kontrola notebooku

Zpráva

#16 Příspěvek od **altrok** » 29 zář 2015 13:43

Ulozte na plochu MiniToolBox - http://www.bleepingcomputer.com/downloa ... box/dl/65/

souhlaste klikem na Yes
zatrhnete pouze
- Flush DNS
- Report IE Proxy Settings
- Report FF Proxy Settings
- List content of Hosts
- List IP Configuration
- List Winsock Entries
- List last 10 Event Viewer Errors
- List Devices
- List Users, Partitions and Memory size
- List Minidump Files
kliknete na GO
obsah prave otevreneho souboru vlozte do pristi odpovedi

5manager5 · #17 Příspěvek od **5manager5** » 29 zář 2015 16:11

MiniToolBox by Farbar Version: 25-07-2015 01
Ran by saul (administrator) on 29-09-2015 at 17:10:07
Running from "C:\Users\saul\Desktop"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Model: Satellite L650 Manufacturer: TOSHIBA
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

========================= FF Proxy Settings: ==============================

========================= Hosts content: =================================

127.0.0.1 localhost

========================= IP Configuration: ================================

Realtek RTL8191SE Wireless LAN 802.11n PCI-E NIC = Pripojenie bezdrôtovej siete (Connected)
Atheros AR8152 PCI-E Fast Ethernet Controller = Lokálne pripojenie (Media disconnected)

# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled

popd
# End of IPv4 configuration

Windows IP Configuration

Host Name . . . . . . . . . . . . : saul-TOSH
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Wireless LAN adapter Pripojenie bezdr�tovej siete:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8191SE Wireless LAN 802.11n PCI-E NIC
Physical Address. . . . . . . . . : 70-F1-A1-92-E2-8B
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::c6b:8859:901:8827%12(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.34(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 29. septembra 2015 16:30:42
Lease Expires . . . . . . . . . . : 2. okt�bra 2015 16:30:44
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DHCPv6 IAID . . . . . . . . . . . : 426832289
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-13-A4-4B-A9-00-26-6C-53-24-D3
DNS Servers . . . . . . . . . . . : 195.146.128.62
195.146.132.58
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Lok�lne pripojenie:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Atheros AR8152 PCI-E Fast Ethernet Controller
Physical Address. . . . . . . . . : 00-26-6C-53-24-D3
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{19E5133B-668F-4AF8-BA37-12426DB75D1E}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Lok�lne pripojenie* 3:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Lok�lne pripojenie* 14:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Server: ns3.telecom.sk
Address: 195.146.128.62

Name: google.com
Addresses: 2a00

4014:80a::1006
173.194.122.5
173.194.122.1
173.194.122.8
173.194.122.0
173.194.122.9
173.194.122.4
173.194.122.7
173.194.122.3
173.194.122.6
173.194.122.2
173.194.122.14

Pinging google.com [173.194.116.224] with 32 bytes of data:
Reply from 173.194.116.224: bytes=32 time=36ms TTL=59
Reply from 173.194.116.224: bytes=32 time=36ms TTL=59

Ping statistics for 173.194.116.224:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 36ms, Maximum = 36ms, Average = 36ms
Server: ns3.telecom.sk
Address: 195.146.128.62

Name: yahoo.com
Addresses: 2001:4998:c:a06::2:4008
2001:4998:58:c02::a9
2001:4998:44:204::a7
206.190.36.45
98.138.253.109
98.139.183.24

Pinging yahoo.com [206.190.36.45] with 32 bytes of data:
Reply from 206.190.36.45: bytes=32 time=405ms TTL=41
Reply from 206.190.36.45: bytes=32 time=206ms TTL=41

Ping statistics for 206.190.36.45:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 206ms, Maximum = 405ms, Average = 305ms

Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
12...70 f1 a1 92 e2 8b ......Realtek RTL8191SE Wireless LAN 802.11n PCI-E NIC
11...00 26 6c 53 24 d3 ......Atheros AR8152 PCI-E Fast Ethernet Controller
1...........................Software Loopback Interface 1
16...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
15...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
17...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
19...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.34 25
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.1.0 255.255.255.0 On-link 192.168.1.34 281
192.168.1.34 255.255.255.255 On-link 192.168.1.34 281
192.168.1.255 255.255.255.255 On-link 192.168.1.34 281
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.34 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.1.34 281
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
12 281 fe80::/64 On-link
12 281 fe80::c6b:8859:901:8827/128
On-link
1 306 ff00::/8 On-link
12 281 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280] (Microsoft Corp.)
Catalog5 06 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280] (Microsoft Corp.)
Catalog5 07 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog5 08 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [170880] (Microsoft Corp.)
x64-Catalog5 06 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [170880] (Microsoft Corp.)
x64-Catalog5 07 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog5 08 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (09/28/2015 02:35:10 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (09/28/2015 02:35:10 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (09/27/2015 10:16:11 PM) (Source: Application Hang) (User: )
Description: The program firefox.exe version 41.0.0.5738 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: c54

Start Time: 01d0f950a1011389

Termination Time: 65

Application Path: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Report Id: 92444acd-6554-11e5-8f5b-00266c5324d3

Error: (09/27/2015 10:16:11 PM) (Source: Application Error) (User: )
Description: Názov chybovej aplikácie: plugin-container.exe, verzia: 41.0.0.5738, časová značka: 0x55fb7072
Názov chybového modulu: mozglue.dll, verzia: 41.0.0.5738, časová značka: 0x55fb5afb
Kód výnimky: 0x80000003
Odstup chyby: 0x0000ec7e
Identifikácia chybného procesu: 0x1224
Čas spustenia chybnej aplikácie: 0xplugin-container.exe0
Cesta chybnej aplikácie: plugin-container.exe1
Cesta chybného modulu: plugin-container.exe2
Identifikácia hlásenia: plugin-container.exe3

Error: (09/27/2015 06:12:16 PM) (Source: Application Error) (User: )
Description: Názov chybovej aplikácie: plugin-container.exe, verzia: 41.0.0.5738, časová značka: 0x55fb7072
Názov chybového modulu: mozglue.dll, verzia: 41.0.0.5738, časová značka: 0x55fb5afb
Kód výnimky: 0x80000003
Odstup chyby: 0x0000ec7e
Identifikácia chybného procesu: 0x534
Čas spustenia chybnej aplikácie: 0xplugin-container.exe0
Cesta chybnej aplikácie: plugin-container.exe1
Cesta chybného modulu: plugin-container.exe2
Identifikácia hlásenia: plugin-container.exe3

Error: (09/27/2015 06:12:16 PM) (Source: Application Hang) (User: )
Description: The program firefox.exe version 41.0.0.5738 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 734

Start Time: 01d0f93c36e02e3e

Termination Time: 45

Application Path: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Report Id: 7f34ea79-6532-11e5-a3fb-00266c5324d3

Error: (09/27/2015 12:03:17 PM) (Source: Application Error) (User: )
Description: Názov chybovej aplikácie: plugin-container.exe, verzia: 41.0.0.5738, časová značka: 0x55fb7072
Názov chybového modulu: mozglue.dll, verzia: 41.0.0.5738, časová značka: 0x55fb5afb
Kód výnimky: 0x80000003
Odstup chyby: 0x0000ec7e
Identifikácia chybného procesu: 0xad8
Čas spustenia chybnej aplikácie: 0xplugin-container.exe0
Cesta chybnej aplikácie: plugin-container.exe1
Cesta chybného modulu: plugin-container.exe2
Identifikácia hlásenia: plugin-container.exe3

