PC Lag

[matesss]

Dobrý den prosím o pomoc .. při vyžším výkonu pc se totalně zasekne a pomůže jen restart ... zde je frst ...

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 21-12-2016
Ran by Matee-es (administrator) on MATEE-ES-PC (29-12-2016 11:53:01)
Running from C:\Users\Matee-es\Desktop
Loaded Profiles: Matee-es (Available Profiles: Matee-es)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Logitech, Inc.) C:\Program Files\Logitech\SolarApp\L4301_Solar.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Guillemot Corporation ®) C:\Program Files\DJHERCULESMIX\Audio\DJ Console Series\drivers\amd64\HerculesDJControlMP3.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
() C:\Windows\DAODx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(BitTorrent, Inc.) C:\Users\Matee-es\AppData\Roaming\uTorrent\utorrent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.1.6.0\WsAppService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7202520 2013-08-19] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1868472 2016-10-01] (Adobe Systems Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-12-18] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKU\S-1-5-21-706122237-3197980538-511727788-1000\...\Run: [GoogleChromeAutoLaunch_E24797801E268EF59764FAA50CDC344E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [935768 2016-12-08] (Google Inc.)
HKU\S-1-5-21-706122237-3197980538-511727788-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9105112 2016-11-15] (Piriform Ltd)
HKU\S-1-5-21-706122237-3197980538-511727788-1000\...\Run: [uTorrent] => C:\Users\Matee-es\AppData\Roaming\uTorrent\utorrent.exe [416168 2015-02-22] (BitTorrent, Inc.)
HKU\S-1-5-21-706122237-3197980538-511727788-1000\...\MountPoints2: {01f5bec4-ca8a-11e5-bb64-f07959612581} - F:\Lenovo_Suite.exe
HKU\S-1-5-21-706122237-3197980538-511727788-1000\...\MountPoints2: {bab52a85-c5ba-11e5-a5fc-f07959612581} - H:\EAWXLauncher.exe
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
SSODL-x32: IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\Program Files (x86)\Stardock\Object Desktop\IconPackager\iprepair.dll (Stardock.net, Inc)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-10-28] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{68CFB834-457F-4E63-8A53-DF0AB600FC57}: [DhcpNameServer] 7.254.254.254
Tcpip\..\Interfaces\{7E9B8773-49A0-45EC-86FC-1732F3B21B68}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-706122237-3197980538-511727788-1000 -> {3EC1C6E8-84D5-47C0-BF84-F7E8F7BF93EB} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_16194
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-12-18] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-02-26] (Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-02-26] (Adobe Systems Incorporated)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2015-09-24] (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-28] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-12-18] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-02-26] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-28] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-02-26] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-02-26] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-02-26] (Adobe Systems Incorporated)

