Zpomalený pc
Napsal: 07 dub 2017 17:37
Zdravím pri starte mám celkom dosť spomalený pc musím celkom dlho na môj vkus čakať na načítanie ikon a aj po ich načítaní sa pc pomay zobúdza, preto poprosím o skontrolovanie logu či nemám v pc nejakú haveď. Ďakujem
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017
Ran by pc (administrator) on PC-PC (07-04-2017 18:29:01)
Running from C:\Users\pc\Desktop\Hry
Loaded Profiles: pc (Available Profiles: pc)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
() C:\Windows\SysWOW64\ASGT.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Spotify Ltd) C:\Users\pc\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\GPUTweak.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(ROCCAT GmbH Co., Ltd.) C:\Program Files (x86)\ROCCAT\Roccat Talk\Roccat Talk.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe
(Google Inc.) C:\Users\pc\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pc\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pc\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pc\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pc\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [205512 2017-03-18] (AVAST Software)
HKLM-x32\...\Run: [RoccatKone+] => C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.EXE [557056 2013-10-25] (ROCCAT GmbH)
HKLM-x32\...\Run: [RoccatIsku] => C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKU\S-1-5-21-1380506220-1166265625-1735509145-1000\...\Run: [Google Update] => C:\Users\pc\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe [601752 2016-12-16] (Google Inc.)
HKU\S-1-5-21-1380506220-1166265625-1735509145-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27545048 2017-03-14] (Skype Technologies S.A.)
HKU\S-1-5-21-1380506220-1166265625-1735509145-1000\...\Run: [Spotify Web Helper] => C:\Users\pc\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-04-02] (Spotify Ltd)
HKU\S-1-5-21-1380506220-1166265625-1735509145-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-03-18] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-03-18] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Roccat Talk.lnk [2015-04-03]
ShortcutTarget: Roccat Talk.lnk -> C:\Program Files (x86)\ROCCAT\Roccat Talk\Roccat Talk.exe (ROCCAT GmbH Co., Ltd.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{55F09B12-83FC-4D53-A790-CCA2CCBE97DB}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-1380506220-1166265625-1735509145-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-03-18] (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-03-18] (AVAST Software)
FireFox:
========
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2017-01-02]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2017-01-02]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll [2014-02-13] ( Microsoft Corporation)
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [2014-05-26] (EA Digital Illusions CE AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll [2014-02-13] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-08-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-08-25] (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1380506220-1166265625-1735509145-1000: @tools.google.com/Google Update;version=3 -> C:\Users\pc\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-1380506220-1166265625-1735509145-1000: @tools.google.com/Google Update;version=9 -> C:\Users\pc\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default [2017-04-07]
CHR Extension: (Prezentace Google) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-17]
CHR Extension: (Dokumenty Google) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-17]
CHR Extension: (Disk Google) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]
CHR Extension: (YouTube) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Vyhledávání Google) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-29]
CHR Extension: (Tabulky Google) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-17]
CHR Extension: (Dokumenty Google offline) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-08]
CHR Extension: (Fillr Autofill for Chrome) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojhegjfmbbpahdggoekcbmejnifimeca [2017-04-07]
CHR Extension: (Gmail) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-17]
CHR Extension: (Chrome Media Router) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-04]
CHR Profile: C:\Users\pc\AppData\Local\Google\Chrome\User Data\Guest Profile [2015-04-30]
CHR Profile: C:\Users\pc\AppData\Local\Google\Chrome\User Data\System Profile [2016-10-16]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome.XGYMCQYR4N5NZ2ECUEP4UQTHO4 - C:\Users\pc\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7147320 2017-03-18] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [262736 2017-03-18] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [278784 2017-03-18] (AVAST Software)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [175136 2014-10-03] (EasyAntiCheat Ltd)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2123240 2017-03-31] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2184688 2017-03-31] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2016-03-22] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [309272 2017-03-18] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [189768 2017-03-18] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [334600 2017-03-18] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [48528 2017-03-18] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [38296 2017-03-18] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [32088 2017-03-18] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [126600 2017-03-18] (AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [29432 2017-03-18] (AVAST Software)
R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [461640 2017-03-18] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [100640 2017-03-18] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [75704 2017-03-18] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [993608 2017-03-18] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [548928 2017-03-21] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [162528 2017-03-18] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [337592 2017-03-18] (AVAST Software)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2013-07-02] (ASUSTeK Computer Inc.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56376 2016-08-26] (NVIDIA Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-04-07 18:28 - 2017-04-07 18:28 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-04-07 18:12 - 2017-04-07 18:21 - 00000000 ____D C:\Users\pc\Desktop\Nová složka
2017-04-07 18:02 - 2017-04-07 18:02 - 04089296 _____ C:\Users\pc\Desktop\adwcleaner_6.045.exe
2017-04-07 17:55 - 2017-04-07 17:55 - 00000000 ____D C:\Users\pc\Desktop\updates
2017-04-07 17:52 - 2017-04-07 17:53 - 02403520 _____ (BitTorrent Inc.) C:\Users\pc\Desktop\uTorrent.exe
2017-03-18 16:58 - 2017-03-18 16:58 - 00398408 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-03-18 16:58 - 2017-03-18 16:58 - 00003914 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-03-18 16:58 - 2017-03-18 16:57 - 00334600 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-03-18 16:58 - 2017-03-18 16:57 - 00309272 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-03-18 16:58 - 2017-03-18 16:57 - 00189768 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-03-18 16:58 - 2017-03-18 16:57 - 00048528 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-03-18 16:57 - 2017-03-18 16:57 - 00029432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetNd6.sys
2017-03-15 20:40 - 2017-03-15 20:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-03-15 15:40 - 2017-03-15 15:40 - 00881708 _____ C:\Users\pc\Desktop\Upper-Intermediate_Workbook_Key.pdf
2017-03-12 19:06 - 2017-03-12 19:42 - 00000000 ____D C:\Users\pc\Desktop\bio
2017-03-11 14:15 - 2017-04-07 18:09 - 00000000 ____D C:\Users\pc\AppData\LocalLow\uTorrent
2017-03-10 13:35 - 2017-03-10 13:43 - 00000000 ____D C:\Users\pc\Desktop\Fotky od Božky
2017-03-08 16:43 - 2017-03-15 13:04 - 00000000 ____D C:\Users\pc\Desktop\Chem
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-04-07 18:29 - 2015-03-14 17:41 - 00000000 ____D C:\FRST
2017-04-07 18:29 - 2014-06-07 10:57 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2017-04-07 18:22 - 2014-06-05 21:23 - 00000000 ____D C:\ProgramData\NVIDIA
2017-04-07 18:22 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-04-07 18:21 - 2015-12-19 16:05 - 00000000 ____D C:\Users\pc\AppData\Roaming\uTorrent