Error: (09/27/2015 12:03:11 PM) (Source: Application Hang) (User: )
Description: The program firefox.exe version 41.0.0.5738 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1278

Start Time: 01d0f90a7fa1ca3c

Termination Time: 52

Application Path: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Report Id: f05f8437-64fe-11e5-a68f-00266c5324d3

Error: (09/27/2015 12:03:11 PM) (Source: Application Error) (User: )
Description: Názov chybovej aplikácie: plugin-container.exe, verzia: 41.0.0.5738, časová značka: 0x55fb7072
Názov chybového modulu: mozglue.dll, verzia: 41.0.0.5738, časová značka: 0x55fb5afb
Kód výnimky: 0x80000003
Odstup chyby: 0x0000ec7e
Identifikácia chybného procesu: 0x12f4
Čas spustenia chybnej aplikácie: 0xplugin-container.exe0
Cesta chybnej aplikácie: plugin-container.exe1
Cesta chybného modulu: plugin-container.exe2
Identifikácia hlásenia: plugin-container.exe3

Error: (09/27/2015 11:54:32 AM) (Source: Application Error) (User: )
Description: Názov chybovej aplikácie: plugin-container.exe, verzia: 41.0.0.5738, časová značka: 0x55fb7072
Názov chybového modulu: mozglue.dll, verzia: 41.0.0.5738, časová značka: 0x55fb5afb
Kód výnimky: 0x80000003
Odstup chyby: 0x0000ec7e
Identifikácia chybného procesu: 0xdec
Čas spustenia chybnej aplikácie: 0xplugin-container.exe0
Cesta chybnej aplikácie: plugin-container.exe1
Cesta chybného modulu: plugin-container.exe2
Identifikácia hlásenia: plugin-container.exe3

System errors:
=============
Error: (09/29/2015 01:11:25 PM) (Source: Service Control Manager) (User: )
Description: Služba Sony Ericsson OMSI download service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (09/29/2015 01:10:13 PM) (Source: Service Control Manager) (User: )
Description: Služba PEVSystemStart je označená ako interaktívna služba. Systém je však nakonfigurovaný tak, aby nepovolil interaktívne služby. Služba pravdepodobne nebude pracovať správne.

Error: (09/29/2015 01:05:14 PM) (Source: Service Control Manager) (User: )
Description: Služba PEVSystemStart je označená ako interaktívna služba. Systém je však nakonfigurovaný tak, aby nepovolil interaktívne služby. Služba pravdepodobne nebude pracovať správne.

Error: (09/29/2015 01:01:32 PM) (Source: Application Popup) (User: )
Description: \??\C:\ComboFix\catchme.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

Error: (09/29/2015 01:01:32 PM) (Source: Application Popup) (User: )
Description: \??\C:\ComboFix\catchme.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

Error: (09/29/2015 01:00:34 PM) (Source: Service Control Manager) (User: )
Description: Služba Sony Ericsson OMSI download service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (09/29/2015 10:22:12 AM) (Source: Service Control Manager) (User: )
Description: Služba PEVSystemStart je označená ako interaktívna služba. Systém je však nakonfigurovaný tak, aby nepovolil interaktívne služby. Služba pravdepodobne nebude pracovať správne.

Error: (09/29/2015 10:19:44 AM) (Source: Application Popup) (User: )
Description: \??\C:\ComboFix\catchme.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

Error: (09/29/2015 10:16:06 AM) (Source: Service Control Manager) (User: )
Description: Služba PEVSystemStart je označená ako interaktívna služba. Systém je však nakonfigurovaný tak, aby nepovolil interaktívne služby. Služba pravdepodobne nebude pracovať správne.

Error: (09/29/2015 10:13:11 AM) (Source: Service Control Manager) (User: )
Description: Služba Sony Ericsson OMSI download service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Microsoft Office Sessions:
=========================
Error: (09/28/2015 02:35:10 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT AUTHORITY)
Description: 01B8020000002D010000

Error: (09/28/2015 02:35:10 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT AUTHORITY)
Description: 01B120200000000000000AF000000

Error: (09/27/2015 10:16:11 PM) (Source: Application Hang)(User: )
Description: firefox.exe41.0.0.5738c5401d0f950a101138965C:\Program Files (x86)\Mozilla Firefox\firefox.exe92444acd-6554-11e5-8f5b-00266c5324d3

Error: (09/27/2015 10:16:11 PM) (Source: Application Error)(User: )
Description: plugin-container.exe41.0.0.573855fb7072mozglue.dll41.0.0.573855fb5afb800000030000ec7e122401d0f950a70eda6cC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozglue.dll97a7007a-6554-11e5-8f5b-00266c5324d3

Error: (09/27/2015 06:12:16 PM) (Source: Application Error)(User: )
Description: plugin-container.exe41.0.0.573855fb7072mozglue.dll41.0.0.573855fb5afb800000030000ec7e53401d0f93c3a7e4c99C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozglue.dll84c6a049-6532-11e5-a3fb-00266c5324d3

Error: (09/27/2015 06:12:16 PM) (Source: Application Hang)(User: )
Description: firefox.exe41.0.0.573873401d0f93c36e02e3e45C:\Program Files (x86)\Mozilla Firefox\firefox.exe7f34ea79-6532-11e5-a3fb-00266c5324d3

Error: (09/27/2015 12:03:17 PM) (Source: Application Error)(User: )
Description: plugin-container.exe41.0.0.573855fb7072mozglue.dll41.0.0.573855fb5afb800000030000ec7ead801d0f90b83545d5dC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozglue.dllf92f24c6-64fe-11e5-a68f-00266c5324d3

Error: (09/27/2015 12:03:11 PM) (Source: Application Hang)(User: )
Description: firefox.exe41.0.0.5738127801d0f90a7fa1ca3c52C:\Program Files (x86)\Mozilla Firefox\firefox.exef05f8437-64fe-11e5-a68f-00266c5324d3

Error: (09/27/2015 12:03:11 PM) (Source: Application Error)(User: )
Description: plugin-container.exe41.0.0.573855fb7072mozglue.dll41.0.0.573855fb5afb800000030000ec7e12f401d0f90a86ea245dC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozglue.dllf5525f6b-64fe-11e5-a68f-00266c5324d3

Error: (09/27/2015 11:54:32 AM) (Source: Application Error)(User: )
Description: plugin-container.exe41.0.0.573855fb7072mozglue.dll41.0.0.573855fb5afb800000030000ec7edec01d0f905e0f01c27C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozglue.dllbfe5638a-64fd-11e5-a68f-00266c5324d3

CodeIntegrity Errors:
===================================
Date: 2015-09-29 13:01:32.358
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-29 13:01:32.202
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-29 13:01:32.061
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-29 13:01:31.905
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-29 10:19:44.291
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-29 10:19:44.120
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-10-15 13:40:52.377
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-10-15 13:40:52.143
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-09-09 15:31:43.836
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-09-09 15:31:43.648
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

========================= Devices: ================================

========================= Memory info: ===================================

Percentage of memory in use: 33%
Total physical RAM: 3958.85 MB
Available physical RAM: 2633.16 MB
Total Virtual: 7915.91 MB
Available Virtual: 6403.88 MB

========================= Partitions: =====================================

1 Drive c: (WINDOWS) (Fixed) (Total:297.86 GB) (Free:220.01 GB) NTFS
2 Drive d: (Data) (Fixed) (Total:297.92 GB) (Free:285.1 GB) NTFS

========================= Users: ========================================

User accounts for \\SAUL-TOSH

Administrator Guest saul

========================= Minidump Files ==================================

No minidump file found

**** End of log ****

#18 Příspěvek od **altrok** » 29 zář 2015 18:33

Ulozte na plochu zoek.exe http://hijackthis.nl/smeenk/zoek.htm

spustte jako spravce
do velkeho okna zkopirujte script uvedeny nize
kliknete na Run script
po restartu na Vas vyskoci log (pripadne jej najdete v C:\zoek-results.log) - vlozte mi jej do pristi odpovedi
Kód: Vybrat vše
```
autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
```

5manager5 · #19 Příspěvek od **5manager5** » 30 zář 2015 11:27

prvú časť urobilo rýchlu, no druhú robilo asi 2h a nič sa nedialo musel som to potom vypnúť

#20 Příspěvek od **altrok** » 30 zář 2015 13:24

Kouknete po logu, at muzem zkontrolovat, co zvladl udelat.

