Log z FRST
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017
Ran by Martin (administrator) on MARTIN (16-03-2017 08:26:28)
Running from C:\Users\Martin\Desktop
Loaded Profiles: Martin (Available Profiles: Martin)
Platform: Windows 8.1 Pro (Update) (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Valve Corporation) D:\Games\Steam\Steam.exe
(Valve Corporation) D:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\43.0.2442.1144\opera.exe
(Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\43.0.2442.1144\opera_crashreporter.exe
(Valve Corporation) D:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\43.0.2442.1144\opera.exe
(Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\43.0.2442.1144\opera.exe
(Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\43.0.2442.1144\opera.exe
(Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\43.0.2442.1144\opera.exe
(Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\43.0.2442.1144\opera.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\43.0.2442.1144\opera.exe
(Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\43.0.2442.1144\opera.exe
(Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\43.0.2442.1144\opera.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.18384_none_fa1d93c39b41b41a\TiWorker.exe
(Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\43.0.2442.1144\opera.exe
(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-05-09] (Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKU\S-1-5-21-711420153-2017975014-3052516532-1001\...\Run: [Steam] => D:\Games\Steam\steam.exe [3019552 2017-03-13] (Valve Corporation)
HKU\S-1-5-21-711420153-2017975014-3052516532-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4299968 2016-06-22] (Disc Soft Ltd)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 62.129.50.20 192.168.0.1
Tcpip\..\Interfaces\{893BD8AD-5F48-4031-9894-0F64A8F8C0B8}: [DhcpNameServer] 62.129.50.20 192.168.0.1
Tcpip\..\Interfaces\{AE5073CD-D11C-4E27-BCA1-A201D2E7F333}: [DhcpNameServer] 10.0.0.138
Internet Explorer:
==================
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-06-27] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-06-27] (Oracle Corporation)
FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2014-04-15] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2014-04-15] (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-06-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-06-27] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-02-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-02-23] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-26] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-26] (Google Inc.)
Opera:
=======
OPR StartupUrls:
OPR Extension: (ZenMate VPN - Best Cyber Security & Unblock) - C:\Users\Martin\AppData\Roaming\Opera Software\Opera Stable\Extensions\cnhbkkedmelfmalgjpkngiaoifpdfcnl [2017-03-15]
OPR Extension: (LastPass: Free Password Manager) - C:\Users\Martin\AppData\Roaming\Opera Software\Opera Stable\Extensions\hnjalnkldgigidggphhmacmimbdlafdo [2017-02-16]
OPR Extension: (Adblock Plus) - C:\Users\Martin\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2017-03-15]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072 2016-06-22] (Disc Soft Ltd)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [520416 2014-01-28] (Futuremark)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-02-23] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-02-23] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462784 2017-02-23] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-02-23] (NVIDIA Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 athur; C:\Windows\system32\DRIVERS\athuwbx.sys [2702336 2013-11-20] (Qualcomm Atheros Communications, Inc.)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2016-06-29] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2016-06-29] (Disc Soft Ltd)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-02-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [46016 2017-01-20] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57792 2017-01-20] (NVIDIA Corporation)
R1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [131144 2017-01-16] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [205440 2017-01-16] (Oracle Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 WinRing0_1_2_0; C:\DOWNLOAD\programy\CPU temperature\WinRing0x64.sys [14544 2008-07-26] (OpenLibSys.org)
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S3 TEAM; \SystemRoot\system32\DRIVERS\RtTeam60.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-03-16 08:26 - 2017-03-16 08:27 - 00010039 _____ C:\Users\Martin\Desktop\FRST.txt
2017-03-16 08:15 - 2017-03-16 08:15 - 04031440 _____ C:\Users\Martin\Desktop\adwcleaner_6.044.exe
2017-03-12 14:11 - 2017-03-12 14:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-03-12 14:10 - 2017-03-12 14:11 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-03-12 14:09 - 2017-03-12 14:09 - 01629144 _____ (Skype Technologies S.A.) C:\Users\Martin\Downloads\SkypeSetup.exe