FireFox:
========
FF ProfilePath: C:\Users\Matee-es\AppData\Roaming\TomTom\HOME\Profiles\44rt7pu2.default [2016-07-18]
FF Extension: (No Name) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [not found]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-12-27]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-12-27]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat DC - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn [2016-04-27]
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-07-29] (Adobe Systems)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1225195.dll [2016-09-20] (Adobe Systems, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-28] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-07-29] (Adobe Systems)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Session Restore: Default -> is enabled.
CHR Plugin: (Widevine Content Decryption Module) - C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\WidevineCdm\_platform_specific\win_x86\widevinecdmadapter.dll (Google Inc.)
CHR Plugin: (Shockwave Flash) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\PepperFlash\23.0.0.207\pepflashplayer.dll => No File
CHR Profile: C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default [2016-12-29]
CHR Extension: (Překladač Google) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2016-01-26]
CHR Extension: (Sports Heads Football Championship) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcimfbgmgkllffdhglbgmadfkdmfeodf [2016-01-26]
CHR Extension: (Chrome Safe Guard) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfpoaihndjklkeidejbgjaadeidhfenm [2016-01-26]
CHR Extension: (YouTube) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-26]
CHR Extension: (Slinky Elegantní) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmanlajnpdncmhfkiccmbgeocgbncfln [2016-01-26]
CHR Extension: (Vocabla - budovat svou slovní zásobu) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdnfmoippfkddcakmbeaglgjcfcfcfmk [2016-01-26]
CHR Extension: (Adblock Plus) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-27]
CHR Extension: (Adblock na Youtube™) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2016-03-05]
CHR Extension: (Vyhledávání Google) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-26]
CHR Extension: (Adobe Acrobat) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2016-09-10]
CHR Extension: (AdBlock) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-12-29]
CHR Extension: (Adblock for Pirate Bay) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\imkpamgpfalmdaikobnkefcmmkpgljjd [2016-01-26]
CHR Extension: (Video Recorder) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\janpabomenbggihohponfklipffjhlfb [2016-08-05]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-04]
CHR Extension: (Gmail) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-26]
CHR Extension: (Chrome Media Router) - C:\Users\Matee-es\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-16]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-10-28] (AVAST Software)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [388968 2016-01-19] (Digital Wave Ltd.)
S3 HDDSvc; C:\Program Files (x86)\Common Files\AltrixSoft\HDDInfoService\HDDSvc.exe [484304 2012-02-01] (AltrixSoft (hxxp://www.altrixsoft.com/))