5manager5 · #21 Příspěvek od **5manager5** » 30 zář 2015 15:44

iba toto som našiel a problém trvá

Zoek.exe v5.0.0.1 Updated 28-09-2015
Tool run by saul on ut 29. 09. 2015 at 20:30:06,33.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\saul\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

29. 9. 2015 20:30:51 Zoek.exe System Restore Point Created Successfully.

==== Empty Folders Check ======================

C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\Program Files\office.tmp deleted successfully
C:\Users\saul\AppData\Roaming\Windows Live Writer deleted successfully
C:\Users\saul\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\saul\AppData\Local\EmieSiteList deleted successfully
C:\Users\saul\AppData\Local\EmieUserList deleted successfully
C:\Users\saul\AppData\Local\ms-drivers deleted successfully

#22 Příspěvek od **altrok** » 01 říj 2015 13:11

Spustte zoek stejnym zpusobem v nouzovem rezimu.

5manager5 · #23 Příspěvek od **5manager5** » 01 říj 2015 17:51

skusil som a ide to rovnako

#24 Příspěvek od **altrok** » 02 říj 2015 20:24

Dejte novy log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

5manager5 · #25 Příspěvek od **5manager5** » 04 říj 2015 09:02

tu su logy a chybu s internetom uz robí len občas max. 1-2x do dna...ale stále trvá

inak môžem odinštalovať programy ktore už nebudeme používať typu combofix?

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:03-10-2015
Ran by saul (administrator) on SAUL-TOSH (04-10-2015 09:56:17)
Running from C:\Users\saul\Desktop
Loaded Profiles: saul (Available Profiles: saul)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWXUX.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [521272 2010-03-22] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [307768 2009-11-19] ()
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [102400 2010-04-26] (Advanced Micro Devices, Inc.)
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-2262508310-1691188626-2941519505-1001\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\...\Run: [TOSHIBA Online Product Information] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [4581280 2010-03-03] (TOSHIBA)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-07-29] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-07-29] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-07-29] (Google)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2010-05-12]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2010-05-12]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 195.146.128.62 195.146.132.58
Tcpip\..\Interfaces\{19E5133B-668F-4AF8-BA37-12426DB75D1E}: [DhcpNameServer] 195.146.128.62 195.146.132.58

