Ran by Maria (administrator) on FUJISTU (12-05-2016 20:39:59)
Running from C:\Users\Maria\Desktop
Loaded Profiles: Maria (Available Profiles: Maria)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Dropbox, Inc.) C:\Users\Maria\AppData\Local\Dropbox\Update\DropboxUpdate.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Avast Software) C:\Program Files\AVAST Software\SZBrowser\launcher.exe
(Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser_autoupdate.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7391632 2016-05-08] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3547284997-2377262246-1330893799-1001\...\Run: [Google+ Auto Backup] => C:\Users\Maria\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3619096 2014-01-06] (Google Inc.)
HKU\S-1-5-21-3547284997-2377262246-1330893799-1001\...\Run: [Dropbox Update] => C:\Users\Maria\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-16] (Dropbox, Inc.)
HKU\S-1-5-21-3547284997-2377262246-1330893799-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8686296 2016-03-11] (Piriform Ltd)
HKU\S-1-5-21-3547284997-2377262246-1330893799-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-3547284997-2377262246-1330893799-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\SysWOW64\GPhotos.scr [4558848 2014-01-06] (Google Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-05-08] (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{D56428DC-0512-4F6E-836B-BDEEB433A3F0}: [DhcpNameServer] 213.46.172.36 213.46.172.37
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-3547284997-2377262246-1330893799-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-3547284997-2377262246-1330893799-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\S-1-5-21-3547284997-2377262246-1330893799-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=UP97&ocid=UP97DHP
SearchScopes: HKLM-x32 -> DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-3547284997-2377262246-1330893799-1001 -> DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-3547284997-2377262246-1330893799-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3547284997-2377262246-1330893799-1001 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-05-08] (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-04-29] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-12-14] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-05-08] (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-04-29] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-14] (Oracle Corporation)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-04-29] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-04-29] (Microsoft Corporation)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-08] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-08] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-14] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-14] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2013-12-21] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-05-08]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-05-08]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
Chrome:
=======
CHR Profile: C:\Users\Maria\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Maria\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-05-03]
CHR Extension: (Dokumenty Google) - C:\Users\Maria\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-05-03]
CHR Extension: (Disk Google) - C:\Users\Maria\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-03]
CHR Extension: (Rapport) - C:\Users\Maria\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjllphbppobebmjpjcijfbakobcheof [2016-05-03]
CHR Extension: (YouTube) - C:\Users\Maria\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-03]
CHR Extension: (Tabulky Google) - C:\Users\Maria\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-05-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\Maria\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-03]
CHR Extension: (Avast Online Security) - C:\Users\Maria\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-05-08]
CHR Extension: (Skype) - C:\Users\Maria\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-05-08]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Maria\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-03]
CHR Extension: (Gmail) - C:\Users\Maria\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-03]
CHR HKU\S-1-5-21-3547284997-2377262246-1330893799-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bbjllphbppobebmjpjcijfbakobcheof] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-05-08]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-04-29]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [243296 2016-05-08] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-04-29] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-04-29] (Microsoft Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2945312 2016-01-14] (IObit)
R2 RapportMgmtService; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2372080 2016-03-23] (IBM Corp.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-01-07] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2014-01-07] (Microsoft Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-05-08] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-05-08] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-05-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-05-08] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-05-08] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-05-08] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [465792 2016-05-08] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [166432 2016-05-08] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287528 2016-05-08] (AVAST Software)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-05-08] (REALiX(tm))
R3 johci; C:\Windows\System32\DRIVERS\johci.sys [26208 2016-05-08] (JMicron Technology Corp.)
R1 RapportCerberus_1609035; C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_1609035.sys [1156456 2016-04-05] (IBM Corp.)
R1 RapportEI64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [544360 2016-03-23] (IBM Corp.)
R0 RapportHades64; C:\Windows\System32\Drivers\RapportHades64.sys [215560 2016-03-23] (IBM Corp.)
