLM\...\Run: [ACUW09EN] => C:\Program Files\ACD Systems\ACDSee Ultimate\9.0\acdIDInTouch2.exe [2099656 2016-06-09] (ACD Systems)
HKLM\...\Run: [ProfilerU] => C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454656 2016-01-21] (Saitek)
HKLM\...\Run: [SaiMfd] => C:\Program Files\SmartTechnology\Software\SaiMfd.exe [157696 2016-01-21] (Saitek)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6626696 2016-07-18] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25838592 2016-11-28] (Dropbox, Inc.)
HKLM-x32\...\Run: [PlaysTV] => C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [71440 2016-08-09] (Plays.tv, LLC)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [58640 2016-08-05] (Raptr, Inc)
HKLM-x32\...\Run: [Zwift] => C:\Program Files (x86)\Zwift\ZwiftLauncher.exe [1234840 2016-09-29] ()
HKU\S-1-5-21-345839488-3863065281-3823933008-1001\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1407912 2016-11-29] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-345839488-3863065281-3823933008-1001\...\Run: [World of Warships] => C:\Games\World_of_Warships\WargamingGameUpdater.exe [3134216 2016-12-05] (Wargaming.net)
HKU\S-1-5-21-345839488-3863065281-3823933008-1001\...\Run: [ACDSeeCommanderUltimate9] => C:\Program Files\ACD Systems\ACDSee Ultimate\9.0\ACDSeeCommanderUltimate9.exe [3146936 2016-06-15] ()
HKU\S-1-5-21-345839488-3863065281-3823933008-1001\...\Run: [icq.desktop] => C:\Users\rdx\AppData\Roaming\ICQ\bin\icq.exe [26346632 2016-12-04] ()
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1407912 2016-11-29] (Garmin Ltd. or its subsidiaries)
ShellIconOverlayIdentifiers: [ BoxSyncFileLocked] -> {d22ca197-6853-3b75-ae6e-61abbfcd2b7e} => C:\Windows\system32\mscoree.dll [2015-10-30] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ BoxSyncFileLockedByOther] -> {0138a222-adbf-38ee-8e6a-dd5a0372addf} => C:\Windows\system32\mscoree.dll [2015-10-30] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ BoxSyncNotSynced] -> {c5e7bdc7-07e4-3e5c-a822-ca71eb04c6e0} => C:\Windows\system32\mscoree.dll [2015-10-30] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ BoxSyncProblem] -> {1ef98ceb-fd57-3a6f-8e77-9d1df46957fd} => C:\Windows\system32\mscoree.dll [2015-10-30] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ BoxSyncSynced] -> {453f7980-9bd1-31d8-84a4-319628be4045} => C:\Windows\system32\mscoree.dll [2015-10-30] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-28] (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 93.153.117.33 93.153.117.1 8.8.8.8
Tcpip\..\Interfaces\{72cd1774-57e4-4866-9050-5231d155013e}: [DhcpNameServer] 93.153.117.33 93.153.117.1 8.8.8.8