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2262508310-1691188626-2941519505-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2262508310-1691188626-2941519505-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2262508310-1691188626-2941519505-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.sk/
SearchScopes: HKLM -> {F45F5DA7-5444-492A-8725-1B67FA717524} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-2262508310-1691188626-2941519505-1001 -> DefaultScope {C00F4574-F0D5-46AB-BCA2-61E79E97B07A} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2262508310-1691188626-2941519505-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2262508310-1691188626-2941519505-1001 -> {C00F4574-F0D5-46AB-BCA2-61E79E97B07A} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-23] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2015-09-15] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-23] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2015-09-15] (Microsoft Corporation)
BHO-x32: Pomocník pri prihlasovaní v konte Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2015-09-15] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2015-09-15] (Microsoft Corporation)
BHO-x32: TOSHIBA Media Controller Plug-in -> {F3C88694-EFFA-4d78-B409-54B7B2535B14} -> C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll [2010-03-19] (<TOSHIBA>)
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2015-09-15] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2015-09-15] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2015-09-15] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2015-09-15] (Microsoft Corporation)
Handler: osf - No CLSID Value
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2015-09-15] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2015-09-15] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2015-09-15] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2015-09-15] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\saul\AppData\Roaming\Mozilla\Firefox\Profiles\s1z5m23p.default-1443351770958
FF Homepage: google.sk
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-23] ()
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-23] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2015-09-15] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-23] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2015-09-15] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\saul\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentácie Google) - C:\Users\saul\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-29]
CHR Extension: (Dokumenty Google) - C:\Users\saul\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-29]
CHR Extension: (Disk Google) - C:\Users\saul\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-09-29]
CHR Extension: (YouTube) - C:\Users\saul\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-29]
CHR Extension: (Google Search) - C:\Users\saul\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-09-29]
CHR Extension: (Tabuľky Google) - C:\Users\saul\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-29]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\saul\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-29]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\saul\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-10-03]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\saul\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-29]
CHR Extension: (Gmail) - C:\Users\saul\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-29]
CHR HKU\S-1-5-21-2262508310-1691188626-2941519505-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2836056 2015-09-09] (Microsoft Corporation)
R2 OMSI download service; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [90112 2009-04-30] () [File not signed]
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [124368 2010-02-11] (Toshiba Europe GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 CnxtHdmiAudService; C:\Windows\System32\drivers\CHDMI64.sys [720952 2010-03-05] (Conexant Systems Inc.)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2009-11-19] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2009-11-19] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2009-11-19] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2009-11-19] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2009-11-19] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2009-11-19] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2009-11-19] (MCCI Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2010-09-21] () [File not signed]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-04 09:56 - 2015-10-04 09:56 - 00016293 _____ C:\Users\saul\Desktop\FRST.txt
2015-10-04 09:56 - 2015-10-04 09:56 - 00000000 ____D C:\FRST
2015-10-03 15:36 - 2015-10-03 15:36 - 02193408 _____ (Farbar) C:\Users\saul\Desktop\FRST64.exe
2015-10-01 17:36 - 2015-10-01 17:36 - 00000000 ____D C:\zoek
2015-10-01 17:24 - 2015-09-29 20:33 - 00000887 _____ C:\zoek-results2015-09-29-183300.log
2015-10-01 14:46 - 2013-09-18 00:11 - 00000000 ____D C:\Users\saul\Desktop\AIDA64 Extreme Edition & Portable 3.20.2600 Final (CZ,SK)
2015-10-01 14:39 - 2015-10-01 14:45 - 32063898 _____ C:\Users\saul\Desktop\aida64_extreme_edition___portable_3.20.2600_final__cz_sk_.rar
2015-10-01 14:35 - 2015-10-01 14:35 - 00001146 _____ C:\Users\saul\Desktop\AIDA64 Extreme.lnk
2015-10-01 14:35 - 2015-10-01 14:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalWire
2015-10-01 14:35 - 2015-10-01 14:35 - 00000000 ____D C:\Program Files (x86)\FinalWire
2015-10-01 14:33 - 2015-10-01 14:34 - 16481080 _____ (FinalWire Ltd. ) C:\Users\saul\Desktop\aida64extreme550.exe
2015-10-01 10:57 - 2015-10-01 10:57 - 00138610 _____ C:\Users\saul\Desktop\V000009.zip
2015-10-01 09:48 - 2015-10-01 15:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-09-29 20:45 - 2015-10-01 17:36 - 00000042 _____ C:\folders.log
2015-09-29 20:30 - 2015-10-01 17:24 - 00000382 _____ C:\zoek-results.log
2015-09-29 20:29 - 2015-10-01 17:36 - 00003094 _____ C:\runcheck.txt
2015-09-29 20:29 - 2015-09-29 20:29 - 00000000 ____D C:\zoek_backup
2015-09-29 20:28 - 2015-09-29 20:28 - 01309184 _____ C:\Users\saul\Desktop\zoek.exe
2015-09-29 17:10 - 2015-09-29 17:10 - 00026307 _____ C:\Users\saul\Desktop\MTB.txt
2015-09-29 17:07 - 2015-09-29 17:07 - 00891392 _____ (Farbar) C:\Users\saul\Desktop\MiniToolBox.exe
2015-09-29 13:53 - 2015-09-29 13:53 - 00002238 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-09-29 13:53 - 2015-09-29 13:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-09-29 13:51 - 2015-09-29 13:51 - 00929872 _____ (Google Inc.) C:\Users\saul\Desktop\ChromeSetup.exe.part
2015-09-29 13:22 - 2015-09-29 13:22 - 00024745 _____ C:\ComboFix.txt
2015-09-29 12:54 - 2015-09-29 12:54 - 02198413 _____ C:\Users\saul\Desktop\ndidrst-20100512142804.zip
2015-09-29 12:49 - 2011-07-07 13:36 - 10655624 _____ C:\Users\saul\Desktop\TC00390600B.exe
2015-09-29 12:49 - 2011-06-08 04:51 - 28035952 _____ C:\Users\saul\Desktop\TC00384500B.exe
2015-09-29 12:48 - 2015-09-29 12:48 - 10450132 _____ C:\Users\saul\Desktop\wlan-intel-win7-64-141131.zip
2015-09-29 12:47 - 2015-09-29 12:49 - 27903935 _____ C:\Users\saul\Desktop\atheros-wlan-win7-9204190.zip
2015-09-29 11:05 - 2015-10-04 09:55 - 00001792 _____ C:\Windows\setupact.log
2015-09-29 11:05 - 2015-10-01 18:09 - 00003112 _____ C:\Windows\PFRO.log
2015-09-29 11:05 - 2015-09-29 11:05 - 00000000 _____ C:\Windows\setuperr.log
2015-09-29 10:11 - 2015-09-29 13:23 - 00000000 ____D C:\Qoobox
2015-09-29 10:11 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-09-29 10:11 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-09-29 10:11 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-09-29 10:11 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-09-29 10:11 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-09-29 10:11 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-09-29 10:11 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-09-29 10:11 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-09-29 10:09 - 2015-09-29 10:10 - 05636489 ____R (Swearware) C:\Users\saul\Desktop\ComboFix.exe
2015-09-28 19:24 - 2014-04-23 08:51 - 00000545 _____ C:\Windows\UC.PIF
2015-09-28 19:24 - 2014-04-23 08:51 - 00000545 _____ C:\Windows\RAR.PIF
2015-09-28 19:24 - 2014-04-23 08:51 - 00000545 _____ C:\Windows\LHA.PIF
2015-09-28 19:24 - 2014-04-23 08:51 - 00000545 _____ C:\Windows\ARJ.PIF
2015-09-27 13:42 - 2015-09-27 13:42 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-09-27 13:42 - 2015-09-27 13:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-09-27 13:42 - 2015-09-27 13:42 - 00000000 ____D C:\Program Files\CCleaner
2015-09-27 13:35 - 2015-09-27 13:35 - 00001130 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-09-27 13:33 - 2015-09-27 13:33 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-09-27 13:33 - 2015-09-27 13:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-09-27 13:32 - 2015-09-27 13:32 - 00003136 _____ C:\Windows\System32\Tasks\{54E248DA-304C-4583-B0DB-2DC1BD81C8FA}
2015-09-15 10:39 - 2015-09-15 10:39 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2015-09-14 14:55 - 2015-09-14 14:55 - 00001626 _____ C:\Users\saul\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk
2015-09-14 14:55 - 2015-09-14 14:55 - 00000000 ____D C:\Users\saul\AppData\Roaming\ICQM
2015-09-14 14:48 - 2015-09-14 14:48 - 00000000 ____D C:\Users\saul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-09-14 14:48 - 2015-09-14 14:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-04 09:55 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-04 00:24 - 2010-06-11 21:51 - 01337514 _____ C:\Windows\WindowsUpdate.log
2015-10-04 00:04 - 2015-07-09 15:28 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-10-03 23:32 - 2009-07-14 06:45 - 00019248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-03 23:32 - 2009-07-14 06:45 - 00019248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-03 17:41 - 2013-10-02 15:04 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{2428BB83-C7E4-4E7E-94B8-0685A7958006}
2015-10-02 17:26 - 2014-10-08 11:41 - 00000000 ___RD C:\Users\saul\Disk Google
2015-10-02 12:09 - 2009-07-14 07:08 - 00032614 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-10-01 15:05 - 2015-06-26 21:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-01 15:02 - 2010-09-27 18:13 - 00000000 ____D C:\Users\saul\AppData\Roaming\Skype
2015-10-01 12:51 - 2015-03-09 11:13 - 00000000 ____D C:\Users\saul\AppData\Roaming\vlc
2015-09-29 20:18 - 2013-08-22 14:25 - 00000000 ____D C:\Users\saul\AppData\Local\Google
2015-09-29 13:53 - 2013-08-22 14:25 - 00000000 ____D C:\Program Files (x86)\Google
2015-09-29 13:11 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-09-29 13:10 - 2014-10-15 13:33 - 00000000 ____D C:\Windows\erdnt
2015-09-28 23:18 - 2010-06-11 22:04 - 00000000 ____D C:\Windows\SysWOW64\Atheros_L1e
2015-09-28 23:11 - 2010-06-11 22:05 - 00000000 ____D C:\Program Files (x86)\Realtek WLAN Driver
2015-09-28 20:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2015-09-28 19:05 - 2010-09-16 18:14 - 00000000 ____D C:\Users\saul
2015-09-28 19:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2015-09-27 13:33 - 2010-05-12 11:47 - 00000000 ____D C:\ProgramData\Skype
2015-09-27 11:11 - 2015-02-15 18:31 - 00000000 ____D C:\Users\saul\AppData\LocalLow\Temp
2015-09-23 11:21 - 2015-07-09 15:28 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-09-23 11:21 - 2015-07-09 15:28 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-09-23 11:21 - 2015-07-09 15:28 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-09-23 11:20 - 2014-08-15 16:10 - 00000000 ____D C:\Users\saul\AppData\Local\Adobe
2015-09-16 22:38 - 2014-10-19 15:01 - 00003932 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-16 22:38 - 2014-10-19 15:01 - 00003680 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-15 10:39 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-09-15 10:38 - 2013-04-19 10:54 - 00000000 ____D C:\Program Files\Microsoft Office
2015-09-14 14:55 - 2014-05-17 18:00 - 00000000 ____D C:\Users\saul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
2015-09-14 14:48 - 2010-09-18 00:09 - 00000000 ____D C:\Program Files\WinRAR
2015-09-12 15:20 - 2009-07-14 07:13 - 00782574 _____ C:\Windows\system32\PerfStringBackup.INI
2015-09-10 12:55 - 2010-12-19 15:26 - 00000000 ____D C:\Users\saul\AppData\Local\Windows Live