2017-04-07 18:13 - 2009-07-14 06:45 - 00014256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-04-07 18:13 - 2009-07-14 06:45 - 00014256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-04-07 18:03 - 2015-02-09 19:24 - 00000000 ____D C:\AdwCleaner
2017-04-07 18:02 - 2014-06-28 11:24 - 00000000 ___RD C:\Users\pc\Desktop\Hry
2017-04-07 15:13 - 2016-03-22 19:58 - 00282296 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2017-04-07 15:13 - 2014-06-07 21:38 - 00282296 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2017-04-07 15:11 - 2014-06-07 21:38 - 00215128 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2017-04-07 06:54 - 2016-04-08 16:03 - 00000000 ____D C:\Users\pc\AppData\Local\Spotify
2017-04-07 06:54 - 2016-04-08 16:02 - 00000000 ____D C:\Users\pc\AppData\Roaming\Spotify
2017-04-06 16:03 - 2009-07-14 17:18 - 00666406 _____ C:\Windows\system32\perfh005.dat
2017-04-06 16:03 - 2009-07-14 17:18 - 00140102 _____ C:\Windows\system32\perfc005.dat
2017-04-06 16:03 - 2009-07-14 07:13 - 01577410 _____ C:\Windows\system32\PerfStringBackup.INI
2017-04-06 16:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-04-04 13:48 - 2014-06-05 21:41 - 00002323 _____ C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-03-31 15:22 - 2014-06-07 10:56 - 00000000 ____D C:\ProgramData\Origin
2017-03-31 15:18 - 2014-06-07 20:09 - 00000000 ____D C:\Users\pc\AppData\Roaming\Origin
2017-03-31 15:12 - 2014-06-07 10:55 - 00000000 ____D C:\Program Files (x86)\Origin
2017-03-21 16:58 - 2016-01-17 23:35 - 00548928 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2017-03-20 16:39 - 2014-06-05 22:45 - 00000000 ____D C:\ProgramData\AVAST Software
2017-03-19 00:08 - 2016-01-17 23:33 - 00003886 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1453066320
2017-03-18 17:32 - 2016-09-13 19:46 - 00000000 ____D C:\temp
2017-03-18 16:59 - 2014-06-05 22:46 - 00337592 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2017-03-18 16:58 - 2016-01-17 23:35 - 00547904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.148984914300704
2017-03-18 16:58 - 2016-01-17 23:35 - 00126600 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-03-18 16:58 - 2014-08-15 11:53 - 00038296 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-03-18 16:58 - 2014-06-05 22:46 - 00337592 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys.148984914427106
2017-03-18 16:58 - 2014-06-05 22:46 - 00162528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-03-18 16:58 - 2014-06-05 22:46 - 00100640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-03-18 16:58 - 2014-06-05 22:46 - 00075704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-03-18 16:57 - 2016-02-13 12:35 - 00461640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetSec.sys
2017-03-18 16:57 - 2014-06-05 22:46 - 00993608 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-03-18 16:57 - 2014-06-05 22:46 - 00032088 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-03-16 16:26 - 2014-06-14 18:58 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-03-16 16:26 - 2014-06-14 18:58 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-03-16 16:26 - 2014-06-14 18:58 - 00004396 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-03-16 16:26 - 2014-06-14 18:58 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-03-16 16:26 - 2014-06-14 18:58 - 00000000 ____D C:\Windows\system32\Macromed
2017-03-15 20:40 - 2014-06-07 10:57 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-03-15 20:40 - 2014-06-07 10:57 - 00000000 ____D C:\ProgramData\Skype
2017-03-15 20:38 - 2015-09-07 19:28 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-12 10:55 - 2016-09-18 09:56 - 00000000 ____D C:\Users\pc\Desktop\TATO Dokumenty
2017-03-11 20:19 - 2014-06-07 10:54 - 00000000 ____D C:\Program Files (x86)\Steam
Some files in TEMP:
====================
2017-03-15 20:37 - 2017-03-15 20:37 - 14456872 _____ (Microsoft Corporation) C:\Users\pc\AppData\Local\Temp\vc_redist.x86.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-03-31 20:04
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-03-2017
Ran by pc (07-04-2017 18:30:03)
Running from C:\Users\pc\Desktop\Hry
Windows 7 Professional Service Pack 1 (X64) (2014-06-05 19:16:02)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1380506220-1166265625-1735509145-500 - Administrator - Disabled)
Guest (S-1-5-21-1380506220-1166265625-1735509145-501 - Limited - Disabled)
pc (S-1-5-21-1380506220-1166265625-1735509145-1000 - Administrator - Enabled) => C:\Users\pc
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-1380506220-1166265625-1735509145-1000\...\uTorrent) (Version: 3.4.9.43388 - BitTorrent Inc.)
7-Zip 4.57 (HKLM-x32\...\7-Zip) (Version: - )
Adobe Acrobat Reader DC - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AC0F074E4100}) (Version: 15.023.20070 - Adobe Systems Incorporated)
Adobe Flash Player 25 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 25.0.0.127 - Adobe Systems Incorporated)
Ansel (Version: 372.70 - NVIDIA Corporation) Hidden
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.3.0 - Asmedia Technology)
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.7.1.8 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.7.1.8 - ASUSTek COMPUTER INC.) Hidden
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Avast Internet Security (HKLM-x32\...\Avast Antivirus) (Version: 17.2.2288 - AVAST Software)
Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.1.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM-x32\...\CCleaner) (Version: 2.36 - Piriform)
Counter-Strike (HKLM-x32\...\Steam App 10) (Version: - Valve)
Counter-Strike: Condition Zero (HKLM-x32\...\Steam App 80) (Version: - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version: - Klei Entertainment)
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)
EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.8.0.0 - Electronic Arts)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.7 - Electronic Arts)
FL Studio 11 (HKLM-x32\...\FL Studio 11) (Version: - Image-Line)
FlowStone FL 3.0 (HKLM-x32\...\FlowStone) (Version: - )
Foxit Reader (HKLM-x32\...\Foxit Reader) (Version: - )
Google Chrome (HKU\S-1-5-21-1380506220-1166265625-1735509145-1000\...\Google Chrome) (Version: 57.0.2987.133 - Google Inc.)
IL Shared Libraries (HKLM-x32\...\IL Shared Libraries) (Version: - Image-Line)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile CSY Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile CSY Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended CSY Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended CSY Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
NVIDIA Ovladač 3D Vision 372.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.70 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 372.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.70 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.4.5.30491 - Electronic Arts, Inc.)
Ovládací panel NVIDIA 372.70 (Version: 372.70 - NVIDIA Corporation) Hidden
PAYDAY: The Heist (HKLM-x32\...\Steam App 24240) (Version: - OVERKILL Software)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.988 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.65.1025.2012 - Realtek)
reFX Nexus VSTi RTAS v2.2.0 (HKLM-x32\...\reFX Nexus_is1) (Version: - )
ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version: - Roccat GmbH)
ROCCAT Kone[+] Mouse Driver (HKLM-x32\...\{B99CB207-4704-4C51-9309-0FA90AA26DD4}) (Version: - Roccat GmbH)
Roccat Talk (HKLM-x32\...\{605D671E-1D1E-4840-84D9-BFACE17F160D}) (Version: 1.00.0015 - Roccat GmbH)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.9 - Rockstar Games)
Rust (HKLM-x32\...\Steam App 252490) (Version: - Facepunch Studios)
SafeZone Stable 3.55.2393.590 (x32 Version: 3.55.2393.590 - Avast Software) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1380506220-1166265625-1735509145-1000\...\Spotify) (Version: 1.0.52.725.g943b26a8 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
The KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: - )
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51 - Ghisler Software GmbH)
Tropico 4 (HKLM-x32\...\Steam App 57690) (Version: - Haemimont Games)
Vegas Pro 12.0 (64-bit) (HKLM\...\{87CEB7C0-1D35-11E2-8F19-F04DA23A5C58}) (Version: 12.0.394 - Sony)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
WinRAR 5.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1380506220-1166265625-1735509145-1000_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\pc\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-1380506220-1166265625-1735509145-1000_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\pc\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1380506220-1166265625-1735509145-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\pc\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll (Google Inc.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {29A4BB95-B3CB-498A-A77F-7DDF3F5364A0} - System32\Tasks\SafeZone scheduled Autoupdate 1453066320 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-03-03] (Avast Software)