Internet Explorer:
==================
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-06-14] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2016-06-14] (Microsoft Corporation)
IE Session Restore: HKU\S-1-5-21-345839488-3863065281-3823933008-1001 -> is enabled.
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: jh9y235l.default
FF ProfilePath: C:\Users\rdx\AppData\Roaming\Mozilla\Firefox\Profiles\jh9y235l.default [2016-12-11]
FF Homepage: Mozilla\Firefox\Profiles\jh9y235l.default -> about:blank
FF Extension: (Firebug) - C:\Users\rdx\AppData\Roaming\Mozilla\Firefox\Profiles\jh9y235l.default\Extensions\firebug@software.joehewitt.com.xpi [2016-10-11]
FF Extension: (Awesome Screenshot - Capture, Annotate & More) - C:\Users\rdx\AppData\Roaming\Mozilla\Firefox\Profiles\jh9y235l.default\Extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2016-09-23]
FF Extension: (Simple White) - C:\Users\rdx\AppData\Roaming\Mozilla\Firefox\Profiles\jh9y235l.default\Extensions\Simple@White.Theme.xpi [2016-07-15]
FF Extension: (strava-export-gpx) - C:\Users\rdx\AppData\Roaming\Mozilla\Firefox\Profiles\jh9y235l.default\Extensions\strava-export-gpx@e-ivanov.ru.xpi [2016-09-23]
FF Extension: (The Addon Bar (restored)) - C:\Users\rdx\AppData\Roaming\Mozilla\Firefox\Profiles\jh9y235l.default\Extensions\the-addon-bar@GeekInTraining-GiT.xpi [2016-07-15]
FF Extension: (Firesizer) - C:\Users\rdx\AppData\Roaming\Mozilla\Firefox\Profiles\jh9y235l.default\Extensions\{04426594-bce6-4705-b811-bcdba2fd9c7b}.xpi [2016-07-15]
FF Extension: (FlashGot) - C:\Users\rdx\AppData\Roaming\Mozilla\Firefox\Profiles\jh9y235l.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2016-12-01]
FF Extension: (Garmin Communicator) - C:\Users\rdx\AppData\Roaming\Mozilla\Firefox\Profiles\jh9y235l.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2016-07-15]
FF Extension: (Modern Modoki) - C:\Users\rdx\AppData\Roaming\Mozilla\Firefox\Profiles\jh9y235l.default\Extensions\{4a428302-5267-4749-bb22-459b3236695f}.xpi [2016-07-15] [not signed]
FF Extension: (Orbit Yellow 2006) - C:\Users\rdx\AppData\Roaming\Mozilla\Firefox\Profiles\jh9y235l.default\Extensions\{71073f20-deb8-11da-95c9-00e08161165f}.xpi [2016-07-15] [not signed]
FF Extension: (Greasemonkey) - C:\Users\rdx\AppData\Roaming\Mozilla\Firefox\Profiles\jh9y235l.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-08-23]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-09] ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-09] ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-22] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-22] (Google Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

