﻿Additional scan result of Farbar Recovery Scan Tool (x86) Version: 21-08-2016 01
Ran by Irenka (22-08-2016 18:46:19)
Running from C:\Users\Irenka\Desktop\Údržba
Microsoft Windows 10 Home Version 1511 (X86) (2016-06-04 19:47:56)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1981223713-1059048341-3812277411-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1981223713-1059048341-3812277411-503 - Limited - Disabled)
Guest (S-1-5-21-1981223713-1059048341-3812277411-501 - Limited - Disabled)
Irenka (S-1-5-21-1981223713-1059048341-3812277411-1001 - Administrator - Enabled) => C:\Users\Irenka

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\uTorrent) (Version: 3.4.8.42445 - BitTorrent Inc.)
Adobe Flash Player 22 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
ATK Package (HKLM\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0039 - ASUS)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.93.103.20 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.19 - Piriform)
Device Setup (HKLM\...\{8D6B05E0-F457-408C-9D13-549334D8FAE1}) (Version: 2.0.2 - ASUSTek Computer Inc.)
Intel(R) Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4358 - Intel Corporation)
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1064 - Intel Corporation)
IObit Uninstaller (HKLM\...\IObitUninstall) (Version: 5.4.0.119 - IObit)
KQEMU virtualisation module for QEMU (HKLM\...\KQEMU) (Version:  - )
LibreOffice 5.1.4.2 (HKLM\...\{D5D4AC5C-C757-4EB2-857C-B021DB22482C}) (Version: 5.1.4.2 - The Document Foundation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Preview Redistributable (x86) - 12.0.20617 (HKLM\...\{1f407217-9aec-4146-8504-e64ac959c534}) (Version: 12.0.20617.1 - Microsoft Corporation)
Mozilla Firefox 48.0 (x86 cs) (HKLM\...\Mozilla Firefox 48.0 (x86 cs)) (Version: 48.0 - Mozilla)
Realtek I2S Audio (HKLM\...\{89A448AA-3301-46AA-AFC3-34F2D7C670E8}) (Version: 6.4.10147.4290 - Realtek Semiconductor Corp.)
SpywareBlaster 5.5 (HKLM\...\SpywareBlaster_is1) (Version: 5.5.0 - BrightFort LLC)
SumatraPDF (HKLM\...\SumatraPDF) (Version: 3.1.1 - Krzysztof Kowalczyk)
Telegram Desktop version 0.10.1 (HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 0.10.1 - Telegram Messenger LLP)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
WinFlash (HKLM\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.0.1 - ASUS)
WinRAR 5.31 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001_Classes\CLSID\{55808EA8-81FE-43c6-AAE8-1D8149F941D3}\InprocServer32 -> C:\Program Files\SumatraPDF\PdfFilter.dll ()
CustomCLSID: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {08BF064B-8159-45D3-B656-3F28ECC48DE6} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files\ASUS\APRP\aprp.exe [2015-05-14] (ASUSTek Computer Inc.)
Task: {17D1BA24-5137-4924-8B68-B5450988A5A3} - System32\Tasks\Uninstaller_SkipUac_Irenka => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe [2016-06-01] (IObit)
Task: {1EDC1285-19CB-4825-8E71-69FD8B6081B2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-15] (Adobe Systems Incorporated)
Task: {2B6A836B-76B6-4795-9472-9892A113F8AC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-10] (Piriform Ltd)
Task: {2D0C8716-A3CF-4D23-AE35-EBAB38C4901F} - System32\Tasks\Microsoft\Office\Microsoft Office Touchless Attach Notification => C:\Program Files\Microsoft Office\Office15\FirstRun.exe
Task: {63F1E113-80BE-4C40-A7FE-65DD8E98C106} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-03-10] (ASUSTek Computer Inc.)
Task: {CBA37E54-D052-4B16-BB9A-2D0E49015535} - System32\Tasks\ATK Package A22126881260 => C:\Program Files\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-03-10] (ASUSTek Computer Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Irenka.job => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-10-30 07:44 - 2015-10-30 07:44 - 00149504 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-07-16 21:27 - 2016-07-01 06:38 - 01862008 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-07-16 21:27 - 2016-07-01 06:38 - 01862008 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-06-04 21:53 - 2016-06-04 21:56 - 00679624 _____ () C:\Users\Irenka\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\ClientTelemetry.dll
2016-04-27 06:12 - 2016-04-27 06:12 - 00070656 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-07-16 21:27 - 2016-07-01 05:31 - 00316416 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-07-16 21:27 - 2016-07-01 05:32 - 00428032 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\MtcUvc.dll
2016-07-16 21:28 - 2016-07-01 05:13 - 05340160 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-07-16 21:28 - 2016-07-01 05:08 - 00471552 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-07-16 21:28 - 2016-07-01 05:08 - 02366976 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-07-16 21:28 - 2016-07-01 05:11 - 02656768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 [125]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2ce.sys => ""="Driver"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

There are 7913 more sites.

IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\1-2005-search.com -> www.1-2005-search.com

There are 12730 more sites.


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-07-10 10:28 - 2016-08-09 17:10 - 00453216 ____R C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	1000gratisproben.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	1001namen.com
127.0.0.1	www.1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	123fporn.info
127.0.0.1	www.123fporn.info
127.0.0.1	123haustiereundmehr.com
127.0.0.1	www.123haustiereundmehr.com
127.0.0.1	123moviedownload.com
127.0.0.1	www.123moviedownload.com

There are 15552 more lines.


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Irenka\AppData\Roaming\Mozilla\Firefox\Pozadí plochy.bmp
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: LiveUpdateSvc => 2
HKLM\...\StartupApproved\Run: => "RtkNGUI"
HKU\S-1-5-21-1981223713-1059048341-3812277411-1001\...\StartupApproved\Run: => "CCleaner Monitoring"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{C8B35BD0-E423-48B5-8A62-C877F6F6C943}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{E6E82A54-1813-41B3-A589-0468A7086673}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{6475CC44-B8A8-465C-85E3-BAD5E9AF0221}C:\windows\explorer.exe] => (Allow) C:\windows\explorer.exe
FirewallRules: [UDP Query User{C56050AD-BFDA-4E5F-BCE9-B688B920996F}C:\windows\explorer.exe] => (Allow) C:\windows\explorer.exe
FirewallRules: [{3800B1FF-145B-4396-8E1A-BFD305FAAAD8}] => (Allow) C:\Users\Irenka\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{C6716AE2-402F-4B49-B1CA-6278ADE38EE5}] => (Allow) C:\Users\Irenka\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{CA1F9397-F9AC-4EEF-A7DB-2554AD7576B9}] => (Allow) C:\Users\Irenka\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0FD4B486-7447-4322-AD6A-5A45E53758D2}] => (Allow) C:\Users\Irenka\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{8E97E8F1-B34B-4C27-95A8-0516629C58D9}] => (Allow) C:\Users\Irenka\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{4174B36A-2252-48B3-B346-F061F36CF058}] => (Allow) C:\Users\Irenka\AppData\Roaming\uTorrent\uTorrent.exe

==================== Restore Points =========================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (08/22/2016 04:39:10 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-98M71L9)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}DESKTOP-98M71L9IrenkaS-1-5-21-1981223713-1059048341-3812277411-1001LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (08/22/2016 02:19:08 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-98M71L9)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}DESKTOP-98M71L9IrenkaS-1-5-21-1981223713-1059048341-3812277411-1001LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (08/22/2016 02:19:08 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-98M71L9)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}DESKTOP-98M71L9IrenkaS-1-5-21-1981223713-1059048341-3812277411-1001LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (08/22/2016 12:33:59 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-98M71L9)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}DESKTOP-98M71L9IrenkaS-1-5-21-1981223713-1059048341-3812277411-1001LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (08/22/2016 12:33:59 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-98M71L9)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}DESKTOP-98M71L9IrenkaS-1-5-21-1981223713-1059048341-3812277411-1001LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (08/22/2016 11:33:59 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-98M71L9)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}DESKTOP-98M71L9IrenkaS-1-5-21-1981223713-1059048341-3812277411-1001LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (08/22/2016 11:33:59 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-98M71L9)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}DESKTOP-98M71L9IrenkaS-1-5-21-1981223713-1059048341-3812277411-1001LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (08/22/2016 10:12:21 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-98M71L9)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}DESKTOP-98M71L9IrenkaS-1-5-21-1981223713-1059048341-3812277411-1001LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (08/22/2016 10:12:21 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-98M71L9)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}DESKTOP-98M71L9IrenkaS-1-5-21-1981223713-1059048341-3812277411-1001LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (08/22/2016 09:26:09 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-98M71L9)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}DESKTOP-98M71L9IrenkaS-1-5-21-1981223713-1059048341-3812277411-1001LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742


CodeIntegrity:
===================================
  Date: 2016-08-12 21:52:26.677
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-08-11 06:06:18.000
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-08-06 23:05:00.390
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-08-06 23:01:09.275
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-08-06 22:20:31.347
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\kqemu.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-07-28 13:16:08.043
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\kqemu.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-07-28 12:58:55.780
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\kqemu.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-07-17 18:34:37.189
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-17 03:43:09.927
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-17 03:32:43.247
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info =========================== 

Processor: Intel(R) Atom(TM) CPU Z3735F @ 1.33GHz
Percentage of memory in use: 59%
Total physical RAM: 1976.89 MB
Available physical RAM: 810.4 MB
Total Virtual: 2680.89 MB
Available Virtual: 1192.23 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:28.37 GB) (Free:9.14 GB) NTFS ==>[system with boot components (obtained from drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 29.1 GB) (Disk ID: 2C131267)

Partition: GPT.

==================== End of Addition.txt ============================