PC-HELP.CZ

Ahoj asi posledni 2 tydny mam pomaly pocitac.Kdyz jsem treba na plose a najedu mysi na zastupce tak se kolem nej ten modrej ctverecek(znazornuje ze na nem jsem mysi) ukaze az po par sekundach.Nebo treba na discordu kdyz scrolluju tak to je zasekany.

Pak hraju FiveM a tam mam tak 30 FPS (Ale to bude asi tim ze to vyuziva vic CPU nez GPU)

HiJackThis log

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:29:41, on 18.04.2019
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal

Running processes:
C:\Users\soman\AppData\Local\Discord\app-0.0.305\Discord.exe
C:\Users\soman\AppData\Local\Discord\app-0.0.305\Discord.exe
C:\Users\soman\AppData\Local\Discord\app-0.0.305\Discord.exe
C:\Users\soman\AppData\Local\Discord\app-0.0.305\Discord.exe
C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.BrowserSubprocess.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Users\soman\AppData\Local\Temp\scoped_dir12256_1717\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [Gaming Keyboard Driver] "C:\Program Files (x86)\Gaming Keyboard\Monitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
O4 - HKLM\..\Run: [RazerCortex] "C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncher.exe" -autorun
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [OneDrive] "C:\Users\soman\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Discord] C:\Users\soman\AppData\Local\Discord\app-0.0.305\Discord.exe
O4 - HKCU\..\Run: [Bloody2] "C:\Program Files (x86)\Bloody6\Bloody6\Bloody6.exe" Minimum
O4 - HKCU\..\Run: [FACEIT] "C:\Users\soman\AppData\Local\FACEITApp\update.exe" --processStart "FACEIT.exe"
O4 - HKCU\..\Run: [WinFLTray] C:\Windows\SysWow64\WinFLTray.exe
O4 - HKCU\..\Run: [FLBackup] C:\Program Files (x86)\NewSoftware's\Folder Lock\FLComServCtrl.exe
O4 - HKCU\..\Run: [EpicGamesLauncher] "C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe" -silent
O4 - HKCU\..\Run: [NGenuity] C:\Program Files (x86)\HyperX\NGenuity\NGenuity.exe
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [icq.desktop] "C:\Users\soman\AppData\Roaming\ICQ\bin\icq.exe" /startup
O4 - HKCU\..\Run: [CAM] "C:\Program Files (x86)\NZXT\CAM\Launcher\CAM.exe"
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [Wargaming.net Game Center] "C:\ProgramData\Wargaming.net\GameCenter\wgc.exe" --background ''
O4 - HKCU\..\Run: [Ubisoft Game Launcher] "C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uplay.exe" -uplay_silent
O4 - Startup: MEGAsync.lnk = C:\Users\soman\AppData\Local\MEGAsync\MEGAsync.exe
O4 - Startup: Monitor technologie Intel(R) Turbo Boost 2.6.lnk = C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe
O4 - Startup: Twitch.lnk = C:\Users\soman\AppData\Roaming\Twitch\Bin\Twitch.exe
O4 - Global Startup: SoftEther VPN Client Manager Startup.lnk = C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://*.webcompanion.com
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - AMD - C:\Windows\System32\DriverStore\FileRepository\c0338885.inf_amd64_648d9ae54bb276d8\B338884\atiesrxx.exe
O23 - Service: AODService - Unknown owner - C:\Program Files (x86)\AMD\OverDrive\AODAssist.exe
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\aswidsagent.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastWscReporter - AVAST Software - C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESLoadService - TODO: <Company name> - C:\Program Files (x86)\EaseUS\EaseUS MobiMover\bin\ESLoadService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLService - NewSoftwares.net - C:\Windows\SysWOW64\WinFLService.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google Inc. - C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.103\elevation_service.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
O23 - Service: Hotspot Shield Service (hshld) - AnchorFree Inc. - C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: Razer Game Manager (Razer Game Manager Service) - Razer Inc - C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Razer Central Service (RzActionSvc) - Razer Inc. - C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
O23 - Service: RzKLService - Razer Inc. - C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\Windows\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: SoftEther VPN Client (SEVPNCLIENT) - SoftEther VPN Project at University of Tsukuba, Japan. - C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\Windows\system32\SgrmBroker.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\Windows\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: TunnelBear Maintenance (TunnelBearMaintenance) - TunnelBear - C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.6 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: uTorrent Server - Unknown owner - C:\uTorrent\nssm.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\Windows\system32\xbgmsvc.exe (file missing)
O23 - Service: Intel(R) Extreme Tuning Utility Service (XTU3SERVICE) - Intel(R) Corporation - C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe

--
End of file - 13128 bytes

Dobry den.