R0 RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [470056 2016-03-23] (IBM Corp.)
R1 RapportPG64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [523432 2016-03-23] (IBM Corp.)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [32936 2016-05-08] (Synaptics Incorporated)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-05-12 20:39 - 2016-05-12 20:41 - 00016306 _____ C:\Users\Maria\Desktop\FRST.txt
2016-05-12 20:39 - 2016-05-12 20:39 - 00000000 ____D C:\FRST
2016-05-12 20:38 - 2016-05-12 20:38 - 02381312 _____ (Farbar) C:\Users\Maria\Desktop\FRST64.exe
2016-05-11 20:01 - 2016-05-11 20:01 - 00000512 _____ C:\Users\Maria\Desktop\MBR.dat
2016-05-11 19:29 - 2016-05-11 19:29 - 00000120 _____ C:\Users\Maria\Desktop\virustotal.txt
2016-05-10 18:29 - 2016-05-10 18:29 - 00002788 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-05-10 18:29 - 2016-05-10 18:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-05-10 18:29 - 2016-05-10 18:29 - 00000000 ____D C:\Program Files\CCleaner
2016-05-09 19:45 - 2016-05-09 19:45 - 01027840 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2016-05-09 19:45 - 2016-05-09 19:45 - 00116304 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2016-05-09 19:45 - 2016-05-09 19:45 - 00082544 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2016-05-09 19:31 - 2016-05-10 18:16 - 00002872 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Maria)
2016-05-08 22:30 - 2016-05-08 22:30 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2016-05-08 22:30 - 2016-05-08 22:30 - 00000000 ____D C:\Program Files\Synaptics
2016-05-08 22:29 - 2016-05-08 22:29 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll
2016-05-08 22:29 - 2016-05-08 22:29 - 00032936 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2016-05-08 22:24 - 2016-05-08 22:24 - 04162560 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys
2016-05-08 22:21 - 2016-05-08 22:21 - 00026208 _____ (JMicron Technology Corp.) C:\Windows\system32\Drivers\johci.sys
2016-05-08 22:15 - 2016-05-08 22:15 - 00027552 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2016-05-08 22:15 - 2016-05-08 22:15 - 00000000 ____D C:\Windows\IObit
2016-05-08 22:13 - 2016-05-10 18:26 - 00000000 ____D C:\ProgramData\ProductData
2016-05-08 22:13 - 2016-05-08 22:14 - 00000000 ____D C:\Users\Maria\AppData\Roaming\ProductData
2016-05-08 22:13 - 2016-05-08 22:14 - 00000000 ____D C:\Users\Maria\AppData\LocalLow\IObit
2016-05-08 22:13 - 2016-05-08 22:13 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled
2016-05-08 22:13 - 2016-05-08 22:13 - 00000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
2016-05-08 22:12 - 2016-05-10 18:26 - 00000000 ____D C:\Program Files (x86)\IObit
2016-05-08 22:12 - 2016-05-08 22:32 - 00000000 ____D C:\ProgramData\IObit
2016-05-08 22:12 - 2016-05-08 22:15 - 00000000 ____D C:\Users\Maria\AppData\Roaming\IObit
2016-05-08 22:11 - 2016-05-08 22:11 - 00000000 ____D C:\Users\Maria\Downloads\AdvancedSystemCare
2016-05-08 22:09 - 2016-05-08 22:10 - 42260167 _____ C:\Users\Maria\Downloads\AdvancedSystemCare.zip
2016-05-08 22:02 - 2016-05-11 19:19 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2016-05-08 22:02 - 2016-05-08 22:02 - 00001011 _____ C:\Users\Maria\Desktop\SpeedFan.lnk
2016-05-08 22:02 - 2016-05-08 22:02 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2016-05-08 22:02 - 2016-05-08 22:02 - 00000000 ____D C:\Users\Maria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2016-05-08 22:02 - 2016-05-08 22:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan
2016-05-08 22:01 - 2016-05-08 22:01 - 02174848 _____ C:\Users\Maria\Downloads\instsf450.exe
2016-05-08 20:37 - 2016-05-12 20:32 - 00000000 ____D C:\Qoobox
2016-05-08 20:36 - 2016-05-10 19:22 - 00000000 ____D C:\Windows\erdnt
2016-05-08 14:08 - 2016-05-08 14:08 - 00003536 ____N C:\bootsqm.dat