2017-03-12 09:36 - 2017-03-12 09:36 - 00003632 _____ C:\Windows\System32\Tasks\blogcreativeorglrops
2017-03-11 18:03 - 2017-03-11 18:03 - 00000000 ____D C:\Users\Martin\AppData\Roaming\dvdcss
2017-03-11 11:53 - 2017-03-11 11:53 - 01201256 _____ (Adobe Systems Incorporated) C:\Users\Martin\Downloads\flashplayer24pp_fa_install.exe
2017-03-10 08:14 - 2017-03-10 08:14 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-03-10 08:14 - 2017-02-23 09:17 - 00136064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-03-10 08:14 - 2017-01-26 01:13 - 00103936 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-03-10 08:14 - 2017-01-26 01:12 - 00326656 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-03-10 08:14 - 2017-01-26 01:09 - 00322560 _____ C:\Windows\system32\vulkan-1.dll
2017-03-10 08:14 - 2017-01-26 01:09 - 00118272 _____ C:\Windows\system32\vulkaninfo.exe
2017-03-10 08:13 - 2017-03-10 08:14 - 00000000 ____D C:\Windows\LastGood.Tmp
2017-03-10 08:10 - 2017-02-23 23:56 - 00217528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-03-10 08:10 - 2017-02-23 23:56 - 00047664 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 40192056 _____ C:\Windows\system32\nvcompiler.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 35272760 _____ C:\Windows\SysWOW64\nvcompiler.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 34950592 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 28223544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 19007344 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 16399408 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 14674712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 14429240 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2017-03-10 08:10 - 2017-02-23 11:34 - 13377072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 11122912 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 11019888 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 09306312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 08990256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 03625408 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 03185600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 01985080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437878.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 01589696 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437878.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 01051584 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 00989120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 00959424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 00912440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 00895272 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 00687408 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 00611384 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 00576008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 00503920 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 00500792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 00425288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 00408272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 00170360 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 00153184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2017-03-10 08:10 - 2017-02-23 11:34 - 00131720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2017-03-08 22:37 - 2017-03-12 09:41 - 00000000 ____D C:\Windows\Minidump
2017-03-03 14:09 - 2017-03-03 14:09 - 00001428 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-03-01 18:16 - 2017-03-01 18:16 - 00000000 ____D C:\Users\Martin\AppData\Local\TeamSpeak 3
2017-03-01 18:16 - 2017-03-01 18:16 - 00000000 ____D C:\Users\Martin\.TeamSpeak 3
2017-03-01 18:16 - 2017-03-01 18:16 - 00000000 ____D C:\Users\Martin\.QtWebEngineProcess
2017-03-01 18:15 - 2017-03-01 20:16 - 00000000 ____D C:\Users\Martin\AppData\Roaming\TS3Client
2017-03-01 18:09 - 2017-03-01 18:09 - 00001254 _____ C:\Users\Martin\Desktop\TeamSpeak 3 Client.lnk
2017-03-01 18:09 - 2017-03-01 18:09 - 00001212 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2017-03-01 18:09 - 2017-03-01 18:09 - 00000000 ____D C:\Users\Martin\AppData\Local\TeamSpeak 3 Client
2017-02-27 18:55 - 2017-03-10 08:25 - 00000000 ____D C:\Users\Martin\VirtualBox VMs
2017-02-26 22:55 - 2017-02-26 22:55 - 00000000 ____D C:\Windows\system32\appmgmt
2017-02-26 22:46 - 2017-02-26 22:46 - 00002287 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-02-26 22:45 - 2017-02-26 22:53 - 00000000 ____D C:\Users\Martin\AppData\Local\Google
2017-02-26 22:45 - 2017-02-26 22:46 - 00000000 ____D C:\Program Files (x86)\Google
2017-02-26 22:45 - 2017-02-26 22:45 - 00003384 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-02-26 22:45 - 2017-02-26 22:45 - 00003256 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-02-26 22:26 - 2017-02-26 22:56 - 00000000 ____D C:\ProgramData\Ashampoo
