VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosím o kontrolu logu, hlásí poškození systémových souborů

https://forum.viry.cz:443/viewtopic.php?t=155810

Stránka 1 z 2

Prosím o kontrolu logu, hlásí poškození systémových souborů

Napsal: 12 dub 2019 20:55
od Janka30
Dobrý den, jednou jste mi již pomohli, proto si dovolím na Vás obrátit znovu. Dnes po spuštění netbooku se spustila kontrola disku, který nelze prý provést kvůli poškození a nějakému naistalování softwaru, počítač je mé mamky, tudíž nevím, co instalovala a co ne a obnovit systém k dřívějšímu datu též nejde, protože to chce opravu chyb na disku. Moc prosím o kontrolu logu. Děkuji.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-03-2019
Ran by Patrik (administrator) on PATRIK-PC (12-04-2019 21:34:15)
Running from C:\Users\Patrik\Downloads
Loaded Profiles: Patrik (Available Profiles: Patrik)
Platform: Microsoft Windows 7 Starter Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 10 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Intel Corporation -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler.exe
(Lenovo (Beijing) Limited -> Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo (Beijing) Limited -> Lenovo(beijing) Limited) C:\Program Files\Lenovo\Energy Management\utility.exe
(Lenovo (Beijing) Limited -> Lenovo (Beijing) Limited) C:\Program Files\Lenovo\Energy Management\Energy Management.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Mindspark Interactive Network -> VER_COMPANY_NAME) C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe
(Lenovo (Beijing) Limited -> Lenovo Group Limited) C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\IgrsSvcs.exe
(Lenovo (Beijing) Limited -> Lenovo.) C:\Windows\System32\TPHDEXLG.exe
(Mindspark Interactive Network -> COMPANYVERS_NAME) C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbarsvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation -> © 2015 Microsoft Corporation) C:\Users\Patrik\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Intel Corporation -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-03] (Intel Corporation -> Intel Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1615144 2010-01-14] (Synaptics Incorporated -> Synaptics Incorporated)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [35184 2008-12-03] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [VeriFaceManager] => C:\Program Files\Lenovo\VeriFace\PManage.exe
HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [186208 2009-09-02] (Lenovo (Beijing) Limited -> Lenovo.)
HKLM\...\Run: [EnergyUtility] => C:\Program Files\Lenovo\Energy Management\utility.exe [4114288 2009-10-23] (Lenovo (Beijing) Limited -> Lenovo(beijing) Limited)
HKLM\...\Run: [Energy Management] => C:\Program Files\Lenovo\Energy Management\Energy Management.exe [5064560 2009-10-23] (Lenovo (Beijing) Limited -> Lenovo (Beijing) Limited)
HKLM\...\Run: [VideoDownloadConverter Search Scope Monitor] => C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrchMn.exe [42536 2012-12-13] (Mindspark Interactive Network -> MindSpark)
HKLM\...\Run: [VideoDownloadConverter_4z Browser Plugin Loader] => C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe [30096 2012-12-13] (Mindspark Interactive Network -> VER_COMPANY_NAME)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [222088 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-4150815367-1157255260-954900486-1000\...\Run: [BingSvc] => C:\Users\Patrik\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (Microsoft Corporation -> © 2015 Microsoft Corporation)
HKU\S-1-5-21-4150815367-1157255260-954900486-1000\...\MountPoints2: {3057baf8-a6d8-11e4-8762-f0def12a5d00} - E:\AutoRun.exe
HKLM\...\Drivers32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32: [VIDC.VP80] => vp8vfw.dll
HKLM\Software\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> C:\Program Files\AVAST Software\Browser\Application\72.0.1174.121\Installer\chrmstp.exe [2019-03-09] (AVAST Software s.r.o. -> AVAST Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\73.0.3683.103\Installer\chrmstp.exe [2019-04-11] (Google LLC -> Google Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\Lenovo\Bluetooth Software\\BtwCP.dll [2009-10-02] (Broadcom Corporation -> Broadcom Corporation.)
HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2010-12-11]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation -> Broadcom Corporation.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.255.255.10 10.255.255.20 8.8.8.8 192.168.1.1
Tcpip\..\Interfaces\{333AA3A3-6A8E-4BF6-920F-8B5D6728AA43}: [DhcpNameServer] 10.255.255.10 10.255.255.20 8.8.8.8 192.168.1.1
Tcpip\..\Interfaces\{F9BD8CE7-C746-42BD-AE3B-7630DE2C5BB9}: [DhcpNameServer] 213.46.172.36 213.46.172.37

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/?clid=22668
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-4150815367-1157255260-954900486-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/?clid=22668
HKU\S-1-5-21-4150815367-1157255260-954900486-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
URLSearchHook: HKU\S-1-5-21-4150815367-1157255260-954900486-1000 - (No Name) - {93a3111f-4f74-4ed8-895e-d9708497629e} - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll (Mindspark Interactive Network -> MindSpark)
SearchScopes: HKLM -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKLM -> {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^HJ^xdm073^YY^cz&si=pconverter&ptb=4767A444-5E02-4DD9-A235-A6467D427113&ind=2012121311&n=77ee88df&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKU\S-1-5-21-4150815367-1157255260-954900486-1000 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4150815367-1157255260-954900486-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-4150815367-1157255260-954900486-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/web/{searchTerms}?babsrc=browsersearch&AF=100582
SearchScopes: HKU\S-1-5-21-4150815367-1157255260-954900486-1000 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4150815367-1157255260-954900486-1000 -> {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^HJ^xdm073^YY^cz&si=pconverter&ptb=4767A444-5E02-4DD9-A235-A6467D427113&ind=2012121311&n=77ee88df&psa=&st=sb&searchfor={searchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: No Name -> {312f84fb-8970-4fd3-bddb-7012eac4afc9} -> No File
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
BHO: No Name -> {c547c6c2-561b-4169-a2a5-20ba771ca93b} -> No File
Toolbar: HKLM - No Name - {48586425-6bb7-4f51-8dc6-38c88e3ebb58} - No File
Toolbar: HKU\S-1-5-21-4150815367-1157255260-954900486-1000 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKU\S-1-5-21-4150815367-1157255260-954900486-1000 -> No Name - {48586425-6BB7-4F51-8DC6-38C88E3EBB58} - No File
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

