Prosím o kontrolu - zpomalený notebook

[spulda]

Jinak po restartu po proběhnutí Zemana Antimalware přestal fungovat Firefox. Nevím jestli to je náhoda ale nejde ani po přeinstalaci. Vyskakuje hláška "Profil Firefox nejde nahrát. Pravděpodobně chybí nebo je nedostupný.".

[Reklama]

[jaro3]

Zkus Zemana Antimalware odinstalovat , jestli to je tím.

[spulda]

Pořád stejná hláška takže to tím Zemanem asi není. Ale vzláštní že to přestalo fungovat přesně potom. Ještě mě napadlo že součástí malware v počítači byly i nějaké čínské vyhledávače co se ve Firefoxu zobrazovaly tak jestli jejich odstranění nějak nenarušilo ten "profil" ale pak by zas problém asi neměl trvat po přeinstalaci. Vážně nevím.
Log z HJT dodám později.

[jaro3]

Ok.

Stáhni si Memtest:

Políčko , ve kterém je napsáno:
All unused RAM -ponech , jak je.
-dej Start , nech nejméně 2h běžet , pokud bude po 2h stále 0 errors , jsou v pořádku.
V případě vyšších kapacit RAM je třeba Memtest spustit několikrát , pro 2GB ( jednotlivá největší kapacita RAM) 2x , pro 4GB 3x , pro 8Gb 4x ap.

Ještě zkontrolovat HDD na chyby ,popř. zkusit jeho defragmentaci ..


Stáhni si CrystalDiskInfo
Spusť program a klikni na Úpravy-Kopírovat. Poté sem vlož pomocí Ctrl+V obsah logu.

Prosím stáhni příslušnou verzi programu pro Tvůj systém 32-bit/64-bit FarbarRecovery Scan Tool (FrSt)
32bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/81/
64bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/82/
a ulož jej na plochu. ,pak spusť FrSt.
Potvrď způsob užití.
Neměň žádné z výchozích nastavení a klikni na položku „Scan“ („Skenovat“) .Když je skenování dokončeno, ukážou se dva logy = FRST.txt a Addition.txt a uloží se na ploše.Prosím zkopíruj sem celý jejich obsah.

[spulda]

----------------------------------------------------------------------------
CrystalDiskInfo 7.0.5 (C) 2008-2016 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 10 [10.0 Build 14393] (x64)
Date : 2017/03/15 16:50:22

-- Controller Map ----------------------------------------------------------
+ Intel(R) 7 Series Chipset Family SATA AHCI Controller [ATA]
- Hitachi HTS545050A7E380
- HL-DT-ST DVDRAM
- Řadič prostorů úložišť [SCSI]
- DAEMON Tools Lite Virtual SCSI Bus [SCSI]

-- Disk List ---------------------------------------------------------------
(1) Hitachi HTS545050A7E380 : 500,1 GB [0/0/0, pd1]

----------------------------------------------------------------------------
(1) Hitachi HTS545050A7E380
----------------------------------------------------------------------------
Model : Hitachi HTS545050A7E380
Firmware : GG2OA6C0
Serial Number : TEJ51239CPLDYV
Disk Size : 500,1 GB (8,4/137,4/500,1/500,1)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : 5400 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 6
Transfer Mode : ---- | SATA/300
Power On Hours : 7916 hours
Power On Count : 3421 count
Temperature : 35 C (95 F)
Health Status : Good
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 4001h [ON]
AAM Level : ----
Drive Letter : C: D:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _62 000000000000 Read Error Rate
02 100 100 _40 000000000000 Throughput Performance
03 227 227 _33 000E00000001 Spin-Up Time
04 _92 _92 __0 0000000034DF Start/Stop Count
05 100 100 __5 000000000000 Reallocated Sectors Count
07 100 100 _67 000000000000 Seek Error Rate
08 100 100 _40 000000000000 Seek Time Performance
09 _82 _82 __0 000000001EEC Power-On Hours
0A 100 100 _60 000000000000 Spin Retry Count
0C _98 _98 __0 000000000D5D Power Cycle Count
BF 100 100 __0 000000000000 G-Sense Error Rate
C0 100 100 __0 00000000007A Power-off Retract Count
C1 _85 _85 __0 000000024AF9 Load/Unload Cycle Count
C2 171 171 __0 002F00060023 Temperature
C4 100 100 __0 000000000003 Reallocation Event Count
C5 100 100 __0 000000000000 Current Pending Sector Count
C6 100 100 __0 000000000000 Uncorrectable Sector Count
C7 200 200 __0 000000000000 UltraDMA CRC Error Count
DF 100 100 __0 000000000000 Load/Unload Retry Count

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 045A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 5445 4A35 3132 3339 4350 4C44 5956
020: 0003 4000 0004 4747 324F 4136 4330 4869 7461 6368
030: 6920 4854 5335 3435 3035 3041 3745 3338 3020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 1706 0000 005E 0048
080: 01FC 0028 746B 7D69 6163 7469 BC49 6163 207F 0038
090: 0039 4001 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6030 3A38 0000 0000 0000 0000 6003 826C 5000 CCA7
110: 20C9 D0EE 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 000B
130: 0028 0000 2182 1CF1 FA00 0000 4000 0400 0003 0000
140: 0000 0602 0606 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 3232 4236 0000 2802 0000 5DBD 2518 8000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1518 0000 0000
220: 0000 0000 101F 0021 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 03E0 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 47A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 0B 00 64 64 00 00 00 00 00 00 00 02 05
010: 00 64 64 00 00 00 00 00 00 00 03 07 00 E3 E3 01
020: 00 00 00 0E 00 00 04 12 00 5C 5C DF 34 00 00 00
030: 00 00 05 33 00 64 64 00 00 00 00 00 00 00 07 0B
040: 00 64 64 00 00 00 00 00 00 00 08 05 00 64 64 00
050: 00 00 00 00 00 00 09 12 00 52 52 EC 1E 00 00 00
060: 00 00 0A 13 00 64 64 00 00 00 00 00 00 00 0C 32
070: 00 62 62 5D 0D 00 00 00 00 00 BF 0A 00 64 64 00
080: 00 00 00 00 00 00 C0 32 00 64 64 7A 00 00 00 00
090: 00 00 C1 12 00 55 55 F9 4A 02 00 00 00 00 C2 02
0A0: 00 AB AB 23 00 06 00 2F 00 00 C4 32 00 64 64 03
0B0: 00 00 00 00 00 00 C5 22 00 64 64 00 00 00 00 00
0C0: 00 00 C6 08 00 64 64 00 00 00 00 00 00 00 C7 0A
0D0: 00 C8 C8 00 00 00 00 00 00 00 DF 0A 00 64 64 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 2D 00 01 5B
170: 03 00 01 00 02 70 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B4

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 3E 00 00 00 00 00 00 00 00 00 00 02 28
010: 00 00 00 00 00 00 00 00 00 00 03 21 00 00 00 00
020: 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00
030: 00 00 05 05 00 00 00 00 00 00 00 00 00 00 07 43
040: 00 00 00 00 00 00 00 00 00 00 08 28 00 00 00 00
050: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
060: 00 00 0A 3C 00 00 00 00 00 00 00 00 00 00 0C 00
070: 00 00 00 00 00 00 00 00 00 00 BF 00 00 00 00 00
080: 00 00 00 00 00 00 C0 00 00 00 00 00 00 00 00 00
090: 00 00 C1 00 00 00 00 00 00 00 00 00 00 00 C2 00
0A0: 00 00 00 00 00 00 00 00 00 00 C4 00 00 00 00 00
0B0: 00 00 00 00 00 00 C5 00 00 00 00 00 00 00 00 00
0C0: 00 00 C6 00 00 00 00 00 00 00 00 00 00 00 C7 00
0D0: 00 00 00 00 00 00 00 00 00 00 DF 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 89

