Ran by Libor (2015-12-23 08:18:00)
Running from C:\Users\Libor\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2015-10-30 22:37:51)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-43297863-2672691824-2558519543-500 - Administrator - Disabled)
Guest (S-1-5-21-43297863-2672691824-2558519543-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-43297863-2672691824-2558519543-1004 - Limited - Enabled)
Libor (S-1-5-21-43297863-2672691824-2558519543-1000 - Administrator - Enabled) => C:\Users\Libor
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: ESET Smart Security 8.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 8.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personální firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated)
Adobe Flash Player 20 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 20.0.0.228 - Adobe Systems Incorporated)
Aktualizace NVIDIA 2.5.15.54 (Version: 2.5.15.54 - NVIDIA Corporation) Hidden
BusinessCards MX (HKLM-x32\...\{0D5B5ED2-3E38-4585-B1F3-64B2A9EA95D6}_is1) (Version: 5.0 - MOJOSOFT)
CCleaner (HKLM\...\CCleaner) (Version: 5.13 - Piriform)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd)
Emergency Download Driver (HKLM-x32\...\{3F0F5AB4-C9CE-4226-8393-E9CFF8369D9D}) (Version: 1.1.16.1526 - Microsoft)
EPSON BX635FWD Series Printer Uninstall (HKLM\...\EPSON BX635FWD Series) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
ESET Smart Security (HKLM\...\{4D8E383E-0AB7-482D-9327-BB92D53312B4}) (Version: 8.0.319.1 - ESET, spol s r. o.)
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.14.2 - SCS Software)
GIGABYTE OC_GURU II (HKLM-x32\...\InstallShield_{EA298EC1-2B8F-4DA9-8C5B-BC1FCBBAD72F}) (Version: 1.88.0000 - GIGABYTE Technology Co.,Ltd.)
GIGABYTE OC_GURU II (x32 Version: 1.88.0000 - GIGABYTE Technology Co.,Ltd.) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1168 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 4.0.0.36 - Intel Corporation)
Intel® Chipset Device Software (x32 Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Lumia UEFI Blue Driver (HKLM-x32\...\{9D2A75FE-8CE1-4297-AEC1-A097D47BACE9}) (Version: 1.1.10.1526 - Microsoft)
Malwarebytes Anti-Malware verze 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
ManiaPlanet (HKLM-x32\...\ManiaPlanet_is1) (Version: - Nadeo)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 43.0.1 (x86 cs) (HKLM-x32\...\Mozilla Firefox 43.0.1 (x86 cs)) (Version: 43.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.1 - Mozilla)
Mozilla Thunderbird 38.3.0 (x86 cs) (HKLM-x32\...\Mozilla Thunderbird 38.3.0 (x86 cs)) (Version: 38.3.0 - Mozilla)
NVIDIA GeForce Experience 2.5.15.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.15.54 - NVIDIA Corporation)
NVIDIA Ovladač 3D Vision 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 358.50 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.50 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Opera Stable 34.0.2036.41 (HKLM-x32\...\Opera 34.0.2036.41) (Version: 34.0.2036.41 - Opera Software)
Ovládací panel NVIDIA 358.50 (Version: 358.50 - NVIDIA Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.92.115.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7084 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 4.1.500 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.15.54 - NVIDIA Corporation) Hidden
Ski Challenge 16 (HKU\S-1-5-21-43297863-2672691824-2558519543-1000\...\sc16-GAMETWIST_MAIN) (Version: - )
Ski Challenge 16 (HKU\S-1-5-21-43297863-2672691824-2558519543-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\sc16-GAMETWIST_MAIN) (Version: - )
Skype™ 7.17 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.17.105 - Skype Technologies S.A.)