R2 HerculesDJControlMP3; C:\Program Files\DJHERCULESMIX\Audio\DJ Console Series\drivers\amd64\HerculesDJControlMP3.EXE [105472 2015-10-14] (Guillemot Corporation ®) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 L4301_Solar; C:\Program Files\Logitech\SolarApp\L4301_Solar.exe [405744 2013-01-30] (Logitech, Inc.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-12-13] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-12-13] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-10-25] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-12-13] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2016-12-13] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-12-27] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2180624 2016-12-27] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2016-08-30] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [202040 2016-12-19] ()
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [872432 2016-06-23] (Tunngle.net GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.1.6.0\WsAppService.exe [388608 2016-01-28] (Wondershare) [File not signed]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-10-28] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-10-28] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-10-28] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-10-28] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-10-28] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-12-18] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-12-18] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-10-28] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-12-18] (AVAST Software)
S3 Bulk; C:\Windows\System32\Drivers\HDJBulk.sys [339104 2016-01-13] (© Guillemot R&D, 2015. All rights reserved.)
R1 ElRawDisk; C:\Windows\system32\drivers\rsdrvx64.sys [26024 2009-02-12] (EldoS Corporation)
S3 HDJMidi; C:\Windows\System32\DRIVERS\HDJMidi.sys [283296 2016-01-13] (© Guillemot R&D, 2015. All rights reserved.)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-10-05] (REALiX(tm))
S3 NPF; C:\Windows\SysWOW64\drivers\npf.sys [32896 2004-05-14] (NetGroup - Politecnico di Torino) [File not signed]
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46016 2016-12-13] (NVIDIA Corporation)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [39464 2016-04-26] (Tunngle.net GmbH)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 wod0205; C:\Windows\System32\DRIVERS\wod0205.sys [33160 2011-04-23] (WeOnlyDo Software)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S3 EverestDriver; \??\C:\Program Files (x86)\Lavalys\EVEREST Ultimate Edition\kerneld.amd64 [X]
S3 GPCIDrv; \??\C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-12-29 11:53 - 2016-12-29 11:53 - 00022705 _____ C:\Users\Matee-es\Desktop\FRST.txt
2016-12-27 20:32 - 2010-10-25 14:28 - 1787232256 _____ C:\Users\Matee-es\Downloads\ind-gowgsp.iso
2016-12-27 20:32 - 2009-05-27 21:14 - 1255243776 _____ C:\Users\Matee-es\Downloads\ggl-gtalcsv3e.iso
2016-12-27 20:32 - 2007-03-30 15:20 - 639926272 _____ C:\Users\Matee-es\Downloads\gmb-cod3.iso
2016-12-27 20:31 - 2016-12-27 20:33 - 00000000 ____D C:\Users\Matee-es\Downloads\Call_of_Duty_3_Roads_to_Victory_EUR_MULTi5_PSP-Goomba
2016-12-27 20:31 - 2016-12-27 20:32 - 00000000 ____D C:\Users\Matee-es\Downloads\Grand_Theft_Auto_Liberty_City_Stories_v3_EUR_PSP-Googlecus
2016-12-27 20:31 - 2016-12-27 20:32 - 00000000 ____D C:\Users\Matee-es\Downloads\God_of_War_-_Ghost_of_Sparta_EUR_MULTi5_PROPER_PSP-iND
2016-12-27 20:31 - 2012-12-03 12:26 - 00000000 ____D C:\Users\Matee-es\Downloads\Colin_McRae_Rally_2005_Plus_PROPER_REPACK_EUR_MULTi5_PSP-MUPS
2016-12-27 14:21 - 2016-12-27 13:38 - 02420736 _____ (Farbar) C:\Users\Matee-es\Desktop\FRST64.exe