Task: {2EB6DE6C-6E53-4103-BC5F-EAD118DB76E8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {58311DB2-8F11-443B-9AF4-D62926C28453} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-03-18] (AVAST Software)
Task: {7541CF97-720C-441B-9A7B-C1D28904F161} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-03-16] (Adobe Systems Incorporated)
Task: {79BCA717-E5B5-49AE-9888-81E0E52F25B8} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1380506220-1166265625-1735509145-1000Core => C:\Users\pc\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {E89411F8-E968-4A8F-A17E-074184F34B23} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-01-27] (AVAST Software)
Task: {F2FA290F-E83E-4539-B541-9D3BDE7A1B1F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1380506220-1166265625-1735509145-1000UA => C:\Users\pc\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2014-06-05 21:22 - 2016-08-25 23:10 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-01-17 11:24 - 2012-01-17 11:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2014-06-07 21:38 - 2016-03-22 20:03 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2017-03-18 16:57 - 2017-03-18 16:57 - 00162600 _____ () c:\Program Files\AVAST Software\Avast\x64\vaarclient.dll
2017-03-18 16:58 - 2017-03-18 16:58 - 00792656 _____ () C:\Program Files\AVAST Software\Avast\x64\ffl2.dll
2017-03-18 16:58 - 2017-03-18 16:58 - 00170216 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-04-07 18:06 - 2017-04-07 18:06 - 06022832 _____ () C:\Program Files\AVAST Software\Avast\defs\17040700\algo.dll
2017-03-18 16:58 - 2017-03-18 16:58 - 00655056 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2014-09-16 22:49 - 2014-09-16 22:49 - 00278528 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Vender.dll
2014-08-28 18:49 - 2014-08-28 18:49 - 00057344 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Exeio.dll
2014-06-28 11:42 - 2010-06-22 13:50 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\hiddriver.dll
2014-06-28 11:43 - 2010-11-04 11:48 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku Keyboard\hiddriver.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 02144104 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 07955304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 00341352 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 00028008 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 00127336 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2017-01-02 20:06 - 2017-01-02 20:06 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-03-18 16:57 - 2017-03-18 16:57 - 00290352 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2015-04-30 14:03 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1380506220-1166265625-1735509145-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\pc\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{E74F6D9E-D77B-4C85-8C64-92872FA165E0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{69A26A11-7CF6-4D53-BDC2-771DAD9466C0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{4D00B605-FC6E-47D7-9035-86582013B6E2}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{4DB249CC-2FFF-4E76-90D8-A08724CA4528}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B328CA7D-B970-4980-A935-018A448D10CD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\rust.exe
FirewallRules: [{7328D00D-9C07-47A5-892A-5E8BD0A4156E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\rust.exe
FirewallRules: [{A2C23A2D-9F50-429E-81A4-A9A04A340F9F}] => (Allow) D:\Program Files (x86)\SteamLibrary\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{8AFC3AA2-C8A6-499E-875D-61BD844DF9FF}] => (Allow) D:\Program Files (x86)\SteamLibrary\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{6D6472C6-71D9-434B-9BDC-212AFEA39012}] => (Allow) D:\Program Files (x86)\SteamLibrary\SteamApps\common\Tropico 4\Tropico4.exe
FirewallRules: [{95194B19-7DB3-40A8-95BD-8AFFD80923F4}] => (Allow) D:\Program Files (x86)\SteamLibrary\SteamApps\common\Tropico 4\Tropico4.exe
FirewallRules: [{57065AAC-1A1A-4F30-88FD-26CF4B91F5A7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{3CDB18B8-1E91-4DA2-9DC6-F718AD60EE1D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{0602BBB5-88AA-4C5D-872D-6945CDCD5008}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tropico 4\Tropico4.exe
FirewallRules: [{42FF1DBE-3313-4CA2-BCC7-27EFB15602FD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tropico 4\Tropico4.exe
FirewallRules: [{FB1920CC-726B-4802-A876-33A406CEDE48}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{825A3667-3F60-46FB-9558-B8102E479BA0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{058D1EE7-4905-4F96-85C5-549ECD4C438D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Half-Life\hl.exe
FirewallRules: [{E59DA6CF-B070-479B-A76A-DA5A51349BE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Half-Life\hl.exe
FirewallRules: [{F9D1D8BF-92BF-4540-8CE5-9C4B7360ECBA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{172AD217-BBC4-4109-A504-8BA93BACF0D4}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{31D68421-7597-40D0-9979-2038E40DF218}C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe] => (Allow) C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe
FirewallRules: [UDP Query User{E659B8B3-4FA8-480F-9CFF-4B40DE30AEF8}C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe] => (Allow) C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe
FirewallRules: [TCP Query User{E3371B54-DD76-4017-B806-5B8EF9C035D1}C:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) C:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [UDP Query User{D9BF1FE8-62D4-4D1E-995E-A14072876B06}C:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) C:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [{E9653C47-1695-42CF-A8BB-AF1900462353}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\experimental\Rust.exe
FirewallRules: [{419220C3-20C2-4C30-8996-24354296EFD2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\experimental\Rust.exe
FirewallRules: [{E1EB3D79-C8A2-4462-836C-57CC942CAF3C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe
FirewallRules: [{93857B7B-E15F-47DB-B17E-C01EFB09FBB0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe
FirewallRules: [{7348BBE9-0E10-4487-9EEA-864592575A3A}] => (Allow) C:\Users\pc\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E9568356-93E7-4521-9546-310E5738BC43}] => (Allow) C:\Users\pc\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{B5B3B973-359A-4CAD-B6D1-A3BB9E12F269}D:\program files (x86)\farcry 4\far cry 4\bin\farcry4.exe] => (Block) D:\program files (x86)\farcry 4\far cry 4\bin\farcry4.exe
FirewallRules: [UDP Query User{1B924897-C74D-42FF-AD53-43255C3721A1}D:\program files (x86)\farcry 4\far cry 4\bin\farcry4.exe] => (Block) D:\program files (x86)\farcry 4\far cry 4\bin\farcry4.exe
FirewallRules: [{F3BDBEA0-DB0F-4EFC-82E6-73DF5D1FFA4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{E9801817-66C0-485E-A70C-00AFC587158E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{D7EDDCC6-EAA2-4510-B412-2C850D46FACA}D:\program files (x86)\rockstar games\gta v\gta5.exe] => (Allow) D:\program files (x86)\rockstar games\gta v\gta5.exe
FirewallRules: [UDP Query User{71D26E15-00E4-4CF4-A1CD-69F2DD8854BB}D:\program files (x86)\rockstar games\gta v\gta5.exe] => (Allow) D:\program files (x86)\rockstar games\gta v\gta5.exe
FirewallRules: [{13F0212E-EFBD-440B-8111-1A96B042ECAE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\legacy\rust.exe
FirewallRules: [{88BD7F81-408E-44C6-B067-50E52F0E86DF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\legacy\rust.exe
FirewallRules: [TCP Query User{EA63B982-A5E0-4255-95AF-7B3C62DA1902}D:\program files (x86)\rockstar games\gta v\gta5.exe] => (Allow) D:\program files (x86)\rockstar games\gta v\gta5.exe
FirewallRules: [UDP Query User{84BC91F7-662E-4268-86C5-D445D83FC2FE}D:\program files (x86)\rockstar games\gta v\gta5.exe] => (Allow) D:\program files (x86)\rockstar games\gta v\gta5.exe
FirewallRules: [{126F9934-F658-48AB-9D4F-150566307343}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{6C1DEB4E-33A8-4698-8EA3-4EF379A4F6D7}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{ED1FBDF8-F0AA-480B-A283-D8AE3991675D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{67CAA043-856E-4162-97F7-DA3902839802}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{96D8DE8A-574F-4EBE-A932-6F661525D426}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe
FirewallRules: [{29D66301-3AE3-4701-97FF-0AB4BBB2DC42}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe
FirewallRules: [TCP Query User{B7C0ECBF-8D04-4F61-B29B-1EB0C4EC8982}C:\program files (x86)\origin games\fifa 16 demo\fifa16_demo.exe] => (Allow) C:\program files (x86)\origin games\fifa 16 demo\fifa16_demo.exe
FirewallRules: [UDP Query User{43FC8D91-B833-4A4B-91DD-5EC7066D34E9}C:\program files (x86)\origin games\fifa 16 demo\fifa16_demo.exe] => (Allow) C:\program files (x86)\origin games\fifa 16 demo\fifa16_demo.exe
FirewallRules: [{4E4EEE6E-1C37-4FA4-BB82-DF0362A38C22}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{88FAD549-1680-4999-82AD-815F602C68AD}D:\program files (x86)\r.g. mechanics\simcity\simcity\simcity.exe] => (Block) D:\program files (x86)\r.g. mechanics\simcity\simcity\simcity.exe
FirewallRules: [UDP Query User{F70AB861-56A9-47BE-BFA9-FC6A981938D9}D:\program files (x86)\r.g. mechanics\simcity\simcity\simcity.exe] => (Block) D:\program files (x86)\r.g. mechanics\simcity\simcity\simcity.exe
FirewallRules: [TCP Query User{D9614ACA-8693-4DE1-B9CF-DA60B3BA2D14}C:\users\pc\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\pc\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{BB55D0DA-2742-4190-8418-02BC8195B4DB}C:\users\pc\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\pc\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{252B37A6-F0D2-4D64-9263-8C2CC8271480}C:\users\pc\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\pc\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{EE36DDC7-E3B2-4896-9F09-5B65E4C8140B}C:\users\pc\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\pc\appdata\roaming\spotify\spotify.exe
FirewallRules: [{39BF945F-BF5A-4AB5-ADC1-3D0E2BA94D8A}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{2B61AEB2-A225-45E8-B874-EB46C378A8D2}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{51EDA3F9-3690-4C24-B14E-26AA80E26D06}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{FC45BD52-EB02-4D75-9133-8788511444E7}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C78ACA9A-CF5E-4F74-9AA2-371808F28825}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield Bad Company 2\BFBC2Game.exe
FirewallRules: [{C22264A7-07E0-4102-A293-4918417113AC}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield Bad Company 2\BFBC2Game.exe
FirewallRules: [{7FE7E90B-1B18-4D5F-A15C-C1B5406B57C3}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.561\SZBrowser.exe
FirewallRules: [{85A7AB4D-6072-4309-B776-DC0C425BE820}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.590\SZBrowser.exe
==================== Restore Points =========================
12-03-2017 22:25:38 Removed VirtualDJ 8
15-03-2017 20:37:43 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215
18-03-2017 16:59:13 Instalace balíčku ovladače zařízení: Avast Síťová služba
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (03/31/2017 03:21:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: fifa15.exe, verze: 1.8.0.0, časové razítko: 0x55699cb1
Název chybujícího modulu: aswhooka.dll, verze: 17.2.2.60911, časové razítko: 0x58ac6c5d
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000003182
ID chybujícího procesu: 0x2fc
Čas spuštění chybující aplikace: 0x01d2aa21a6b57d57
Cesta k chybující aplikaci: C:\Program Files (x86)\Origin Games\FIFA 15\fifa15.exe
Cesta k chybujícímu modulu: C:\Program Files\AVAST Software\Avast\x64\aswhooka.dll
ID zprávy: e9e156db-1614-11e7-b405-5404a64c8c4c
Error: (03/31/2017 03:19:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: fifa15.exe, verze: 1.8.0.0, časové razítko: 0x55699cb1
Název chybujícího modulu: aswhooka.dll, verze: 17.2.2.60911, časové razítko: 0x58ac6c5d
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000003182
ID chybujícího procesu: 0x1048
Čas spuštění chybující aplikace: 0x01d2aa216a8f9341
Cesta k chybující aplikaci: C:\Program Files (x86)\Origin Games\FIFA 15\fifa15.exe
Cesta k chybujícímu modulu: C:\Program Files\AVAST Software\Avast\x64\aswhooka.dll
ID zprávy: ac41e69e-1614-11e7-b405-5404a64c8c4c
Error: (03/31/2017 03:18:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: fifa15.exe, verze: 1.8.0.0, časové razítko: 0x55699cb1
Název chybujícího modulu: aswhooka.dll, verze: 17.2.2.60911, časové razítko: 0x58ac6c5d
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000003182
ID chybujícího procesu: 0x1454
Čas spuštění chybující aplikace: 0x01d2aa21488f019c
Cesta k chybující aplikaci: C:\Program Files (x86)\Origin Games\FIFA 15\fifa15.exe
Cesta k chybujícímu modulu: C:\Program Files\AVAST Software\Avast\x64\aswhooka.dll
ID zprávy: 93edd28c-1614-11e7-b405-5404a64c8c4c
Error: (01/14/2017 01:24:33 PM) (Source: MsiInstaller) (EventID: 1041) (User: NT AUTHORITY)
Description: Nepodařilo se zahájit transakci Instalační služby systému Windows ASU_MSI_TRAN. Při zahajování transakce došlo k chybě 1603.
Error: (01/05/2017 08:04:17 PM) (Source: Microsoft Office 12) (EventID: 2001) (User: )
Description: Rejected Safe Mode action : Microsoft Office Word.
Error: (12/27/2016 06:54:23 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program eurotrucks2.exe verze 1.25.2.2 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.
ID procesu: edc
Čas spuštění: 01d26061b90fd175
Čas ukončení: 50
Cesta k aplikaci: C:\Users\pc\Desktop\Euro.Truck.Simulator.2.v1.25.2.6.Incl.ALL.DLC\Euro.Truck.Simulator.2.v1.25.2.6.Incl.ALL.DLC\bin\win_x86\eurotrucks2.exe
ID hlášení:
Error: (11/22/2016 08:55:00 PM) (Source: MsiInstaller) (EventID: 1041) (User: NT AUTHORITY)
Description: Nepodařilo se zahájit transakci Instalační služby systému Windows ASU_MSI_TRAN. Při zahajování transakce došlo k chybě 1603.
Error: (11/12/2016 01:57:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Skype.exe, verze: 7.29.0.102, časové razítko: 0x58052bbc
Název chybujícího modulu: RTMPLTFM.dll, verze: 6.0.8970.197, časové razítko: 0x57f57131
Kód výjimky: 0xc0000005
Posun chyby: 0x0024ffda
ID chybujícího procesu: 0x6c8
Čas spuštění chybující aplikace: 0x01d23cdba011f372
Cesta k chybující aplikaci: C:\Program Files (x86)\Skype\Phone\Skype.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Skype\Phone\RTMPLTFM.dll
ID zprávy: 2e0c6c5c-a8cf-11e6-a8f2-5404a64c8c4c
Error: (11/11/2016 03:51:39 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program DllHost.exe verze 6.1.7600.16385 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.
ID procesu: 1510
Čas spuštění: 01d23c22ad3b5903
Čas ukončení: 36
Cesta k aplikaci: C:\Windows\system32\DllHost.exe
ID hlášení: f653179b-a815-11e6-aecd-5404a64c8c4c
Error: (11/04/2016 10:34:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Skype.exe, verze: 7.29.0.102, časové razítko: 0x58052bbc
Název chybujícího modulu: RTMPLTFM.dll, verze: 6.0.8970.197, časové razítko: 0x57f57131
Kód výjimky: 0xc0000005
Posun chyby: 0x0024ffda
ID chybujícího procesu: 0x9e8
Čas spuštění chybující aplikace: 0x01d236d9d4c1a22c
Cesta k chybující aplikaci: C:\Program Files (x86)\Skype\Phone\Skype.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Skype\Phone\RTMPLTFM.dll
ID zprávy: 165b5d94-a2ce-11e6-b76c-5404a64c8c4c
System errors:
=============
Error: (04/07/2017 06:23:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Origin Web Helper Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (04/07/2017 06:23:09 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Origin Web Helper Service bylo dosaženo časového limitu (30000 ms).
Error: (04/07/2017 06:05:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Origin Web Helper Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (04/07/2017 06:05:49 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Origin Web Helper Service bylo dosaženo časového limitu (30000 ms).
Error: (04/07/2017 02:24:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Origin Web Helper Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (04/07/2017 02:24:36 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Origin Web Helper Service bylo dosaženo časového limitu (30000 ms).
Error: (04/07/2017 07:11:47 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: Server {F9717507-6651-4EDB-BFF7-AE615179BCCF} se v daném časovém limitu neregistroval u služby DCOM.
Error: (04/07/2017 06:47:43 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Origin Web Helper Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (04/07/2017 06:47:43 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Origin Web Helper Service bylo dosaženo časového limitu (30000 ms).
Error: (04/06/2017 11:16:55 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Server {F9717507-6651-4EDB-BFF7-AE615179BCCF} se v daném časovém limitu neregistroval u služby DCOM.