==================== Files in the root of some directories =======

2013-12-28 12:47 - 2013-12-28 12:47 - 0000037 ___SH () C:\Users\saul\AppData\Local\70149b02515b3bb20dd492.47983420
2013-05-08 12:24 - 2013-05-08 12:24 - 0003584 _____ () C:\Users\saul\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-03-09 16:53 - 2014-03-09 16:54 - 0000496 _____ () C:\Users\saul\AppData\Local\MRDownloader.err
2014-03-03 10:34 - 2014-03-09 16:54 - 0001048 _____ () C:\Users\saul\AppData\Local\MRDownloader.nast
2011-10-21 14:16 - 2012-05-10 14:03 - 0007650 _____ () C:\Users\saul\AppData\Local\Resmon.ResmonCfg
2012-07-30 00:09 - 2012-07-30 00:09 - 0000952 _____ () C:\Users\saul\AppData\Local\SRDownloader(1).nast
2012-01-10 21:38 - 2014-02-22 14:41 - 0006138 _____ () C:\Users\saul\AppData\Local\SRDownloader.err
2010-09-26 11:23 - 2014-02-22 14:41 - 0001160 _____ () C:\Users\saul\AppData\Local\SRDownloader.nast
2010-09-27 18:15 - 2010-09-27 18:15 - 0000056 ____H () C:\ProgramData\ezsidmv.dat

Some files in TEMP:
====================
C:\Users\saul\AppData\Local\Temp\7za.exe
C:\Users\saul\AppData\Local\Temp\DaS_21.exe
C:\Users\saul\AppData\Local\Temp\hijackthis.exe
C:\Users\saul\AppData\Local\Temp\NirCmd.exe
C:\Users\saul\AppData\Local\Temp\PEVZ.EXE
C:\Users\saul\AppData\Local\Temp\remove.exe
C:\Users\saul\AppData\Local\Temp\sed.exe
C:\Users\saul\AppData\Local\Temp\shortcut.exe
C:\Users\saul\AppData\Local\Temp\swreg.exe
C:\Users\saul\AppData\Local\Temp\swxcacls.exe
C:\Users\saul\AppData\Local\Temp\wget.exe
C:\Users\saul\AppData\Local\Temp\zoek-delete.exe

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-10-01 12:31

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version:03-10-2015
Ran by saul (2015-10-04 09:57:34)
Running from C:\Users\saul\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2010-09-16 16:14:17)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2262508310-1691188626-2941519505-500 - Administrator - Disabled)
Guest (S-1-5-21-2262508310-1691188626-2941519505-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2262508310-1691188626-2941519505-1002 - Limited - Enabled)
saul (S-1-5-21-2262508310-1691188626-2941519505-1001 - Administrator - Enabled) => C:\Users\saul

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)
Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)
AIDA64 Extreme v5.50 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 5.50 - FinalWire Ltd.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.26 - Atheros Communications Inc.)
ATI Catalyst Install Manager (HKLM\...\{61D4B846-49F8-2639-A4EB-977875265F37}) (Version: 3.0.769.0 - ATI Technologies, Inc.)
ccc-core-static (x32 Version: 2010.0426.2136.36953 - Název společnosti:) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.10 - Piriform)
Conexant Audio Driver For AMD HDMI Codec (HKLM\...\CNXT_AUDIO_HDA_HDMI) (Version: 4.98.26.0 - Conexant)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.119.0.61 - Conexant)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Doplnok programu Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Drive (HKLM-x32\...\{12ADFB82-D5A3-43E4-B2F4-FCD9B690315B}) (Version: 1.24.9931.5480 - Google, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.101 - Spoločnosť Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
ICQ 8.4 (build 7786) (HKU\S-1-5-21-2262508310-1691188626-2941519505-1001\...\ICQ) (Version: 8.4.7786.0 - ICQ)
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.5.7.1002 - Intel Corporation)
Java 8 Update 60 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Java SE Development Kit 8 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180000}) (Version: 8.0.0 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Knights and Merchants - The Peasants Rebellion (HKLM-x32\...\Knights and Merchants - The Peasants Rebellion_is1) (Version: - GOG.com)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 2016 Professional - sk-sk (HKLM\...\ProfessionalRetail - sk-sk) (Version: 16.0.4229.1024 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{BEC7BDC8-7A83-4312-9340-1ECDF06C1434}) (Version: 08.05.0822 - Microsoft Corporation)
Mozilla Firefox 41.0.1 (x86 sk) (HKLM-x32\...\Mozilla Firefox 41.0.1 (x86 sk)) (Version: 41.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.1.5750 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (Version: 16.0.4229.1024 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.4229.1024 - Microsoft Corporation) Hidden
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (HKLM-x32\...\{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}) (Version: 15.4.5722.2 - Microsoft Corporation)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30111 - Realtek Semiconductor Corp.)
Realtek WLAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173001290E16}) (Version: 2.00.0016 - REALTEK Semiconductor Corp.)
Skype™ 7.11 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.11.102 - Skype Technologies S.A.)
Sony Ericsson PC Companion 1.60.13 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 1.60.13 - Sony Ericsson)
Sony Ericsson PC Suite 6.011.00 (HKLM-x32\...\{2FFE93F0-BB72-4E52-8761-354D1AAA9387}) (Version: 6.011.00 - Sony Ericsson)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.8.1 - Synaptics Incorporated)
Toshiba Assist (HKLM-x32\...\{1B87C40B-A60B-4EF3-9A68-706CF4B69978}) (Version: 3.00.10 - TOSHIBA)
TOSHIBA Bulletin Board (HKLM-x32\...\InstallShield_{C14518AF-1A0F-4D39-8011-69BAA01CD380}) (Version: 1.6.06.64 - TOSHIBA Corporation)
TOSHIBA ConfigFree (HKLM-x32\...\{1777CCDA-F2F2-4A77-ACF4-0B7341229BBB}) (Version: 8.0.29 - TOSHIBA Corporation)
TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.2 for x64 - TOSHIBA Corporation)
TOSHIBA eco Utility (HKLM-x32\...\InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}) (Version: 1.2.10.64 - Meno vašej spoločnosti)
TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.3.64 - TOSHIBA Corporation)
TOSHIBA Hardware Setup (HKLM-x32\...\{8E9CEA3B-EBD1-439C-A01D-830CB39613C6}) (Version: 2.00.06 - TOSHIBA Corporation)
TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.6 - TOSHIBA Corporation)
Toshiba Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.01 - TOSHIBA)
TOSHIBA Media Controller (HKLM-x32\...\{983CD6FE-8320-4B80-A8F6-0D0366E0AA22}) (Version: 1.0.80.7.64 - TOSHIBA CORPORATION)
TOSHIBA Media Controller Plug-in (HKLM-x32\...\{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}) (Version: 1.0.5.10 - TOSHIBA CORPORATION)
TOSHIBA Online Product Information (HKLM-x32\...\{2290A680-4083-410A-ADCC-7092C67FC052}) (Version: 2.09.0001 - TOSHIBA)
TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.6.0.64 - TOSHIBA Corporation)
TOSHIBA Recovery Media Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.0.4 x64 - TOSHIBA Corporation)
TOSHIBA Recovery Media Creator Reminder (HKLM-x32\...\InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}) (Version: 1.00.0019 - TOSHIBA)
TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{A0E99122-25C1-4CA4-9063-499A2A814EB6}) (Version: 1.6.06.64 - TOSHIBA Corporation)
TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.1.40 - TOSHIBA)
TOSHIBA Supervisor Password (HKLM-x32\...\{073B89C3-BA88-41B5-965F-B35A88EAE838}) (Version: 2.00.03 - TOSHIBA Corporation)
Toshiba TEMPRO (HKLM-x32\...\{2B000B80-A3FA-4B92-A5FF-D9AD402B6701}) (Version: 3.30 - Toshiba Europe GmbH)
TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.3.3.64 - TOSHIBA Corporation)
TOSHIBA Web Camera Application (HKLM-x32\...\{5E6F6CF3-BACC-4144-868C-E14622C658F3}) (Version: 1.1.1.15 - TOSHIBA Corporation)
TRORMCLauncher (HKLM-x32\...\InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}) (Version: - )
TRORMCLauncher (Version: 1.0.0.9 - TOSHIBA) Hidden
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{B536CA63-8BB3-4027-A495-84DD9FED17EC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR 5.30 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.4 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Restore Points =========================