[spulda]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017
Ran by Vendy (administrator) on ASUSNTB (15-03-2017 16:52:06)
Running from C:\Users\asus\Downloads
Loaded Profiles: Vendy (Available Profiles: UpdatusUser & Vendy)
Platform: Windows 10 Home Version 1607 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
() C:\Users\asus\AppData\Local\Kingosoft\Kingo Root\update_27205\bin\KingoSoftService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.103.32.0\OverwolfHelper.exe
(Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.103.32.0\OverwolfHelper64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Crystal Dew World) C:\Program Files (x86)\CrystalDiskInfo\DiskInfo32.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3242696 2015-10-11] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [AvgUi] => "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
HKLM-x32\...\Run: [AVG_UI] => "C:\Program Files (x86)\AVG\Av\avuirunnerx.exe" C:\Program Files (x86)\AVG\Av\avgui.exe
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-22] (AVAST Software)
HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\Run: [BingSvc] => C:\Users\asus\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\Run: [Bloody2] => C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe [18923008 2015-06-16] ()
HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8590760 2015-12-08] (Piriform Ltd)
HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1058360 2017-03-05] ()
HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2881824 2017-01-19] (Valve Corporation)
HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\MountPoints2: {4f6ebb93-8c0a-11e5-971f-3085a9f1e411} - "H:\autorun_files\launcher.exe" -X
HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\MountPoints2: {4f6ebc35-8c0a-11e5-971f-3085a9f1e411} - "I:\autorun_files\launcher.exe" -X
HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\MountPoints2: {d54d9ecf-d564-11e5-974a-3085a9f1e411} - "F:\m.exe"
ShellIconOverlayIdentifiers: [
MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\asus\AppData\Local\MEGAsync\ShellExtX64.dll [2016-10-31] ()
ShellIconOverlayIdentifiers: [
MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\asus\AppData\Local\MEGAsync\ShellExtX64.dll [2016-10-31] ()
ShellIconOverlayIdentifiers: [
MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\asus\AppData\Local\MEGAsync\ShellExtX64.dll [2016-10-31] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-01] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [
MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\asus\AppData\Local\MEGAsync\ShellExtX32.dll [2016-10-31] ()
ShellIconOverlayIdentifiers-x32: [
MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\asus\AppData\Local\MEGAsync\ShellExtX32.dll [2016-10-31] ()
ShellIconOverlayIdentifiers-x32: [
MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\asus\AppData\Local\MEGAsync\ShellExtX32.dll [2016-10-31] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{7634d98e-f031-4de8-8fda-08eb3c8b3e98}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{a966f76a-4353-40ea-9c76-c8ff5e948077}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 -> {67C334C0-408D-4E6D-B5A7-0ADD6AFFA252} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-2352784643-913364421-1319302353-1002 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2352784643-913364421-1319302353-1002 -> {67C334C0-408D-4E6D-B5A7-0ADD6AFFA252} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-2352784643-913364421-1319302353-1002 -> hxxp://www.google.com

FireFox:
========
FF DefaultProfile: u8ypy7af.default
FF ProfilePath: C:\Users\asus\AppData\Roaming\Mozilla\Firefox\Profiles\u8ypy7af.default [2017-03-15]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-01]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-09-01]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_127.dll [2017-03-15] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_25_0_0_127.dll [2017-03-15] ()
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-03-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-03-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN)

Chrome:
=======
CHR HomePage: Default -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM ... PARAM__&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxp://www.bing.com/osjson.aspx?FORM=__ ... M__&query={searchTerms}
CHR Profile: C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default [2017-03-15]
CHR Extension: (Google Slides) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-03-15]
CHR Extension: (Google Docs) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-03-15]
CHR Extension: (Google Drive) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-03-15]
CHR Extension: (YouTube) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-03-15]
CHR Extension: (Avast SafePrice) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-03-15]
CHR Extension: (Bing) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2017-03-15]
CHR Extension: (Google Sheets) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-03-15]
CHR Extension: (Google Docs Offline) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-15]
CHR Extension: (Avast Online Security) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-03-15]
CHR Extension: (Skype) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2017-03-15]
CHR Extension: (Chrome Web Store Payments) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-15]
CHR Extension: (Gmail) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-03-15]
CHR Extension: (Chrome Media Router) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-03-15]
CHR HKU\S-1-5-21-2352784643-913364421-1319302353-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]
HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\StartMenuInternet\ChromeHTML: -> C:\Program Files (x86)\Birdjob\Application\chrome.exe <==== ATTENTION