Chrome:
=======
CHR Profile: C:\Users\rdx\AppData\Local\Google\Chrome\User Data\Default [2016-12-11]
CHR Extension: (Google Slides) - C:\Users\rdx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-08-22]
CHR Extension: (Google Docs) - C:\Users\rdx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-08-22]
CHR Extension: (Google Drive) - C:\Users\rdx\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-08-22]
CHR Extension: (YouTube) - C:\Users\rdx\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-08-22]
CHR Extension: (Google Sheets) - C:\Users\rdx\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-08-22]
CHR Extension: (Google Docs Offline) - C:\Users\rdx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-08-22]
CHR Extension: (Chrome Web Store Payments) - C:\Users\rdx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-08-22]
CHR Extension: (Gmail) - C:\Users\rdx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-08-22]
CHR Extension: (Chrome Media Router) - C:\Users\rdx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-05]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 amdacpusrsvc; C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe [121856 2016-07-18] (Advanced Micro Devices) [File not signed]
S3 BoxSyncUpdateService; C:\Program Files\Box\Box Sync\SyncUpdaterService.exe [37264 2016-05-23] (Box, Inc.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-07-15] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-07-15] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [42096 2016-11-28] (Dropbox, Inc.)
R2 gadjservice; C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [16896 2015-04-14] () [File not signed]
R2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1029648 2016-11-29] (Garmin Ltd. or its subsidiaries)
S3 HwmRecordService; C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe [62784 2015-07-01] (GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 PlaysService; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [32528 2016-08-09] (Plays.tv, LLC)
R2 SaiDOutput; C:\Program Files\Saitek\DirectOutput\DirectOutputService.exe [235008 2016-01-21] (Saitek) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7500048 2016-09-20] (TeamViewer GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364456 2016-09-07] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-09-07] (Microsoft Corporation)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [652240 2016-07-14] (Wacom Technology, Corp.)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 amdacpksd; C:\Windows\system32\drivers\amdacpksd.sys [313760 2016-07-25] (Advanced Micro Devices)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [49448 2016-08-18] (Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [101376 2016-07-24] (Advanced Micro Devices)
S3 KillerEth; C:\Windows\System32\drivers\e22w10x64.sys [158272 2015-09-03] (Qualcomm Atheros, Inc.)
S3 L6TPortA; C:\Windows\System32\Drivers\L6TPortA64.sys [777728 2015-08-21] (Line 6)
R3 libusb0; C:\Windows\system32\DRIVERS\libusb0.sys [44480 2013-09-23] (hxxp://libusb-win32.sourceforge.net)
S3 npusbio; C:\Windows\System32\Drivers\npusbio_x64.sys [38400 2015-12-11] ()
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek )
S3 SaiK0762; C:\Windows\System32\drivers\SaiK0762.sys [181920 2016-01-27] (Saitek)
R3 SaiMini; C:\Windows\System32\drivers\SaiMini.sys [23968 2016-01-27] (Saitek)
R3 SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [51616 2016-01-27] (Saitek)
S3 WacHidRouterPro; C:\Windows\System32\drivers\wachidrouter.sys [102864 2016-03-03] (Wacom Technology)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-12-11 19:24 - 2016-12-11 19:25 - 00019923 _____ C:\Users\rdx\Desktop\FRST.txt
2016-12-11 19:24 - 2016-12-11 19:24 - 00000000 ____D C:\FRST
2016-12-11 19:23 - 2016-12-11 19:22 - 02420224 _____ (Farbar) C:\Users\rdx\Desktop\FRST64.exe
2016-12-11 18:27 - 2016-12-11 18:05 - 03968464 _____ C:\Users\rdx\Desktop\adwcleaner_6.040.exe
2016-12-11 18:06 - 2016-12-11 18:29 - 00000000 ____D C:\AdwCleaner
2016-12-11 17:37 - 2016-12-11 17:37 - 00000000 ____D C:\rsit
2016-12-11 17:37 - 2016-12-11 17:37 - 00000000 ____D C:\Program Files\trend micro
2016-12-09 18:26 - 2013-07-18 06:55 - 00130248 _____ (Qualcomm Atheros Co., Ltd.) C:\Windows\system32\Drivers\L1C63x64.sys
2016-12-07 22:17 - 2016-12-07 22:17 - 00000000 ____D C:\Users\rdx\Downloads\Zwift
2016-12-02 07:22 - 2016-12-02 07:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2016-12-01 22:40 - 2016-12-01 22:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-11-28 15:05 - 2016-11-28 15:05 - 00075888 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2016-11-28 15:05 - 2016-11-28 15:05 - 00075888 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2016-11-28 15:05 - 2016-11-28 15:05 - 00075888 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2016-11-28 15:05 - 2016-11-28 15:05 - 00042096 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2016-11-26 00:21 - 2016-11-26 00:21 - 00000000 ____D C:\Windows\system32\P
2016-11-25 22:39 - 2016-11-25 22:39 - 00000000 ____D C:\Users\rdx\AppData\LocalLow\AMD
2016-11-25 22:19 - 2016-11-25 22:20 - 00000000 ____D C:\Windows\LastGood.Tmp
2016-11-22 18:29 - 2016-12-03 18:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2016-11-18 18:23 - 2016-12-04 10:57 - 00000000 ____D C:\Program Files (x86)\Zwift
2016-11-18 18:23 - 2016-11-18 20:25 - 00000000 ____D C:\Users\rdx\Documents\Zwift
2016-11-18 18:23 - 2016-11-18 18:23 - 00001076 _____ C:\Users\Public\Desktop\Zwift.lnk
2016-11-18 18:23 - 2016-11-18 18:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zwift