27-09-2015 13:30:28 Removed Skype™ 7.10
28-09-2015 12:00:17 Windows Update
28-09-2015 19:00:09 Operácia obnovovania
28-09-2015 21:44:04 Windows Update
28-09-2015 23:11:11 Nainštalované Realtek WLAN Driver
28-09-2015 23:18:32 Nainštalované Atheros Communications Inc.(R) AR81Family Gigabit/ł#AH
29-09-2015 20:30:30 zoek.exe restore point

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2015-09-29 13:11 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {01A02D65-417B-4D8A-95DA-4C12469A699C} - System32\Tasks\{609F0699-43D9-4BD4-A911-FC29241D7992} => Firefox.exe http://ui.skype.com/ui/0/7.5.0.102/sk/a ... age=tsMain
Task: {1E2959CE-8682-4D65-891F-C53B9D36F5CA} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe
Task: {1F3F5ACE-F0CE-4E7A-84DA-0262B4C442F9} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-09-09] (Microsoft Corporation)
Task: {20F59F93-612E-46AE-8E3A-6660B9697A67} - System32\Tasks\{54E248DA-304C-4583-B0DB-2DC1BD81C8FA} => Firefox.exe http://ui.skype.com/ui/0/7.11.0.102/sk/ ... age=tsMain
Task: {2CA555C9-3550-44D5-93AF-3B02C5ED0623} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-09-16] (Piriform Ltd)
Task: {49440DA5-CE67-41AA-BE5A-B4FF2DA65D28} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2262508310-1691188626-2941519505-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {52CA57D4-C9A3-47C1-9BB2-2CA25009ECA9} - System32\Tasks\{2FA677F6-9F48-44C6-8E5C-57DCD38CEAE1} => Firefox.exe http://ui.skype.com/ui/0/6.6.59.106/sk/ ... Error=1618
Task: {5333FD3C-01D2-478B-AE90-1DA750BF4F30} - System32\Tasks\Microsoft\Internet Explorer\Vyčistiť predchádzajúce verzie programu Internet Explorer => C:\Windows\SYSTEM32\ie4uinit.EXE [2015-06-20] (Microsoft Corporation)
Task: {5B76F62F-4F85-409F-AAD2-392D375CEC58} - System32\Tasks\{66398E03-09B5-415B-B52D-C394708A24AD} => Firefox.exe http://ui.skype.com/ui/0/7.4.64.102/sk/privacy
Task: {763F30F2-B9D5-4424-B1D4-E98C15A115C0} - System32\Tasks\{D4F76A82-DA99-4607-82A5-91CD221DD398} => Firefox.exe http://ui.skype.com/ui/0/7.5.0.102/sk/e ... tinstaller
Task: {76EB7289-C095-4539-8163-EB8B80432108} - System32\Tasks\{C6053A7B-E21A-48E7-92F5-DAAF47EBBC00} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2015-09-17] (Skype Technologies S.A.)
Task: {90F646AF-6C5F-4B3A-9A90-2037FCA21474} - System32\Tasks\{B5F97E19-1935-490D-A720-F0B194E57B27} => Firefox.exe http://ui.skype.com/ui/0/7.4.64.102/sk/eula
Task: {91A41671-D461-4269-A8B6-D6807594A693} - System32\Tasks\{6C16B71B-40E3-498E-9A95-548CAC4D8EBA} => Firefox.exe http://ui.skype.com/ui/0/7.2.0.103/sk/privacy
Task: {9693A9D2-1849-48A3-8B60-BBCF97BFCDEF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {9D564117-E3FF-4D88-86D0-824F41F2EBE0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {A9CDDCD2-07C2-44DD-AC54-386B7C927E26} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-23] (Adobe Systems Incorporated)
Task: {B04CC1DE-8C66-4E3A-8E00-396F37926C4A} - System32\Tasks\{8BBB609C-678A-4CF9-AE7C-2EBD5802668E} => Firefox.exe http://ui.skype.com/ui/0/5.5.0.117/en/a ... adyoffered
Task: {BA385C45-D36E-42C2-B360-A236AB9A4CD3} - System32\Tasks\{90790D9C-D1F8-433C-97F2-D0311267ED9C} => pcalua.exe -a C:\Users\saul\Desktop\vlc-1.0.0-win32.exe -d C:\Users\saul\Desktop
Task: {BDAD57CF-5D19-468F-9B8F-84D89D28D47A} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2010-02-22] (TOSHIBA CORPORATION)
Task: {BE5D88FF-0FEB-4938-9C21-C4EB317C6626} - System32\Tasks\{5CE5FFFF-10F6-4EC7-A754-84EE465A5E90} => Firefox.exe http://ui.skype.com/ui/0/5.1.0.104/cs/a ... adyoffered
Task: {C715177E-41FF-4D96-842D-AF9694EBFA46} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-09-09] (Microsoft Corporation)
Task: {C7E6A3DE-10F3-449F-BCD7-40EC763CFBBB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {CEAEEE89-50A1-419E-A121-EAE25487CF0A} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2262508310-1691188626-2941519505-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {EB772D0C-532D-4716-95E8-7374EAD766CA} - System32\Tasks\{140FBB3C-DD79-4513-BF6B-3CA6F7C2F5D7} => Firefox.exe http://ui.skype.com/ui/0/6.21.85.104/sk ... age=tsMain
Task: {EBBCE4C7-F068-4BD7-B91E-AAD5F8C8C5D0} - System32\Tasks\{EC8D9364-2706-459E-990D-6E5323F17850} => Firefox.exe http://ui.skype.com/ui/0/6.21.85.104/sk ... age=tsMain

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (Whitelisted) ==============