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-01] (AVAST Software)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1080080 2016-06-21] (AVG Technologies CZ, s.r.o.)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [144072 2015-10-11] (ELAN Microelectronics Corp.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation)
R2 KingoSoftService; C:\Users\asus\AppData\Local\Kingosoft\Kingo Root\update_27205\bin\checkupdate.exe [367584 2016-12-05] ()
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.500\McCHSvc.exe [329480 2017-01-19] (McAfee, Inc.)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2016-09-03] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10351856 2016-12-15] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
S3 OverwolfUpdater; "C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe" /RunningFrom SCM [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [37656 2016-09-01] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [37144 2016-09-01] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [108816 2016-09-01] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [103064 2016-09-01] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-01] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [969184 2016-09-15] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [513632 2016-09-23] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [163416 2016-09-01] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-14] (AVAST Software)
S0 Avgboota; C:\WINDOWS\System32\DRIVERS\avgboota.sys [21632 2016-01-07] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\WINDOWS\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\WINDOWS\System32\DRIVERS\avgidsdrivera.sys [310016 2016-06-09] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\WINDOWS\System32\DRIVERS\avgidsha.sys [261376 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\WINDOWS\System32\DRIVERS\avgldx64.sys [260352 2016-06-01] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\WINDOWS\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\WINDOWS\System32\DRIVERS\avgmfx64.sys [249088 2016-06-02] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\WINDOWS\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.)
R0 avguniva; C:\WINDOWS\System32\DRIVERS\avguniva.sys [76544 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\WINDOWS\system32\DRIVERS\avgwfpa.sys [294664 2016-06-07] (AVG Technologies CZ, s.r.o.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2015-11-16] (Disc Soft Ltd)
S3 dtsoftbus01; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [283064 2015-01-30] (Disc Soft Ltd)
R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [251840 2017-03-12] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvamwu.inf_amd64_d4715679184092a8\nvlddmkm.sys [13754936 2016-09-12] (NVIDIA Corporation)
U5 NvStUSB; C:\Windows\System32\Drivers\NvStUSB.sys [452240 2015-08-05] (NVIDIA Corporation)
R3 PXGX112; C:\WINDOWS\system32\drivers\PXGX112.sys [42528 2015-09-09] ( )
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [410880 2015-08-06] (Realsil Semiconductor Corporation)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [28272 2017-03-14] ()
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2017-03-14] (Zemana Ltd.)
S1 ZAM; \??\C:\WINDOWS\System32\drivers\zam64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-03-15 16:52 - 2017-03-15 16:52 - 00019004 _____ C:\Users\asus\Downloads\FRST.txt
2017-03-15 16:49 - 2017-03-15 16:49 - 03961080 _____ (Crystal Dew World ) C:\Users\asus\Downloads\CrystalDiskInfo7_0_5.exe
2017-03-15 16:49 - 2017-03-15 16:49 - 00001271 _____ C:\Users\asus\Desktop\CrystalDiskInfo.lnk
2017-03-15 16:49 - 2017-03-15 16:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2017-03-15 16:49 - 2017-03-15 16:49 - 00000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2017-03-15 16:48 - 2017-03-15 16:52 - 00000000 ____D C:\FRST
2017-03-15 16:48 - 2017-03-15 16:48 - 02424832 _____ (Farbar) C:\Users\asus\Downloads\FRST64.exe
2017-03-15 16:39 - 2017-03-15 16:39 - 00003416 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-03-15 16:39 - 2017-03-15 16:39 - 00003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-03-15 16:39 - 2017-03-15 16:39 - 00002334 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-03-15 13:45 - 2017-03-15 13:45 - 01129376 _____ (Google Inc.) C:\Users\asus\Downloads\ChromeSetup.exe (1)
2017-03-15 13:43 - 2017-03-15 13:43 - 01129376 _____ (Google Inc.) C:\Users\asus\Downloads\ChromeSetup.exe.txt
2017-03-15 13:42 - 2017-03-15 13:42 - 01129376 _____ (Google Inc.) C:\Users\asus\Downloads\ChromeSetup.exe
2017-03-15 11:56 - 2017-03-15 11:56 - 06847064 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
2017-03-14 23:31 - 2017-03-14 23:31 - 00001230 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-03-14 23:31 - 2017-03-14 23:31 - 00001218 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-03-14 23:31 - 2017-03-14 23:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-03-14 23:31 - 2017-03-14 23:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-03-14 23:30 - 2017-03-14 23:30 - 00245360 _____ C:\Users\asus\Downloads\Firefox Setup Stub 52_0_exe
2017-03-14 22:41 - 2017-03-15 16:51 - 00159082 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2017-03-14 22:41 - 2017-03-15 00:32 - 00071553 _____ C:\WINDOWS\ZAM.krnl.trace
2017-03-14 22:41 - 2017-03-15 00:32 - 00000000 ____D C:\Program Files (x86)\Zemana AntiMalware
2017-03-14 22:41 - 2017-03-14 22:41 - 00203680 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zamguard64.sys
2017-03-14 22:40 - 2017-03-14 22:40 - 00000000 ____D C:\Users\asus\AppData\Local\Zemana
2017-03-14 22:30 - 2017-03-14 22:30 - 00000000 ____D C:\Users\asus\AppData\Local\NetworkTiles
2017-03-14 22:29 - 2017-03-14 21:50 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2017-03-14 21:50 - 2017-03-14 22:26 - 00000000 ____D C:\zoek_backup
2017-03-14 21:49 - 2017-03-14 21:49 - 01309184 _____ C:\Users\asus\Downloads\zoek.exe
2017-03-14 19:40 - 2017-03-14 19:42 - 05755024 _____ (Zemana Ltd. ) C:\Users\asus\Downloads\Zemana.AntiMalware.Setup.exe
2017-03-14 17:18 - 2017-03-14 17:18 - 00028272 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2017-03-14 17:17 - 2017-03-14 17:17 - 00000000 ____D C:\ProgramData\RogueKiller
2017-03-14 17:08 - 2017-03-14 17:08 - 26131528 _____ C:\Users\asus\Downloads\RogueKillerX64.exe
2017-03-14 14:29 - 2017-03-14 15:40 - 00000069 _____ C:\Users\asus\Desktop\filmy.txt
2017-03-12 22:48 - 2017-03-12 22:48 - 00000000 ____D C:\Users\asus\AppData\Local\Aspyr
2017-03-12 16:15 - 2017-03-12 16:15 - 01663736 _____ (Malwarebytes) C:\Users\asus\Desktop\JRT.exe
2017-03-12 13:07 - 2017-03-12 13:07 - 00002775 _____ C:\Users\Public\Desktop\Sophos Virus Removal Tool.lnk
2017-03-12 13:07 - 2017-03-12 13:07 - 00000000 ____D C:\ProgramData\Sophos
2017-03-12 13:07 - 2017-03-12 13:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos
2017-03-12 13:06 - 2017-03-12 13:06 - 00000000 ____D C:\Program Files (x86)\Sophos
2017-03-12 13:04 - 2017-03-12 13:05 - 163763280 _____ (Sophos Limited) C:\Users\asus\Downloads\Sophos Virus Removal Tool.exe
2017-03-11 01:22 - 2017-03-11 01:22 - 00000000 ____D C:\Users\asus\AppData\Local\Blizzard
2017-03-11 01:21 - 2017-03-15 15:02 - 00000000 ____D C:\Users\asus\AppData\Local\Battle.net
2017-03-11 01:21 - 2017-03-11 01:21 - 00000000 ____D C:\Users\asus\AppData\Local\Blizzard Entertainment
2017-03-11 00:45 - 2017-03-11 00:45 - 00000000 ____D C:\Users\asus\AppData\Local\CEF
2017-03-10 21:40 - 2017-03-13 15:48 - 00092088 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-03-10 21:40 - 2017-03-12 16:08 - 00251840 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-03-10 21:40 - 2017-03-12 16:08 - 00186304 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-03-10 21:40 - 2017-03-12 16:08 - 00111544 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-03-10 21:40 - 2017-03-12 16:08 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-03-10 21:39 - 2017-03-10 21:39 - 00001914 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-03-10 21:39 - 2017-03-10 21:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-03-10 21:39 - 2017-03-10 21:39 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-03-10 21:39 - 2017-03-10 21:39 - 00000000 ____D C:\Program Files\Malwarebytes
2017-03-10 21:39 - 2017-02-24 06:23 - 00077408 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-03-10 21:35 - 2017-03-10 21:38 - 57131432 _____ (Malwarebytes ) C:\Users\asus\Downloads\mb3-setup-consumer-3.0.6.1469-1075.exe
2017-03-10 21:26 - 2017-03-14 17:00 - 00000000 ____D C:\AdwCleaner
2017-03-10 21:25 - 2017-03-10 21:26 - 04031440 _____ C:\Users\asus\Desktop\AdwCleaner.exe
2017-03-10 21:23 - 2017-03-10 21:23 - 00000000 ____D C:\Users\asus\AppData\Local\Avg
2017-03-10 21:06 - 2017-03-10 21:06 - 00448512 _____ (OldTimer Tools) C:\Users\asus\Downloads\TFC.exe
2017-03-10 21:02 - 2017-03-10 21:02 - 00050688 _____ (Atribune.org) C:\Users\asus\Downloads\ATF-Cleaner.exe
2017-03-10 16:31 - 2017-03-10 16:31 - 00388608 _____ (Trend Micro Inc.) C:\Users\asus\Downloads\HiJackThis.exe
2017-03-09 12:26 - 2017-03-09 12:26 - 00000000 ____D C:\Program Files (x86)\u8q9wpjp
2017-03-08 20:07 - 2017-03-08 20:09 - 00000000 ____D C:\Users\asus\Documents\Witcher 2
2017-03-08 20:07 - 2017-03-08 20:07 - 00000000 ____D C:\Users\asus\AppData\Local\The Witcher 2
2017-03-08 20:05 - 2017-03-08 20:05 - 00000813 _____ C:\Users\Public\Desktop\The Witcher 2 - Assassins of Kings Enhanced Edition.lnk
2017-03-08 20:05 - 2017-03-08 20:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2017-03-06 07:58 - 2017-02-28 09:57 - 00015526 _____ C:\Users\asus\Documents\pracevhod.odt_0.odt
2017-03-05 14:59 - 2017-03-05 14:59 - 00001105 _____ C:\Users\Public\Desktop\Dragon Age Inquisition Deluxe Edition.lnk
2017-03-05 14:59 - 2017-03-05 14:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mr DJ
2017-03-03 11:03 - 2017-03-08 12:55 - 00000000 ____D C:\Program Files (x86)\MK
2017-03-02 13:21 - 2017-03-02 13:26 - 38609884 _____ C:\Users\asus\Downloads\Bez-Kalhot--cz.avi.avi.part
2017-03-02 12:29 - 2017-03-10 16:24 - 00006582 _____ C:\Program Files (x86)\metadata
2017-03-02 12:29 - 2017-03-10 16:24 - 00000040 _____ C:\Program Files (x86)\settings.dat
2017-03-02 12:29 - 2017-03-10 16:24 - 00000000 ____D C:\Program Files (x86)\reports
2017-03-02 12:29 - 2017-03-02 12:29 - 00000000 ____D C:\Program Files (x86)\vcjqtmkc
2017-03-01 13:11 - 2017-03-10 16:24 - 00000000 _____ C:\WINDOWS\SysWOW64\4
2017-03-01 13:11 - 2017-03-10 16:24 - 00000000 _____ C:\WINDOWS\SysWOW64\3
2017-02-28 08:25 - 2017-03-01 20:45 - 00019865 _____ C:\Users\asus\Desktop\Práce v hodině-plán pro koně.odt
2017-02-27 07:57 - 2017-03-01 20:45 - 00543064 _____ C:\Users\asus\Downloads\Chov-zvířat-terka.odt
2017-02-24 16:05 - 2017-02-24 16:05 - 00000000 ____D C:\ProgramData\Apple
2017-02-21 12:29 - 2017-02-21 12:29 - 00000000 ____D C:\Program Files (x86)\ktpo1zgx
2017-02-18 18:27 - 2017-02-18 18:27 - 00000000 ____D C:\Users\asus\Nová složka
2017-02-17 11:53 - 2017-02-18 18:24 - 883705673 _____ C:\Users\asus\Downloads\Horsez-2-Vzhuru-do-sedel-Hra.rar
2017-02-17 09:17 - 2017-02-17 09:17 - 00215520 _____ C:\Users\asus\Downloads\MT_zpravaZaka_PUBE_HOTUBOUS_ČJ.pdf.pdf
2017-02-14 08:02 - 2017-02-14 08:02 - 00000000 ____D C:\Program Files (x86)\pik7rdoa