:arrow: Stiahnite si na plochu nastroj AdwCleaner, link. na stiahnutie tu: https://toolslib.net/downloads/finish/1/
Pred spustenim nastroja povypinajte vsetke beziace okna programov, to su vsetke beziace programy pod desktopom.
Kliknite pravym tlacidlom mysi na program -> spustit ako Administrator.
Pokracujte kliknutim na tlacidlo Prehladaj teraz (Scan now) a pockajte, kym sa system doskenuje.
Po skene nechajte oznacene vsetky chlieviky, pripadne najdene hrozieby a pokracujte v dolnom pravom rohu tlacidlom Vycistit Teraz (Clean and Repair).
Po restartovani PC sa spusti nastroj AdwCleaner, kliknite na Zobrazit soubor protokolu.
Spusti sa log, jeho obsah skopirujte sem.

# -------------------------------
# Malwarebytes AdwCleaner 7.3.0.0
# -------------------------------
# Build: 04-04-2019
# Database: 2019-04-18.2 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 04-19-2019
# Duration: 00:00:06
# OS: Windows 10 Home
# Cleaned: 9
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\ProgramData\Application Data\Lavasoft\Web Companion
Deleted C:\Users\soman\AppData\Roaming\Tencent

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\Lavasoft\Web Companion
Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BDF61FAE-9D19-40F0-8F34-688DEB334CA9}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Web Companion
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKLM\Software\Wow6432Node\Lavasoft\Web Companion
Deleted HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [2154 octets] - [19/04/2019 07:08:07]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Preskenujte pocitac s FRST - navod tu: https://forum.viry.cz/viewtopic.php?f=24&t=132509, skopirujte FRST.log + Addition log sem.

Do poznamkoveho bloku skopirujte obsah dole:



Poznamkovy blok ulozte pod nazvom fixlist.txt do umiestnenia kde je FRST.
Spustite FRST a odkliknite tlacidlo: Fix
Vykona sa funkcionalita po ktorej sa pocitac rebootuje. Po reboote sem vlozte obsah logu: fixlog.txt ulozeneho v umiestneni FRST.

Fix result of Farbar Recovery Scan Tool (x64) Version: 20.04.2019 01
Ran by soman (21-04-2019 04:02:16) Run:1
Running from C:\Users\soman\Desktop\FRST
Loaded Profiles: soman (Available Profiles: soman)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CloseProcesses:
CreateRestorePoint:

HKU\S-1-5-21-684206797-2878788543-4218647124-1001\...\Run: [Bloody2] => C:\Program Files (x86)\Bloody6\Bloody6\Bloody6.exe [16442096 2018-07-20] (A FOUR TECH CO., LTD. -> )
HKU\S-1-5-21-684206797-2878788543-4218647124-1001\...\Run: [FACEIT] => C:\Users\soman\AppData\Local\FACEITApp\update.exe [2203584 2018-10-05] (FACE IT LIMITED -> )
HKU\S-1-5-21-684206797-2878788543-4218647124-1001\...\Run: [CAM] => C:\Program Files (x86)\NZXT\CAM\Launcher\CAM.exe [67662960 2019-01-31] (NZXT -> NZXT)
HKU\S-1-5-21-684206797-2878788543-4218647124-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3114256 2019-04-16] (Electronic Arts, Inc. -> Electronic Arts)
HKU\S-1-5-21-684206797-2878788543-4218647124-1001\...\Run: [Wargaming.net Game Center] => C:\ProgramData\Wargaming.net\GameCenter\wgc.exe [2540408 2019-04-17] (Wargaming.net Limited -> Wargaming.net)
HKU\S-1-5-21-684206797-2878788543-4218647124-1001\...\Run: [Ubisoft Game Launcher] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uplay.exe [470872 2019-03-28] (Ubisoft Entertainment Sweden AB -> Ubisoft)