TmUnitedForever Update 2010-03-15 (HKLM-x32\...\TmUnitedForever_is1) (Version: - Nadeo)
USB Serial Port Driver (HKLM-x32\...\{FE11883D-EA67-473C-BDD1-8D6B6DFCBEAC}) (Version: 1.1.8.1526 - Microsoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WinUsb CoInstallers (HKLM-x32\...\{9755918A-CDF8-4F1E-8453-6359CF1A330A}) (Version: 1.1.12.1526 - Microsoft)
WinUSB Compatible ID Drivers (HKLM-x32\...\{A4A0B236-6046-4CAB-8177-1EAF61112C75}) (Version: 1.1.11.1526 - Microsoft)
WinUSB Drivers ext (HKLM-x32\...\{29BAAF65-09E5-4F52-8D15-2FAF2E23A8DC}) (Version: 1.1.24.1544 - Microsoft)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Restore Points =========================
22-12-2015 20:19:05 End of disinfection
22-12-2015 20:59:13 Removed Skype™ 7.17
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2015-12-22 16:45 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0136F3C9-8D42-4F46-9105-8415FD859A57} - System32\Tasks\{B3E86B91-E798-4117-9D79-03F43AF91F76} => pcalua.exe -a "C:\Users\Libor\Desktop\Call of duty\Setup.EXE" -d "C:\Users\Libor\Desktop\Call of duty"
Task: {1550DB55-CC0C-4A9A-A930-927F5B41EBF3} - System32\Tasks\{18838483-6C95-4E0E-8CC2-55F80783DC84} => C:\Users\Libor\Desktop\Sygic Rupi Convertor\RUPI Convertor.exe
Task: {2AB84AAE-C790-455B-9351-FF2BEB4A0109} - System32\Tasks\{C3E3C64F-A52D-4A77-B721-DF0DD8984E44} => pcalua.exe -a C:\Users\Libor\Downloads\uTorrent221.exe -d C:\Users\Libor\Downloads
Task: {2C20779D-705A-4BB9-A796-BA1CF9484945} - System32\Tasks\{B2D0B7BC-2BAA-4FFA-AA9E-10A44EBB5ED6} => C:\Users\Libor\Desktop\Sygic Rupi Convertor\RUPI Convertor.exe
Task: {3E722C8D-982C-4E7F-B4AD-3C21713EBB19} - System32\Tasks\Opera scheduled Autoupdate 1450770291 => C:\Program Files (x86)\Opera\launcher.exe [2015-12-15] (Opera Software)
Task: {951011FB-2125-4486-BA37-6B4FD807AEE7} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_228_pepper.exe [2015-12-21] (Adobe Systems Incorporated)
Task: {B7B4F6B1-1647-447D-A639-4DBB96196986} - System32\Tasks\{1EAA0F60-20EC-459B-A6EE-914550D6C29C} => C:\Users\Libor\Desktop\Sygic Rupi Convertor\RUPI Convertor.exe
Task: {BF449C7A-E8EA-4FBA-B3B3-5F73B2B15925} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {D8716452-D5C6-4801-844B-E613F9DD78E8} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {D9B45C5C-92F5-4E94-BCE0-7938742C3578} - System32\Tasks\{905D650A-7879-4F0A-8761-C741E9DD1B50} => C:\Users\Libor\Desktop\Sygic Rupi Convertor\RUPI Convertor.exe
Task: {EA738B54-BB07-481B-B609-A5B7A63A70B4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-12-08] (Piriform Ltd)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_228_pepper.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2015-10-31 12:35 - 2015-10-03 03:49 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-12-08 20:25 - 2015-12-08 20:25 - 00047616 _____ () C:\Program Files\CCleaner\lang\lang-1029.dll
2015-09-12 01:01 - 2015-09-12 01:01 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-43297863-2672691824-2558519543-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Libor\AppData\Roaming\Mozilla\Firefox\Pozadí plochy.bmp
HKU\S-1-5-21-43297863-2672691824-2558519543-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Libor\AppData\Roaming\Mozilla\Firefox\Pozadí plochy.bmp
DNS Servers: 10.0.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{78900667-2DC3-45DC-87F2-6C78195C7EC1}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{D08603C1-1DFB-4F82-93BD-7068E48184ED}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{3C12D068-7618-4301-A45C-7E9C8ADE8BBE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{E332AF8D-B207-4C64-8B73-BFC2D899BE6F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{17206DF0-62AE-4044-B173-9D4407D75F22}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{8586D5A8-932D-4CBD-8730-4BB5B076FE2F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7EA402E3-1E04-4292-96A1-27E5B2F66104}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{29A0F9CC-0F86-4D15-8C68-EB0003DAA7B8}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{873C5A87-91B0-41D5-A9BB-C907805D5C85}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{20209758-E7A2-4467-9ED2-8107506B51A4}C:\users\libor\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\libor\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{B38C62DD-9763-4CA2-AA45-A23A4876F094}C:\users\libor\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\libor\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{515A70C4-46EE-43BB-81B1-A132732C6294}] => (Allow) C:\users\libor\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{EA94A0CF-AAC8-4B9D-90EB-E3607C3B8494}] => (Allow) C:\users\libor\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{F8D2B7B3-F1FF-4B10-A382-8DE1437E1835}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{9303E524-EF82-4EB8-9E9C-3DA100D5F206}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{1100B480-4CDC-4E65-8CE9-264AF55C41FA}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/22/2015 08:16:09 PM) (Source: ESENT) (EventID: 485) (User: )
Description: taskhost (1812) WebCacheLocal: Pokus o odstranění složky C:\Users\Libor\AppData\Local\Microsoft\Windows\WebCache\V01.chk se nezdařil. Došlo k systémové chybě 5 (0x00000005): Přístup byl odepřen. . Operace odstranění složky se nezdaří a dojde k chybě -1032 (0xfffffbf8).