2016-11-18 18:23 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2016-11-18 18:23 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2016-11-18 18:23 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2016-11-18 18:23 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2016-11-18 18:23 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2016-11-18 18:23 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2016-11-18 18:23 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2016-11-18 18:23 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2016-11-16 22:46 - 2016-11-16 22:47 - 00000000 ____D C:\Users\rdx\AppData\Roaming\Mazda
2016-11-16 22:46 - 2016-11-16 22:46 - 00000000 ____D C:\Users\rdx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mazda
2016-11-16 22:46 - 2016-11-16 22:46 - 00000000 ____D C:\Program Files (x86)\Mazda
2016-11-16 21:29 - 2016-11-16 21:29 - 00002056 _____ C:\Users\rdx\Desktop\GearBox.lnk
2016-11-16 21:28 - 2016-11-16 21:29 - 00000000 ____D C:\Users\rdx\Documents\Line 6
2016-11-16 21:28 - 2016-11-16 21:29 - 00000000 ____D C:\Users\rdx\AppData\Roaming\Line 6
2016-11-16 21:28 - 2016-11-16 21:28 - 00000032 _____ C:\Windows\GearBox.ini
2016-11-16 21:25 - 2016-11-16 21:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Line 6
2016-11-16 21:25 - 2016-11-16 21:28 - 00000000 ____D C:\Program Files (x86)\Line6
2016-11-16 21:25 - 2016-11-16 21:25 - 00000000 ____D C:\ProgramData\Line 6
2016-11-16 18:48 - 2016-11-16 18:48 - 00001972 _____ C:\Users\Public\Desktop\Google Web Designer.lnk
2016-11-16 07:33 - 2016-12-11 19:23 - 00000000 ____D C:\Users\rdx\AppData\LocalLow\Mozilla
2016-11-15 20:56 - 2016-12-03 18:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-12-11 19:24 - 2016-07-15 21:05 - 01771468 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-11 19:24 - 2016-04-27 07:11 - 00750030 _____ C:\Windows\system32\perfh005.dat
2016-12-11 19:24 - 2016-04-27 07:11 - 00150654 _____ C:\Windows\system32\perfc005.dat
2016-12-11 19:24 - 2015-10-30 08:21 - 00000000 ____D C:\Windows\INF
2016-12-11 19:18 - 2015-10-30 08:24 - 00000000 ____D C:\Windows\system32\NDF
2016-12-11 19:13 - 2016-09-19 21:30 - 00004186 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{22680051-CC5A-424C-80B4-8E55550040FC}
2016-12-11 19:09 - 2016-07-18 06:41 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-12-11 18:47 - 2016-08-22 19:36 - 00000970 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-12-11 18:39 - 2016-07-15 23:19 - 00000914 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2016-12-11 18:32 - 2016-07-16 06:47 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-11 18:31 - 2016-07-31 09:51 - 00003808 _____ C:\Windows\System32\Tasks\AutoKMS
2016-12-11 18:30 - 2016-08-22 19:36 - 00000966 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-12-11 18:30 - 2016-07-15 23:19 - 00000910 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2016-12-11 18:29 - 2016-07-15 21:21 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2016-12-11 18:29 - 2016-04-27 07:52 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-11 18:29 - 2015-10-30 07:28 - 00524288 ___SH C:\Windows\system32\config\BBI
2016-12-11 18:09 - 2016-07-16 18:23 - 00026192 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2016-12-11 17:26 - 2016-07-15 21:01 - 00000000 ____D C:\Users\rdx\AppData\Local\VirtualStore
2016-12-10 23:25 - 2016-07-15 22:51 - 00000000 ____D C:\Program Files (x86)\Steam
2016-12-10 20:17 - 2016-07-15 21:37 - 00000000 ____D C:\Download
2016-12-09 17:59 - 2016-07-15 21:11 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-09 17:59 - 2016-07-15 21:01 - 00000000 ____D C:\Users\rdx
2016-12-08 18:29 - 2016-07-15 23:17 - 00000000 ____D C:\Users\rdx\AppData\Local\Box Sync
2016-12-08 09:28 - 2016-07-15 21:09 - 00000000 _____ C:\Users\rdx\AppData\Local\Driver_LOM_8161Present.flag
2016-12-08 09:10 - 2016-07-15 21:10 - 00000000 ____D C:\ProgramData\Downloaded Installations
2016-12-07 18:58 - 2016-07-16 06:44 - 00000000 ____D C:\Users\rdx\AppData\Local\ElevatedDiagnostics
2016-12-06 18:16 - 2016-04-26 22:46 - 05402544 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-04 20:32 - 2016-07-16 22:30 - 00000000 ____D C:\Users\rdx\AppData\Roaming\ICQ
2016-12-03 18:45 - 2016-07-15 21:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-02 07:22 - 2016-11-05 08:29 - 00001963 _____ C:\Users\Public\Desktop\Garmin Express.lnk
2016-12-02 07:22 - 2016-07-16 06:45 - 00003624 _____ C:\Windows\System32\Tasks\GarminUpdaterTask
2016-12-02 07:22 - 2016-07-16 06:45 - 00000000 ____D C:\Program Files (x86)\Garmin
2016-12-02 07:22 - 2016-07-15 21:22 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-01 22:48 - 2016-08-22 19:36 - 00000000 ____D C:\Users\rdx\AppData\Local\Google
2016-12-01 22:40 - 2016-07-15 23:19 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-11-29 07:34 - 2016-07-15 23:19 - 00003974 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA
2016-11-29 07:34 - 2016-07-15 23:19 - 00003742 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore
2016-11-27 22:25 - 2016-07-18 06:41 - 00000000 ____D C:\Users\rdx\AppData\Roaming\TeamViewer
2016-11-25 23:39 - 2016-07-15 21:22 - 00000000 ____D C:\Users\rdx\AppData\Local\AMD
2016-11-25 23:16 - 2016-07-24 15:53 - 00001480 _____ C:\Users\rdx\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2016-11-25 22:18 - 2016-08-15 20:07 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-11-25 22:18 - 2016-07-15 21:21 - 00000000 ____D C:\Program Files\AMD
2016-11-22 20:36 - 2016-07-16 21:25 - 00000034 _____ C:\Users\rdx\AppData\Roaming\AdobeWLCMCache.dat
2016-11-18 21:30 - 2016-10-27 23:08 - 00000000 ____D C:\Users\rdx\AppData\Roaming\goldencheetah.org
2016-11-18 21:30 - 2016-10-27 23:06 - 00000000 ____D C:\Users\rdx\AppData\Local\GoldenCheetah
2016-11-15 23:37 - 2016-07-15 21:01 - 00000000 ____D C:\Users\rdx\AppData\Local\Packages
2016-11-13 22:23 - 2016-08-15 20:11 - 1244572179 _____ C:\Windows\MEMORY.DMP
2016-11-13 22:23 - 2016-08-15 20:11 - 00000000 ____D C:\Windows\Minidump