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-03-15 16:46 - 2017-01-18 16:48 - 00000000 ____D C:\Users\asus\AppData\LocalLow\Mozilla
2017-03-15 16:39 - 2016-10-21 16:25 - 00002346 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-03-15 16:39 - 2015-09-13 16:46 - 00000000 ____D C:\Users\asus\AppData\Local\Google
2017-03-15 16:39 - 2015-09-13 16:46 - 00000000 ____D C:\Program Files (x86)\Google
2017-03-15 15:46 - 2016-09-24 08:25 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-03-15 14:32 - 2015-09-17 19:41 - 00000000 ____D C:\Program Files (x86)\Battle.net
2017-03-15 14:04 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-03-15 13:48 - 2015-01-25 18:20 - 00000000 ____D C:\Users\asus\Desktop\fotkověci
2017-03-15 13:15 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-03-15 13:10 - 2016-09-28 14:04 - 00000000 ____D C:\Program Files (x86)\Steam
2017-03-15 13:10 - 2016-08-08 12:37 - 00000000 ____D C:\Users\asus\AppData\Local\Overwolf
2017-03-15 12:20 - 2015-09-13 18:37 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-03-15 12:19 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-03-15 12:19 - 2015-09-13 18:37 - 138634176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-03-15 11:57 - 2016-10-13 18:33 - 00004470 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-03-15 11:57 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-03-15 11:57 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-03-15 00:32 - 2015-10-20 10:56 - 00000000 ____D C:\Users\asus\AppData\Local\SKIDROW
2017-03-15 00:32 - 2015-09-18 10:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2017-03-15 00:32 - 2015-03-15 15:44 - 00000000 ____D C:\Users\asus\Documents\My Games
2017-03-14 23:22 - 2016-09-24 08:57 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-03-14 23:22 - 2016-09-24 08:26 - 00017408 _____ C:\WINDOWS\SysWOW64\rpcnetp.dll
2017-03-14 23:22 - 2016-09-24 08:25 - 00029336 _____ C:\WINDOWS\system32\wpbbin.exe
2017-03-14 23:22 - 2016-09-24 08:25 - 00017408 _____ C:\WINDOWS\SysWOW64\rpcnetp.exe
2017-03-14 23:22 - 2016-09-24 08:25 - 00017408 _____ C:\WINDOWS\system32\rpcnetp.exe
2017-03-14 23:21 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-03-14 22:26 - 2016-09-24 08:35 - 00000000 ____D C:\Users\asus
2017-03-14 22:26 - 2015-09-13 16:55 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-03-14 19:35 - 2016-09-24 08:57 - 00004278 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2017-03-14 19:25 - 2016-08-08 12:39 - 00000000 ____D C:\Program Files (x86)\Overwolf
2017-03-12 16:09 - 2013-11-25 08:09 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-03-12 16:08 - 2016-09-13 07:29 - 00000032 _____ C:\Users\Public\Documents\temp.dat
2017-03-12 15:38 - 2017-01-14 15:25 - 00001333 _____ C:\Users\asus\Desktop\Launcher – zástupce (2).lnk
2017-03-12 15:37 - 2016-07-18 14:43 - 00001490 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-03-12 15:37 - 2016-07-13 15:52 - 00000000 ____D C:\Users\asus\Desktop\terrr no 2
2017-03-10 23:19 - 2017-01-20 10:38 - 00000000 ____D C:\Program Files (x86)\MIO
2017-03-10 22:17 - 2017-01-27 16:12 - 00003274 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-03-10 22:17 - 2015-09-13 16:32 - 00002425 _____ C:\Users\asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-03-10 22:17 - 2015-08-05 23:08 - 00000000 ___RD C:\Users\asus\OneDrive
2017-03-10 21:05 - 2015-10-17 11:16 - 00000000 ____D C:\Users\asus\AppData\Local\Comms
2017-03-10 20:51 - 2016-06-29 11:01 - 00000000 _____ C:\Users\Public\Documents\report.dat
2017-03-10 16:53 - 2016-05-21 11:31 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2017-03-10 16:31 - 2015-09-13 16:26 - 00000000 ____D C:\Users\asus\AppData\Local\VirtualStore
2017-03-10 06:17 - 2016-11-10 14:21 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-03-10 06:17 - 2016-11-10 14:21 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-03-10 01:45 - 2015-09-17 20:16 - 00000000 ____D C:\Users\asus\AppData\Roaming\uTorrent
2017-03-07 09:17 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-03-05 15:05 - 2015-08-11 18:31 - 00000000 ____D C:\Users\asus\Documents\BioWare
2017-03-05 13:43 - 2016-10-15 15:01 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2017-02-24 09:46 - 2015-12-01 20:29 - 00000000 ____D C:\Users\asus\AppData\Local\ElevatedDiagnostics
2017-02-23 21:47 - 2016-11-04 08:08 - 00013955 _____ C:\Users\asus\Desktop\pracevhod.odt
2017-02-23 08:09 - 2015-09-27 18:17 - 00000000 ____D C:\ProgramData\Skype
2017-02-22 11:53 - 2015-09-13 16:26 - 00000000 ____D C:\Users\asus\AppData\Local\Packages
2017-02-18 18:33 - 2016-09-24 08:35 - 00000000 ____D C:\Users\UpdatusUser
2017-02-18 18:30 - 2017-02-05 19:49 - 00000000 ____D C:\Users\asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2017-02-16 13:37 - 2016-10-13 18:55 - 00000000 ____D C:\Program Files\Common Files\AV
2017-02-13 20:58 - 2016-10-13 18:33 - 00000000 ____D C:\ProgramData\McAfee

==================== Files in the root of some directories =======

2017-03-02 12:29 - 2017-03-10 16:24 - 0006582 _____ () C:\Program Files (x86)\metadata
2017-03-02 12:29 - 2017-03-10 16:24 - 0000040 _____ () C:\Program Files (x86)\settings.dat
2017-01-08 16:44 - 2003-04-09 04:28 - 0233472 ____R () C:\Users\asus\AppData\Roaming\MafiaSetup.exe
2016-12-05 19:54 - 2016-12-05 19:54 - 0000175 _____ () C:\Users\asus\AppData\Local\uts.ini

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-02-26 10:40

==================== End of FRST.txt ============================

[spulda]