==================== Memory info ===========================
Processor: AMD Athlon(tm) II X4 640 Processor
Percentage of memory in use: 37%
Total physical RAM: 4094.12 MB
Available physical RAM: 2565.76 MB
Total Virtual: 8186.42 MB
Available Virtual: 6427.77 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:195.21 GB) (Free:22.47 GB) NTFS
Drive d: () (Fixed) (Total:270.45 GB) (Free:124.72 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: E3CA17B6)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=195.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=270.4 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017
Ran by pc (administrator) on PC-PC (07-04-2017 18:29:01)
Running from C:\Users\pc\Desktop\Hry
Loaded Profiles: pc (Available Profiles: pc)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
() C:\Windows\SysWOW64\ASGT.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Spotify Ltd) C:\Users\pc\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\GPUTweak.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(ROCCAT GmbH Co., Ltd.) C:\Program Files (x86)\ROCCAT\Roccat Talk\Roccat Talk.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe
(Google Inc.) C:\Users\pc\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pc\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pc\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pc\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pc\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [205512 2017-03-18] (AVAST Software)
HKLM-x32\...\Run: [RoccatKone+] => C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.EXE [557056 2013-10-25] (ROCCAT GmbH)
HKLM-x32\...\Run: [RoccatIsku] => C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKU\S-1-5-21-1380506220-1166265625-1735509145-1000\...\Run: [Google Update] => C:\Users\pc\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe [601752 2016-12-16] (Google Inc.)
HKU\S-1-5-21-1380506220-1166265625-1735509145-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27545048 2017-03-14] (Skype Technologies S.A.)
HKU\S-1-5-21-1380506220-1166265625-1735509145-1000\...\Run: [Spotify Web Helper] => C:\Users\pc\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-04-02] (Spotify Ltd)
HKU\S-1-5-21-1380506220-1166265625-1735509145-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-03-18] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-03-18] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Roccat Talk.lnk [2015-04-03]
ShortcutTarget: Roccat Talk.lnk -> C:\Program Files (x86)\ROCCAT\Roccat Talk\Roccat Talk.exe (ROCCAT GmbH Co., Ltd.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{55F09B12-83FC-4D53-A790-CCA2CCBE97DB}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-1380506220-1166265625-1735509145-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-03-18] (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-03-18] (AVAST Software)
FireFox:
========
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2017-01-02]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2017-01-02]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll [2014-02-13] ( Microsoft Corporation)
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [2014-05-26] (EA Digital Illusions CE AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll [2014-02-13] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-08-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-08-25] (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1380506220-1166265625-1735509145-1000: @tools.google.com/Google Update;version=3 -> C:\Users\pc\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-1380506220-1166265625-1735509145-1000: @tools.google.com/Google Update;version=9 -> C:\Users\pc\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default [2017-04-07]
CHR Extension: (Prezentace Google) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-17]
CHR Extension: (Dokumenty Google) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-17]
CHR Extension: (Disk Google) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]
CHR Extension: (YouTube) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Vyhledávání Google) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-29]
CHR Extension: (Tabulky Google) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-17]
CHR Extension: (Dokumenty Google offline) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-08]
CHR Extension: (Fillr Autofill for Chrome) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojhegjfmbbpahdggoekcbmejnifimeca [2017-04-07]
CHR Extension: (Gmail) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-17]
CHR Extension: (Chrome Media Router) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-04]
CHR Profile: C:\Users\pc\AppData\Local\Google\Chrome\User Data\Guest Profile [2015-04-30]
CHR Profile: C:\Users\pc\AppData\Local\Google\Chrome\User Data\System Profile [2016-10-16]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome.XGYMCQYR4N5NZ2ECUEP4UQTHO4 - C:\Users\pc\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7147320 2017-03-18] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [262736 2017-03-18] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [278784 2017-03-18] (AVAST Software)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [175136 2014-10-03] (EasyAntiCheat Ltd)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2123240 2017-03-31] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2184688 2017-03-31] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2016-03-22] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [309272 2017-03-18] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [189768 2017-03-18] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [334600 2017-03-18] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [48528 2017-03-18] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [38296 2017-03-18] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [32088 2017-03-18] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [126600 2017-03-18] (AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [29432 2017-03-18] (AVAST Software)
R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [461640 2017-03-18] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [100640 2017-03-18] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [75704 2017-03-18] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [993608 2017-03-18] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [548928 2017-03-21] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [162528 2017-03-18] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [337592 2017-03-18] (AVAST Software)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2013-07-02] (ASUSTeK Computer Inc.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56376 2016-08-26] (NVIDIA Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-04-07 18:28 - 2017-04-07 18:28 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-04-07 18:12 - 2017-04-07 18:21 - 00000000 ____D C:\Users\pc\Desktop\Nová složka
2017-04-07 18:02 - 2017-04-07 18:02 - 04089296 _____ C:\Users\pc\Desktop\adwcleaner_6.045.exe
2017-04-07 17:55 - 2017-04-07 17:55 - 00000000 ____D C:\Users\pc\Desktop\updates
2017-04-07 17:52 - 2017-04-07 17:53 - 02403520 _____ (BitTorrent Inc.) C:\Users\pc\Desktop\uTorrent.exe
2017-03-18 16:58 - 2017-03-18 16:58 - 00398408 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-03-18 16:58 - 2017-03-18 16:58 - 00003914 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-03-18 16:58 - 2017-03-18 16:57 - 00334600 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-03-18 16:58 - 2017-03-18 16:57 - 00309272 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-03-18 16:58 - 2017-03-18 16:57 - 00189768 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-03-18 16:58 - 2017-03-18 16:57 - 00048528 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-03-18 16:57 - 2017-03-18 16:57 - 00029432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetNd6.sys
2017-03-15 20:40 - 2017-03-15 20:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-03-15 15:40 - 2017-03-15 15:40 - 00881708 _____ C:\Users\pc\Desktop\Upper-Intermediate_Workbook_Key.pdf
2017-03-12 19:06 - 2017-03-12 19:42 - 00000000 ____D C:\Users\pc\Desktop\bio
2017-03-11 14:15 - 2017-04-07 18:09 - 00000000 ____D C:\Users\pc\AppData\LocalLow\uTorrent
2017-03-10 13:35 - 2017-03-10 13:43 - 00000000 ____D C:\Users\pc\Desktop\Fotky od Božky
2017-03-08 16:43 - 2017-03-15 13:04 - 00000000 ____D C:\Users\pc\Desktop\Chem
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-04-07 18:29 - 2015-03-14 17:41 - 00000000 ____D C:\FRST
2017-04-07 18:29 - 2014-06-07 10:57 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2017-04-07 18:22 - 2014-06-05 21:23 - 00000000 ____D C:\ProgramData\NVIDIA
2017-04-07 18:22 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-04-07 18:21 - 2015-12-19 16:05 - 00000000 ____D C:\Users\pc\AppData\Roaming\uTorrent