2016-05-08 11:45 - 2016-05-08 12:16 - 00007597 _____ C:\Users\Maria\AppData\Local\Resmon.ResmonCfg
2016-05-08 11:39 - 2016-05-08 11:38 - 00398152 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-05-08 11:38 - 2016-05-08 11:38 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-05-03 22:45 - 2016-05-03 22:45 - 00000000 ____D C:\Users\Maria\AppData\Local\VirtualStore
2016-05-02 23:59 - 2016-05-02 23:59 - 00008321 _____ C:\Users\Maria\Desktop\zoek-results.txt
2016-05-02 23:55 - 2016-05-02 22:50 - 00024064 _____ C:\Windows\zoek-delete.exe
2016-05-02 22:50 - 2016-05-02 23:56 - 00000000 ____D C:\zoek_backup
2016-05-02 22:49 - 2016-05-02 22:49 - 01309184 _____ C:\Users\Maria\Desktop\zoek.exe
2016-05-02 22:47 - 2016-05-02 22:47 - 00003480 _____ C:\Users\Maria\Desktop\rog_2.txt
2016-05-01 18:02 - 2016-05-01 18:02 - 00003294 _____ C:\Users\Maria\Desktop\rog.txt
2016-05-01 17:11 - 2016-05-03 22:46 - 00028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
2016-05-01 17:10 - 2016-05-01 18:05 - 00000000 ____D C:\ProgramData\RogueKiller
2016-05-01 17:09 - 2016-05-01 17:09 - 24004168 _____ C:\Users\Maria\Desktop\RogueKillerX64.exe
2016-05-01 17:02 - 2016-05-01 17:02 - 00003734 _____ C:\Users\Maria\Desktop\JRT.txt
2016-05-01 16:41 - 2016-05-01 16:41 - 01610816 _____ (Malwarebytes) C:\Users\Maria\Desktop\JRT.exe
2016-05-01 16:39 - 2016-05-01 16:40 - 03615296 _____ C:\Users\Maria\Desktop\adwcleaner_5.115.exe
2016-05-01 13:42 - 2016-05-01 16:48 - 00000000 ____D C:\AdwCleaner
2016-05-01 13:38 - 2016-05-01 13:38 - 22851472 _____ (Malwarebytes ) C:\Users\Maria\Desktop\mbam-setup-2.2.1.1043.exe
2016-05-01 13:35 - 2016-05-01 13:35 - 03581504 _____ C:\Users\Maria\Downloads\D14A.tmp
2016-05-01 13:01 - 2016-05-01 13:01 - 00448512 _____ (OldTimer Tools) C:\Users\Maria\Desktop\TFC.exe
2016-04-30 16:38 - 2016-04-30 16:38 - 00388608 _____ (Trend Micro Inc.) C:\Users\Maria\Desktop\HijackThis.exe
2016-04-30 15:55 - 2016-05-01 14:01 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-04-30 15:54 - 2016-05-01 13:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-04-30 15:54 - 2016-05-01 13:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-04-30 15:54 - 2016-04-30 15:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-04-30 15:54 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-04-30 15:54 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-04-30 15:54 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-04-30 15:52 - 2016-04-30 15:52 - 30364872 _____ C:\Users\Maria\Desktop\mbam-setup-2.2.0.1024.exe
2016-04-30 15:33 - 2016-04-30 15:33 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-04-30 15:33 - 2016-04-30 15:33 - 00410624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
2016-04-30 15:33 - 2016-04-30 15:33 - 00113543 _____ C:\Windows\SysWOW64\slmgr.vbs
2016-04-30 15:33 - 2016-04-30 15:33 - 00002048 _____ C:\Windows\SysWOW64\winver.exe
2016-04-30 15:33 - 2016-04-30 15:33 - 00001536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcomapi.dll
2016-04-30 15:08 - 2016-05-12 20:33 - 00001184 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-30 15:08 - 2016-05-12 20:33 - 00001184 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-20 19:46 - 2016-04-20 19:47 - 00000000 ____D C:\Users\Maria\Desktop\narozeniny
2016-04-17 13:54 - 2016-04-17 13:55 - 00592048 _____ (ALTAP) C:\Users\Maria\Downloads\Vyhledavac_certifikatu.exe
2016-04-17 10:31 - 2016-04-17 10:31 - 00000000 ____D C:\Users\Maria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-04-17 10:03 - 2016-04-17 10:03 - 00000000 ____D C:\$SysReset
2016-04-17 10:00 - 2016-04-17 10:01 - 06868672 _____ (Piriform Ltd) C:\Users\Maria\Desktop\ccsetup516.exe
2016-04-15 15:43 - 2016-04-15 15:43 - 00008192 _____ C:\Windows\system32\config\userdiff
2016-04-15 13:18 - 2016-04-17 10:19 - 00000000 ____D C:\$WINDOWS.~BT
2016-04-15 13:18 - 2016-04-15 15:19 - 00010449 _____ C:\Windows\diagerr.xml