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-03-2017
Ran by Vendy (15-03-2017 16:52:59)
Running from C:\Users\asus\Downloads
Windows 10 Home Version 1607 (X64) (2016-09-24 08:01:41)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2352784643-913364421-1319302353-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2352784643-913364421-1319302353-503 - Limited - Disabled)
Guest (S-1-5-21-2352784643-913364421-1319302353-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2352784643-913364421-1319302353-1004 - Limited - Enabled)
UpdatusUser (S-1-5-21-2352784643-913364421-1319302353-1001 - Limited - Enabled) => C:\Users\UpdatusUser
Vendy (S-1-5-21-2352784643-913364421-1319302353-1002 - Administrator - Enabled) => C:\Users\asus

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

«Devil May Cry 4» 1.1.0 (HKLM-x32\...\Devil May Cry 4_is1) (Version: 1.1.0 - R.G. Catalyst)
µTorrent (HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\uTorrent) (Version: 3.4.9.43295 - BitTorrent Inc.)
Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.127 - Adobe Systems Incorporated)
Age of Empires III (HKLM-x32\...\InstallShield_{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}) (Version: 1.00.0000 - Microsoft Game Studios)
Age of Empires III (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden
Aktualizace NVIDIA 1.12.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.12.12 - NVIDIA Corporation)
amuleC (HKLM-x32\...\{0F7B5011-72EC-493D-A7BF-546591047E8E}) (Version: 1.0.2 - amuleC) <==== ATTENTION
amuleC (HKLM-x32\...\{19539992-061C-4E8B-9053-07B175303AF4}) (Version: 1.0.1 - amuleC) <==== ATTENTION
amuleC (HKLM-x32\...\{418DDAC3-E16C-47C2-B5FE-4FBCAB0E10D0}) (Version: 1.0.0 - amuleC) <==== ATTENTION
amulesw (HKLM-x32\...\{13D7C2E9-08E7-4889-94FF-87E707184E53}) (Version: 1.0.7 - amules) <==== ATTENTION
Assassin's Creed Rogue (HKLM-x32\...\Uplay Install 895) (Version: - Ubisoft)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
AVG (HKLM\...\AvgZen) (Version: 1.72.2.24716 - AVG Technologies)
AVG (Version: 16.91.7688 - AVG Technologies) Hidden
AVG 2016 (Version: 16.0.4627 - AVG Technologies) Hidden
AVG Protection (HKLM\...\AVG) (Version: 2016.91.7688 - AVG Technologies)
AVG Zen (Version: 1.72.1 - AVG Technologies) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bloody5 (HKLM-x32\...\Bloody3) (Version: 15.06.0005 - Bloody)
Budík (HKLM-x32\...\{762BC342-BEB1-42D4-BE99-C096189484FA}_is1) (Version: 1511150 - Ondřej Cenek)
CCleaner (HKLM\...\CCleaner) (Version: 5.13 - Piriform)
CrystalDiskInfo 7.0.5 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.0.5 - Crystal Dew World)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd)
Dragon Age Inquisition Deluxe Edition version 1.11.0.0 (HKLM-x32\...\Dragon Age Inquisition Deluxe Edition_is1) (Version: 1.11.0.0 - Mr DJ)
ELAN Touchpad 11.15.0.18_X64 (HKLM\...\Elantech) (Version: 11.15.0.18 - ELAN Microelectronic Corp.)
Far Cry 3 v1.01 (HKLM-x32\...\Far Cry 3_is1) (Version: - )
Firestorm Launcher version 1.0 (HKLM-x32\...\{008D5963-9A73-4472-8C16-A5BF04491B9D}_is1) (Version: 1.0 - Firestorm)
FMW 1 (Version: 1.102.4 - AVG Technologies) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 57.0.2987.98 - Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\R3JhbmRUaGVmdEF1dG9W_is1) (Version: 1 - )
Guitar Hero III (HKLM-x32\...\{0CE1A6C0-F3F7-49E6-8F9D-2431F9827441}) (Version: 1.00.0000 - Aspyr)
Guitar Hero World Tour (HKLM-x32\...\{A126E617-63F0-4E57-BFA4-7190F5845C39}) (Version: 1.0 - Aspyr)
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Horsez 2 Vzhůru do sedel (HKLM-x32\...\Horsez 2 Vzhůru do sedel) (Version: - )
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Kingo ROOT version 1.4.9.2847 (HKLM-x32\...\{AE7675D6-0B31-494F-ABFA-822E1A0FDF17}_is1) (Version: 1.4.9.2847 - Kingosoft Technology Ltd.)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
Mafia (HKLM-x32\...\Mafia) (Version: - )
Malwarebytes verze 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.500.3 - McAfee, Inc.)
MediaHuman YouTube to MP3 Converter verze 3.8.2 (HKLM-x32\...\MediaHuman YouTube to MP3 Converter_is1) (Version: 3.8.2 - )
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Metal Gear Solid V Phantom Pain version 1.0.5.0 (HKLM-x32\...\Metal Gear Solid V Phantom Pain_is1) (Version: 1.0.5.0 - Mr DJ)
Metal Gear Solid V: The Phantom Pain (HKLM-x32\...\{48397BFF-7C01-4B64-8F1A-0D468DDE5D73}_is1) (Version: - Kojima Productions)
Metric Collection SDK 35 (x32 Version: 1.2.0010.00 - Lenovo Group Limited) Hidden
Microsoft Games for Windows - LIVE (HKLM-x32\...\{A1C962E2-2426-49C6-A38B-9A07E40D607C}) (Version: 3.2.217.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}) (Version: 3.1.99.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\OneDriveSetup.exe) (Version: 17.3.6798.0207 - Microsoft Corporation)
Microsoft PowerPoint 2010 (HKLM\...\Office14.POWERPOINT) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{a2199617-3609-410f-a8e8-e8806c73545b}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Mozilla Firefox 52.0 (x86 cs) (HKLM-x32\...\Mozilla Firefox 52.0 (x86 cs)) (Version: 52.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0 - Mozilla)
Need for Speed - Rivals (HKLM-x32\...\Need for Speed - Rivals_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter)
NVIDIA Systémový software PhysX 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{C560D6E7-E40A-435D-8B71-62CBCF1701B2}) (Version: 4.11.9775 - Apache Software Foundation)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.103.32.0 - Overwolf Ltd.)
Ovládací panel NVIDIA 369.09 (Version: 369.09 - NVIDIA Corporation) Hidden
PicViewer 3.0.2 (HKLM-x32\...\PicViewer3_is1) (Version: 3.0.2 - Anix Software)
Planetbase (HKLM-x32\...\1351624781_is1) (Version: 2.1.0.3 - GOG.com)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6657 - Realtek Semiconductor Corp.)
Riding Club Championships (HKLM\...\Steam App 509420) (Version: - Artplant)
Rise of the Tomb Raider (HKLM-x32\...\{45F08513-973A-4C18-93FD-8E12B1908390}_is1) (Version: - Square Enix)
SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.32 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.32.104 - Skype Technologies S.A.)
Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.5.6 - Sophos Limited)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.72365 - TeamViewer)
The Witcher 2 - Assassins of Kings Enhanced Edition (HKLM-x32\...\The Witcher 2 - Assassins of Kings Enhanced Edition_is1) (Version: - GOG.com)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1495134320_is1) (Version: 2.0.0.51 - GOG.com)
Uplay (HKLM-x32\...\Uplay) (Version: 4.9 - Ubisoft)
UvConverter (HKLM-x32\...\{7195E93F-714C-404B-A164-8F080121C1E6}) (Version: 1.0.0 - UvConverter)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.2 - VideoLAN)
WinRAR 5.21 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WinSnare (HKLM-x32\...\{F173D6F1-284D-4B18-9F6E-57DDC05E34EA}) (Version: 4.2.8 - WinSnare) <==== ATTENTION
WinZip (HKLM-x32\...\WinZip) (Version: 2.3.16 - Winzipper Pvt Ltd.) <==== ATTENTION