2016-12-27 13:52 - 2016-12-27 20:54 - 00010941 _____ C:\ProgramData\NvTelemetryContainer.log_backup1
2016-12-27 13:52 - 2016-12-27 13:52 - 00004252 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-27 13:52 - 2016-12-12 15:36 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2016-12-27 13:51 - 2016-12-13 00:36 - 00156096 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2016-12-27 13:51 - 2016-12-13 00:36 - 00123840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2016-12-27 13:51 - 2016-12-13 00:36 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2016-12-27 13:34 - 2016-12-27 13:34 - 03977168 _____ C:\Users\Matee-es\Downloads\adwcleaner_6.041.exe
2016-12-27 13:33 - 2016-12-27 13:37 - 00103470 _____ C:\Windows\ntbtlog.txt
2016-12-27 13:22 - 2016-12-27 13:22 - 00001936 _____ C:\Users\Public\Desktop\Avast Pro Antivirus.lnk
2016-12-27 13:22 - 2016-10-28 13:18 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-12-27 13:18 - 2016-12-27 13:18 - 00011196 _____ C:\Users\Matee-es\Downloads\Mateees FRST.rar
2016-12-27 09:39 - 2016-12-27 09:39 - 00019769 _____ C:\Users\Matee-es\Downloads\[CzT]Counter_Strike_1_6_bots_100_serveru_100_nej_map.torrent
2016-12-27 09:38 - 2016-12-27 09:38 - 00016520 _____ C:\Users\Matee-es\Downloads\[CzT]Counter_Strike_1_6_Extreme_CZ.torrent
2016-12-27 08:54 - 2016-12-27 13:21 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2016-12-27 08:23 - 2016-12-27 08:23 - 00045325 _____ C:\Users\Matee-es\Downloads\[CzT]Saints_Row_IV_Game_of_the_Century_Edition_2014_ (1).torrent
2016-12-27 08:22 - 2016-12-27 08:22 - 00045325 _____ C:\Users\Matee-es\Downloads\[CzT]Saints_Row_IV_Game_of_the_Century_Edition_2014_.torrent
2016-12-23 08:34 - 2016-12-23 08:34 - 00580493 _____ C:\Users\Matee-es\Downloads\COMPANY.OF.HEROES.2.PLUS6TRN.FLING.ZIP
2016-12-23 08:32 - 2016-12-23 08:33 - 03676177 _____ C:\Users\Matee-es\Downloads\COMPANY.OF.HEROES.2.MC.V4.0.0.21040.PLUS24TRN.BARACUDA.ZIP
2016-12-23 08:30 - 2016-12-23 08:30 - 00288678 _____ C:\Users\Matee-es\Downloads\fts-coh2ceu40021400 (2).7z
2016-12-23 08:30 - 2016-12-23 08:30 - 00288678 _____ C:\Users\Matee-es\Downloads\fts-coh2ceu40021400 (1).7z
2016-12-23 08:29 - 2016-12-23 08:29 - 00288678 _____ C:\Users\Matee-es\Downloads\fts-coh2ceu40021400.7z
2016-12-21 09:43 - 2016-12-21 09:43 - 00146760 _____ C:\Users\Matee-es\Downloads\[CzT]Company_of_Heroes_2_Master_Collection_2015_CZ_.torrent
2016-12-21 09:17 - 2016-12-21 09:17 - 00000398 _____ C:\Users\Matee-es\Downloads\Untitled.txt
2016-12-20 11:10 - 2016-12-20 11:10 - 00012016 _____ C:\Users\Matee-es\Downloads\Life.is.Feudal.Your.Own.v1.0.0.6.torrent
2016-12-20 11:02 - 2016-12-20 11:02 - 00013660 _____ C:\Users\Matee-es\Downloads\[CzT]Tata_je_doma_Daddy_s_Home_2015_CZ_.torrent
2016-12-19 15:35 - 2016-12-27 07:22 - 00000000 ____D C:\ProgramData\Tunngle
2016-12-19 15:32 - 2016-12-19 15:32 - 04843904 _____ (Tunngle.net GmbH ) C:\Users\Matee-es\Downloads\Tunngle_Setup_v5.8.8.exe
2016-12-18 15:51 - 2016-12-18 15:51 - 06204288 _____ (AVAST Software) C:\Users\Matee-es\Downloads\avast_pro_antivirus_setup_online.exe
2016-12-18 08:49 - 2016-12-18 08:51 - 659299439 _____ C:\Users\Matee-es\Downloads\Colin_McRae_Rally_2005_Plus_PROPER_REPACK_EUR_MULTi5_PSP-MUPS.rar
2016-12-18 08:49 - 2016-12-18 08:50 - 280487010 _____ C:\Users\Matee-es\Downloads\DiRT.2.EUR.PSP-GLoBAL.rar
2016-12-18 08:47 - 2016-12-18 08:48 - 428663758 _____ C:\Users\Matee-es\Downloads\Call_of_Duty_3_Roads_to_Victory_EUR_MULTi5_PSP-Goomba.rar
2016-12-18 08:44 - 2016-12-18 08:47 - 753769027 _____ C:\Users\Matee-es\Downloads\NHL.07.EUR.MULTi3.PSP-SUSHi.rar