2016-04-15 13:18 - 2016-04-15 15:19 - 00009528 _____ C:\Windows\diagwrn.xml
2016-04-15 13:05 - 2016-04-15 13:05 - 00000000 ____D C:\ESD
2016-04-15 12:23 - 2016-04-15 12:23 - 00000000 ____D C:\$Windows.~WS
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-05-12 20:34 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-12 20:24 - 2014-02-17 19:34 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-05-10 19:28 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2016-05-10 19:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-05-08 22:24 - 2014-09-15 19:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eFotokniha
2016-05-08 22:24 - 2014-02-17 18:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Genius Professional Edition
2016-05-08 22:23 - 2014-02-17 17:41 - 00000000 ____D C:\Windows\Panther
2016-05-08 11:54 - 2016-03-15 11:26 - 00003888 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1458033979
2016-05-08 11:38 - 2014-04-17 20:13 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-05-08 11:38 - 2014-02-17 19:34 - 00465792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2016-05-08 11:38 - 2014-02-17 19:34 - 00287528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2016-05-08 11:38 - 2014-02-17 19:34 - 00166432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-05-08 11:38 - 2014-02-17 19:34 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-05-08 11:38 - 2014-02-17 19:34 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-05-08 11:38 - 2014-02-17 19:33 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-05-08 11:37 - 2016-03-15 11:20 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-05-08 11:37 - 2014-02-17 19:34 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-05-08 11:29 - 2014-02-18 21:25 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-05-01 16:42 - 2014-02-18 21:25 - 00000000 ____D C:\Users\Maria\AppData\Roaming\Skype
2016-04-30 14:58 - 2011-04-12 10:34 - 00631292 _____ C:\Windows\system32\perfh005.dat
2016-04-30 14:58 - 2011-04-12 10:34 - 00121914 _____ C:\Windows\system32\perfc005.dat
2016-04-30 14:58 - 2009-07-14 07:13 - 01470062 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-30 10:04 - 2015-06-16 11:25 - 00000918 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3547284997-2377262246-1330893799-1001UA.job
2016-04-30 10:04 - 2015-02-09 12:04 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-04-30 10:04 - 2014-02-18 11:11 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-04-30 10:04 - 2014-02-18 11:11 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-04-29 14:01 - 2014-02-18 11:12 - 00002195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-04-29 14:01 - 2014-02-18 11:12 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-04-25 19:05 - 2015-06-16 11:24 - 00000866 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3547284997-2377262246-1330893799-1001Core.job
2016-04-25 11:20 - 2014-02-18 22:04 - 00000000 ___RD C:\Users\Maria\Dropbox
2016-04-22 19:53 - 2014-02-26 17:22 - 00000000 ____D C:\Users\Maria\Documents\RECEPTY
2016-04-18 16:42 - 2014-10-14 15:08 - 00000000 ____D C:\Users\Maria\Desktop\Vstupenky
2016-04-17 11:09 - 2016-01-12 17:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ochrana koncového bodu Trusteer
2016-04-17 11:09 - 2016-01-05 13:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-04-17 11:09 - 2015-07-09 22:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rajče
2016-04-17 11:09 - 2015-06-24 22:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CEWE FOTOSVET
2016-04-17 11:09 - 2014-04-17 20:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-04-17 11:09 - 2014-02-18 21:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2016-04-17 11:09 - 2014-02-18 07:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2016-04-17 11:09 - 2014-02-18 07:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-04-17 11:09 - 2014-02-18 07:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-04-17 11:09 - 2014-02-17 18:55 - 00000000 ____D C:\Windows\SysWOW64\SDA