2015-07-29 13:33 - 2015-09-09 22:33 - 00162880 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
2010-11-04 17:09 - 2009-04-30 12:23 - 00090112 _____ () C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-2262508310-1691188626-2941519505-1001\...\sharepoint.com -> hxxps://officeinternational.sharepoint.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2262508310-1691188626-2941519505-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\saul\AppData\Roaming\Mozilla\Firefox\Pozadie plochy.bmp
DNS Servers: 195.146.128.62 - 195.146.132.58
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: 00TCrdMain => %programFiles%\TOSHIBA\FlashCards\TCrdMain.exe
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: HSON => %programFiles%\TOSHIBA\TBS\HSON.exe
MSCONFIG\startupreg: icq => C:\Users\saul\AppData\Roaming\ICQM\icq.exe -CU
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SmartAudio => C:\Program Files\CONEXANT\SAII\SAIICpl.exe /t
MSCONFIG\startupreg: SmartFaceVWatcher => %programFiles%\Toshiba\SmartFaceV\SmartFaceVWatcher.exe
MSCONFIG\startupreg: SmoothView => %programFiles%\Toshiba\SmoothView\SmoothView.exe
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: Teco => "%programFiles%\TOSHIBA\TECO\Teco.exe" /r
MSCONFIG\startupreg: TOSHIBA Online Product Information => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe
MSCONFIG\startupreg: Toshiba Registration => C:\Program Files\Toshiba\Registration\ToshibaReminder.exe
MSCONFIG\startupreg: Toshiba TEMPRO => C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
MSCONFIG\startupreg: ToshibaServiceStation => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe /hide:60
MSCONFIG\startupreg: TosNC => %programFiles%\Toshiba\BulletinBoard\TosNcCore.exe
MSCONFIG\startupreg: TosReelTimeMonitor => %programFiles%\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
MSCONFIG\startupreg: TosSENotify => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe
MSCONFIG\startupreg: TosVolRegulator => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe
MSCONFIG\startupreg: TosWaitSrv => %programFiles%\TOSHIBA\TPHM\TosWaitSrv.exe
MSCONFIG\startupreg: TPwrMain => %programFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
MSCONFIG\startupreg: TWebCamera => "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{68DD7813-31AD-4193-B27C-014A930FAA0F}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{645C8E47-7935-4132-B0C3-B948A7706470}] => (Allow) svchost.exe
FirewallRules: [{AB986698-E5EB-48F6-AB4D-88A6294A0D64}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{21092676-02BA-4C32-A34B-7D07CADB2E04}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{76076862-7ACC-43F1-B034-DE871E8CECCA}] => (Allow) LPort=2869
FirewallRules: [{982E82E1-984F-4997-8F1B-EB2B43492781}] => (Allow) LPort=1900
FirewallRules: [{21F9C1EE-13E6-4F92-8CC2-A633DF36B26C}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [TCP Query User{B009A9EF-B426-414B-9D7F-53FB82D227D4}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{1728A311-0BA0-4FA0-8A8F-FA10D0088B9B}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [TCP Query User{074426C5-71A9-4F41-926E-17CBC6FFD02F}C:\users\saul\appdata\roaming\icqm\icq.exe] => (Allow) C:\users\saul\appdata\roaming\icqm\icq.exe
FirewallRules: [UDP Query User{527CD9ED-9D66-4CEE-9B57-C60C3172C9FF}C:\users\saul\appdata\roaming\icqm\icq.exe] => (Allow) C:\users\saul\appdata\roaming\icqm\icq.exe
FirewallRules: [TCP Query User{172B6A35-21D6-4C91-B9BC-21D5A6D6E50E}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{A66EDFCB-EB4E-4959-9C9E-5832ABAE5954}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{6E253DD4-3E31-4A6F-8D4D-1A1D520ABDBA}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{D16F5A79-0891-4AD8-B0D2-26BD7E5F8E5E}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{EDC63885-8949-4F4F-AD6D-E44B2067A004}C:\program files (x86)\gog.com\knights and merchants tpr\km_tpr.exe] => (Block) C:\program files (x86)\gog.com\knights and merchants tpr\km_tpr.exe
FirewallRules: [UDP Query User{469AE6A3-22D7-403F-BBF6-883419C2DFBC}C:\program files (x86)\gog.com\knights and merchants tpr\km_tpr.exe] => (Block) C:\program files (x86)\gog.com\knights and merchants tpr\km_tpr.exe
FirewallRules: [{88F57B69-68C7-4BDD-9125-89EC331F1068}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{865FEE38-6246-4E8E-9B10-A5AEE52574F5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C45F5C3F-52E2-4CFC-BC94-1A3312B55622}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{75CC6B8A-FF61-42ED-9A15-2B7A87247473}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{44AF9058-20D1-4D68-9882-D7AC3B378DE8}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (09/30/2015 11:49:06 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program firefox.exe version 41.0.0.5738 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: bcc

Start Time: 01d0fb645d52e226

Termination Time: 47

Application Path: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Report Id: 787f446d-6758-11e5-ac5f-00266c5324d3

Error: (09/30/2015 11:49:06 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybovej aplikácie: plugin-container.exe, verzia: 41.0.0.5738, časová značka: 0x55fb7072
Názov chybového modulu: mozglue.dll, verzia: 41.0.0.5738, časová značka: 0x55fb5afb
Kód výnimky: 0x80000003
Odstup chyby: 0x0000ec7e
Identifikácia chybného procesu: 0x8f8
Čas spustenia chybnej aplikácie: 0xplugin-container.exe0
Cesta chybnej aplikácie: plugin-container.exe1
Cesta chybného modulu: plugin-container.exe2
Identifikácia hlásenia: plugin-container.exe3

Error: (09/30/2015 11:42:43 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybovej aplikácie: plugin-container.exe, verzia: 41.0.0.5738, časová značka: 0x55fb7072
Názov chybového modulu: mozglue.dll, verzia: 41.0.0.5738, časová značka: 0x55fb5afb
Kód výnimky: 0x80000003
Odstup chyby: 0x0000ec7e
Identifikácia chybného procesu: 0x7b8
Čas spustenia chybnej aplikácie: 0xplugin-container.exe0
Cesta chybnej aplikácie: plugin-container.exe1
Cesta chybného modulu: plugin-container.exe2
Identifikácia hlásenia: plugin-container.exe3

Error: (09/30/2015 11:42:43 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program firefox.exe version 41.0.0.5738 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 664

Start Time: 01d0fb5a71540cfe

Termination Time: 51

Application Path: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Report Id: 929b4430-6757-11e5-ac5f-00266c5324d3

Error: (09/28/2015 02:35:10 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (09/28/2015 02:35:10 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (09/27/2015 10:16:11 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program firefox.exe version 41.0.0.5738 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: c54

Start Time: 01d0f950a1011389

Termination Time: 65

Application Path: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Report Id: 92444acd-6554-11e5-8f5b-00266c5324d3

Error: (09/27/2015 10:16:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybovej aplikácie: plugin-container.exe, verzia: 41.0.0.5738, časová značka: 0x55fb7072
Názov chybového modulu: mozglue.dll, verzia: 41.0.0.5738, časová značka: 0x55fb5afb
Kód výnimky: 0x80000003
Odstup chyby: 0x0000ec7e
Identifikácia chybného procesu: 0x1224
Čas spustenia chybnej aplikácie: 0xplugin-container.exe0
Cesta chybnej aplikácie: plugin-container.exe1
Cesta chybného modulu: plugin-container.exe2
Identifikácia hlásenia: plugin-container.exe3

Error: (09/27/2015 06:12:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybovej aplikácie: plugin-container.exe, verzia: 41.0.0.5738, časová značka: 0x55fb7072
Názov chybového modulu: mozglue.dll, verzia: 41.0.0.5738, časová značka: 0x55fb5afb
Kód výnimky: 0x80000003
Odstup chyby: 0x0000ec7e
Identifikácia chybného procesu: 0x534
Čas spustenia chybnej aplikácie: 0xplugin-container.exe0
Cesta chybnej aplikácie: plugin-container.exe1
Cesta chybného modulu: plugin-container.exe2
Identifikácia hlásenia: plugin-container.exe3