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2352784643-913364421-1319302353-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {00F33A2F-C7B5-4F97-AA94-7C1FE71E69AD} - System32\Tasks\{ADAEF8D3-4121-458B-B0FA-D04395CCF70F} => pcalua.exe -a "C:\Program Files (x86)\Common Files\Hotsing\uninstall.exe" -c shuz -f "C:\Program Files (x86)\Common Files\Hotsing\uninstall.dat" -a uninstallme EDADF94F-6733-40EC-BF61-6F741B62F465 DeviceId=0cbc1d53-3912-607e-a4d8-55412beb798e BarcodeId=50027003 ChannelId=3 DistributerName=APSnapdoAMRev
Task: {07C94077-7611-42D4-9999-DA1864E5A534} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe
Task: {115025B9-7C8A-4C1A-8AE7-9EDC80E64016} - System32\Tasks\{14458EEF-9ADD-4753-A89B-46E8287D2BEE} => pcalua.exe -a "C:\Program Files (x86)\Tencent\QQPCMgr\11.7.17791.230\Uninst.exe"
Task: {25B4750D-147A-400E-8573-FCB8921E0A3B} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-03-15] (Adobe Systems Incorporated)
Task: {2E0045D4-033F-40D1-A5A6-0453470A0046} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => %ProgramFiles(x86)%\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe
Task: {2F7846F6-3368-44A2-9A01-C4837278E9BB} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-01] (AVAST Software)
Task: {453F6D2C-2A98-479C-8DBE-78805577705F} - System32\Tasks\Browser Updater Task(Core) => C:\Program Files (x86)\TXQQBrowser\Update\AB24682581805DECB52886B434B05B08\Update\BrowserUpdate.exe <==== ATTENTION
Task: {504BF576-66F1-40BE-A4F8-294399DD12EB} - System32\Tasks\SafeZone scheduled Autoupdate 1468849396 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software)
Task: {506888FF-8EB3-4B99-A120-1854380819D0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-15] (Google Inc.)
Task: {79F53806-0D75-474E-92ED-8FB43B80AF80} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {BE8951F1-3996-42EE-BDCF-02E36F536EB0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-15] (Google Inc.)
Task: {D2390B36-B072-4C43-8FB5-2FBFD8FBD7BB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-12-08] (Piriform Ltd)
Task: {D6C9F1B5-F53D-4BFD-8249-E25F7CC0A890} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2016-12-05 19:54 - 2016-12-05 19:50 - 00017376 _____ () C:\Users\asus\AppData\Local\Kingosoft\Kingo Root\update_27205\bin\KingoSoftService.exe
2016-09-03 19:44 - 2016-09-03 19:44 - 00076888 _____ () C:\WINDOWS\SysWoW64\PnkBstrA.exe
2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-14 13:10 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-09-24 08:30 - 2016-08-01 13:54 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-12-14 13:10 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-14 13:10 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-10-31 20:45 - 2016-10-31 20:45 - 00592384 _____ () C:\Users\asus\AppData\Local\MEGAsync\ShellExtX64.dll
2016-09-24 09:18 - 2016-09-24 09:18 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-01-11 13:57 - 2016-12-21 08:09 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-13 12:48 - 2017-03-13 12:48 - 00077312 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-03-13 12:48 - 2017-03-13 12:48 - 00182784 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-03-13 12:48 - 2017-03-13 12:48 - 41048064 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-03-13 12:48 - 2017-03-13 12:48 - 02236896 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\roottools.dll
2017-01-11 13:56 - 2016-12-21 07:54 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-01-11 13:56 - 2016-12-21 07:48 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-01-11 13:56 - 2016-12-21 07:48 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-01-11 13:56 - 2016-12-21 07:48 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-01-11 13:56 - 2016-12-21 07:53 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-09-01 16:52 - 2016-09-01 16:52 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-03-14 19:34 - 2017-03-14 19:34 - 05883392 _____ () C:\Program Files\AVAST Software\Avast\defs\17031402\algo.dll
2016-09-01 16:52 - 2016-09-01 16:52 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-03-15 11:58 - 2017-03-15 11:58 - 05883392 _____ () C:\Program Files\AVAST Software\Avast\defs\17031500\algo.dll
2017-03-05 09:56 - 2017-03-05 09:56 - 67310648 _____ () C:\Program Files (x86)\Overwolf\0.103.32.0\libcef.DLL
2016-07-18 14:37 - 2016-07-18 14:37 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP => ""="service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2016-07-16 12:47 - 2017-03-14 21:53 - 00000753 ____A C:\WINDOWS\system32\Drivers\etc\hosts