2016-04-17 11:09 - 2014-02-17 17:55 - 00000000 ____D C:\Users\Maria
2016-04-17 11:09 - 2011-04-12 10:45 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-04-17 11:09 - 2011-04-12 10:45 - 00000000 ____D C:\Windows\ShellNew
2016-04-17 11:09 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Media
2016-04-17 11:09 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\LiveKernelReports
2016-04-17 11:09 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-04-17 11:08 - 2015-12-04 10:18 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-04-17 11:08 - 2014-02-18 21:40 - 00000000 ____D C:\Users\Maria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2016-04-17 11:08 - 2014-02-18 07:30 - 00000000 ____D C:\Users\Maria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-04-17 11:03 - 2015-12-18 18:19 - 00000000 ____D C:\Windows\Minidump
2016-04-17 10:44 - 2014-11-25 16:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2016-04-17 10:44 - 2014-11-25 16:29 - 00000000 ____D C:\Program Files (x86)\TomTom HOME 2
2016-04-17 10:40 - 2014-11-25 16:26 - 00000000 ____D C:\Users\Maria\AppData\Local\Downloaded Installations
2016-04-17 10:39 - 2015-06-16 11:24 - 00000000 ____D C:\Users\Maria\AppData\Local\Dropbox
2016-04-17 10:31 - 2014-02-18 21:58 - 00000000 ____D C:\Users\Maria\AppData\Roaming\Dropbox
2016-04-17 10:19 - 2009-07-14 07:08 - 00032624 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-04-15 19:31 - 2014-04-17 20:19 - 06123992 _____ (TeamViewer GmbH) C:\Users\Maria\Desktop\TeamViewer_Setup_cs.exe
2016-04-15 15:18 - 2015-02-09 12:04 - 00003962 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-04-15 15:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Registration
2016-04-15 15:17 - 2015-06-16 11:25 - 00003998 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3547284997-2377262246-1330893799-1001UA
2016-04-15 15:17 - 2015-06-16 11:25 - 00003602 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3547284997-2377262246-1330893799-1001Core
2016-04-15 15:17 - 2015-05-20 00:10 - 00003264 _____ C:\Windows\System32\Tasks\{B4C1607A-B083-4220-8775-6FBBB0A5F302}
2016-04-15 15:17 - 2014-04-12 10:55 - 00004076 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{33622483-0F34-46C3-8731-FD25CD8F2C61}
2016-04-15 15:17 - 2014-02-18 11:11 - 00004058 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-04-15 15:17 - 2014-02-18 11:11 - 00003806 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-04-15 15:17 - 2014-02-18 08:48 - 00003644 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask
2016-04-15 12:22 - 2014-07-09 10:36 - 00000000 ____D C:\Users\Maria\Documents\výpisy KB 2014
==================== Files in the root of some directories =======
2014-02-22 13:39 - 2014-02-26 17:25 - 0311414 _____ () C:\Users\Maria\AppData\Roaming\UserTile.png
2016-05-08 11:45 - 2016-05-08 12:16 - 0007597 _____ () C:\Users\Maria\AppData\Local\Resmon.ResmonCfg
2014-02-17 18:59 - 2014-02-17 18:59 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Some files in TEMP:
====================
C:\Users\Maria\AppData\Local\Temp\sfamcc00001.dll
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll
[2014-01-07 09:44] - [2014-01-07 09:44] - 1008640 ____A (Microsoft Corporation) E573BD9AB55C8E333C202B9E255F972E
C:\Windows\SysWOW64\User32.dll
[2016-04-30 15:33] - [2016-04-30 15:33] - 0833024 ____A (Microsoft Corporation) 2C9CC9F492CA596B1B9FC1AE5E916356
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-05-08 14:46
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version:09-05-2016
Ran by Maria (2016-05-12 20:41:54)
Running from C:\Users\Maria\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2014-02-17 15:55:02)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-3547284997-2377262246-1330893799-500 - Administrator - Disabled)