Error: (09/27/2015 06:12:16 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program firefox.exe version 41.0.0.5738 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 734

Start Time: 01d0f93c36e02e3e

Termination Time: 45

Application Path: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Report Id: 7f34ea79-6532-11e5-a3fb-00266c5324d3

System errors:
=============
Error: (10/01/2015 05:21:35 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Function Discovery Provider Host, od ktorej závisí služba HomeGroup Provider, zlyhalo kvôli nasledujúcej chybe:
%%1068

Error: (10/01/2015 05:21:35 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Server, od ktorej závisí služba Computer Browser, zlyhalo kvôli nasledujúcej chybe:
%%1068

Error: (10/01/2015 05:21:35 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Server, od ktorej závisí služba Computer Browser, zlyhalo kvôli nasledujúcej chybe:
%%1068

Error: (10/01/2015 05:21:35 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (10/01/2015 05:21:35 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (10/01/2015 05:21:33 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Server, od ktorej závisí služba Computer Browser, zlyhalo kvôli nasledujúcej chybe:
%%1068

Error: (10/01/2015 05:21:33 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Server, od ktorej závisí služba Computer Browser, zlyhalo kvôli nasledujúcej chybe:
%%1068

Error: (10/01/2015 05:21:33 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Server, od ktorej závisí služba Computer Browser, zlyhalo kvôli nasledujúcej chybe:
%%1068

Error: (10/01/2015 05:21:33 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Server, od ktorej závisí služba Computer Browser, zlyhalo kvôli nasledujúcej chybe:
%%1068

Error: (10/01/2015 05:21:33 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Server, od ktorej závisí služba Computer Browser, zlyhalo kvôli nasledujúcej chybe:
%%1068

CodeIntegrity:
===================================
Date: 2015-09-29 13:01:32.358
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-29 13:01:32.202
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-29 13:01:32.061
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-29 13:01:31.905
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-29 10:19:44.291
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-29 10:19:44.120
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-10-15 13:40:52.377
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-10-15 13:40:52.143
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-09-09 15:31:43.836
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-09-09 15:31:43.648
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz
Percentage of memory in use: 31%
Total physical RAM: 3958.85 MB
Available physical RAM: 2704.3 MB
Total Virtual: 7915.91 MB
Available Virtual: 6539.4 MB

==================== Drives ================================

Drive c: (WINDOWS) (Fixed) (Total:297.86 GB) (Free:217.08 GB) NTFS
Drive d: (Data) (Fixed) (Total:297.92 GB) (Free:285.1 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 18C6ABD2)
Partition 1: (Active) - (Size=400 MB) - (Type=27)
Partition 2: (Not Active) - (Size=297.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=297.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

#26 Příspěvek od **altrok** » 05 říj 2015 09:02

Ano, nastroje, ktere nebudeme pouzivat (vse krome FRST) muzete smazat.

Prejmenujte ComboFix na Uninstall a spustte jako spravce
ComboFix se odinstaluje.

Chyby dle meho zpusobuje Mozilla Firefox nebo nektery z jejich pluginu - zazalohujte zalozky a hesla Mozilly napr. pomoci http://www.stahuj.centrum.cz/utility_a_ ... mozbackup/ , nasledne Mozillu odinstanstalujte vcetne jejiho profilu a pote udelejte novou instalaci.

5manager5 · #27 Příspěvek od **5manager5** » 07 říj 2015 14:31

problém bol aj v IE nie len vo Firefoxe...preinštaloval som Firefox nepomohlo...dal som preč Firefox a internet v IE ide dobre celkom

ked mám v notebooku len jeden prehliadač všetko ide dobre

#28 Příspěvek od **altrok** » 08 říj 2015 14:36

Vyzkousejte jeste napr. preinstalovat Adobe Flash Player, vycistit registry v CCleaneru (vytvorte zalohu, kterou Vam nabidne) a pak Mozillu opet nainstalovat.

5manager5 · #29 Příspěvek od **5manager5** » 08 říj 2015 16:05

ok skúsim...urobil som update na win. 10 a problém trvá....spravím reinštal celého winu asi je to potrebne

každopádne dakujem za pomoc

chcem sa ešte spýtať môže to byť hw chyba?

#30 Příspěvek od **altrok** » 08 říj 2015 18:25

Nemate zac.

Dle meho to chybou hardwaru nebude.

V event vieweru byly udalosti zaznamenany jako

Kód: Vybrat vše

Error: (09/27/2015 10:16:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybovej aplikácie: plugin-container.exe, verzia: 41.0.0.5738, časová značka: 0x55fb7072
Názov chybového modulu: mozglue.dll, verzia: 41.0.0.5738, časová značka: 0x55fb5afb
Kód výnimky: 0x80000003
Odstup chyby: 0x0000ec7e
Identifikácia chybného procesu: 0x1224
Čas spustenia chybnej aplikácie: 0xplugin-container.exe0
Cesta chybnej aplikácie: plugin-container.exe1
Cesta chybného modulu: plugin-container.exe2
Identifikácia hlásenia: plugin-container.exe3

Error: (09/27/2015 06:12:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybovej aplikácie: plugin-container.exe, verzia: 41.0.0.5738, časová značka: 0x55fb7072
Názov chybového modulu: mozglue.dll, verzia: 41.0.0.5738, časová značka: 0x55fb5afb
Kód výnimky: 0x80000003
Odstup chyby: 0x0000ec7e
Identifikácia chybného procesu: 0x534
Čas spustenia chybnej aplikácie: 0xplugin-container.exe0
Cesta chybnej aplikácie: plugin-container.exe1
Cesta chybného modulu: plugin-container.exe2
Identifikácia hlásenia: plugin-container.exe3

Error: (09/27/2015 06:12:16 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program firefox.exe version 41.0.0.5738 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 734

Start Time: 01d0f93c36e02e3e

Termination Time: 45

Application Path: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Report Id: 7f34ea79-6532-11e5-a3fb-00266c5324d3

Bohuzel nevim, jak tyto chyby vyresit. Pokud pro Vas neni reinstall systemu prekazkou, problem by se nasledne mel vyresit, ale urcite budu rad, pokud pak jeste date vedet.

Mozna by jeste mohlo pomoct spustit zoek s upravenym skriptem:

Ulozte na plochu zoek.exe http://hijackthis.nl/smeenk/zoek.htm

spustte jako spravce
do velkeho okna zkopirujte script uvedeny nize
kliknete na Run script
po restartu na Vas vyskoci log (pripadne jej najdete v C:\zoek-results.log) - vlozte mi jej do pristi odpovedi
Kód: Vybrat vše
```
iedefaults;
FFdefaults;
CHRdefaults;
```

VIRY.CZ

kontrola notebooku

Re: kontrola notebooku

Re: kontrola notebooku

Re: kontrola notebooku

Re: kontrola notebooku

Re: kontrola notebooku

Re: kontrola notebooku

Re: kontrola notebooku

Re: kontrola notebooku

Re: kontrola notebooku

Re: kontrola notebooku

Re: kontrola notebooku

Re: kontrola notebooku

Re: kontrola notebooku

Re: kontrola notebooku

Re: kontrola notebooku