FireFox:
========
FF ProfilePath: C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\1o4b6nv1.default-1454484391215 [2019-04-08]
FF Homepage: Mozilla\Firefox\Profiles\1o4b6nv1.default-1454484391215 -> hxxp://www.seznam.cz/
FF Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\1o4b6nv1.default-1454484391215\Extensions\sp@avast.com.xpi [2019-03-26]
FF Extension: (Avast Online Security) - C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\1o4b6nv1.default-1454484391215\Extensions\wrc@avast.com.xpi [2018-07-17]
FF HKLM\...\Firefox\Extensions: [4zffxtbr@VideoDownloadConverter_4z.com] - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin
FF Extension: (No Name) - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin [2014-09-25] [Legacy] [not signed]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_32_0_0_156.dll [2019-03-13] (Adobe Systems Incorporated -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-29] (Google Inc -> Google LLC)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-29] (Google Inc -> Google LLC)
FF Plugin: @VideoDownloadConverter_4z.com/Plugin -> C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll [2012-12-13] (Mindspark Interactive Network -> MindSpark)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Profile: C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default [2019-04-12]
CHR Extension: (Avast Online Security) - C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-02-20]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-05]
CHR Extension: (Chrome Media Router) - C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-03-24]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5317920 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-08] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [311592 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-08] (AVAST Software s.r.o. -> AVAST Software)
S3 AvastSecureBrowserElevationService; C:\Program Files\AVAST Software\Browser\Application\72.0.1174.121\elevation_service.exe [1070600 2019-03-06] (AVAST Software s.r.o. -> AVAST Software)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [595232 2009-10-02] (Broadcom Corporation -> Broadcom Corporation.)
R2 IGRS; C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe [38152 2009-07-14] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
S3 Lenovo ReadyComm AppSvc; C:\Program Files\Lenovo\ReadyComm\AppSvc.exe [509192 2009-08-14] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
S3 Lenovo ReadyComm ConnSvc; C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe [579400 2009-09-22] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
S3 PS_MDP; C:\Program Files\Lenovo\ReadyComm\PS_MDP.dll [276296 2009-07-16] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
R2 ReadyComm.DirectRouter; C:\Program Files\Lenovo\ReadyComm\common\router.dll [103688 2009-07-14] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
R2 VideoDownloadConverter_4zService; C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbarsvc.exe [42504 2012-12-13] (Mindspark Interactive Network -> COMPANYVERS_NAME)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
S2 0256851461221501mcinstcleanup; C:\windows\TEMP\025685~1.EXE -cleanup -nolog [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ACPIVPC; C:\windows\System32\DRIVERS\AcpiVpc.sys [23136 2010-01-20] (Lenovo (Beijing) Limited -> Lenovo Corporation)
R0 aswArDisk; C:\windows\System32\drivers\aswArDisk.sys [34696 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\windows\System32\drivers\aswArPot.sys [172208 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\windows\System32\drivers\aswbidsdriver.sys [219472 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\windows\System32\drivers\aswbidsh.sys [158096 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R0 aswblog; C:\windows\System32\drivers\aswblog.sys [255216 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\windows\System32\drivers\aswbuniv.sys [51128 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R1 aswHdsKe; C:\windows\System32\drivers\aswHdsKe.sys [189288 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\windows\System32\drivers\aswKbd.sys [40688 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\windows\System32\drivers\aswMonFlt.sys [140376 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\windows\System32\drivers\aswRdr2.sys [100984 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\windows\System32\drivers\aswRvrt.sys [72800 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\windows\System32\drivers\aswSnx.sys [785584 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\windows\System32\drivers\aswSP.sys [402872 2019-04-12] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\windows\System32\drivers\aswStm.sys [165256 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\windows\System32\drivers\aswVmm.sys [308608 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R3 BCM43XX; C:\windows\System32\DRIVERS\bcmwl6.sys [2707448 2010-12-11] (Broadcom Corporation -> Broadcom Corporation)
S3 Bridge0; C:\windows\System32\drivers\WDBridge.sys [63240 2009-07-28] (Lenovo (Beijing) Limited -> Lenovo)
S3 btusbflt; C:\windows\System32\drivers\btusbflt.sys [43944 2009-07-01] (Broadcom Corporation -> Broadcom Corporation.)
S3 btwaudio; C:\windows\System32\drivers\btwaudio.sys [86056 2009-10-02] (Broadcom Corporation -> Broadcom Corporation.)
S3 btwavdt; C:\windows\System32\DRIVERS\btwavdt.sys [108072 2009-08-29] (Broadcom Corporation -> Broadcom Corporation.)
S3 btwl2cap; C:\windows\System32\DRIVERS\btwl2cap.sys [29472 2009-04-08] (Broadcom Corporation -> Broadcom Corporation.)
S3 btwrchid; C:\windows\System32\DRIVERS\btwrchid.sys [18472 2009-08-29] (Broadcom Corporation -> Broadcom Corporation.)
R3 igfx; C:\windows\System32\DRIVERS\igdkmd32.sys [4807168 2010-10-25] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
R3 k57nd60x; C:\windows\System32\DRIVERS\k57nd60x.sys [275496 2010-03-21] (Broadcom Corporation -> Broadcom Corporation)
S3 RSUSBSTOR; C:\windows\System32\Drivers\RtsUStor.sys [174592 2009-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.)
R3 usbsmi; C:\windows\System32\DRIVERS\SMIksdrv.sys [171648 2009-12-18] (Microsoft Windows Hardware Compatibility Publisher -> SMI)
R3 wdmirror; C:\windows\System32\DRIVERS\WDMirror.sys [11792 2009-07-16] (Lenovo (Beijing) Limited -> Windows (R) Codename Longhorn DDK provider)
S3 Huawei; system32\DRIVERS\ewdcsc.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-04-12 21:31 - 2019-04-12 21:32 - 001793024 _____ (Farbar) C:\Users\Patrik\Downloads\FRST (1).exe
2019-04-12 21:24 - 2019-04-12 21:36 - 000020144 _____ C:\Users\Patrik\Downloads\FRST.txt
2019-04-12 21:22 - 2019-04-12 21:24 - 000000000 ____D C:\FRST
2019-04-12 21:20 - 2019-04-12 21:20 - 001793024 _____ (Farbar) C:\Users\Patrik\Downloads\FRST.exe
2019-04-12 21:17 - 2019-04-12 21:18 - 002434048 _____ (Farbar) C:\Users\Patrik\Downloads\FRST64.exe
2019-04-12 20:48 - 2019-04-12 20:48 - 000000077 _____ C:\windows\system32\Drivers\aswSP.sys.sum
2019-04-08 23:27 - 2019-04-12 20:54 - 000000000 ____D C:\KMPlayer
2019-04-08 23:25 - 2019-04-08 23:26 - 049439248 _____ (PandoraTV) C:\Users\Patrik\Downloads\KMPlayer_4.2.2.24.exe
2019-04-08 23:13 - 2019-04-08 23:13 - 002131880 _____ ( ) C:\Users\Patrik\Downloads\kmplayer_4168747664.exe
2019-04-08 23:02 - 2019-04-12 14:47 - 000000000 ____D C:\Users\Patrik\AppData\Roaming\uTorrent
2019-04-08 23:02 - 2019-04-08 23:02 - 000000000 ____D C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2019-04-08 22:59 - 2019-04-08 23:00 - 001119512 _____ (emc) C:\Users\Patrik\Downloads\uTorrent221.exe
2019-04-08 20:51 - 2019-04-08 20:51 - 000000000 _____ C:\Users\Patrik\AppData\Local\{FF836D86-DEE3-4B75-90C9-E822EFD7F74C}
2019-04-08 20:51 - 2019-04-08 20:51 - 000000000 _____ C:\Users\Patrik\AppData\Local\{C0FA7BE3-DAC7-46C7-BD08-444D4947ACCD}
2019-04-05 18:26 - 2019-04-05 18:26 - 000719462 _____ C:\Users\Patrik\Downloads\prilohy_9245 (3).zip
2019-04-05 18:25 - 2019-04-05 18:25 - 000719462 _____ C:\Users\Patrik\Downloads\prilohy_9245 (2).zip
2019-04-05 18:25 - 2019-04-05 18:25 - 000719462 _____ C:\Users\Patrik\Downloads\prilohy_9245 (1).zip
2019-04-05 18:22 - 2019-04-05 18:24 - 000719462 _____ C:\Users\Patrik\Downloads\prilohy_9245.zip
2019-03-31 10:16 - 2019-03-31 10:16 - 010823910 _____ C:\Users\Patrik\Downloads\CRE_cenik_DPH_WEB_2019 (4).pdf
2019-03-31 10:16 - 2019-03-31 10:16 - 010823910 _____ C:\Users\Patrik\Downloads\CRE_cenik_DPH_WEB_2019 (3).pdf
2019-03-31 10:15 - 2019-03-31 10:16 - 010823910 _____ C:\Users\Patrik\Downloads\CRE_cenik_DPH_WEB_2019 (2).pdf
2019-03-31 10:15 - 2019-03-31 10:15 - 010823910 _____ C:\Users\Patrik\Downloads\CRE_cenik_DPH_WEB_2019.pdf
2019-03-31 10:15 - 2019-03-31 10:15 - 010823910 _____ C:\Users\Patrik\Downloads\CRE_cenik_DPH_WEB_2019 (1).pdf
2019-03-25 20:37 - 2019-03-25 20:38 - 043031886 _____ C:\Users\Patrik\Downloads\vypoctovy_program_kmbeta (1).zip
2019-03-25 20:37 - 2019-03-25 20:37 - 043031886 _____ C:\Users\Patrik\Downloads\vypoctovy_program_kmbeta.zip
2019-03-18 19:27 - 2019-03-18 19:23 - 000310664 _____ (AVAST Software) C:\windows\system32\aswBoot.exe