Guest (S-1-5-21-3547284997-2377262246-1330893799-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-3547284997-2377262246-1330893799-1004 - Limited - Enabled)
Maria (S-1-5-21-3547284997-2377262246-1330893799-1001 - Administrator - Enabled) => C:\Users\Maria
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.213 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Ashampoo Burning Studio 6 FREE v.6.84 (HKLM-x32\...\{91B33C97-3ED1-03EA-A67B-244AA4D7B559}_is1) (Version: 6.8.4 - Ashampoo GmbH & Co. KG)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.2.2262 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.16 - Piriform)
CEWE FOTOSVET (HKLM-x32\...\CEWE FOTOSVET) (Version: 5.1.8 - CEWE Stiftung u Co. KGaA)
Dropbox (HKU\S-1-5-21-3547284997-2377262246-1330893799-1001\...\Dropbox) (Version: 3.18.1 - Dropbox, Inc.)
eFOTO_AlbumMaker (HKLM-x32\...\eFotokniha_eFOTO_AlbumMaker) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.94 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.76.1 - JMicron Technology Corp.)
K-Lite Mega Codec Pack 10.2.0 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.2.0 - )
Malwarebytes Anti-Malware verze 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile CSY Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile CSY Language Pack) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Ochrana koncového bodu Trusteer (HKLM-x32\...\Rapport_msi) (Version: 3.5.1609.47 - Trusteer)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Rajče průvodce verze 1.59.54.269 (HKLM-x32\...\rajce.net_is1) (Version: - rajce.net)
Rapport (x32 Version: 3.5.1609.47 - Trusteer) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
SafeZone Stable 1.48.2066.101 (x32 Version: 1.48.2066.101 - Avast Software) Hidden
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.15045.4 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.3.15045.4 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15041.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.15041.2 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.1.0.9134 - Microsoft Corporation)
Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.112 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
TomTom HOME (HKLM-x32\...\{5DCB2EB3-87AD-426E-8D74-8B92C9D731C4}) (Version: 2.9.8 - Název společnosti:)
TomTom HOME (HKLM-x32\...\{7A2BB1C8-903D-4585-9F3B-CADD67D07D37}) (Version: 2.9.8 - Název společnosti:)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
WinRAR 5.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-3547284997-2377262246-1330893799-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Maria\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3547284997-2377262246-1330893799-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3547284997-2377262246-1330893799-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3547284997-2377262246-1330893799-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3547284997-2377262246-1330893799-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3547284997-2377262246-1330893799-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3547284997-2377262246-1330893799-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3547284997-2377262246-1330893799-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3547284997-2377262246-1330893799-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3547284997-2377262246-1330893799-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3547284997-2377262246-1330893799-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Maria\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {06E96ACF-D8A4-404C-85F1-7648BCA5F88A} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3547284997-2377262246-1330893799-1001Core => C:\Users\Maria\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.)