VirusTotal: C:\uTorrent\nssm.exe
VirusTotal: C:\Program Files (x86)\Origin\QtWebEngineProcess.exe

C:\Windows\SysWow64\WinFLTray.ex
C:\Program Files (x86)\NewSoftware's

HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKU\S-1-5-21-684206797-2878788543-4218647124-1001\...\Run: [WinFLTray] => C:\Windows\SysWow64\WinFLTray.ex
HKU\S-1-5-21-684206797-2878788543-4218647124-1001\...\Run: [FLBackup] => C:\Program Files (x86)\NewSoftware's\Folder Lock\FLComServCtrl.ex
HKU\S-1-5-21-684206797-2878788543-4218647124-1001\...\MountPoints2: {0112c7ed-2b8a-11e9-bcba-806e6f6e6963} - "D:\Bin\Instv2.exe"
Task: {038CFFCC-1D92-43C5-94E5-448067CFE1E6} - System32\Tasks\Microsoft\Windows\Flighting\FeatureConfig\ReconcileFeatures
Task: {6E025AB6-73AF-4546-AB75-074293967B3F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {92DF8345-D0F0-4FEF-84E5-A35959E4E63B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
S3 cpuz148; \??\C:\Windows\temp\cpuz148\cpuz148_x64.sys [X]
S3 EverestDriver; \??\C:\Users\soman\AppData\Local\Temp\EverestDriver.sys [X] <==== ATTENTION
2018-04-23 17:13 - 2018-04-23 17:13 - 000072704 _____ () [File not signed] C:\Program Files (x86)\MSI Afterburner\RTMUI.dll
2018-04-23 17:13 - 2018-04-23 17:13 - 000057344 _____ () [File not signed] C:\Program Files (x86)\MSI Afterburner\RTFC.dll
2018-04-23 17:13 - 2018-04-23 17:13 - 000232448 _____ () [File not signed] C:\Program Files (x86)\MSI Afterburner\RTCore.dll
2018-04-23 17:13 - 2018-04-23 17:13 - 000567808 _____ () [File not signed] C:\Program Files (x86)\MSI Afterburner\RTHAL.dll
2018-04-23 17:13 - 2018-04-23 17:13 - 000357888 _____ () [File not signed] C:\Program Files (x86)\MSI Afterburner\RTUI.dll
AlternateDataStreams: C:\Users\soman\Data aplikac�:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\soman\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]
FirewallRules: [{A5A83259-7A67-4345-B362-DEDC03EAEC62}] => (Allow) C:\Windows\SysWOW64\msiexec.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{1C6B70FB-474B-4833-B267-7F23FC5ABDD1}] => (Block) C:\program files (x86)\steam\steamapps\common\h1z1\h1z1.exe No File
FirewallRules: [{730E7EC9-0E0E-4DFC-BA10-8765FDDAFFED}] => (Block) C:\program files (x86)\steam\steamapps\common\h1z1\h1z1.exe No File
FirewallRules: [{09F512BF-B039-4263-A75D-285F826D2527}] => (Block) C:\program files (x86)\steam\steamapps\common\pubg_test\tslgame\binaries\win64\tslgame.exe No File
FirewallRules: [{FEB4AB84-9E02-43C3-8E3B-3C9B1642906B}] => (Block) C:\program files (x86)\steam\steamapps\common\pubg_test\tslgame\binaries\win64\tslgame.exe No File
FirewallRules: [TCP Query User{B9030436-274A-40C5-B3CB-5BE806232749}C:\program files\epic games\subnautica\subserver\nitroxserver.exe] => (Allow) C:\program files\epic games\subnautica\subserver\nitroxserver.exe No File
FirewallRules: [UDP Query User{6805D6A6-E223-4A03-8270-2ADDB1249AAB}C:\program files\epic games\subnautica\subserver\nitroxserver.exe] => (Allow) C:\program files\epic games\subnautica\subserver\nitroxserver.exe No File
FirewallRules: [{015A1F5C-6F08-451F-87EA-4189BF680BF9}] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe No File
FirewallRules: [{97177AF5-169A-405E-816C-89941AED7335}] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe No File
FirewallRules: [TCP Query User{2CA6301A-CAB8-4368-98FA-C329F5D73C5F}C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe No File
FirewallRules: [UDP Query User{783F88D6-2C9C-4C2D-8FCC-190185FD29E5}C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe No File
FirewallRules: [{DD8F9DB5-5354-4517-940B-19D0DB62416B}] => (Block) C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe No File
FirewallRules: [{AE97365D-4AA9-4BD0-B4E1-548B04C41C4B}] => (Block) C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe No File
FirewallRules: [TCP Query User{401836EE-F4D0-4273-964A-1348059AF6E9}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.179\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.179\deploy\leagueclient.exe No File
FirewallRules: [UDP Query User{F5F4030A-F524-4113-A372-ACE94C6AB226}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.179\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.179\deploy\leagueclient.exe No File
FirewallRules: [{89AC0687-FBC2-4F18-8A0C-6EC7835736E0}] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.179\deploy\leagueclient.exe No File