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-04-12 21:08 - 2009-07-14 06:34 - 000016160 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2019-04-12 21:08 - 2009-07-14 06:34 - 000016160 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2019-04-12 20:59 - 2009-07-14 06:53 - 000000006 ____H C:\windows\Tasks\SA.DAT
2019-04-12 20:48 - 2011-07-16 16:46 - 000402872 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2019-04-12 20:47 - 2010-12-11 16:29 - 000669132 _____ C:\windows\system32\perfh005.dat
2019-04-12 20:47 - 2010-12-11 16:29 - 000141760 _____ C:\windows\system32\perfc005.dat
2019-04-12 20:47 - 2010-12-11 09:24 - 001584626 _____ C:\windows\system32\PerfStringBackup.INI
2019-04-12 20:47 - 2009-07-14 04:37 - 000000000 ____D C:\windows\inf
2019-04-12 20:40 - 2009-07-14 06:53 - 000032540 _____ C:\windows\Tasks\SCHEDLGU.TXT
2019-04-11 09:24 - 2016-07-31 12:38 - 000002130 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-04-11 09:24 - 2016-07-31 12:38 - 000002089 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-04-10 15:41 - 2012-03-31 14:32 - 000842296 _____ (Adobe) C:\windows\system32\FlashPlayerApp.exe
2019-04-10 15:41 - 2011-06-18 19:09 - 000175160 _____ (Adobe) C:\windows\system32\FlashPlayerCPLApp.cpl
2019-04-10 15:40 - 2011-06-18 19:09 - 000000000 ____D C:\windows\system32\Macromed
2019-04-08 23:42 - 2014-02-01 14:42 - 000000000 ____D C:\ProgramData\Mozilla
2019-04-08 23:40 - 2017-04-02 08:06 - 000000000 ____D C:\Users\Patrik\AppData\LocalLow\Mozilla
2019-03-29 19:50 - 2011-08-14 13:54 - 000000000 ____D C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-03-29 19:50 - 2011-08-14 13:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-03-29 19:50 - 2011-08-14 13:54 - 000000000 ____D C:\Program Files\WinRAR
2019-03-26 12:16 - 2011-05-28 09:42 - 000000000 ____D C:\Users\Patrik\AppData\Roaming\Mozilla
2019-03-18 19:24 - 2019-02-19 21:01 - 000189288 _____ (AVAST Software) C:\windows\system32\Drivers\aswHdsKe.sys
2019-03-18 19:24 - 2018-10-25 18:39 - 000040688 _____ (AVAST Software) C:\windows\system32\Drivers\aswKbd.sys
2019-03-18 19:24 - 2013-12-26 13:38 - 000165256 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys
2019-03-18 19:24 - 2013-04-20 12:35 - 000308608 _____ (AVAST Software) C:\windows\system32\Drivers\aswVmm.sys
2019-03-18 19:24 - 2013-04-20 12:35 - 000072800 _____ (AVAST Software) C:\windows\system32\Drivers\aswRvrt.sys
2019-03-18 19:24 - 2012-03-31 14:09 - 000100984 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2019-03-18 19:24 - 2011-07-16 16:46 - 000140376 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2019-03-18 19:22 - 2019-01-17 19:34 - 000034696 _____ (AVAST Software) C:\windows\system32\Drivers\aswArDisk.sys
2019-03-18 19:22 - 2017-11-21 21:00 - 000172208 _____ (AVAST Software) C:\windows\system32\Drivers\aswArPot.sys
2019-03-18 19:22 - 2011-07-16 16:46 - 000785584 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2019-03-18 19:21 - 2019-01-17 19:40 - 000219472 _____ (AVAST Software) C:\windows\system32\Drivers\aswbidsdriver.sys
2019-03-18 19:21 - 2019-01-17 19:34 - 000255216 _____ (AVAST Software) C:\windows\system32\Drivers\aswblog.sys
2019-03-18 19:21 - 2019-01-17 19:34 - 000158096 _____ (AVAST Software) C:\windows\system32\Drivers\aswbidsh.sys
2019-03-18 19:21 - 2019-01-17 19:34 - 000051128 _____ (AVAST Software) C:\windows\system32\Drivers\aswbuniv.sys
2019-03-18 19:13 - 2018-04-08 19:30 - 000000000 ____D C:\Users\Patrik\AppData\Local\AVAST Software

==================== Files in the root of some directories =======

2016-05-13 17:03 - 2016-05-13 17:03 - 006748160 _____ () C:\Program Files\GUT27EB.tmp
2019-04-08 20:51 - 2019-04-08 20:51 - 000000000 _____ () C:\Users\Patrik\AppData\Local\{C0FA7BE3-DAC7-46C7-BD08-444D4947ACCD}
2016-05-13 17:07 - 2016-05-13 17:07 - 000000000 _____ () C:\Users\Patrik\AppData\Local\{F938AA29-E65A-4F06-8975-026857BF884F}
2019-04-08 20:51 - 2019-04-08 20:51 - 000000000 _____ () C:\Users\Patrik\AppData\Local\{FF836D86-DEE3-4B75-90C9-E822EFD7F74C}