Task: {2A9CD7E8-C79C-4A88-81F2-C5DFCEA9E1CC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {2F57269B-1E09-4E2D-AB1E-B0FDAC7D279C} - \Microsoft\Windows\WindowsBackup\ConfigNotification -> No File <==== ATTENTION
Task: {3837A30B-4BFB-4149-9271-D38471D7DEA7} - System32\Tasks\Driver Booster SkipUAC (Maria) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {3E236A40-FFF9-4BBC-A9C8-669632D90E87} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline -> No File <==== ATTENTION
Task: {6948FAD7-49EE-4374-872D-3C1FD1A9F0C6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {6C123B62-BDB5-497B-B2B6-A137EF2D285D} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask -> No File <==== ATTENTION
Task: {73767C14-E451-4E04-A614-251ED1D91BE6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-03-11] (Piriform Ltd)
Task: {90FB464D-6958-469B-A124-FAD5EA95E128} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-05-08] (AVAST Software)
Task: {AAD2F777-A87F-44F2-BC48-C604C7F70F3B} - System32\Tasks\{B4C1607A-B083-4220-8775-6FBBB0A5F302} => Chrome.exe hxxp://ui.skype.com/ui/0/6.18.0.106/cs/ ... age=tsMain
Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - \Microsoft\Windows\Application Experience\AitAgent -> No File <==== ATTENTION
Task: {AEF04216-5F27-46ED-9671-C8B1B33341C0} - System32\Tasks\SafeZone scheduled Autoupdate 1458033979 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-04-15] (Avast Software)
Task: {CEE64558-E1A7-4D9D-80A7-2001912BE5B5} - \Microsoft\Windows\MemoryDiagnostic\CorruptionDetector -> No File <==== ATTENTION
Task: {D74B7D3D-7D55-4CAC-8D56-EC5323623588} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-03-06] (AVAST Software)
Task: {EA8482F5-2760-45B2-A188-957B29939C82} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3547284997-2377262246-1330893799-1001UA => C:\Users\Maria\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.)
Task: {F39FFF15-0EBE-48EB-BC20-8743590382B8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-08] (Adobe Systems Incorporated)
Task: {FA2BC0A6-8D4B-458A-85C8-2B8C72487513} - \Microsoft\Windows\MemoryDiagnostic\DecompressionFailureDetector -> No File <==== ATTENTION
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3547284997-2377262246-1330893799-1001Core.job => C:\Users\Maria\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3547284997-2377262246-1330893799-1001UA.job => C:\Users\Maria\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2016-05-08 11:38 - 2016-05-08 11:38 - 00123344 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2016-05-08 11:38 - 2016-05-08 11:38 - 00135816 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-05-12 20:27 - 2016-05-12 20:27 - 02905088 _____ () C:\Program Files\AVAST Software\Avast\defs\16051201\algo.dll
2016-05-08 11:38 - 2016-05-08 11:38 - 00479680 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2015-06-02 14:51 - 2015-06-02 14:51 - 00545792 _____ () C:\Program Files (x86)\Trusteer\Rapport\bin\js32.dll
2016-03-15 11:19 - 2016-03-15 11:19 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2016-05-10 19:27 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3547284997-2377262246-1330893799-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 213.46.172.36 - 213.46.172.37
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is disabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" -s
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{91DB61CC-49F5-40B7-8214-361FEE33E3C9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{130ABB6A-F38D-4BC3-82D6-D06CDEF4EBF4}] => (Allow) C:\Users\Maria\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{2CDCA0B0-E99F-4158-B2A5-3CA3631F0D7E}] => (Allow) C:\Users\Maria\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{A682EC35-381D-47BE-8DE7-DD8792FEA98D}C:\users\maria\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\maria\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{80F415ED-C872-4882-B919-C54A76ED0940}C:\users\maria\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\maria\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{49417B69-A821-456C-94F8-6F135F1032A4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Restore Points =========================
24-04-2016 17:03:10 Naplánovaný kontrolní bod
01-05-2016 16:54:19 JRT Pre-Junkware Removal
02-05-2016 22:52:36 zoek.exe restore point
08-05-2016 20:38:49 ComboFix created restore point
08-05-2016 22:19:51 Driver Booster : Hostitelský řadič pro rozhraní OHCI standardu 1394