2017-02-26 22:26 - 2017-02-26 22:26 - 00001333 _____ C:\Users\Martin\Desktop\Ashampoo Burning Studio 6 FREE.lnk
2017-02-26 22:26 - 2017-02-26 22:26 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo
2017-02-26 22:26 - 2017-02-26 22:26 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Ashampoo
2017-02-26 22:26 - 2017-02-26 22:26 - 00000000 ____D C:\Users\Martin\AppData\Local\ashampoo
2017-02-26 22:26 - 2017-02-26 22:26 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2017-02-26 21:23 - 2017-03-10 08:25 - 00000000 ____D C:\Users\Martin\.VirtualBox
2017-02-26 21:23 - 2017-02-26 21:23 - 00000781 _____ C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2017-02-26 21:23 - 2017-02-26 21:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2017-02-26 21:23 - 2017-01-16 17:38 - 00959720 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2017-02-26 21:22 - 2017-01-16 17:38 - 00149304 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2017-02-25 08:21 - 2017-02-25 08:21 - 00000000 ____D C:\Users\Martin\Documents\WB Games
2017-02-25 07:22 - 2017-02-03 18:37 - 00093360 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-02-25 07:22 - 2017-02-02 15:37 - 00650752 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-02-25 07:22 - 2017-01-18 15:35 - 01609216 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-02-25 07:22 - 2017-01-18 15:35 - 01286144 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-02-25 07:22 - 2017-01-18 15:35 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-02-25 07:22 - 2017-01-18 15:35 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-02-25 07:22 - 2017-01-18 15:35 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2017-02-25 07:22 - 2017-01-18 15:35 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-02-25 07:22 - 2017-01-18 15:35 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-02-21 22:40 - 2017-02-21 22:40 - 00002005 _____ C:\Users\Martin\Desktop\Vypínač na dobrou noc.lnk
2017-02-21 22:40 - 2017-02-21 22:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vypínač na dobrou noc
2017-02-21 22:40 - 2017-02-21 22:40 - 00000000 ____D C:\Program Files (x86)\Vypínač na dobrou noc
2017-02-21 17:36 - 2017-02-21 17:37 - 00000000 ____D C:\Users\Martin\Documents\Shadow Warrior DX11
2017-02-21 16:52 - 2017-01-20 19:39 - 00156608 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-02-21 16:52 - 2017-01-20 19:39 - 00124352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-02-21 16:52 - 2017-01-20 19:39 - 00057792 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-02-21 16:52 - 2017-01-20 19:39 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2017-02-20 19:06 - 2017-02-20 19:06 - 00000000 ____D C:\Users\Martin\Documents\Shadow Warrior
2017-02-16 21:29 - 2017-02-10 01:52 - 01983424 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437866.dll
2017-02-16 21:29 - 2017-02-10 01:52 - 01589696 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437866.dll
2017-02-16 21:29 - 2017-02-10 01:52 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-02-16 21:29 - 2017-02-10 01:52 - 00000669 _____ C:\Windows\system32\nv-vk64.json
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-03-16 08:26 - 2016-12-23 18:54 - 00000000 ____D C:\FRST
2017-03-16 08:26 - 2016-06-27 22:16 - 00000000 ____D C:\ProgramData\NVIDIA
2017-03-16 08:25 - 2016-12-23 18:45 - 02424832 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2017-03-16 08:23 - 2016-06-27 17:14 - 00000000 ___DO C:\Users\Martin\SkyDrive
2017-03-16 08:21 - 2016-12-23 20:44 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-16 08:19 - 2016-12-30 14:28 - 00000008 __RSH C:\ProgramData\ntuser.pol
2017-03-16 08:19 - 2016-12-23 20:40 - 00000000 ____D C:\AdwCleaner
2017-03-16 08:18 - 2013-09-30 05:20 - 01745984 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-16 08:18 - 2013-09-30 04:57 - 00738682 _____ C:\Windows\system32\perfh005.dat
2017-03-16 08:18 - 2013-09-30 04:57 - 00151404 _____ C:\Windows\system32\perfc005.dat
2017-03-16 08:18 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2017-03-15 23:39 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2017-03-14 18:02 - 2016-06-27 17:16 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-711420153-2017975014-3052516532-1001
2017-03-13 19:17 - 2016-06-27 22:22 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Skype
2017-03-12 16:11 - 2016-07-13 11:03 - 00000000 ____D C:\Users\Martin\AppData\Roaming\vlc
2017-03-12 16:10 - 2016-07-13 10:48 - 00000000 ____D C:\KMPlayer
2017-03-12 14:11 - 2016-06-27 22:22 - 00002747 _____ C:\Users\Public\Desktop\Skype.lnk
2017-03-12 14:11 - 2016-06-27 22:22 - 00000000 ____D C:\ProgramData\Skype
2017-03-12 14:10 - 2016-06-27 22:22 - 00000000 ____D C:\Users\Martin\AppData\Local\Skype
2017-03-12 09:58 - 2016-06-29 11:19 - 00000958 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2017-03-12 09:54 - 2016-12-23 19:18 - 00000000 ____D C:\Program Files\trend micro