Some files in TEMP:
====================
2015-11-12 11:17 - 2015-11-12 11:17 - 000144008 _____ (© 2015 Microsoft Corporation) C:\Users\Patrik\AppData\Local\Temp\BingSvc.exe
2015-10-05 11:12 - 2015-11-12 11:17 - 001118360 _____ (© 2015 Microsoft Corporation) C:\Users\Patrik\AppData\Local\Temp\BSvcProcessor.exe
2015-10-05 11:12 - 2015-11-12 11:16 - 000170128 _____ (© 2015 Microsoft Corporation) C:\Users\Patrik\AppData\Local\Temp\BSvcUpdater.exe
2015-01-28 18:50 - 2009-04-02 17:07 - 000110592 ____R (Huawei Technologies Co., Ltd.) C:\Users\Patrik\AppData\Local\Temp\DataCard_Setup.exe
2015-10-05 10:11 - 2015-10-05 10:11 - 002308240 _____ (Microsoft Corporation) C:\Users\Patrik\AppData\Local\Temp\DefaultPack.EXE
2011-07-16 18:20 - 2010-12-11 10:13 - 002934112 _____ (TODO: <公司名>) C:\Users\Patrik\AppData\Local\Temp\DeleteVF.exe
2014-02-01 14:59 - 2014-02-01 14:59 - 017888136 _____ (Adobe Systems Incorporated) C:\Users\Patrik\AppData\Local\Temp\fp_pl_pfs_installer.exe
2011-05-28 09:43 - 2010-08-13 17:19 - 000468232 _____ (Microsoft Corporation) C:\Users\Patrik\AppData\Local\Temp\MSNE92.exe
2018-04-08 19:46 - 2018-04-08 19:29 - 002646416 _____ () C:\Users\Patrik\AppData\Local\Temp\removeSZB.exe
2015-01-28 18:50 - 2009-03-18 12:46 - 000007168 ____R () C:\Users\Patrik\AppData\Local\Temp\ResetDevice.exe
2011-12-23 23:21 - 2011-12-23 23:29 - 019809280 _____ () C:\Users\Patrik\AppData\Local\Temp\SkypeSetup.exe
2015-10-22 19:46 - 2015-10-22 19:46 - 043326544 _____ (Google Inc.) C:\Users\Patrik\AppData\Local\Temp\{57076440-4679-4AB6-B242-2F9BF4CD7351}-46.0.2490.80_chrome_installer.exe
2015-11-10 20:35 - 2015-11-10 20:35 - 000970832 _____ () C:\Users\Patrik\AppData\Local\Temp\{85545935-416A-4E1E-828C-C916F3DFF448}-46.0.2490.86_46.0.2490.80_chrome_updater.exe
2016-09-14 02:59 - 2016-09-14 02:59 - 047018584 _____ (Google Inc.) C:\Users\Patrik\AppData\Local\Temp\{D14CDE32-B902-45E0-9326-F9F027EC16F1}-53.0.2785.116_chrome_installer.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\system32\dllhost.exe => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2019-03-28 17:50

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 17-03-2019
Ran by Patrik (12-04-2019 21:37:19)
Running from C:\Users\Patrik\Downloads
Microsoft Windows 7 Starter Service Pack 1 (X86) (2011-05-28 07:34:59)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-4150815367-1157255260-954900486-500 - Administrator - Disabled)
Guest (S-1-5-21-4150815367-1157255260-954900486-501 - Limited - Disabled)
Patrik (S-1-5-21-4150815367-1157255260-954900486-1000 - Administrator - Enabled) => C:\Users\Patrik