2016-12-18 08:41 - 2016-12-18 08:45 - 741327939 _____ C:\Users\Matee-es\Downloads\Grand_Theft_Auto_Vice_City_Stories_EUR_PSP-pSyPSP.rar
2016-12-18 08:41 - 2016-12-18 08:45 - 1154215877 _____ C:\Users\Matee-es\Downloads\God_of_War_-_Ghost_of_Sparta_EUR_MULTi5_PROPER_PSP-iND.rar
2016-12-18 08:39 - 2016-12-18 08:40 - 478003938 _____ C:\Users\Matee-es\Downloads\Grand_Theft_Auto_Liberty_City_Stories_v3_EUR_PSP-Googlecus.rar
2016-12-17 10:15 - 2016-12-17 10:15 - 02776312 _____ (AltrixSoft) C:\Users\Matee-es\Downloads\hddinsp (3).exe
2016-12-16 15:10 - 2016-12-16 15:10 - 02776312 _____ (AltrixSoft) C:\Users\Matee-es\Downloads\hddinsp (2).exe
2016-12-16 13:46 - 2016-12-16 13:46 - 02776312 _____ (AltrixSoft) C:\Users\Matee-es\Downloads\hddinsp (1).exe
2016-12-16 13:42 - 2016-12-16 13:42 - 02776312 _____ (AltrixSoft) C:\Users\Matee-es\Downloads\hddinsp.exe
2016-12-16 13:42 - 2016-12-16 13:42 - 00000000 ____D C:\Program Files (x86)\Hard Drive Inspector
2016-12-16 13:20 - 2016-12-16 13:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-12-15 13:09 - 2016-12-15 13:09 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\Petroglyph
2016-12-15 12:55 - 2016-12-15 13:01 - 00000000 ____D C:\Users\Matee-es\Desktop\PSP
2016-12-15 12:53 - 2016-12-15 13:33 - 00000000 ____D C:\Users\Matee-es\Desktop\ISO
2016-12-15 06:52 - 2016-12-15 06:52 - 00000901 _____ C:\Users\Public\Desktop\Star Wars Empire at War Forces of Corruption.lnk
2016-12-15 06:46 - 2016-12-15 06:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LucasArts
2016-12-15 06:46 - 2016-12-15 06:46 - 00000665 _____ C:\Users\Matee-es\Desktop\Play Star Wars Empire at War.lnk
2016-12-15 06:30 - 2016-12-15 06:30 - 00021799 _____ C:\Users\Matee-es\Downloads\[CzT]Star_Wars_Empire_at_War_CZ_Forces_of_Corruption.torrent
2016-12-14 14:51 - 2016-12-14 18:04 - 00000000 ____D C:\Users\Matee-es\Documents\Stronghold Crusader
2016-12-14 13:59 - 2016-12-14 13:59 - 00000820 _____ C:\Users\Public\Desktop\Stronghold Crusader Extreme HD.lnk
2016-12-14 13:59 - 2016-12-14 13:59 - 00000700 _____ C:\Users\Public\Desktop\Stronghold Crusader HD.lnk
2016-12-14 13:51 - 2016-12-14 13:51 - 00016744 _____ C:\Users\Matee-es\Downloads\[CzT]Stronghold_Crusader_Extreme_HD_CZ_.torrent
2016-12-12 18:09 - 2016-12-12 18:09 - 00018785 _____ C:\Users\Matee-es\Downloads\[CzT]Santa_Claus_2_The_Santa_Clause_2.torrent
2016-12-12 18:09 - 2016-12-12 18:09 - 00014476 _____ C:\Users\Matee-es\Downloads\[CzT]Santa_Clause_3_Unikova_klauzule_The_Santa_Clause_3_The_Escape_Clause_2006_CZ_.torrent
2016-12-12 18:08 - 2016-12-12 18:08 - 00013386 _____ C:\Users\Matee-es\Downloads\[CzT]Santa_Claus_The_Santa_Clause.torrent
2016-12-12 18:05 - 2016-12-12 18:05 - 00014631 _____ C:\Users\Matee-es\Downloads\[CzT]Rolnicky_kam_se_podivas_Jingle_All_the_Way_1996_CZ_720pHD_.torrent
2016-12-12 18:01 - 2016-12-12 18:01 - 00015183 _____ C:\Users\Matee-es\Downloads\[CzT]Ctvery_vanoce_Four_Christmases.torrent
2016-12-12 17:50 - 2016-12-12 17:50 - 00011397 _____ C:\Users\Matee-es\Downloads\[CzT]Budiz_svetlo_The_Deck_Halls.torrent
2016-12-12 11:07 - 2016-12-12 11:07 - 00015282 _____ C:\Users\Matee-es\Downloads\[CzT]Particle_Fleet_Emergence_v1_0_2_2016_.torrent
2016-12-12 06:42 - 2016-12-12 06:42 - 01782840 _____ (Vimal Pillai ) C:\Users\Matee-es\Downloads\LSC v1.5-x86_x64.exe
2016-12-12 06:41 - 2016-12-12 06:41 - 00000831 _____ C:\Users\Matee-es\Downloads\[CzT]Windows_10_Login_Changer_0_3_x86_x64_.torrent
2016-12-11 18:07 - 2016-12-11 18:07 - 00040055 _____ C:\Users\Matee-es\Downloads\[CzT]Bylo_nebylo_Once_Upon_a_Time_5_serie_TvRip_.torrent