==================== Files in the root of some directories =======

2016-07-16 21:25 - 2016-11-22 20:36 - 0000034 _____ () C:\Users\rdx\AppData\Roaming\AdobeWLCMCache.dat
2016-09-28 22:50 - 2016-09-28 22:50 - 0000600 _____ () C:\Users\rdx\AppData\Roaming\winscp.rnd
2016-07-24 15:53 - 2016-11-25 23:16 - 0001480 _____ () C:\Users\rdx\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2016-07-15 21:09 - 2016-12-08 09:28 - 0000000 _____ () C:\Users\rdx\AppData\Local\Driver_LOM_8161Present.flag
2016-07-16 06:42 - 2016-07-16 06:42 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\rdx\AppData\Local\Temp\CboVqYUlhP.DLL
C:\Users\rdx\AppData\Local\Temp\guVDWzkaotqvhRxamkQD.DLL
C:\Users\rdx\AppData\Local\Temp\L6GPInst.dll
C:\Users\rdx\AppData\Local\Temp\libeay32.dll
C:\Users\rdx\AppData\Local\Temp\msvcr120.dll
C:\Users\rdx\AppData\Local\Temp\playstv_patch.exe
C:\Users\rdx\AppData\Local\Temp\QcRtqSjTXQQvDbJgUstS.DLL
C:\Users\rdx\AppData\Local\Temp\raptrpatch.exe
C:\Users\rdx\AppData\Local\Temp\raptr_stub.exe
C:\Users\rdx\AppData\Local\Temp\setup_4812.exe
C:\Users\rdx\AppData\Local\Temp\sqlite3.dll
C:\Users\rdx\AppData\Local\Temp\_isDDF0.exe
C:\Users\rdx\AppData\Local\Temp\_isFF04.exe