2017-04-07 18:13 - 2009-07-14 06:45 - 00014256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-04-07 18:13 - 2009-07-14 06:45 - 00014256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-04-07 18:03 - 2015-02-09 19:24 - 00000000 ____D C:\AdwCleaner
2017-04-07 18:02 - 2014-06-28 11:24 - 00000000 ___RD C:\Users\pc\Desktop\Hry
2017-04-07 15:13 - 2016-03-22 19:58 - 00282296 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2017-04-07 15:13 - 2014-06-07 21:38 - 00282296 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2017-04-07 15:11 - 2014-06-07 21:38 - 00215128 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2017-04-07 06:54 - 2016-04-08 16:03 - 00000000 ____D C:\Users\pc\AppData\Local\Spotify
2017-04-07 06:54 - 2016-04-08 16:02 - 00000000 ____D C:\Users\pc\AppData\Roaming\Spotify
2017-04-06 16:03 - 2009-07-14 17:18 - 00666406 _____ C:\Windows\system32\perfh005.dat
2017-04-06 16:03 - 2009-07-14 17:18 - 00140102 _____ C:\Windows\system32\perfc005.dat
2017-04-06 16:03 - 2009-07-14 07:13 - 01577410 _____ C:\Windows\system32\PerfStringBackup.INI
2017-04-06 16:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-04-04 13:48 - 2014-06-05 21:41 - 00002323 _____ C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-03-31 15:22 - 2014-06-07 10:56 - 00000000 ____D C:\ProgramData\Origin
2017-03-31 15:18 - 2014-06-07 20:09 - 00000000 ____D C:\Users\pc\AppData\Roaming\Origin
2017-03-31 15:12 - 2014-06-07 10:55 - 00000000 ____D C:\Program Files (x86)\Origin
2017-03-21 16:58 - 2016-01-17 23:35 - 00548928 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2017-03-20 16:39 - 2014-06-05 22:45 - 00000000 ____D C:\ProgramData\AVAST Software
2017-03-19 00:08 - 2016-01-17 23:33 - 00003886 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1453066320
2017-03-18 17:32 - 2016-09-13 19:46 - 00000000 ____D C:\temp
2017-03-18 16:59 - 2014-06-05 22:46 - 00337592 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2017-03-18 16:58 - 2016-01-17 23:35 - 00547904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.148984914300704
2017-03-18 16:58 - 2016-01-17 23:35 - 00126600 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-03-18 16:58 - 2014-08-15 11:53 - 00038296 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-03-18 16:58 - 2014-06-05 22:46 - 00337592 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys.148984914427106
2017-03-18 16:58 - 2014-06-05 22:46 - 00162528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-03-18 16:58 - 2014-06-05 22:46 - 00100640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-03-18 16:58 - 2014-06-05 22:46 - 00075704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-03-18 16:57 - 2016-02-13 12:35 - 00461640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetSec.sys
2017-03-18 16:57 - 2014-06-05 22:46 - 00993608 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-03-18 16:57 - 2014-06-05 22:46 - 00032088 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-03-16 16:26 - 2014-06-14 18:58 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-03-16 16:26 - 2014-06-14 18:58 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-03-16 16:26 - 2014-06-14 18:58 - 00004396 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-03-16 16:26 - 2014-06-14 18:58 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-03-16 16:26 - 2014-06-14 18:58 - 00000000 ____D C:\Windows\system32\Macromed
2017-03-15 20:40 - 2014-06-07 10:57 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-03-15 20:40 - 2014-06-07 10:57 - 00000000 ____D C:\ProgramData\Skype
2017-03-15 20:38 - 2015-09-07 19:28 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-12 10:55 - 2016-09-18 09:56 - 00000000 ____D C:\Users\pc\Desktop\TATO Dokumenty
2017-03-11 20:19 - 2014-06-07 10:54 - 00000000 ____D C:\Program Files (x86)\Steam
Some files in TEMP:
====================
2017-03-15 20:37 - 2017-03-15 20:37 - 14456872 _____ (Microsoft Corporation) C:\Users\pc\AppData\Local\Temp\vc_redist.x86.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-03-31 20:04
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-03-2017
Ran by pc (07-04-2017 18:30:03)
Running from C:\Users\pc\Desktop\Hry
Windows 7 Professional Service Pack 1 (X64) (2014-06-05 19:16:02)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1380506220-1166265625-1735509145-500 - Administrator - Disabled)
Guest (S-1-5-21-1380506220-1166265625-1735509145-501 - Limited - Disabled)
pc (S-1-5-21-1380506220-1166265625-1735509145-1000 - Administrator - Enabled) => C:\Users\pc
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-1380506220-1166265625-1735509145-1000\...\uTorrent) (Version: 3.4.9.43388 - BitTorrent Inc.)
7-Zip 4.57 (HKLM-x32\...\7-Zip) (Version: - )
Adobe Acrobat Reader DC - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AC0F074E4100}) (Version: 15.023.20070 - Adobe Systems Incorporated)
Adobe Flash Player 25 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 25.0.0.127 - Adobe Systems Incorporated)
Ansel (Version: 372.70 - NVIDIA Corporation) Hidden
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.3.0 - Asmedia Technology)
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.7.1.8 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.7.1.8 - ASUSTek COMPUTER INC.) Hidden
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Avast Internet Security (HKLM-x32\...\Avast Antivirus) (Version: 17.2.2288 - AVAST Software)
Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.1.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM-x32\...\CCleaner) (Version: 2.36 - Piriform)
Counter-Strike (HKLM-x32\...\Steam App 10) (Version: - Valve)
Counter-Strike: Condition Zero (HKLM-x32\...\Steam App 80) (Version: - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version: - Klei Entertainment)
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)
EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.8.0.0 - Electronic Arts)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.7 - Electronic Arts)
FL Studio 11 (HKLM-x32\...\FL Studio 11) (Version: - Image-Line)
FlowStone FL 3.0 (HKLM-x32\...\FlowStone) (Version: - )
Foxit Reader (HKLM-x32\...\Foxit Reader) (Version: - )
Google Chrome (HKU\S-1-5-21-1380506220-1166265625-1735509145-1000\...\Google Chrome) (Version: 57.0.2987.133 - Google Inc.)
IL Shared Libraries (HKLM-x32\...\IL Shared Libraries) (Version: - Image-Line)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile CSY Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile CSY Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended CSY Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended CSY Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
NVIDIA Ovladač 3D Vision 372.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.70 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 372.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.70 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.4.5.30491 - Electronic Arts, Inc.)
Ovládací panel NVIDIA 372.70 (Version: 372.70 - NVIDIA Corporation) Hidden
PAYDAY: The Heist (HKLM-x32\...\Steam App 24240) (Version: - OVERKILL Software)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.988 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.65.1025.2012 - Realtek)
reFX Nexus VSTi RTAS v2.2.0 (HKLM-x32\...\reFX Nexus_is1) (Version: - )
ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version: - Roccat GmbH)
ROCCAT Kone[+] Mouse Driver (HKLM-x32\...\{B99CB207-4704-4C51-9309-0FA90AA26DD4}) (Version: - Roccat GmbH)
Roccat Talk (HKLM-x32\...\{605D671E-1D1E-4840-84D9-BFACE17F160D}) (Version: 1.00.0015 - Roccat GmbH)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.9 - Rockstar Games)
Rust (HKLM-x32\...\Steam App 252490) (Version: - Facepunch Studios)
SafeZone Stable 3.55.2393.590 (x32 Version: 3.55.2393.590 - Avast Software) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1380506220-1166265625-1735509145-1000\...\Spotify) (Version: 1.0.52.725.g943b26a8 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
The KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: - )
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51 - Ghisler Software GmbH)
Tropico 4 (HKLM-x32\...\Steam App 57690) (Version: - Haemimont Games)
Vegas Pro 12.0 (64-bit) (HKLM\...\{87CEB7C0-1D35-11E2-8F19-F04DA23A5C58}) (Version: 12.0.394 - Sony)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
WinRAR 5.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1380506220-1166265625-1735509145-1000_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\pc\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-1380506220-1166265625-1735509145-1000_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\pc\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1380506220-1166265625-1735509145-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\pc\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll (Google Inc.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {29A4BB95-B3CB-498A-A77F-7DDF3F5364A0} - System32\Tasks\SafeZone scheduled Autoupdate 1453066320 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-03-03] (Avast Software)