2016-12-11 12:06 - 2016-12-11 12:06 - 00018758 _____ C:\Users\Matee-es\Downloads\[CzT]Strasidla_2016_CZ_WebRip_.torrent
2016-12-08 07:51 - 2016-12-08 07:52 - 00000000 ____D C:\Users\Matee-es\AppData\Local\CallofDuty4MW
2016-12-08 07:51 - 2016-12-08 07:51 - 00000000 ____D C:\Users\Matee-es\AppData\Local\CrashRpt
2016-12-07 20:45 - 2016-12-07 20:45 - 00000000 ____D C:\Users\Matee-es\Documents\Criterion Games
2016-12-02 12:43 - 2016-12-02 12:43 - 00000785 _____ C:\Users\Public\Desktop\Need for Speed Most Wanted.lnk
2016-12-02 12:26 - 2016-12-02 12:26 - 00000952 _____ C:\Users\Matee-es\Desktop\COD 4.lnk
2016-12-02 12:26 - 2016-12-02 12:26 - 00000000 ____D C:\Users\Matee-es\AppData\Local\PunkBuster
2016-12-02 08:21 - 2016-12-02 08:21 - 00014673 _____ C:\Users\Matee-es\Downloads\[CzT]Call_of_Duty_4_Modern_Warfare_Multiplayer_only.torrent
2016-12-02 08:19 - 2016-12-02 08:19 - 00012061 _____ C:\Users\Matee-es\Downloads\[CzT]Need_for_Speed_Most_Wanted_2_CZ_2012_.torrent
2016-12-02 07:00 - 2016-12-02 07:00 - 06152080 _____ C:\Users\Matee-es\Downloads\14090-ColoredBubblesAnimated.p3t
2016-12-02 06:59 - 2016-12-02 06:59 - 04530976 _____ C:\Users\Matee-es\Downloads\13822-REALi5TiKDYNAMiKSLiDESH0W.p3t
2016-12-02 06:58 - 2016-12-02 06:58 - 04143440 _____ C:\Users\Matee-es\Downloads\13272-ColoursofNatureDynamic.p3t
2016-12-02 06:58 - 2016-12-02 06:58 - 03470064 _____ C:\Users\Matee-es\Downloads\13306-DynamicRainbowFog.p3t
2016-12-02 06:57 - 2016-12-02 06:57 - 01309328 _____ C:\Users\Matee-es\Downloads\12351-PSNCustomDynamic.p3t
2016-12-02 06:56 - 2016-12-02 06:56 - 03637344 _____ C:\Users\Matee-es\Downloads\12452-CSZ.p3t
2016-12-02 06:55 - 2016-12-02 06:55 - 03164352 _____ C:\Users\Matee-es\Downloads\25128-Deep_Space_Travel_Dynamic_Theme.p3t
2016-12-01 18:43 - 2016-12-01 18:43 - 05012397 _____ C:\Users\Matee-es\Downloads\prilohy_26650.zip
2016-11-30 21:23 - 2016-11-30 21:23 - 00017124 _____ C:\Users\Matee-es\Downloads\[CzT]Parba_v_Pattayi_Pattaya_2016_CZ_.torrent
2016-11-30 21:21 - 2016-11-30 21:21 - 00018610 _____ C:\Users\Matee-es\Downloads\[CzT]Jason_Bourne_2016_CZ_ (1).torrent
2016-11-30 21:08 - 2016-11-30 21:08 - 00014791 _____ C:\Users\Matee-es\Downloads\[CzT]Letopisy_rodu_Shannara_The_Shannara_Chronicles_S01E10_Ellcrys_CZ_TvRip_1080i_.torrent
2016-11-30 21:08 - 2016-11-30 21:08 - 00012764 _____ C:\Users\Matee-es\Downloads\[CzT]Vanocni_Kamenak_2015_CZ_TVRip_.torrent
2016-11-30 14:48 - 2016-11-30 14:51 - 765526577 _____ C:\Users\Matee-es\Downloads\Tekken_6_USA_PSP-iND.rar
2016-11-30 13:08 - 2016-11-30 13:08 - 00982465 _____ C:\Users\Matee-es\Downloads\Firmware-6.60.rar
2016-11-30 12:28 - 2016-11-30 12:28 - 00547360 _____ C:\Users\Matee-es\Downloads\CFW660.rar
2016-11-30 12:28 - 2016-11-30 12:28 - 00378773 _____ C:\Users\Matee-es\Downloads\FastRecovery.rar
2016-11-30 12:20 - 2016-11-30 12:20 - 00781929 _____ C:\Users\Matee-es\Downloads\620PRO_Permanent.rar
2016-11-30 12:19 - 2016-11-30 12:19 - 28911163 _____ C:\Users\Matee-es\Downloads\OFW 6.20.rar
2016-11-30 12:19 - 2016-11-30 12:19 - 00771838 _____ C:\Users\Matee-es\Downloads\6.XX Downgrader v4.1 (1).rar
2016-11-30 12:18 - 2016-11-30 12:18 - 00771838 _____ C:\Users\Matee-es\Downloads\6.XX Downgrader v4.1.rar
2016-11-30 12:15 - 2016-11-30 12:15 - 01053507 _____ C:\Users\Matee-es\Downloads\620PRO-C.fix3.rar
2016-11-30 12:07 - 2016-11-30 12:07 - 32608261 _____ C:\Users\Matee-es\Downloads\EBOOT.PBP
2016-11-30 12:03 - 2016-11-30 12:03 - 33695895 _____ C:\Users\Matee-es\Downloads\PSP-flash-potřebne-soubory.rar