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 32 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 32.0.0.171 - Adobe)
Adobe Flash Player 32 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 32.0.0.156 - Adobe Systems Incorporated)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 19.3.2369 - AVAST Software)
Avast Secure Browser (HKLM\...\Avast Secure Browser) (Version: 72.0.1174.121 - Autoři prohlížeče Avast Secure Browser)
Avast Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.4.136.333 - AVAST Software) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 73.0.3683.103 - Google Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.7 - Google LLC) Hidden
Microsoft .NET Framework 4.7 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM\...\{95140000-00AF-0409-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (HKLM\...\{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (HKLM\...\A6A8668C0A13640CA28FE2A7D9654BE4AE478B13) (Version: 07/30/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom Bluetooth (09/11/2009 6.2.0.9407) (HKLM\...\755087041320E005CB1E8A67C5C55A260EB81B90) (Version: 09/11/2009 6.2.0.9407 - Broadcom)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinRAR 5.70 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-4150815367-1157255260-954900486-1000_Classes\CLSID\{93a3111f-4f74-4ed8-895e-d9708497629e}\InprocServer32 -> C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll (Mindspark Interactive Network -> MindSpark)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshlstb.dll [2011-05-27] (WinZip Computing -> WinZip Computing, S.L.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshlstb.dll [2011-05-27] (WinZip Computing -> WinZip Computing, S.L.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\windows\system32\igfxpph.dll [2010-10-25] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshlstb.dll [2011-05-27] (WinZip Computing -> WinZip Computing, S.L.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {18B0990A-1F26-4DB4-8EFC-276C748A113D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {4A269048-F8D8-462C-97E9-91F24BAFDCE0} - System32\Tasks\{0A5F7A48-060E-49E3-A507-2C472F5FBF9C} => C:\Program Files\Skype\\Phone\Skype.exe
Task: {5680CF31-6739-49A7-85FE-DC3929C82EF7} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {755C4AA5-D8A5-457B-A218-9DEA28F41DBE} - System32\Tasks\avastBCLRestartS-1-5-21-4150815367-1157255260-954900486-1000 => C:\Program Files\Mozilla Firefox\firefox.exe
Task: {768B89FF-097D-4896-860F-BC83C9C8164C} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {81B979EE-41CB-48CA-B78B-B82C73A35D9C} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe (AVAST Software s.r.o. -> AVAST Software) <==== ATTENTION
Task: {84A47980-C0F8-4B20-ABE1-8F09559F0A2C} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\windows\system32\Macromed\Flash\FlashUtil32_32_0_0_156_Plugin.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {9C54834E-F590-4174-99E2-9152EEF86E49} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe (AVAST Software s.r.o. -> AVAST Software) <==== ATTENTION
Task: {A4440649-8B98-446C-B6FA-312C5A7A26C1} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {AC87C134-6D17-4EC7-BBA8-FFC421737C2F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {D39716BC-FADF-4AAC-8B8D-BAA8DB9AE8B4} - System32\Tasks\{41238BE1-779C-4312-B1C9-184B4E7CFB33} => "c:\program files\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.18.0.112/cs/abandoninstall?page=tsMain
Task: {D5365936-9A20-4D52-B0F2-9DC2E9953CA3} - System32\Tasks\{7561C04B-69B7-4056-BAFE-2A4500A1EDA6} => C:\Program Files\Skype\\Phone\Skype.exe
Task: {DD4F9CE7-5C85-4508-AC2B-4058BCEBE51C} - System32\Tasks\{813377BA-2EE9-4CBE-9568-0039A6A51AE5} => "c:\program files\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.18.0.112/cs/abandoninstall?page=tsMain
Task: {E82580C0-502A-4DA2-9CF9-E1E74A517B25} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Inc. -> Adobe)
Task: {F783E552-D354-4EC4-92F6-76D4A79FDC1A} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee Anti-Virus And Anti-Spyware\upgrade.exe (McAfee, Inc. -> McAfee, Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2017-09-18 21:27 - 2017-09-18 21:27 - 000452608 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\21d6f7363e0a6ff6999a7ce4e83a59e8\IAStorUtil.ni.dll
2010-12-11 09:29 - 2010-03-03 22:09 - 000032768 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\cs-CZ\IAStorIcon.resources.dll
2010-12-11 09:29 - 2010-03-03 22:08 - 001046528 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IntelVisualDesign.dll
2010-12-11 09:29 - 2010-03-03 22:09 - 000004608 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\cs-CZ\IntelVisualDesign.resources.dll
2010-12-11 09:29 - 2010-03-03 22:08 - 000163328 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorUIHelper.dll
2010-12-11 10:22 - 2009-08-21 19:12 - 000090112 _____ () C:\Program Files\Lenovo\Active Protection System\MUI\0405\TpShocks.dll
2011-07-16 20:12 - 2011-07-16 20:12 - 001101824 _____ () C:\windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\MFC80.DLL
2011-07-16 20:12 - 2011-07-16 20:12 - 001093120 _____ () C:\windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\MFC80U.DLL
2017-09-18 21:27 - 2017-09-18 21:27 - 000019968 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgrSvc\d30cc13aa8719dd416ea041e9e5a8197\IAStorDataMgrSvc.ni.exe
2017-09-18 21:27 - 2017-09-18 21:27 - 000176640 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgr\9c3c45033b328dd747682e6b6ad79d85\IAStorDataMgr.ni.dll
2017-09-18 21:29 - 2017-09-18 21:29 - 000170496 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\2b5f4a6496e65d431698f64ba7160604\IsdiInterop.ni.dll
2010-12-11 09:29 - 2010-03-03 22:08 - 000058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2010-12-11 09:29 - 2010-03-03 21:53 - 000280064 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\ISDI.dll
2011-07-17 00:30 - 2011-07-17 00:30 - 000225280 _____ () C:\windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcm90.dll
2010-12-11 09:29 - 2010-03-03 22:09 - 000006656 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\cs-CZ\IAStorDataMgr.resources.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2019-01-04 19:37 - 000000825 _____ C:\windows\system32\drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\Driver;C:\Program Files\Lenovo\Bluetooth Software\;C:\Program Files\Windows Live\Shared
HKU\S-1-5-21-4150815367-1157255260-954900486-1000\Control Panel\Desktop\\Wallpaper -> %windir%\web\wallpaper\windows\img0.jpg
DNS Servers: 10.255.255.10 - 10.255.255.20
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{E2BDAFB8-3191-467B-B9A3-7ED53570AE24}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe No File
FirewallRules: [{D3390092-5159-4784-9A08-52FB41FDC608}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe No File
FirewallRules: [{EA9C195E-21CD-4CAE-ABF4-B5C532AD0CA6}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3E915093-2EAA-4603-96CA-1DBF443860EC}] => (Allow) LPort=2869
FirewallRules: [{C7764EE7-79FF-4806-86AA-12A6A483E8AB}] => (Allow) LPort=1900
FirewallRules: [{FFEF3702-763A-43DC-A5F4-CA9D55B3CCA3}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4D3725C1-C636-47B4-9FC0-B9ADE2255CF1}] => (Allow) C:\Program Files\Windows Live\Mesh\MOE.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{AC1E7F6F-44A7-4B8D-BCD4-A4779E0AF116}] => (Allow) C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{7B7B5160-E83E-4590-B87E-9C669AD60D51}] => (Allow) C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{A745C376-45FF-4574-85FF-8E2BF1B179A1}] => (Allow) C:\windows\System32\IgrsSvcs.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{B96B444F-4E6A-44EB-8E4E-F30C8199CAF5}] => (Allow) C:\windows\System32\IgrsSvcs.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{F9DCEA51-A3FF-4980-9331-234F8A7849B8}] => (Allow) C:\Program Files\Lenovo\ReadyComm\ReadyCom.exe No File
FirewallRules: [{A64F6E7E-7A79-4BEC-9C9E-7BD681FBC2DF}] => (Allow) C:\Program Files\Lenovo\ReadyComm\ReadyComm.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{2A4E2A38-FF8E-418F-965E-A0528D77BB54}] => (Allow) C:\Program Files\Lenovo\ReadyComm\Projectionist.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{B4574F6F-C4A3-4057-8376-9B42B1866E6B}] => (Allow) C:\Program Files\Lenovo\ReadyComm\Projectionist.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{140BE23D-11C0-48DD-AE16-FF8A8D06E7F0}] => (Allow) C:\Program Files\Lenovo\ReadyComm\AppSvc.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{2E14A195-8051-4388-A253-B0C784EFA013}] => (Allow) C:\Program Files\Lenovo\ReadyComm\AppSvc.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{C20F6AC3-DE2A-49B4-8FB0-94577E2ED86B}] => (Allow) C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{BDD809F3-21C5-46F3-B942-8EFB85BD0348}] => (Allow) C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{77371890-6EB4-4CF1-8815-007837538BCC}] => (Allow) C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{1E2A049F-B7B6-4926-99FB-13239D0413B3}] => (Allow) C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [TCP Query User{3A4CFFB4-B3FD-48FF-B51B-05F177876752}C:\program files\altitude\altitude.exe] => (Block) C:\program files\altitude\altitude.exe No File
FirewallRules: [UDP Query User{41293234-CA28-4B17-B988-A6D4210CBB3B}C:\program files\altitude\altitude.exe] => (Block) C:\program files\altitude\altitude.exe No File
FirewallRules: [TCP Query User{65D3EA91-B614-42F6-9844-84A025F787B0}C:\program files\altitude\altitude.exe] => (Allow) C:\program files\altitude\altitude.exe No File
FirewallRules: [UDP Query User{E7CAF924-B712-4626-BA40-82F313CA54FA}C:\program files\altitude\altitude.exe] => (Allow) C:\program files\altitude\altitude.exe No File
FirewallRules: [{B357237C-A2E1-439F-95DC-2D415CE42A5B}] => (Allow) C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DBCD8051-89CF-4F7F-A1C2-7C84AB1078A9}] => (Allow) C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe (AVAST Software s.r.o. -> AVAST Software)
FirewallRules: [TCP Query User{DDF78533-FA69-4592-8B0A-B71D1194B27C}C:\users\patrik\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\patrik\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [UDP Query User{D8F84340-183A-4CD9-BE4A-C38861263E1C}C:\users\patrik\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\patrik\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [{AFF2DA28-CC2F-45B6-A5B0-3AB24FF10AD5}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)

==================== Restore Points =========================

06-08-2018 19:15:56 Naplánovaný kontrolní bod
25-12-2018 19:40:00 Naplánovaný kontrolní bod
02-04-2019 11:04:37 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/12/2019 09:29:42 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program FRST.exe verze 17.3.2019.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 1604

Čas spuštění: 01d4f1651a92c9b1

Čas ukončení: 21

Cesta k aplikaci: C:\Users\Patrik\Downloads\FRST.exe

ID hlášení: 362661d5-5d59-11e9-a1a5-f0def12a5d00

Error: (04/12/2019 08:41:07 PM) (Source: ESENT) (EventID: 413) (User: )
Description: DllHost (448) WebCacheLocal: Nový soubor protokolu nelze vytvořit, protože není možné zapisovat na jednotku protokolu. Jednotka může být označena jen pro čtení, na disku je nedostatek místa nebo je jednotka chybně nakonfigurována či poškozena. Chyba -1022

Error: (04/12/2019 08:41:07 PM) (Source: ESENT) (EventID: 488) (User: )
Description: DllHost (448) WebCacheLocal: Pokus o vytvoření souboru C:\Users\Patrik\AppData\Local\Microsoft\Windows\WebCache\V01tmp.log se nezdařil. Došlo k systémové chybě 1393 (0x00000571): Struktura disku je porušena a není čitelná. . Operace vytvoření souboru se nezdaří a dojde k chybě -1022 (0xfffffc02).