FirewallRules: [{54838FAB-4B81-466E-87E5-3E3218D44052}] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.179\deploy\leagueclient.exe No File
FirewallRules: [TCP Query User{B9030436-274A-40C5-B3CB-5BE806232749}C:\program files\epic games\subnautica\subserver\nitroxserver.exe] => (Allow) C:\program files\epic games\subnautica\subserver\nitroxserver.exe No File
FirewallRules: [UDP Query User{6805D6A6-E223-4A03-8270-2ADDB1249AAB}C:\program files\epic games\subnautica\subserver\nitroxserver.exe] => (Allow) C:\program files\epic games\subnautica\subserver\nitroxserver.exe No File
FirewallRules: [TCP Query User{2A1E365B-7C31-4F51-AE58-85E2CB795AE4}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe No File
FirewallRules: [UDP Query User{738BEF3E-B0D6-441A-8816-D68B88D9840D}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe No File
FirewallRules: [TCP Query User{7A8168B4-DE09-4952-B92E-E50BDC52E749}C:\users\soman\desktop\volcanoids.v1.13.85.0\volcanoids.exe] => (Allow) C:\users\soman\desktop\volcanoids.v1.13.85.0\volcanoids.exe No File
FirewallRules: [UDP Query User{0BB14360-AE99-4017-951B-0AAD0DADE6C5}C:\users\soman\desktop\volcanoids.v1.13.85.0\volcanoids.exe] => (Allow) C:\users\soman\desktop\volcanoids.v1.13.85.0\volcanoids.exe No File
FirewallRules: [TCP Query User{0A564126-C4C0-4AEA-84EF-B1D52B40161C}C:\games\viscera_alpha\binaries\win32\udk.exe] => (Allow) C:\games\viscera_alpha\binaries\win32\udk.exe No File
FirewallRules: [UDP Query User{0E238A6F-7CB2-4729-AE7B-DD5AF5CEC021}C:\games\viscera_alpha\binaries\win32\udk.exe] => (Allow) C:\games\viscera_alpha\binaries\win32\udk.exe No File
FirewallRules: [{C2D83975-359F-4681-89B9-A4DC75CB3623}] => (Allow) LPort=38518
FirewallRules: [{E872A739-5530-42B1-A8D1-078172ED487E}] => (Allow) LPort=9142
FirewallRules: [TCP Query User{0DCA9F75-3167-4265-AB81-5835FA26F6CE}C:\users\soman\desktop\subnautica.zero\subnauticazero\subnauticazero.exe] => (Allow) C:\users\soman\desktop\subnautica.zero\subnauticazero\subnauticazero.exe No File
FirewallRules: [UDP Query User{6B81F80F-4C88-4A75-8233-EDA771D858AF}C:\users\soman\desktop\subnautica.zero\subnauticazero\subnauticazero.exe] => (Allow) C:\users\soman\desktop\subnautica.zero\subnauticazero\subnauticazero.exe No File
FirewallRules: [TCP Query User{BA527894-59F1-4F64-9A2A-A8A2208DFB72}C:\program files (x86)\far cry 3 complete collection\far cry 3\bin\farcry3.exe] => (Allow) C:\program files (x86)\far cry 3 complete collection\far cry 3\bin\farcry3.exe No File
FirewallRules: [UDP Query User{4F60038C-971C-4054-AF7F-312E54C1A76A}C:\program files (x86)\far cry 3 complete collection\far cry 3\bin\farcry3.exe] => (Allow) C:\program files (x86)\far cry 3 complete collection\far cry 3\bin\farcry3.exe No File
FirewallRules: [{0DB9C0E1-83AA-4279-BF48-B5C880D5CD46}] => (Block) C:\program files (x86)\far cry 3 complete collection\far cry 3\bin\farcry3.exe No File
FirewallRules: [{7709EE80-D48D-4FF6-9522-46403EDD137D}] => (Block) C:\program files (x86)\far cry 3 complete collection\far cry 3\bin\farcry3.exe No File
FirewallRules: [TCP Query User{1DBF11FB-7D49-439D-BA2E-5D99C842C0D3}C:\program files (x86)\far cry 3 complete collection\far cry 3\bin\farcry3_d3d11.exe] => (Allow) C:\program files (x86)\far cry 3 complete collection\far cry 3\bin\farcry3_d3d11.exe No File
FirewallRules: [UDP Query User{3D38EB20-F605-4FE0-A371-EAF9C3C931D6}C:\program files (x86)\far cry 3 complete collection\far cry 3\bin\farcry3_d3d11.exe] => (Allow) C:\program files (x86)\far cry 3 complete collection\far cry 3\bin\farcry3_d3d11.exe No File
FirewallRules: [{5754E7FA-7633-4FC0-92EF-E4E172BEB873}] => (Block) C:\program files (x86)\far cry 3 complete collection\far cry 3\bin\farcry3_d3d11.exe No File
FirewallRules: [{86C69DEE-61B4-4F69-B21E-45229AF9791F}] => (Block) C:\program files (x86)\far cry 3 complete collection\far cry 3\bin\farcry3_d3d11.exe No File
FirewallRules: [{5C6E3DD0-4DE5-4E49-BD28-F7253D9440DA}] => (Allow) C:\Program Files (x86)\Mr DJ\Far Cry 4\bin\FarCry4.exe No File
FirewallRules: [{AB58FCC8-43FB-4447-8F8B-B2D9D9D65525}] => (Allow) C:\Program Files (x86)\Mr DJ\Far Cry 4\bin\FarCry4.exe No File
FirewallRules: [{3A92EB32-CC01-42B8-BF86-B8276D5D30C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Deceit\bin\win_x64\Deceit.exe No File
FirewallRules: [{CFE2D17B-BE52-4E52-B1E6-20199CCAD15A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Deceit\bin\win_x64\Deceit.exe No File