Task: {2EB6DE6C-6E53-4103-BC5F-EAD118DB76E8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {58311DB2-8F11-443B-9AF4-D62926C28453} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-03-18] (AVAST Software)
Task: {7541CF97-720C-441B-9A7B-C1D28904F161} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-03-16] (Adobe Systems Incorporated)
Task: {79BCA717-E5B5-49AE-9888-81E0E52F25B8} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1380506220-1166265625-1735509145-1000Core => C:\Users\pc\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {E89411F8-E968-4A8F-A17E-074184F34B23} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-01-27] (AVAST Software)
Task: {F2FA290F-E83E-4539-B541-9D3BDE7A1B1F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1380506220-1166265625-1735509145-1000UA => C:\Users\pc\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2014-06-05 21:22 - 2016-08-25 23:10 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-01-17 11:24 - 2012-01-17 11:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2014-06-07 21:38 - 2016-03-22 20:03 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2017-03-18 16:57 - 2017-03-18 16:57 - 00162600 _____ () c:\Program Files\AVAST Software\Avast\x64\vaarclient.dll
2017-03-18 16:58 - 2017-03-18 16:58 - 00792656 _____ () C:\Program Files\AVAST Software\Avast\x64\ffl2.dll
2017-03-18 16:58 - 2017-03-18 16:58 - 00170216 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-04-07 18:06 - 2017-04-07 18:06 - 06022832 _____ () C:\Program Files\AVAST Software\Avast\defs\17040700\algo.dll
2017-03-18 16:58 - 2017-03-18 16:58 - 00655056 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2014-09-16 22:49 - 2014-09-16 22:49 - 00278528 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Vender.dll
2014-08-28 18:49 - 2014-08-28 18:49 - 00057344 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Exeio.dll
2014-06-28 11:42 - 2010-06-22 13:50 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\hiddriver.dll
2014-06-28 11:43 - 2010-11-04 11:48 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku Keyboard\hiddriver.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 02144104 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 07955304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 00341352 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 00028008 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 00127336 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2017-01-02 20:06 - 2017-01-02 20:06 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-03-18 16:57 - 2017-03-18 16:57 - 00290352 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2015-04-30 14:03 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1380506220-1166265625-1735509145-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\pc\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{E74F6D9E-D77B-4C85-8C64-92872FA165E0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{69A26A11-7CF6-4D53-BDC2-771DAD9466C0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{4D00B605-FC6E-47D7-9035-86582013B6E2}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{4DB249CC-2FFF-4E76-90D8-A08724CA4528}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B328CA7D-B970-4980-A935-018A448D10CD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\rust.exe
FirewallRules: [{7328D00D-9C07-47A5-892A-5E8BD0A4156E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\rust.exe
FirewallRules: [{A2C23A2D-9F50-429E-81A4-A9A04A340F9F}] => (Allow) D:\Program Files (x86)\SteamLibrary\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{8AFC3AA2-C8A6-499E-875D-61BD844DF9FF}] => (Allow) D:\Program Files (x86)\SteamLibrary\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{6D6472C6-71D9-434B-9BDC-212AFEA39012}] => (Allow) D:\Program Files (x86)\SteamLibrary\SteamApps\common\Tropico 4\Tropico4.exe
FirewallRules: [{95194B19-7DB3-40A8-95BD-8AFFD80923F4}] => (Allow) D:\Program Files (x86)\SteamLibrary\SteamApps\common\Tropico 4\Tropico4.exe
FirewallRules: [{57065AAC-1A1A-4F30-88FD-26CF4B91F5A7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{3CDB18B8-1E91-4DA2-9DC6-F718AD60EE1D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{0602BBB5-88AA-4C5D-872D-6945CDCD5008}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tropico 4\Tropico4.exe
FirewallRules: [{42FF1DBE-3313-4CA2-BCC7-27EFB15602FD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tropico 4\Tropico4.exe
FirewallRules: [{FB1920CC-726B-4802-A876-33A406CEDE48}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{825A3667-3F60-46FB-9558-B8102E479BA0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{058D1EE7-4905-4F96-85C5-549ECD4C438D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Half-Life\hl.exe
FirewallRules: [{E59DA6CF-B070-479B-A76A-DA5A51349BE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Half-Life\hl.exe
FirewallRules: [{F9D1D8BF-92BF-4540-8CE5-9C4B7360ECBA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{172AD217-BBC4-4109-A504-8BA93BACF0D4}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{31D68421-7597-40D0-9979-2038E40DF218}C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe] => (Allow) C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe
FirewallRules: [UDP Query User{E659B8B3-4FA8-480F-9CFF-4B40DE30AEF8}C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe] => (Allow) C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe
FirewallRules: [TCP Query User{E3371B54-DD76-4017-B806-5B8EF9C035D1}C:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) C:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [UDP Query User{D9BF1FE8-62D4-4D1E-995E-A14072876B06}C:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) C:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [{E9653C47-1695-42CF-A8BB-AF1900462353}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\experimental\Rust.exe
FirewallRules: [{419220C3-20C2-4C30-8996-24354296EFD2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\experimental\Rust.exe
FirewallRules: [{E1EB3D79-C8A2-4462-836C-57CC942CAF3C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe
FirewallRules: [{93857B7B-E15F-47DB-B17E-C01EFB09FBB0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe
FirewallRules: [{7348BBE9-0E10-4487-9EEA-864592575A3A}] => (Allow) C:\Users\pc\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E9568356-93E7-4521-9546-310E5738BC43}] => (Allow) C:\Users\pc\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{B5B3B973-359A-4CAD-B6D1-A3BB9E12F269}D:\program files (x86)\farcry 4\far cry 4\bin\farcry4.exe] => (Block) D:\program files (x86)\farcry 4\far cry 4\bin\farcry4.exe
FirewallRules: [UDP Query User{1B924897-C74D-42FF-AD53-43255C3721A1}D:\program files (x86)\farcry 4\far cry 4\bin\farcry4.exe] => (Block) D:\program files (x86)\farcry 4\far cry 4\bin\farcry4.exe
FirewallRules: [{F3BDBEA0-DB0F-4EFC-82E6-73DF5D1FFA4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{E9801817-66C0-485E-A70C-00AFC587158E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{D7EDDCC6-EAA2-4510-B412-2C850D46FACA}D:\program files (x86)\rockstar games\gta v\gta5.exe] => (Allow) D:\program files (x86)\rockstar games\gta v\gta5.exe
FirewallRules: [UDP Query User{71D26E15-00E4-4CF4-A1CD-69F2DD8854BB}D:\program files (x86)\rockstar games\gta v\gta5.exe] => (Allow) D:\program files (x86)\rockstar games\gta v\gta5.exe
FirewallRules: [{13F0212E-EFBD-440B-8111-1A96B042ECAE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\legacy\rust.exe
FirewallRules: [{88BD7F81-408E-44C6-B067-50E52F0E86DF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\legacy\rust.exe
FirewallRules: [TCP Query User{EA63B982-A5E0-4255-95AF-7B3C62DA1902}D:\program files (x86)\rockstar games\gta v\gta5.exe] => (Allow) D:\program files (x86)\rockstar games\gta v\gta5.exe
FirewallRules: [UDP Query User{84BC91F7-662E-4268-86C5-D445D83FC2FE}D:\program files (x86)\rockstar games\gta v\gta5.exe] => (Allow) D:\program files (x86)\rockstar games\gta v\gta5.exe
FirewallRules: [{126F9934-F658-48AB-9D4F-150566307343}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{6C1DEB4E-33A8-4698-8EA3-4EF379A4F6D7}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{ED1FBDF8-F0AA-480B-A283-D8AE3991675D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{67CAA043-856E-4162-97F7-DA3902839802}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{96D8DE8A-574F-4EBE-A932-6F661525D426}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe
FirewallRules: [{29D66301-3AE3-4701-97FF-0AB4BBB2DC42}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe
FirewallRules: [TCP Query User{B7C0ECBF-8D04-4F61-B29B-1EB0C4EC8982}C:\program files (x86)\origin games\fifa 16 demo\fifa16_demo.exe] => (Allow) C:\program files (x86)\origin games\fifa 16 demo\fifa16_demo.exe