127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2352784643-913364421-1319302353-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\asus\Desktop\fotkověci\crrr.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\Services: iSafeService => 2
MSCONFIG\Services: rpcapd => 3
HKLM\...\StartupApproved\Run32: => " QQPCTray"
HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\StartupApproved\Run: => "Bloody2"
HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\StartupApproved\Run: => "BingSvc"
HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2352784643-913364421-1319302353-1002\...\StartupApproved\Run: => "svchost0"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{7028DA3F-500B-4F62-8364-3F867605DAEC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{73FE28F2-9A9B-4EA1-AF96-D0757785C425}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{F3E270A8-2D6C-4E65-B96D-E0B076062C36}C:\program files (x86)\far cry 3\bin\farcry3_d3d11.exe] => (Allow) C:\program files (x86)\far cry 3\bin\farcry3_d3d11.exe
FirewallRules: [TCP Query User{521971FB-230C-4364-A382-AE2D32D38426}C:\program files (x86)\far cry 3\bin\farcry3_d3d11.exe] => (Allow) C:\program files (x86)\far cry 3\bin\farcry3_d3d11.exe
FirewallRules: [UDP Query User{A177DF83-68A7-43B1-BF06-260180C74AF7}C:\program files (x86)\far cry 3\bin\farcry3.exe] => (Allow) C:\program files (x86)\far cry 3\bin\farcry3.exe
FirewallRules: [TCP Query User{438A1D0C-436F-4831-8D8A-2EC54E1E0678}C:\program files (x86)\far cry 3\bin\farcry3.exe] => (Allow) C:\program files (x86)\far cry 3\bin\farcry3.exe
FirewallRules: [UDP Query User{856EE9C3-AD63-48C5-82FC-37D00BDE3B74}D:\ark survival\ark survival evolved\shootergame\binaries\win64\shootergameserver.exe] => (Allow) D:\ark survival\ark survival evolved\shootergame\binaries\win64\shootergameserver.exe
FirewallRules: [TCP Query User{0D16DF97-2D4A-42D3-9712-97933F2BC744}D:\ark survival\ark survival evolved\shootergame\binaries\win64\shootergameserver.exe] => (Allow) D:\ark survival\ark survival evolved\shootergame\binaries\win64\shootergameserver.exe
FirewallRules: [UDP Query User{D7A4260B-C509-4811-8F26-B7752942338D}D:\ark survival\ark survival evolved\shootergame\binaries\win64\shootergame.exe] => (Allow) D:\ark survival\ark survival evolved\shootergame\binaries\win64\shootergame.exe
FirewallRules: [TCP Query User{1AACB0B2-CFC5-4B42-B9B3-0F441289FC1C}D:\ark survival\ark survival evolved\shootergame\binaries\win64\shootergame.exe] => (Allow) D:\ark survival\ark survival evolved\shootergame\binaries\win64\shootergame.exe
FirewallRules: [{0E0E318B-513E-4B3C-8721-F89923D6E5A5}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\131\tencentdl.exe
FirewallRules: [{8FC27341-155E-42B0-B56B-793C5462FC4B}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\131\bugreport_xf.exe
FirewallRules: [UDP Query User{2F42F264-17F7-4C47-BD92-CC851607C322}C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe] => (Block) C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe
FirewallRules: [TCP Query User{20D69756-3719-4BF7-A2AD-4AC7696F3B83}C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe] => (Block) C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe
FirewallRules: [{151EBC0A-8012-4543-84CC-D91056CB2F84}] => (Allow) C:\Users\asus\Desktop\ekůra\update.exe
FirewallRules: [{739B8D1D-FDD5-440D-8D73-CC5F4CA82268}] => (Allow) C:\Users\asus\Desktop\ekůra\update.exe
FirewallRules: [{AB8A02CC-A1CB-4D60-8F52-7AD2B94B2638}] => (Allow) C:\Users\asus\Desktop\ekůra\update.exe
FirewallRules: [{C3A063A2-AC18-4399-BA11-C12CCD90C2CD}] => (Allow) C:\Users\asus\Desktop\ekůra\update.exe
FirewallRules: [{4345D8CC-69B1-4C0C-AAE6-F51A912B4C71}] => (Allow) C:\Users\asus\Desktop\ekůra\ekura.exe
FirewallRules: [{FD64E31C-4325-411D-A088-5A8D2334C3E0}] => (Allow) C:\Users\asus\Desktop\ekůra\ekura.exe
FirewallRules: [{A88F1D94-F0F8-4B37-9537-9C36F34F53A9}] => (Allow) C:\Users\asus\Desktop\ekůra\ekura.exe
FirewallRules: [{2015790F-C1C6-4C9E-B6DB-D7A751AF58B3}] => (Allow) C:\Users\asus\Desktop\ekůra\ekura.exe
FirewallRules: [{36FD4E64-2083-4C65-A5BB-172118009B48}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe
FirewallRules: [{5471C4D5-3375-41FE-A8EA-B66EB18A7987}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe
FirewallRules: [{AA9CD8C5-2C80-4B57-9974-06C889076B73}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{F94E9962-8F7E-4543-B44C-A840A95407EA}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{944D1A42-4E09-451A-A121-38687EB786D5}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe
FirewallRules: [{A2412323-2C33-4E4D-BAA8-5AEC6D868540}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe
FirewallRules: [{5BE11CBD-AFE8-4694-AF89-055BD5856EBB}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe
FirewallRules: [{7FC20C9B-1B94-4CC8-862D-4D0E38A2DC64}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe
FirewallRules: [{7C8C1AD9-ED21-4602-98F4-89AA2A11E8A1}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\bugreport_xf.exe
FirewallRules: [UDP Query User{B389B988-D17B-4641-AD9C-7C9EA490CBC7}D:\gh\gh3.exe] => (Block) D:\gh\gh3.exe
FirewallRules: [TCP Query User{F9DDBF54-7618-4402-BACD-D48A93EF8BE0}D:\gh\gh3.exe] => (Block) D:\gh\gh3.exe
FirewallRules: [UDP Query User{751F3D19-23A5-46BD-A24A-5D4064DF6431}C:\gog games\terraria\terrariaserver.exe] => (Allow) C:\gog games\terraria\terrariaserver.exe
FirewallRules: [TCP Query User{9C1E3D47-D174-40F9-876D-705AE53C381F}C:\gog games\terraria\terrariaserver.exe] => (Allow) C:\gog games\terraria\terrariaserver.exe
FirewallRules: [UDP Query User{FF07B0CF-5736-4787-BD19-F488A144F5CF}G:\tshock\terrariaserver.exe] => (Allow) G:\tshock\terrariaserver.exe
FirewallRules: [TCP Query User{03C87019-6722-40F4-9F19-8F62F77ADBC2}G:\tshock\terrariaserver.exe] => (Allow) G:\tshock\terrariaserver.exe
FirewallRules: [UDP Query User{25C75FC9-AB78-4EE5-84CF-CDA8992D1BF9}C:\program files (x86)\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{10FBBA3D-B1F7-45B7-B25C-EE6574381633}C:\program files (x86)\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{CC286BB6-B60F-41F3-8D80-7BAE201B2F0D}G:\games\assassin's creed iii\ac3sp.exe] => (Allow) G:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [UDP Query User{21519632-9FA0-4AFF-80A3-8A7C76E17E71}G:\games\assassin's creed iii\ac3sp.exe] => (Allow) G:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [{829046F1-AF19-4283-9705-36E741A958E3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{0517FF16-78E6-4F3D-ABD2-9A6B78C45541}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{BA6D5D64-45A9-439C-8422-7E80F3C3FFAE}] => (Allow) C:\Users\asus\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2A9C845D-B91D-4EE1-9E3D-DD0DDB8949BB}] => (Allow) C:\Users\asus\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{C4F0F0B3-C7EE-4920-AB53-F0452FAAF5DB}] => (Allow) C:\Users\asus\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7DB032D8-CAAE-4E12-B24B-B790642E9D45}] => (Allow) C:\Users\asus\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{6A6E8E0A-1A70-4B09-ACE3-1681DC171CC5}] => (Allow) C:\Users\asus\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{14378ED4-546F-4E53-A67C-2ECE351E19C4}] => (Allow) C:\Users\asus\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{21A85CED-72BF-4FC2-960A-2122768FDCCB}G:\games\assassin's creed iii\ac3sp.exe] => (Allow) G:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [UDP Query User{629486D2-1224-455A-8A24-5FBE772AF483}G:\games\assassin's creed iii\ac3sp.exe] => (Allow) G:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [{4ED7A560-EE94-4013-8CE9-9BF6AADAF1BA}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{8B34BB70-D99D-4814-8366-BFBBFA282B1B}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{C8784857-040A-41A8-80E9-24A62538ED67}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{3F22E607-F8CF-4A4D-9C99-B0E55053C6DD}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [{359A54FE-9A99-402D-9B16-F71063EEEA13}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{64C7A338-41D9-440D-B9F9-E83B52E1D590}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{75D3EBB7-4C1E-4FAA-8A18-B61FEA9855B4}G:\games\prince of persia - the forgotten sands(2010)\prince of persia.exe] => (Allow) G:\games\prince of persia - the forgotten sands(2010)\prince of persia.exe
FirewallRules: [UDP Query User{3683484D-3246-49EC-9A03-D3FEA87A3F58}G:\games\prince of persia - the forgotten sands(2010)\prince of persia.exe] => (Allow) G:\games\prince of persia - the forgotten sands(2010)\prince of persia.exe
FirewallRules: [{129FA4DD-9C36-4B43-9024-36B184842E98}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{C699BCE4-EA11-4588-80F6-090D973DCAA4}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{970337F8-D662-416E-AC53-E9607CB95556}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{B7CE6154-77C0-4132-A30A-17FE0BA81D89}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{EF02C511-9F60-4AED-A5F9-6D583B8CF1DF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\RidingClubChampionships\rcc.exe
FirewallRules: [{6DCCBE46-F4EA-44BF-879C-F3046F785758}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\RidingClubChampionships\rcc.exe
FirewallRules: [{86B36008-47E1-4B8F-97FA-78C2E0BF0482}] => (Allow) D:\Mr DJ\Metal Gear Solid V Phantom Pain\Launcher.exe
FirewallRules: [{F34093B2-FD5A-4AA0-B279-BFD2DCA0A4E0}] => (Allow) D:\Mr DJ\Metal Gear Solid V Phantom Pain\Launcher.exe
FirewallRules: [{2132E85F-44E4-4206-BDBF-4EB5A1630D0E}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{2FF905FB-0D28-45E1-9495-264B676584CD}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{3E28FD59-3C78-48D0-A33B-88C790120A31}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{B1FC47CF-AA8D-476E-A885-DA2D1C9FF5E3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{820449E6-9BE1-465A-8F36-3CBBEB307E77}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{39BBAAB7-6E89-415F-8D88-A6D2ADA9B4C9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{04DC7719-12BD-4107-8A82-8F01AAE7C400}] => (Allow) D:\Assassin's Creed Rogue\ACC.exe
FirewallRules: [{D4743109-B92C-4F57-A3E4-0D5C1841BDB6}] => (Allow) D:\Assassin's Creed Rogue\ACC.exe
FirewallRules: [{900D2326-7F3E-46E7-8C59-CF3230DF9F64}] => (Allow) C:\Program Files (x86)\Birdjob\Application\chrome.exe
FirewallRules: [{84552FA9-4979-4073-9EEC-84887E030C79}] => (Allow) D:\Dragon Age Inquisition\Mr DJ\Dragon Age Inquisition Deluxe Edition\DragonAgeInquisition.exe
FirewallRules: [{C20FB8D8-2917-4C8B-BEEA-158010DA53DF}] => (Allow) D:\Dragon Age Inquisition\Mr DJ\Dragon Age Inquisition Deluxe Edition\DragonAgeInquisition.exe
FirewallRules: [TCP Query User{AB8E214C-89BB-45E3-8EB6-1BA8BFAD480A}D:\the witcher 2 enhanced edition\bin\witcher2.exe] => (Allow) D:\the witcher 2 enhanced edition\bin\witcher2.exe
FirewallRules: [UDP Query User{BEC196B5-BC00-449C-9718-7EEB08172412}D:\the witcher 2 enhanced edition\bin\witcher2.exe] => (Allow) D:\the witcher 2 enhanced edition\bin\witcher2.exe
FirewallRules: [{531C819E-F928-49A0-9403-10BC0D2688D3}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