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-12-29 11:53 - 2016-10-27 17:37 - 00000000 ____D C:\FRST
2016-12-29 11:53 - 2016-01-26 23:39 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\uTorrent
2016-12-29 11:52 - 2016-10-05 15:49 - 00000000 ____D C:\Users\Public\Documents\AdobeGC
2016-12-29 11:49 - 2009-07-26 19:41 - 00681390 _____ C:\Windows\system32\perfh005.dat
2016-12-29 11:49 - 2009-07-26 19:41 - 00148224 _____ C:\Windows\system32\perfc005.dat
2016-12-29 11:49 - 2009-07-14 06:13 - 01622780 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-29 11:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-12-29 11:45 - 2016-01-26 22:54 - 00000000 ____D C:\ProgramData\NVIDIA
2016-12-29 11:43 - 2016-11-26 21:38 - 00000000 ____D C:\ProgramData\McAfee
2016-12-29 11:43 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-27 20:36 - 2016-10-13 18:36 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-27 20:34 - 2009-07-14 05:45 - 00021984 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-27 20:34 - 2009-07-14 05:45 - 00021984 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-27 19:03 - 2016-08-05 16:20 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\vlc
2016-12-27 18:59 - 2016-04-08 10:04 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\dvdcss
2016-12-27 14:23 - 2016-07-22 13:26 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sytexis Software
2016-12-27 14:23 - 2016-07-22 13:26 - 00000000 ____D C:\Program Files (x86)\Sytexis Software
2016-12-27 14:01 - 2016-06-30 13:00 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\Origin
2016-12-27 14:00 - 2016-01-27 10:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-12-27 14:00 - 2016-01-26 22:53 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-12-27 13:59 - 2016-06-30 12:40 - 00000000 ____D C:\ProgramData\Origin
2016-12-27 13:59 - 2016-06-30 12:39 - 00000000 ____D C:\Program Files (x86)\Origin
2016-12-27 13:52 - 2016-10-05 16:18 - 00003848 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-27 13:52 - 2016-10-05 16:18 - 00001386 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2016-12-27 13:52 - 2016-10-05 16:17 - 00003844 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-27 13:52 - 2016-10-05 16:17 - 00003844 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-27 13:52 - 2016-10-05 16:17 - 00003836 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-27 13:52 - 2016-10-05 16:17 - 00003660 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-27 13:52 - 2016-10-05 16:17 - 00003600 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-27 13:52 - 2016-01-27 10:33 - 00000000 ____D C:\Users\Matee-es\AppData\Local\NVIDIA Corporation
2016-12-27 13:52 - 2016-01-26 22:53 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-12-27 13:52 - 2016-01-26 22:53 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-12-27 13:47 - 2016-10-28 13:19 - 00003896 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1477657169
2016-12-27 13:41 - 2016-01-26 23:20 - 00000000 ____D C:\Users\Matee-es\Desktop\Progs
2016-12-27 13:37 - 2016-08-31 17:28 - 00000000 ____D C:\ProgramData\Ashampoo
2016-12-27 13:35 - 2016-04-06 12:13 - 00000000 ____D C:\AdwCleaner
2016-12-27 13:33 - 2016-10-05 16:15 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-12-27 13:22 - 2016-10-28 13:18 - 00003922 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-12-27 13:21 - 2016-01-26 22:51 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-12-27 13:21 - 2016-01-26 22:25 - 00000000 ____D C:\Users\Matee-es
2016-12-27 13:20 - 2016-10-31 09:48 - 00000000 ____D C:\Users\Matee-es\AppData\Local\LogMeIn Hamachi
2016-12-27 13:20 - 2016-07-08 10:46 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\Skype
2016-12-27 13:20 - 2016-06-29 06:06 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\Tunngle
2016-12-27 13:20 - 2016-06-29 06:06 - 00000000 ____D C:\Program Files (x86)\Tunngle
2016-12-27 13:20 - 2016-02-04 14:42 - 00000000 ____D C:\Users\Matee-es\Documents\FLiNGTrainer
2016-12-27 13:20 - 2016-01-27 15:38 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\streamripper
2016-12-27 13:20 - 2016-01-27 15:37 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\Winamp
2016-12-27 13:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2016-12-26 21:05 - 2016-01-27 10:54 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-12-22 09:13 - 2016-01-27 10:39 - 00000000 ____D C:\Users\Matee-es\AppData\Local\CrashDumps
2016-12-19 15:35 - 2016-02-16 08:31 - 00000000 ____D C:\Users\Matee-es\AppData\Local\Adobe
2016-12-19 13:37 - 2016-08-08 21:02 - 00202040 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-12-18 15:55 - 2016-10-28 13:18 - 00969560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.148207292786207
2016-12-18 15:55 - 2016-10-28 13:18 - 00969184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-12-18 15:55 - 2016-10-28 13:18 - 00513632 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2016-12-18 15:55 - 2016-10-28 13:18 - 00513496 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.148207292706510
2016-12-18 15:55 - 2016-10-28 13:18 - 00293352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2016-12-18 15:55 - 2016-10-28 13:18 - 00292704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys.148207292720512
2016-12-17 12:36 - 2016-10-30 20:00 - 00000958 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-12-17 12:36 - 2016-06-12 15:02 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-12-17 10:17 - 2016-01-26 22:31 - 00003384 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-17 10:17 - 2016-01-26 22:31 - 00003256 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-16 13:20 - 2016-10-28 13:19 - 00001057 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-12-15 13:08 - 2016-01-31 18:12 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-12-15 12:53 - 2016-11-14 14:19 - 00000000 ____D C:\Users\Matee-es\Desktop\Psp zaloha 2000
2016-12-15 06:51 - 2016-01-26 22:40 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-15 06:25 - 2016-01-26 22:31 - 00002169 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-14 13:59 - 2016-10-15 08:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2016-12-14 13:59 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-12-13 13:36 - 2016-10-30 20:00 - 00003964 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-12-13 13:36 - 2016-10-13 18:36 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-12-13 13:36 - 2016-10-13 18:35 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-12-13 13:36 - 2016-10-13 18:35 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-12-13 13:36 - 2016-10-13 18:35 - 00000000 ____D C:\Windows\system32\Macromed
2016-12-13 00:37 - 2016-10-05 16:18 - 01853376 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2016-12-13 00:37 - 2016-10-05 16:18 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2016-12-13 00:37 - 2016-10-05 16:18 - 01452480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2016-12-13 00:37 - 2016-10-05 16:18 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2016-12-13 00:37 - 2016-10-05 16:18 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-12-12 15:37 - 2016-10-05 16:17 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2016-12-04 12:13 - 2016-01-26 23:24 - 00000000 ____D C:\Users\Matee-es\AppData\Local\ElevatedDiagnostics
2016-12-04 11:42 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\addins
2016-12-02 12:43 - 2016-02-18 13:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hry
2016-12-02 12:25 - 2016-03-16 16:07 - 00000000 ____D C:\Users\Matee-es\AppData\Roaming\DVDVideoSoft