2017-03-12 09:41 - 2016-12-23 18:22 - 00000000 ____D C:\Users\Martin\AppData\Local\CrashDumps
2017-03-11 11:54 - 2016-06-29 11:19 - 00003922 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-03-11 11:54 - 2016-06-29 11:16 - 00000000 ____D C:\Users\Martin\AppData\Local\Adobe
2017-03-11 11:53 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-03-11 11:53 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\Macromed
2017-03-10 08:37 - 2016-07-13 10:10 - 00000000 ____D C:\Users\Martin\AppData\Roaming\uTorrent
2017-03-10 08:24 - 2016-06-28 14:30 - 00000000 ___RD C:\Users\Martin\Desktop\Games
2017-03-10 08:15 - 2016-06-27 22:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-03-10 08:15 - 2016-06-27 22:16 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-03-09 21:08 - 2016-06-27 17:10 - 00000000 ____D C:\Users\Martin
2017-03-03 14:09 - 2016-12-30 14:18 - 00004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 14:09 - 2016-10-29 14:24 - 00003852 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 14:09 - 2016-10-29 14:23 - 00003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 14:09 - 2016-10-29 14:23 - 00003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 14:09 - 2016-10-29 14:23 - 00003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 14:09 - 2016-10-29 14:23 - 00003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 14:09 - 2016-10-29 14:23 - 00003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 14:09 - 2016-06-27 17:16 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-03-03 14:09 - 2016-06-27 17:16 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-03-01 18:10 - 2016-06-27 22:14 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-01 17:23 - 2016-06-27 17:19 - 00004050 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1467044360
2017-03-01 17:23 - 2016-06-27 17:19 - 00001328 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2017-02-25 07:32 - 2016-06-28 13:26 - 00000000 ____D C:\Windows\system32\appraiser
2017-02-25 07:25 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp
2017-02-25 07:24 - 2016-06-27 21:42 - 00000000 ____D C:\Windows\system32\MRT
2017-02-25 07:23 - 2016-06-27 21:42 - 138020592 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-02-23 23:56 - 2016-07-10 22:00 - 01600056 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2017-02-23 19:35 - 2016-10-29 14:24 - 01880512 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2017-02-23 19:35 - 2016-10-29 14:24 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2017-02-23 19:35 - 2016-10-29 14:24 - 01468864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2017-02-23 19:35 - 2016-10-29 14:24 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2017-02-23 19:35 - 2016-10-29 14:24 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2017-02-23 15:30 - 2016-12-30 14:17 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-02-23 11:34 - 2016-11-19 16:30 - 17281112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2017-02-23 11:34 - 2016-10-30 16:23 - 00492744 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2017-02-23 11:34 - 2016-06-27 22:12 - 19883088 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2017-02-23 11:34 - 2016-06-27 22:12 - 04064088 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-02-23 11:34 - 2016-06-27 22:12 - 03583744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-02-23 11:34 - 2016-06-27 22:12 - 00042616 _____ C:\Windows\system32\nvinfo.pb
2017-02-23 09:43 - 2016-10-29 14:23 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2017-02-23 09:28 - 2016-06-27 22:16 - 06401984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-02-23 09:28 - 2016-06-27 22:16 - 02479160 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-02-23 09:28 - 2016-06-27 22:16 - 01764408 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-02-23 09:28 - 2016-06-27 22:16 - 00548288 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-02-23 09:28 - 2016-06-27 22:16 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-02-23 09:28 - 2016-06-27 22:16 - 00083512 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-02-23 09:28 - 2016-06-27 22:16 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-02-23 07:38 - 2016-06-27 22:16 - 07807027 _____ C:\Windows\system32\nvcoproc.bin
2017-02-21 22:41 - 2016-06-27 17:10 - 00000000 ____D C:\Users\Martin\AppData\Local\VirtualStore
2017-02-17 11:52 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache
==================== Files in the root of some directories =======
2016-06-27 21:54 - 2016-06-27 21:54 - 0000017 _____ () C:\Users\Martin\AppData\Local\resmon.resmoncfg
2016-12-30 14:19 - 2017-02-21 16:53 - 0016198 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-30 14:19 - 2017-01-08 10:38 - 0008200 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-03-16 07:38
==================== End of FRST.txt ============================