EmptyTemp:

*****************

Processes closed successfully.
Restore point was successfully created.
"HKU\S-1-5-21-684206797-2878788543-4218647124-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Bloody2" => removed successfully
"HKU\S-1-5-21-684206797-2878788543-4218647124-1001\Software\Microsoft\Windows\CurrentVersion\Run\\FACEIT" => removed successfully
"HKU\S-1-5-21-684206797-2878788543-4218647124-1001\Software\Microsoft\Windows\CurrentVersion\Run\\CAM" => removed successfully
"HKU\S-1-5-21-684206797-2878788543-4218647124-1001\Software\Microsoft\Windows\CurrentVersion\Run\\EADM" => removed successfully
"HKU\S-1-5-21-684206797-2878788543-4218647124-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Wargaming.net Game Center" => removed successfully
"HKU\S-1-5-21-684206797-2878788543-4218647124-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Ubisoft Game Launcher" => removed successfully
VirusTotal: C:\uTorrent\nssm.exe => https://www.virustotal.com/file/e08c747 ... 541901471/
VirusTotal: C:\Program Files (x86)\Origin\QtWebEngineProcess.exe => https://www.virustotal.com/file/5c50419 ... 555372938/
"C:\Windows\SysWow64\WinFLTray.ex" => not found
C:\Program Files (x86)\NewSoftware's => moved successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\IntelTBRunOnce" => removed successfully
"HKU\S-1-5-21-684206797-2878788543-4218647124-1001\Software\Microsoft\Windows\CurrentVersion\Run\\WinFLTray" => removed successfully
"HKU\S-1-5-21-684206797-2878788543-4218647124-1001\Software\Microsoft\Windows\CurrentVersion\Run\\FLBackup" => removed successfully
HKU\S-1-5-21-684206797-2878788543-4218647124-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0112c7ed-2b8a-11e9-bcba-806e6f6e6963} => removed successfully
HKLM\Software\Classes\CLSID\{0112c7ed-2b8a-11e9-bcba-806e6f6e6963} => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{038CFFCC-1D92-43C5-94E5-448067CFE1E6}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{038CFFCC-1D92-43C5-94E5-448067CFE1E6}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\Flighting\FeatureConfig\ReconcileFeatures => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Flighting\FeatureConfig\ReconcileFeatures" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6E025AB6-73AF-4546-AB75-074293967B3F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6E025AB6-73AF-4546-AB75-074293967B3F}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{92DF8345-D0F0-4FEF-84E5-A35959E4E63B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{92DF8345-D0F0-4FEF-84E5-A35959E4E63B}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
HKLM\System\CurrentControlSet\Services\cpuz148 => removed successfully
cpuz148 => service removed successfully
HKLM\System\CurrentControlSet\Services\EverestDriver => removed successfully
EverestDriver => service removed successfully
C:\Program Files (x86)\MSI Afterburner\RTMUI.dll => moved successfully
C:\Program Files (x86)\MSI Afterburner\RTFC.dll => moved successfully
C:\Program Files (x86)\MSI Afterburner\RTCore.dll => moved successfully
C:\Program Files (x86)\MSI Afterburner\RTHAL.dll => moved successfully
C:\Program Files (x86)\MSI Afterburner\RTUI.dll => moved successfully
"C:\Users\soman\Data aplikac�" => ":00e481b5e22dbe1f649fcddd505d3eb7" ADS not found.
C:\Users\soman\AppData\Roaming => ":00e481b5e22dbe1f649fcddd505d3eb7" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A5A83259-7A67-4345-B362-DEDC03EAEC62}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1C6B70FB-474B-4833-B267-7F23FC5ABDD1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{730E7EC9-0E0E-4DFC-BA10-8765FDDAFFED}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{09F512BF-B039-4263-A75D-285F826D2527}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FEB4AB84-9E02-43C3-8E3B-3C9B1642906B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B9030436-274A-40C5-B3CB-5BE806232749}C:\program files\epic games\subnautica\subserver\nitroxserver.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6805D6A6-E223-4A03-8270-2ADDB1249AAB}C:\program files\epic games\subnautica\subserver\nitroxserver.