FirewallRules: [UDP Query User{43FC8D91-B833-4A4B-91DD-5EC7066D34E9}C:\program files (x86)\origin games\fifa 16 demo\fifa16_demo.exe] => (Allow) C:\program files (x86)\origin games\fifa 16 demo\fifa16_demo.exe
FirewallRules: [{4E4EEE6E-1C37-4FA4-BB82-DF0362A38C22}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{88FAD549-1680-4999-82AD-815F602C68AD}D:\program files (x86)\r.g. mechanics\simcity\simcity\simcity.exe] => (Block) D:\program files (x86)\r.g. mechanics\simcity\simcity\simcity.exe
FirewallRules: [UDP Query User{F70AB861-56A9-47BE-BFA9-FC6A981938D9}D:\program files (x86)\r.g. mechanics\simcity\simcity\simcity.exe] => (Block) D:\program files (x86)\r.g. mechanics\simcity\simcity\simcity.exe
FirewallRules: [TCP Query User{D9614ACA-8693-4DE1-B9CF-DA60B3BA2D14}C:\users\pc\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\pc\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{BB55D0DA-2742-4190-8418-02BC8195B4DB}C:\users\pc\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\pc\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{252B37A6-F0D2-4D64-9263-8C2CC8271480}C:\users\pc\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\pc\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{EE36DDC7-E3B2-4896-9F09-5B65E4C8140B}C:\users\pc\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\pc\appdata\roaming\spotify\spotify.exe
FirewallRules: [{39BF945F-BF5A-4AB5-ADC1-3D0E2BA94D8A}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{2B61AEB2-A225-45E8-B874-EB46C378A8D2}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{51EDA3F9-3690-4C24-B14E-26AA80E26D06}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{FC45BD52-EB02-4D75-9133-8788511444E7}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C78ACA9A-CF5E-4F74-9AA2-371808F28825}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield Bad Company 2\BFBC2Game.exe
FirewallRules: [{C22264A7-07E0-4102-A293-4918417113AC}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield Bad Company 2\BFBC2Game.exe
FirewallRules: [{7FE7E90B-1B18-4D5F-A15C-C1B5406B57C3}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.561\SZBrowser.exe
FirewallRules: [{85A7AB4D-6072-4309-B776-DC0C425BE820}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.590\SZBrowser.exe
==================== Restore Points =========================
12-03-2017 22:25:38 Removed VirtualDJ 8
15-03-2017 20:37:43 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215
18-03-2017 16:59:13 Instalace balíčku ovladače zařízení: Avast Síťová služba
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (03/31/2017 03:21:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: fifa15.exe, verze: 1.8.0.0, časové razítko: 0x55699cb1
Název chybujícího modulu: aswhooka.dll, verze: 17.2.2.60911, časové razítko: 0x58ac6c5d
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000003182
ID chybujícího procesu: 0x2fc
Čas spuštění chybující aplikace: 0x01d2aa21a6b57d57
Cesta k chybující aplikaci: C:\Program Files (x86)\Origin Games\FIFA 15\fifa15.exe
Cesta k chybujícímu modulu: C:\Program Files\AVAST Software\Avast\x64\aswhooka.dll
ID zprávy: e9e156db-1614-11e7-b405-5404a64c8c4c
Error: (03/31/2017 03:19:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: fifa15.exe, verze: 1.8.0.0, časové razítko: 0x55699cb1
Název chybujícího modulu: aswhooka.dll, verze: 17.2.2.60911, časové razítko: 0x58ac6c5d
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000003182
ID chybujícího procesu: 0x1048
Čas spuštění chybující aplikace: 0x01d2aa216a8f9341
Cesta k chybující aplikaci: C:\Program Files (x86)\Origin Games\FIFA 15\fifa15.exe
Cesta k chybujícímu modulu: C:\Program Files\AVAST Software\Avast\x64\aswhooka.dll
ID zprávy: ac41e69e-1614-11e7-b405-5404a64c8c4c
Error: (03/31/2017 03:18:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: fifa15.exe, verze: 1.8.0.0, časové razítko: 0x55699cb1
Název chybujícího modulu: aswhooka.dll, verze: 17.2.2.60911, časové razítko: 0x58ac6c5d
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000003182
ID chybujícího procesu: 0x1454
Čas spuštění chybující aplikace: 0x01d2aa21488f019c
Cesta k chybující aplikaci: C:\Program Files (x86)\Origin Games\FIFA 15\fifa15.exe
Cesta k chybujícímu modulu: C:\Program Files\AVAST Software\Avast\x64\aswhooka.dll
ID zprávy: 93edd28c-1614-11e7-b405-5404a64c8c4c
Error: (01/14/2017 01:24:33 PM) (Source: MsiInstaller) (EventID: 1041) (User: NT AUTHORITY)
Description: Nepodařilo se zahájit transakci Instalační služby systému Windows ASU_MSI_TRAN. Při zahajování transakce došlo k chybě 1603.
Error: (01/05/2017 08:04:17 PM) (Source: Microsoft Office 12) (EventID: 2001) (User: )
Description: Rejected Safe Mode action : Microsoft Office Word.
Error: (12/27/2016 06:54:23 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program eurotrucks2.exe verze 1.25.2.2 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.
ID procesu: edc
Čas spuštění: 01d26061b90fd175
Čas ukončení: 50
Cesta k aplikaci: C:\Users\pc\Desktop\Euro.Truck.Simulator.2.v1.25.2.6.Incl.ALL.DLC\Euro.Truck.Simulator.2.v1.25.2.6.Incl.ALL.DLC\bin\win_x86\eurotrucks2.exe
ID hlášení:
Error: (11/22/2016 08:55:00 PM) (Source: MsiInstaller) (EventID: 1041) (User: NT AUTHORITY)
Description: Nepodařilo se zahájit transakci Instalační služby systému Windows ASU_MSI_TRAN. Při zahajování transakce došlo k chybě 1603.
Error: (11/12/2016 01:57:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Skype.exe, verze: 7.29.0.102, časové razítko: 0x58052bbc
Název chybujícího modulu: RTMPLTFM.dll, verze: 6.0.8970.197, časové razítko: 0x57f57131
Kód výjimky: 0xc0000005
Posun chyby: 0x0024ffda
ID chybujícího procesu: 0x6c8
Čas spuštění chybující aplikace: 0x01d23cdba011f372
Cesta k chybující aplikaci: C:\Program Files (x86)\Skype\Phone\Skype.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Skype\Phone\RTMPLTFM.dll
ID zprávy: 2e0c6c5c-a8cf-11e6-a8f2-5404a64c8c4c
Error: (11/11/2016 03:51:39 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program DllHost.exe verze 6.1.7600.16385 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.
ID procesu: 1510
Čas spuštění: 01d23c22ad3b5903
Čas ukončení: 36
Cesta k aplikaci: C:\Windows\system32\DllHost.exe
ID hlášení: f653179b-a815-11e6-aecd-5404a64c8c4c
Error: (11/04/2016 10:34:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Skype.exe, verze: 7.29.0.102, časové razítko: 0x58052bbc
Název chybujícího modulu: RTMPLTFM.dll, verze: 6.0.8970.197, časové razítko: 0x57f57131
Kód výjimky: 0xc0000005
Posun chyby: 0x0024ffda
ID chybujícího procesu: 0x9e8
Čas spuštění chybující aplikace: 0x01d236d9d4c1a22c
Cesta k chybující aplikaci: C:\Program Files (x86)\Skype\Phone\Skype.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Skype\Phone\RTMPLTFM.dll
ID zprávy: 165b5d94-a2ce-11e6-b76c-5404a64c8c4c
System errors:
=============
Error: (04/07/2017 06:23:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Origin Web Helper Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (04/07/2017 06:23:09 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Origin Web Helper Service bylo dosaženo časového limitu (30000 ms).
Error: (04/07/2017 06:05:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Origin Web Helper Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (04/07/2017 06:05:49 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Origin Web Helper Service bylo dosaženo časového limitu (30000 ms).
Error: (04/07/2017 02:24:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Origin Web Helper Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (04/07/2017 02:24:36 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Origin Web Helper Service bylo dosaženo časového limitu (30000 ms).
Error: (04/07/2017 07:11:47 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: Server {F9717507-6651-4EDB-BFF7-AE615179BCCF} se v daném časovém limitu neregistroval u služby DCOM.
Error: (04/07/2017 06:47:43 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Origin Web Helper Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (04/07/2017 06:47:43 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Origin Web Helper Service bylo dosaženo časového limitu (30000 ms).
Error: (04/06/2017 11:16:55 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Server {F9717507-6651-4EDB-BFF7-AE615179BCCF} se v daném časovém limitu neregistroval u služby DCOM.
==================== Memory info ===========================
Processor: AMD Athlon(tm) II X4 640 Processor
Percentage of memory in use: 37%
Total physical RAM: 4094.12 MB
Available physical RAM: 2565.76 MB
Total Virtual: 8186.42 MB
Available Virtual: 6427.77 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:195.21 GB) (Free:22.47 GB) NTFS
Drive d: () (Fixed) (Total:270.45 GB) (Free:124.72 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: E3CA17B6)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=195.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=270.4 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