Error: (12/22/2015 08:15:59 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (1812) WebCacheLocal: Pokus o otevření souboru C:\Users\Libor\AppData\Local\Microsoft\Windows\WebCache\V01.chk pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 5 (0x00000005): Přístup byl odepřen. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).
Error: (12/22/2015 08:15:33 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (1812) WebCacheLocal: Pokus o otevření souboru C:\Users\Libor\AppData\Local\Microsoft\Windows\WebCache\V01.log pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 5 (0x00000005): Přístup byl odepřen. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).
Error: (12/22/2015 08:15:23 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (1812) WebCacheLocal: Pokus o otevření souboru C:\Users\Libor\AppData\Local\Microsoft\Windows\WebCache\V01.chk pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 5 (0x00000005): Přístup byl odepřen. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).
Error: (12/22/2015 08:15:13 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (1812) WebCacheLocal: Pokus o otevření souboru C:\Users\Libor\AppData\Local\Microsoft\Windows\WebCache\V01.log pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 5 (0x00000005): Přístup byl odepřen. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).
Error: (12/22/2015 08:15:03 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (1812) WebCacheLocal: Pokus o otevření souboru C:\Users\Libor\AppData\Local\Microsoft\Windows\WebCache\V01.chk pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 5 (0x00000005): Přístup byl odepřen. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).
Error: (12/22/2015 08:14:52 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (1812) WebCacheLocal: Pokus o otevření souboru C:\Users\Libor\AppData\Local\Microsoft\Windows\WebCache\V01.log pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 5 (0x00000005): Přístup byl odepřen. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).
Error: (12/22/2015 08:14:42 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (1812) WebCacheLocal: Pokus o otevření souboru C:\Users\Libor\AppData\Local\Microsoft\Windows\WebCache\V01.chk pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 5 (0x00000005): Přístup byl odepřen. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).
Error: (12/22/2015 08:14:32 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (1812) WebCacheLocal: Pokus o otevření souboru C:\Users\Libor\AppData\Local\Microsoft\Windows\WebCache\V01.log pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 5 (0x00000005): Přístup byl odepřen. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).
Error: (12/22/2015 08:14:22 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (1812) WebCacheLocal: Pokus o otevření souboru C:\Users\Libor\AppData\Local\Microsoft\Windows\WebCache\V01.chk pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 5 (0x00000005): Přístup byl odepřen. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).
System errors:
=============
Error: (12/23/2015 08:12:52 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: specifické pro aplikaciMístníSpuštění{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (pomocí LRPC)
Error: (12/23/2015 08:12:30 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
cdrom
Error: (12/23/2015 08:11:32 AM) (Source: Application Popup) (EventID: 56) (User: )
Description: Ovladač ACPI vrátil neplatné číslo ID pro podřízené zařízení (5).
Error: (12/22/2015 04:57:45 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: specifické pro aplikaciMístníSpuštění{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (pomocí LRPC)
Error: (12/22/2015 04:57:03 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
cdrom
Error: (12/22/2015 04:56:27 PM) (Source: Application Popup) (EventID: 56) (User: )
Description: Ovladač ACPI vrátil neplatné číslo ID pro podřízené zařízení (5).
Error: (12/22/2015 04:46:01 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: specifické pro aplikaciMístníSpuštění{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (pomocí LRPC)
Error: (12/22/2015 04:45:10 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
cdrom
Error: (12/22/2015 04:44:42 PM) (Source: Application Popup) (EventID: 56) (User: )
Description: Ovladač ACPI vrátil neplatné číslo ID pro podřízené zařízení (5).
Error: (12/22/2015 04:44:04 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
CodeIntegrity:
===================================
Date: 2015-12-22 16:43:40.365
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-12-22 16:43:40.349
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-12-22 16:43:40.303
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-12-22 16:43:40.287
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-12-22 16:40:02.090
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-12-22 16:40:02.074
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-6400 CPU @ 2.70GHz
Percentage of memory in use: 35%
Total physical RAM: 8135.86 MB
Available physical RAM: 5235.65 MB
Total Virtual: 16269.93 MB
Available Virtual: 13295.63 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:247.82 GB) (Free:145.74 GB) NTFS
Drive d: (Data) (Fixed) (Total:683.59 GB) (Free:364.4 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=247.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=683.6 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================