==================== Files in the root of some directories =======

2016-04-28 11:36 - 2016-04-28 11:36 - 0000000 ___SH () C:\Users\Matee-es\AppData\Local\LumaEmu
2016-07-26 12:57 - 2016-07-26 12:57 - 0000191 _____ () C:\Users\Matee-es\AppData\Local\uts.ini
2016-09-28 09:01 - 2016-09-28 09:04 - 0000228 _____ () C:\ProgramData\hpzinstall.log
2016-12-27 13:52 - 2016-12-29 11:49 - 0003135 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-27 13:52 - 2016-12-27 20:54 - 0010941 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1
2016-11-26 21:20 - 2016-11-26 21:20 - 0000040 _____ () C:\ProgramData\ra3.ini

Some files in TEMP:
====================
C:\Users\Matee-es\AppData\Local\Temp\0239461482845016mcinst.exe
C:\Users\Matee-es\AppData\Local\Temp\nvStInst.exe
C:\Users\Matee-es\AppData\Local\Temp\NvTelemetry.dll
C:\Users\Matee-es\AppData\Local\Temp\NvTelemetryAPI32.dll
C:\Users\Matee-es\AppData\Local\Temp\NvTelemetryAPI64.dll


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-12-26 19:38

==================== End of FRST.txt ============================

[Rudy]

Zdravím!
Jak je na tom váš oper. systém s legalitou?

[matesss]

Myslím že dobře . Jelikož je to předinstalovaný windows od prodejce pc ....
Navíc jsem tento problém již jednou měl a pomohli jste mi ho vyřešit odstraněním infikovaných souborů ...

[Rudy]

OK. Udělejte tento sken:

Stáhněte a spusťte OTL: http://oldtimer.geekstogo.com/OTL.exe . Spusťte, zaškrněte "Pro všechny uživatele", Kontrola na havěť LOP" a Kontrola na hvěť PURITY" a do dolního bílého okna zkopírujte:

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
services.exe
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

%PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
%PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
%PROGRAMFILES%\Opera\opera.exe /md5
%PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5

%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*loader* /s

a klikněte na >Prohledat<. Dejte oba logy.

[matesss]

V příloze zasílám

[Rudy]

Myslím že dobře . Jelikož je to předinstalovaný windows od prodejce pc ....
Navíc jsem tento problém již jednou měl a pomohli jste mi ho vyřešit odstraněním infikovaných souborů ...

Zajímavé. K čemu tedy potřebuje systém nelegální aktivátor? Ten v orig instalaci nemá co dělat.

[matesss]

To netuším ale pokud je to zdroj problému tak souhlasím že to tam nemá co dělat ...
Nejsem bohužel jediný vlastník tohoto pc ...

Minule jsem takovýhle podobný problém řešil přímo s Vámi a byl to vir ....

[Rudy]

To je možné, ale já nemohu postupovat proti pravidlům fóra: http://forum.viry.cz/viewtopic.php?f=12&t=115512 .

[matesss]

A to jste byl minule tak hodný že jste mi pomohl i tak ?

A můžete mi alespoň sdělit jestli v pc je něco škodlivého ... ?

Já si systém samozřejmě zakoupím protože nemam stejnak cd kterým bych mohl kdyžtak instalovat ...

[Rudy]

Pokud si budete kupovat nový Win, není třeba řešit tento. Je nelegální a já ho nebudu řešit. Když vám řeknu, co je tam špatně, už to je řešení. Lituji.