10-05-2016 18:57:42 ComboFix created restore point
==================== Faulty Device Manager Devices =============
Name: Periferní zařízení Bluetooth
Description: Periferní zařízení Bluetooth
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Periferní zařízení Bluetooth
Description: Periferní zařízení Bluetooth
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Periferní zařízení Bluetooth
Description: Periferní zařízení Bluetooth
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Periferní zařízení Bluetooth
Description: Periferní zařízení Bluetooth
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (05/12/2016 08:34:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/12/2016 08:34:26 PM) (Source: Winlogon) (EventID: 4103) (User: )
Description: Aktivace licence systému Windows se nezdařila. Chyba 0x00000000.
Error: (05/12/2016 08:34:25 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
0x800401F9
Error: (05/12/2016 08:29:02 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.Windows.Common-Controls,language="*",processorArchitecture="*",publicKeyToken="436865772d574741",type="win32",version="6.0.0.0"1 se nezdařilo.
Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="*",publicKeyToken="436865772d574741",type="win32",version="6.0.0.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.
Error: (05/12/2016 08:23:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/12/2016 08:22:07 PM) (Source: Winlogon) (EventID: 4103) (User: )
Description: Aktivace licence systému Windows se nezdařila. Chyba 0x00000000.
Error: (05/12/2016 08:22:07 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
0x800401F9
Error: (05/11/2016 07:17:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/11/2016 07:17:15 PM) (Source: Winlogon) (EventID: 4103) (User: )
Description: Aktivace licence systému Windows se nezdařila. Chyba 0x00000000.
Error: (05/11/2016 07:17:15 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
0x800401F9
System errors:
=============
Error: (05/10/2016 07:23:14 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (05/10/2016 07:22:51 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (05/10/2016 07:13:08 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (05/10/2016 07:02:01 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Načtení \??\C:\ComboFix\catchme.sys bylo zablokováno kvůli nekompatibilitě s tímto systémem. Požádejte dodavatele softwaru
o kompatibilní verzi ovladače.
Error: (05/10/2016 07:02:00 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Načtení \??\C:\ComboFix\catchme.sys bylo zablokováno kvůli nekompatibilitě s tímto systémem. Požádejte dodavatele softwaru
o kompatibilní verzi ovladače.
Error: (05/10/2016 06:24:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Advanced SystemCare Service 9 byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (05/09/2016 07:29:57 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Sdílení připojení k Internetu (ICS) přestala během spouštění reagovat.
Error: (05/08/2016 10:12:59 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba Advanced SystemCare Service 9 je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (05/08/2016 09:34:15 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Error: (05/08/2016 09:05:05 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
CodeIntegrity:
===================================
Date: 2016-05-12 20:34:22.436
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-12 20:32:27.890
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-12 20:22:03.671
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-11 20:01:25.299
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-11 19:30:06.340
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-11 19:17:11.966
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-10 19:36:19.523
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-10 19:26:16.624
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-10 19:23:39.050
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-10 19:02:01.252
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz
Percentage of memory in use: 51%
Total physical RAM: 2008.88 MB
Available physical RAM: 968.31 MB
Total Virtual: 4017.77 MB
Available Virtual: 2690.45 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:232.79 GB) (Free:75.38 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or
(Size: 232.9 GB) (Disk ID: 095D095C)Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