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-12-04 09:15

==================== End of FRST.txt ============================

Otevřte poznámkový blok a zkopírujte do něj:

Start
C:\ProgramData\DP45977C.lfl
C:\Users\rdx\AppData\Local\Temp
Task: {C122A432-94D8-42F5-8979-7972ABEBF6DD} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2016-07-31] ()
C:\Windows\AutoKMS
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
IE trusted site: HKU\S-1-5-21-345839488-3863065281-3823933008-1001\...\line6.net -> line6.net

EmptyTemp:
ResetHosts:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

log
Fix result of Farbar Recovery Scan Tool (x64) Version: 07-12-2016
Ran by rdx (11-12-2016 19:43:34) Run:1
Running from C:\Users\rdx\Desktop
Loaded Profiles: rdx (Available Profiles: rdx)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
C:\ProgramData\DP45977C.lfl
C:\Users\rdx\AppData\Local\Temp
Task: {C122A432-94D8-42F5-8979-7972ABEBF6DD} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2016-07-31] ()
C:\Windows\AutoKMS
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
IE trusted site: HKU\S-1-5-21-345839488-3863065281-3823933008-1001\...\line6.net -> line6.net

EmptyTemp:
ResetHosts:
End
*****************

C:\ProgramData\DP45977C.lfl => moved successfully
C:\Users\rdx\AppData\Local\Temp => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{C122A432-94D8-42F5-8979-7972ABEBF6DD}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C122A432-94D8-42F5-8979-7972ABEBF6DD}" => key removed successfully
C:\Windows\System32\Tasks\AutoKMS => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoKMS" => key removed successfully
C:\Windows\AutoKMS => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
"HKU\S-1-5-21-345839488-3863065281-3823933008-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\line6.net" => key removed successfully
ResetHosts: => Error: No automatic fix found for this entry.

=========== EmptyTemp: ==========

BITS transfer queue => 32768 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 147364020 B
Java, Flash, Steam htmlcache => 272074888 B
Windows/system/drivers => 371357190 B
Edge => 2086747 B
Chrome => 514039678 B
Firefox => 383569035 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 128 B
LocalService => 0 B
NetworkService => 1300420 B
rdx => 113147097 B

RecycleBin => 92659739 B
EmptyTemp: => 1.8 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 19:45:04 ====

Smazáno. Nastala nějaká změna?

bohuzel vubec nic, internet v PC nejede, na NB bez problemu

Zkuste přeinstalovat ovladač síť. karty.

nainstalovany nejnovvejsi ovladace, bohuze nic. Asi tedy bude problem nekde jinde ...

To je divné. Zkuste si přečíst tento návod od MS: https://support.microsoft.com/cs-cz/hel ... ion-issues .

Pri porovnavani ipconfigu NTB vs PC jsem prisel na to, ze u PC je jako vychozi brana nejake divne cislo shodne s IPv6. V nastaveni sitovku jsem pak Protokol IP verze 6 vypnul a ejhle internet bezi jak po masle.

Sice uz je to mimo tema fora, ale tusi nekdo co to znamena?

Dekuji za pomoc.

Tak IPv4 je internetový protokol staršího typu. Vyznačuje se zápisem xxx.xxx.xxx.xxx. Každá trojice číslic může nabývat hodnot od 0 do 256. Nový typ je IPv6, který je zapsán v hexadecimálním čísle. IPv 6 bylo zavedno v době, kdy se zjistilo, že kombinace v IPv4 brzy dojdou a docázelo by k duplicitám, což je nepřípustné.