Error: (04/12/2019 08:41:07 PM) (Source: ESENT) (EventID: 413) (User: )
Description: DllHost (448) WebCacheLocal: Nový soubor protokolu nelze vytvořit, protože není možné zapisovat na jednotku protokolu. Jednotka může být označena jen pro čtení, na disku je nedostatek místa nebo je jednotka chybně nakonfigurována či poškozena. Chyba -1022

Error: (04/12/2019 08:41:07 PM) (Source: ESENT) (EventID: 488) (User: )
Description: DllHost (448) WebCacheLocal: Pokus o vytvoření souboru C:\Users\Patrik\AppData\Local\Microsoft\Windows\WebCache\V01tmp.log se nezdařil. Došlo k systémové chybě 1393 (0x00000571): Struktura disku je porušena a není čitelná. . Operace vytvoření souboru se nezdaří a dojde k chybě -1022 (0xfffffc02).

Error: (04/12/2019 08:41:07 PM) (Source: ESENT) (EventID: 413) (User: )
Description: DllHost (448) WebCacheLocal: Nový soubor protokolu nelze vytvořit, protože není možné zapisovat na jednotku protokolu. Jednotka může být označena jen pro čtení, na disku je nedostatek místa nebo je jednotka chybně nakonfigurována či poškozena. Chyba -1022

Error: (04/12/2019 08:41:07 PM) (Source: ESENT) (EventID: 488) (User: )
Description: DllHost (448) WebCacheLocal: Pokus o vytvoření souboru C:\Users\Patrik\AppData\Local\Microsoft\Windows\WebCache\V01tmp.log se nezdařil. Došlo k systémové chybě 1393 (0x00000571): Struktura disku je porušena a není čitelná. . Operace vytvoření souboru se nezdaří a dojde k chybě -1022 (0xfffffc02).

Error: (04/12/2019 08:41:07 PM) (Source: ESENT) (EventID: 413) (User: )
Description: DllHost (448) WebCacheLocal: Nový soubor protokolu nelze vytvořit, protože není možné zapisovat na jednotku protokolu. Jednotka může být označena jen pro čtení, na disku je nedostatek místa nebo je jednotka chybně nakonfigurována či poškozena. Chyba -1022


System errors:
=============
Error: (04/12/2019 08:59:23 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
cdrom

Error: (04/12/2019 08:50:56 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
cdrom

Error: (04/12/2019 08:44:24 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Microsoft .NET Framework NGEN v4.0.30319_X86 bylo dosaženo časového limitu (30000 ms).

Error: (04/12/2019 08:41:40 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Struktura systému souborů disku je poškozená a je nepoužitelná.
Je nutné na svazek \Device\HarddiskVolume2 spustit nástroj chkdsk.

Error: (04/12/2019 08:41:40 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Struktura systému souborů disku je poškozená a je nepoužitelná.
Je nutné na svazek \Device\HarddiskVolume2 spustit nástroj chkdsk.

Error: (04/12/2019 08:41:38 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Struktura systému souborů disku je poškozená a je nepoužitelná.
Je nutné na svazek \Device\HarddiskVolume2 spustit nástroj chkdsk.

Error: (04/12/2019 08:41:38 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Struktura systému souborů disku je poškozená a je nepoužitelná.
Je nutné na svazek \Device\HarddiskVolume2 spustit nástroj chkdsk.

Error: (04/12/2019 08:41:38 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Struktura systému souborů disku je poškozená a je nepoužitelná.
Je nutné na svazek \Device\HarddiskVolume2 spustit nástroj chkdsk.


Windows Defender:
===================================
Date: 2011-12-23 22:25:11.244
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=159633
Název:Adware:Win32/OpenCandy
ID:159633
Závažnost:Nízké
Kategorie:Software placený zobrazováním reklamy
Nalezeno v cestě:containerfile:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe;file:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe->(inno#005940)
Typ zjišťování:Konkrétní
Zdroj zjišťování:Systém
Stav:Neznámý
Uživatel:NT AUTHORITY\SYSTEM
Název procesu:

Date: 2011-12-22 21:41:09.873
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=159633
Název:Adware:Win32/OpenCandy
ID:159633
Závažnost:Nízké
Kategorie:Software placený zobrazováním reklamy
Nalezeno v cestě:containerfile:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe;file:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe->(inno#005940)
Typ zjišťování:Konkrétní
Zdroj zjišťování:Systém
Stav:Neznámý
Uživatel:NT AUTHORITY\SYSTEM
Název procesu:

Date: 2011-12-19 21:27:24.778
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=159633
Název:Adware:Win32/OpenCandy
ID:159633
Závažnost:Nízké
Kategorie:Software placený zobrazováním reklamy
Nalezeno v cestě:containerfile:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe;file:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe->(inno#005940)
Typ zjišťování:Konkrétní
Zdroj zjišťování:Systém
Stav:Neznámý
Uživatel:NT AUTHORITY\SYSTEM
Název procesu:

Date: 2011-12-18 19:20:02.461
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=159633
Název:Adware:Win32/OpenCandy
ID:159633
Závažnost:Nízké
Kategorie:Software placený zobrazováním reklamy
Nalezeno v cestě:containerfile:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe;file:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe->(inno#005940)
Typ zjišťování:Konkrétní
Zdroj zjišťování:Systém
Stav:Neznámý
Uživatel:NT AUTHORITY\SYSTEM
Název procesu:

Date: 2011-12-18 07:34:20.478
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=159633
Název:Adware:Win32/OpenCandy
ID:159633
Závažnost:Nízké
Kategorie:Software placený zobrazováním reklamy
Nalezeno v cestě:containerfile:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe;file:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe->(inno#005940)
Typ zjišťování:Konkrétní
Zdroj zjišťování:Systém
Stav:Neznámý
Uživatel:NT AUTHORITY\SYSTEM
Název procesu:

Date: 2016-09-30 20:04:11.244
Description:
Prohledávání Windows Defender zjistilo chybu při pokusu o načtení podpisů a pokusí se o obnovení sady podpisů, jejichž správnost je potvrzena.
Podpisy, které se měly načíst:Aktuální
Kód chyby:0x80070002
Popis chyby:Systém nemůže nalézt uvedený soubor.
Verze podpisu:0.0.0.0
Verze modulu:0.0.0.0

Date: 2016-09-30 20:04:10.339
Description:
Program Windows Defender zjistil chybu při pokusu o aktualizaci.
Nová verze podpisu:
Předchozí verze podpisu:
Zdroj aktualizace:Složka aktualizace podpisů
Typ podpisu:Antispywarový program
Typ aktualizace:Delta
Uživatel:NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu:
Kód chyby:0x80070002
Popis chyby:Systém nemůže nalézt uvedený soubor.

Date: 2016-08-26 20:19:45.088
Description:
Prohledávání Windows Defender zjistilo chybu při pokusu o načtení podpisů a pokusí se o obnovení sady podpisů, jejichž správnost je potvrzena.
Podpisy, které se měly načíst:Aktuální
Kód chyby:0x80070002
Popis chyby:Systém nemůže nalézt uvedený soubor.
Verze podpisu:0.0.0.0
Verze modulu:0.0.0.0

Date: 2016-08-26 20:19:45.010
Description:
Program Windows Defender zjistil chybu při pokusu o aktualizaci.
Nová verze podpisu:
Předchozí verze podpisu:
Zdroj aktualizace:Složka aktualizace podpisů
Typ podpisu:Antispywarový program
Typ aktualizace:Delta
Uživatel:NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu:
Kód chyby:0x80070002
Popis chyby:Systém nemůže nalézt uvedený soubor.