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{015A1F5C-6F08-451F-87EA-4189BF680BF9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{97177AF5-169A-405E-816C-89941AED7335}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{2CA6301A-CAB8-4368-98FA-C329F5D73C5F}C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{783F88D6-2C9C-4C2D-8FCC-190185FD29E5}C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DD8F9DB5-5354-4517-940B-19D0DB62416B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AE97365D-4AA9-4BD0-B4E1-548B04C41C4B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{401836EE-F4D0-4273-964A-1348059AF6E9}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.179\deploy\leagueclient.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F5F4030A-F524-4113-A372-ACE94C6AB226}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.179\deploy\leagueclient.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{89AC0687-FBC2-4F18-8A0C-6EC7835736E0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{54838FAB-4B81-466E-87E5-3E3218D44052}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B9030436-274A-40C5-B3CB-5BE806232749}C:\program files\epic games\subnautica\subserver\nitroxserver.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6805D6A6-E223-4A03-8270-2ADDB1249AAB}C:\program files\epic games\subnautica\subserver\nitroxserver.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{2A1E365B-7C31-4F51-AE58-85E2CB795AE4}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{738BEF3E-B0D6-441A-8816-D68B88D9840D}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.178\deploy\leagueclient.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7A8168B4-DE09-4952-B92E-E50BDC52E749}C:\users\soman\desktop\volcanoids.v1.13.85.0\volcanoids.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{0BB14360-AE99-4017-951B-0AAD0DADE6C5}C:\users\soman\desktop\volcanoids.v1.13.85.0\volcanoids.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0A564126-C4C0-4AEA-84EF-B1D52B40161C}C:\games\viscera_alpha\binaries\win32\udk.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{0E238A6F-7CB2-4729-AE7B-DD5AF5CEC021}C:\games\viscera_alpha\binaries\win32\udk.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C2D83975-359F-4681-89B9-A4DC75CB3623}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E872A739-5530-42B1-A8D1-078172ED487E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0DCA9F75-3167-4265-AB81-5835FA26F6CE}C:\users\soman\desktop\subnautica.zero\subnauticazero\subnauticazero.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6B81F80F-4C88-4A75-8233-EDA771D858AF}C:\users\soman\desktop\subnautica.zero\subnauticazero\subnauticazero.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BA527894-59F1-4F64-9A2A-A8A2208DFB72}C:\program files (x86)\far cry 3 complete collection\far cry 3\bin\farcry3.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4F60038C-971C-4054-AF7F-312E54C1A76A}C:\program files (x86)\far cry 3 complete collection\far cry 3\bin\farcry3.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0DB9C0E1-83AA-4279-BF48-B5C880D5CD46}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7709EE80-D48D-4FF6-9522-46403EDD137D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1DBF11FB-7D49-439D-BA2E-5D99C842C0D3}C:\program files (x86)\far cry 3 complete collection\far cry 3\bin\farcry3_d3d11.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3D38EB20-F605-4FE0-A371-EAF9C3C931D6}C:\program files (x86)\far cry 3 complete collection\far cry 3\bin\farcry3_d3d11.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5754E7FA-7633-4FC0-92EF-E4E172BEB873}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{86C69DEE-61B4-4F69-B21E-45229AF9791F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5C6E3DD0-4DE5-4E49-BD28-F7253D9440DA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AB58FCC8-43FB-4447-8F8B-B2D9D9D65525}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3A92EB32-CC01-42B8-BF86-B8276D5D30C6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CFE2D17B-BE52-4E52-B1E6-20199CCAD15A}" => removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 10772480 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 471031636 B
Java, Flash, Steam htmlcache => 215515133 B
Windows/system/drivers => 33165097 B
Edge => 18016 B
Chrome => 468258366 B
Firefox => 0 B
Opera => 445492145 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 56828 B
LocalService => 0 B
NetworkService => 0 B
NetworkService => 0 B
soman => 44436964 B