12-03-2017 16:16:53 JRT Pre-Junkware Removal

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/15/2017 04:44:58 PM) (Source: ESENT) (EventID: 489) (User: )
Description: firefox (3588) Pokus o otevření souboru C:\Users\asus\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\spartan.edb jen pro čtení selhal. Došlo k systémové chybě 32 (0x00000020): Proces nemá přístup k souboru, neboť jej právě využívá jiný proces. . Operace otevření souboru selže a dojde k chybě -1032 (0xfffffbf8).

Error: (03/15/2017 02:28:46 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program MicrosoftEdgeCP.exe verze 11.0.14393.82 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Zabezpečení a údržba.

ID procesu: 20b4

Čas spuštění: 01d29d90007efc9d

Čas ukončení: 12

Cesta k aplikaci: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

ID hlášení: 503fd4b1-0983-11e7-97d3-3085a9f1e411

Úplný název balíčku s chybou: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe

ID aplikace související s balíčkem s chybou: MicrosoftEdge

Error: (03/15/2017 01:27:14 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: asusNTB)
Description: Balíček Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe+MicrosoftEdge se ukončil, protože jeho pozastavování trvalo moc dlouho.

Error: (03/15/2017 01:15:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Procedura Open pro službu WmiApRpl v knihovně DLL C:\WINDOWS\system32\wbem\wmiaprpl.dll se nezdařila. Výkonnostní data pro tuto službu nebudou k dispozici. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.

Error: (03/15/2017 01:15:23 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Systém Windows nemůže načíst knihovnu DLL rozšiřitelných čítačů rdyboost. První čtyři bajty (DWORD) datové sekce obsahují kód chyby systému Windows.

Error: (03/15/2017 01:15:23 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Nelze otevřít objekt výkonu služby serveru. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.

Error: (03/15/2017 01:15:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Procedura Open pro službu MSDTC v knihovně DLL C:\WINDOWS\system32\msdtcuiu.DLL se nezdařila. Výkonnostní data pro tuto službu nebudou k dispozici. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.

Error: (03/15/2017 01:15:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Procedura Open pro službu Lsa v knihovně DLL C:\Windows\System32\Secur32.dll se nezdařila. Výkonnostní data pro tuto službu nebudou k dispozici. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.

Error: (03/15/2017 01:15:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Procedura Open pro službu ESENT v knihovně DLL C:\WINDOWS\system32\esentprf.dll se nezdařila. Výkonnostní data pro tuto službu nebudou k dispozici. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.

Error: (03/15/2017 12:20:22 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Procedura Open pro službu BITS v knihovně DLL C:\Windows\System32\bitsperf.dll se nezdařila. Výkonnostní data pro tuto službu nebudou k dispozici. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.


System errors:
=============
Error: (03/15/2017 01:15:22 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Overwolf Updater Windows SCM neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (03/15/2017 01:10:04 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
a APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (03/15/2017 01:25:27 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby avgsvc bylo dosaženo časového limitu (30000 ms).

Error: (03/15/2017 01:24:41 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (03/14/2017 11:29:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Overwolf Updater Windows SCM neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (03/14/2017 11:26:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba NVIDIA Update Service Daemon neuspěla při spuštění v důsledku následující chyby:
Služba nebyla zahájena, protože se nepodařilo přihlásit.

Error: (03/14/2017 11:26:01 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Služba nvUpdatusService se nemohla přihlásit jako .\UpdatusUser s aktuálně konfigurovaným heslem z důvodu následující chyby:
Platnost hesla tohoto účtu vypršela.


Chcete-li zajistit správnou konfiguraci služby, použijte modul snap-in Služby konzoly Microsoft Management Console (MMC).

Error: (03/14/2017 11:23:42 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
a APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (03/14/2017 11:09:58 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (03/14/2017 10:42:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Overwolf Updater Windows SCM neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.


CodeIntegrity:
===================================
Date: 2017-03-15 13:11:49.449
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.103.32.0\x64\OWExplorer.dll that did not meet the Store signing level requirements.

Date: 2017-03-15 13:11:49.427
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.103.32.0\x64\OWExplorer.dll that did not meet the Store signing level requirements.

Date: 2017-03-15 13:11:09.664
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.103.32.0\x64\OWExplorer.dll that did not meet the Store signing level requirements.

Date: 2017-03-15 13:11:09.482
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.103.32.0\x64\OWExplorer.dll that did not meet the Store signing level requirements.

Date: 2017-03-14 23:30:21.643
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.103.32.0\x64\OWExplorer.dll that did not meet the Store signing level requirements.

Date: 2017-03-14 23:30:21.630
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.103.32.0\x64\OWExplorer.dll that did not meet the Store signing level requirements.

Date: 2017-03-14 23:29:44.678
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.103.32.0\x64\OWExplorer.dll that did not meet the Store signing level requirements.

Date: 2017-03-14 23:29:44.109
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.103.32.0\x64\OWExplorer.dll that did not meet the Store signing level requirements.

Date: 2017-03-13 15:37:20.939
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.103.32.0\x64\OWExplorer.dll that did not meet the Store signing level requirements.

Date: 2017-03-13 15:36:46.671
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.103.32.0\x64\OWExplorer.dll that did not meet the Store signing level requirements.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz
Percentage of memory in use: 33%
Total physical RAM: 8069.55 MB
Available physical RAM: 5405.43 MB
Total Virtual: 8581.55 MB
Available Virtual: 5719.21 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:185.87 GB) (Free:30.38 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (Data) (Fixed) (Total:258.45 GB) (Free:14.15 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: B2973CD1)

Partition: GPT.

==================== End of Addition.txt ============================

[spulda]

Firefox už taky jde, našel jsem na stránkách Mozilly oficiální návod pro tu hlášku. A bez Číňanů!
Na Memtest zatím není čas.

[jaro3]

Avast a AVG...

Neradil jsem Ti AVG odinstalovat??
Remove AVG: http://download.avg.com/filedir/util/av ... 3_3341.exe
http://www.avg.com/eu-en/utilities

Potom nový FRST.

[spulda]

Myslím že neradil ale možná jsem to jen přehlédl. Odinstaluji.

Edit: Já bych ho hlavně odstranil už dávno kdybych věděl jak na to, nevěděl jsem že je potřeba samostatný program.

[jaro3]

tak jsem to v prvním HJT přehlédnul , tak až teď v FRST , to dělá určitě problémy , dva antiviry.