Date: 2016-08-26 20:05:28.139
Description:
Prohledávání Windows Defender zjistilo chybu při pokusu o načtení podpisů a pokusí se o obnovení sady podpisů, jejichž správnost je potvrzena.
Podpisy, které se měly načíst:Aktuální
Kód chyby:0x80070002
Popis chyby:Systém nemůže nalézt uvedený soubor.
Verze podpisu:0.0.0.0
Verze modulu:0.0.0.0

==================== Memory info ===========================

Processor: Intel(R) Atom(TM) CPU N550 @ 1.50GHz
Percentage of memory in use: 95%
Total physical RAM: 1013.42 MB
Available physical RAM: 42.38 MB
Total Virtual: 2037.42 MB
Available Virtual: 313.3 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:188.94 GB) (Free:149.04 GB) NTFS
Drive d: (LENOVO) (Fixed) (Total:29 GB) (Free:28.22 GB) NTFS

\\?\Volume{86ec045f-04f5-11e0-a164-806e6f6e6963}\ () (Fixed) (Total:0.2 GB) (Free:0.16 GB) NTFS

==================== MBR & Partition Table ==================

==================== End of Addition.txt ============================

Re: Prosím o kontrolu logu, hlásí poškození systémových soub

Napsal: 12 dub 2019 21:05
od Rudy
Zdravím!
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Re: Prosím o kontrolu logu, hlásí poškození systémových soub

Napsal: 12 dub 2019 21:26
od Janka30
Dobrý večer, posílám

# -------------------------------
# Malwarebytes AdwCleaner 7.3.0.0
# -------------------------------
# Build: 04-04-2019
# Database: 2019-04-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 04-12-2019
# Duration: 00:00:23
# OS: Windows 7 Starter
# Cleaned: 51
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Program Files\VIDEODOWNLOADCONVERTER_4Z
Deleted C:\Program Files\video download converter
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\video download converter
Deleted C:\Users\Patrik\AppData\LocalLow\iac
Deleted C:\Users\Patrik\AppData\Local\Temp\APNLogs
Deleted C:\Users\Patrik\AppData\Local\Temp\AskSearch
Deleted C:\Users\Patrik\AppData\Local\VIDEODOWNLOADCONVERTER_4Z

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}
Deleted HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{48586425-6BB7-4F51-8DC6-38C88E3EBB58}
Deleted HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{38122A36-83B2-46B8-B39A-EC72A4614A07}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A86782D8-7B41-452F-A217-1854F72DBA54}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|VideoDownloadConverter Search Scope Monitor
Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|VideoDownloadConverter_4z Browser Plugin Loader
Deleted HKLM\SOFTWARE\MozillaPlugins\@VideoDownloadConverter_4z.com\Plugin
Deleted HKLM\SOFTWARE\Mozilla\Firefox\Extensions|4zffxtbr@VideoDownloadConverter_4z.com
Deleted HKLM\Software\Classes\CLSID\{13119113-0854-469D-807A-171568457991}
Deleted HKLM\Software\Classes\CLSID\{33119133-0854-469D-807A-171568457991}
Deleted HKLM\Software\Classes\CLSID\{3D429207-4689-492D-A0E5-CDC5DFBB5005}
Deleted HKLM\Software\Classes\CLSID\{4128C64D-F0DD-4811-9405-D22294E8151F}
Deleted HKLM\Software\Classes\CLSID\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
Deleted HKLM\Software\Classes\CLSID\{66292684-B2C2-4C7C-B3D2-BF446E30744C}
Deleted HKLM\Software\Classes\CLSID\{A86782D8-7B41-452F-A217-1854F72DBA54}
Deleted HKLM\Software\Classes\CLSID\{DD385519-22E7-4BE2-8A8D-35C66DF4858E}
Deleted HKLM\Software\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
Deleted HKLM\Software\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Deleted HKLM\Software\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
Deleted HKLM\Software\Classes\Interface\{66D59105-FE06-43A4-B292-EB0097E9EB74}
Deleted HKLM\Software\Classes\Interface\{9103C314-C4E2-4463-8934-B19BCB46236D}
Deleted HKLM\Software\Classes\Prod.cap
Deleted HKLM\Software\Classes\TypeLib\{03119103-0854-469D-807A-171568457991}
Deleted HKLM\Software\Classes\TypeLib\{192F487E-E812-40C0-B0DE-CB4BFA20F37B}
Deleted HKLM\Software\Classes\TypeLib\{2D3826A1-F3E8-45D6-94B5-C26D8EC0073B}
Deleted HKLM\Software\Classes\TypeLib\{F1F328EB-F5A5-432B-A54C-05F3EF5B0BD8}
Deleted HKLM\Software\Classes\TypeLib\{FB0E8A09-F08C-44CF-9E15-97ADAC016248}
Deleted HKLM\Software\Classes\TypeLib\{FE8DBB09-C3D3-4477-80CB-D38914B94BB8}
Deleted HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2d9083ce-8758-4704-ba57-3c891d7452bd}
Deleted HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3d429207-4689-492d-a0e5-cdc5dfbb5005}
Deleted HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9103c314-c4e2-4463-8934-b19bcb46236d}
Deleted HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{97cef41c-5055-474a-855a-892d4fe3e596}
Deleted HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d375ee64-f893-498a-a0e9-0e9829c88c3d}
Deleted HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}
Deleted HKLM\Software\Microsoft\Internet Explorer\Toolbar|{48586425-6BB7-4F51-8DC6-38C88E3EBB58}
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\Preapproved\{38122A36-83B2-46B8-B39A-EC72A4614A07}
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\Preapproved\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\Preapproved\{A86782D8-7B41-452F-A217-1854F72DBA54}

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [6927 octets] - [12/04/2019 22:15:24]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Re: Prosím o kontrolu logu, hlásí poškození systémových soub

Napsal: 13 dub 2019 10:25
od Rudy
OK. Dejte nové logy FRST+Addition.