RecycleBin => 0 B
EmptyTemp: => 1.6 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 04:03:58 ====

Este urobte nasledovne.

Do poznamkoveho bloku skopirujte obsah dole:



Poznamkovy blok ulozte pod nazvom fixlist.txt do umiestnenia kde je FRST, pricom zvolte Kodovanie na UTF-8 (skopirujte do poznamkoveho bloku -> Subor -> Ulozit ako -> Encoding/Kodovaniee: zvolte UTF-8 -> ulozit).
Spustite FRST a odkliknite tlacidlo: Fix
Vykona sa funkcionalita po ktorej sem vlozte obsah logu: fixlog.txt ulozeneho v umiestneni FRST.

Fix result of Farbar Recovery Scan Tool (x64) Version: 21.04.2019 01
Ran by soman (22-04-2019 04:07:17) Run:2
Running from C:\Users\soman\Desktop\FRST
Loaded Profiles: soman (Available Profiles: soman)
Boot Mode: Normal
==============================================

fixlist content:
*****************
AlternateDataStreams: C:\Users\soman\Data aplikací:00e481b5e22dbe1f649fcddd505d3eb7 [394]
*****************

"C:\Users\soman\Data aplikací" => ":00e481b5e22dbe1f649fcddd505d3eb7" ADS not found.

==== End of Fixlog 04:07:17 ====

Ako je na tom pocitac?