Re: Prosím o kontrolu logu, hlásí poškození systémových soub

Napsal: 13 dub 2019 11:25
od Janka30
Dobrý den,

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-03-2019
Ran by Patrik (administrator) on PATRIK-PC (13-04-2019 12:08:55)
Running from C:\Users\Patrik\Downloads
Loaded Profiles: Patrik (Available Profiles: Patrik)
Platform: Microsoft Windows 7 Starter Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 10 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Update\GoogleUpdate.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler.exe
(Intel Corporation -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo (Beijing) Limited -> Lenovo Group Limited) C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\IgrsSvcs.exe
(Lenovo (Beijing) Limited -> Lenovo(beijing) Limited) C:\Program Files\Lenovo\Energy Management\utility.exe
(Lenovo (Beijing) Limited -> Lenovo.) C:\Windows\System32\TPHDEXLG.exe
(Lenovo (Beijing) Limited -> Lenovo (Beijing) Limited) C:\Program Files\Lenovo\Energy Management\Energy Management.exe
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation -> © 2015 Microsoft Corporation) C:\Users\Patrik\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Intel Corporation -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-03] (Intel Corporation -> Intel Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1615144 2010-01-14] (Synaptics Incorporated -> Synaptics Incorporated)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [35184 2008-12-03] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [VeriFaceManager] => C:\Program Files\Lenovo\VeriFace\PManage.exe
HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [186208 2009-09-02] (Lenovo (Beijing) Limited -> Lenovo.)
HKLM\...\Run: [EnergyUtility] => C:\Program Files\Lenovo\Energy Management\utility.exe [4114288 2009-10-23] (Lenovo (Beijing) Limited -> Lenovo(beijing) Limited)
HKLM\...\Run: [Energy Management] => C:\Program Files\Lenovo\Energy Management\Energy Management.exe [5064560 2009-10-23] (Lenovo (Beijing) Limited -> Lenovo (Beijing) Limited)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [222088 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-4150815367-1157255260-954900486-1000\...\Run: [BingSvc] => C:\Users\Patrik\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (Microsoft Corporation -> © 2015 Microsoft Corporation)
HKU\S-1-5-21-4150815367-1157255260-954900486-1000\...\MountPoints2: {3057baf8-a6d8-11e4-8762-f0def12a5d00} - E:\AutoRun.exe
HKLM\...\Drivers32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32: [VIDC.VP80] => vp8vfw.dll
HKLM\Software\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> C:\Program Files\AVAST Software\Browser\Application\72.0.1174.121\Installer\chrmstp.exe [2019-03-09] (AVAST Software s.r.o. -> AVAST Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\73.0.3683.103\Installer\chrmstp.exe [2019-04-11] (Google LLC -> Google Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\Lenovo\Bluetooth Software\\BtwCP.dll [2009-10-02] (Broadcom Corporation -> Broadcom Corporation.)
HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2010-12-11]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation -> Broadcom Corporation.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.255.255.10 10.255.255.20 8.8.8.8 192.168.1.1
Tcpip\..\Interfaces\{333AA3A3-6A8E-4BF6-920F-8B5D6728AA43}: [DhcpNameServer] 10.255.255.10 10.255.255.20 8.8.8.8 192.168.1.1
Tcpip\..\Interfaces\{F9BD8CE7-C746-42BD-AE3B-7630DE2C5BB9}: [DhcpNameServer] 213.46.172.36 213.46.172.37

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/?clid=22668
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-4150815367-1157255260-954900486-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/?clid=22668
HKU\S-1-5-21-4150815367-1157255260-954900486-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
URLSearchHook: HKU\S-1-5-21-4150815367-1157255260-954900486-1000 - (No Name) - {93a3111f-4f74-4ed8-895e-d9708497629e} - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll No File
SearchScopes: HKLM -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4150815367-1157255260-954900486-1000 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4150815367-1157255260-954900486-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-4150815367-1157255260-954900486-1000 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

FireFox:
========
FF ProfilePath: C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\1o4b6nv1.default-1454484391215 [2019-04-08]
FF Homepage: Mozilla\Firefox\Profiles\1o4b6nv1.default-1454484391215 -> hxxp://www.seznam.cz/
FF Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\1o4b6nv1.default-1454484391215\Extensions\sp@avast.com.xpi [2019-03-26]
FF Extension: (Avast Online Security) - C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\1o4b6nv1.default-1454484391215\Extensions\wrc@avast.com.xpi [2018-07-17]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_32_0_0_171.dll [2019-04-13] (Adobe Inc. -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-29] (Google Inc -> Google LLC)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-29] (Google Inc -> Google LLC)
FF Plugin: @VideoDownloadConverter_4z.com/Plugin -> C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll [No File]

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Profile: C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default [2019-04-13]
CHR Extension: (Avast Online Security) - C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-02-20]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-05]
CHR Extension: (Chrome Media Router) - C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-03-24]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5317920 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-08] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [311592 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-08] (AVAST Software s.r.o. -> AVAST Software)
S3 AvastSecureBrowserElevationService; C:\Program Files\AVAST Software\Browser\Application\72.0.1174.121\elevation_service.exe [1070600 2019-03-06] (AVAST Software s.r.o. -> AVAST Software)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [595232 2009-10-02] (Broadcom Corporation -> Broadcom Corporation.)
R2 IGRS; C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe [38152 2009-07-14] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
S3 Lenovo ReadyComm AppSvc; C:\Program Files\Lenovo\ReadyComm\AppSvc.exe [509192 2009-08-14] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
S3 Lenovo ReadyComm ConnSvc; C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe [579400 2009-09-22] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
S3 PS_MDP; C:\Program Files\Lenovo\ReadyComm\PS_MDP.dll [276296 2009-07-16] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
R2 ReadyComm.DirectRouter; C:\Program Files\Lenovo\ReadyComm\common\router.dll [103688 2009-07-14] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
S2 0256851461221501mcinstcleanup; C:\windows\TEMP\025685~1.EXE -cleanup -nolog [X]
S2 VideoDownloadConverter_4zService; C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zbarsvc.exe [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ACPIVPC; C:\windows\System32\DRIVERS\AcpiVpc.sys [23136 2010-01-20] (Lenovo (Beijing) Limited -> Lenovo Corporation)
R0 aswArDisk; C:\windows\System32\drivers\aswArDisk.sys [34696 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\windows\System32\drivers\aswArPot.sys [172208 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\windows\System32\drivers\aswbidsdriver.sys [219472 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\windows\System32\drivers\aswbidsh.sys [158096 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R0 aswblog; C:\windows\System32\drivers\aswblog.sys [255216 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\windows\System32\drivers\aswbuniv.sys [51128 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R1 aswHdsKe; C:\windows\System32\drivers\aswHdsKe.sys [189288 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\windows\System32\drivers\aswKbd.sys [40688 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\windows\System32\drivers\aswMonFlt.sys [140376 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\windows\System32\drivers\aswRdr2.sys [100984 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\windows\System32\drivers\aswRvrt.sys [72800 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\windows\System32\drivers\aswSnx.sys [785584 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\windows\System32\drivers\aswSP.sys [402872 2019-04-12] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\windows\System32\drivers\aswStm.sys [165256 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\windows\System32\drivers\aswVmm.sys [308608 2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
R3 BCM43XX; C:\windows\System32\DRIVERS\bcmwl6.sys [2707448 2010-12-11] (Broadcom Corporation -> Broadcom Corporation)
S3 Bridge0; C:\windows\System32\drivers\WDBridge.sys [63240 2009-07-28] (Lenovo (Beijing) Limited -> Lenovo)
S3 btusbflt; C:\windows\System32\drivers\btusbflt.sys [43944 2009-07-01] (Broadcom Corporation -> Broadcom Corporation.)
S3 btwaudio; C:\windows\System32\drivers\btwaudio.sys [86056 2009-10-02] (Broadcom Corporation -> Broadcom Corporation.)
S3 btwavdt; C:\windows\System32\DRIVERS\btwavdt.sys [108072 2009-08-29] (Broadcom Corporation -> Broadcom Corporation.)
S3 btwl2cap; C:\windows\System32\DRIVERS\btwl2cap.sys [29472 2009-04-08] (Broadcom Corporation -> Broadcom Corporation.)
S3 btwrchid; C:\windows\System32\DRIVERS\btwrchid.sys [18472 2009-08-29] (Broadcom Corporation -> Broadcom Corporation.)
R3 igfx; C:\windows\System32\DRIVERS\igdkmd32.sys [4807168 2010-10-25] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
R3 k57nd60x; C:\windows\System32\DRIVERS\k57nd60x.sys [275496 2010-03-21] (Broadcom Corporation -> Broadcom Corporation)
S3 RSUSBSTOR; C:\windows\System32\Drivers\RtsUStor.sys [174592 2009-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.)
R3 usbsmi; C:\windows\System32\DRIVERS\SMIksdrv.sys [171648 2009-12-18] (Microsoft Windows Hardware Compatibility Publisher -> SMI)
R3 wdmirror; C:\windows\System32\DRIVERS\WDMirror.sys [11792 2009-07-16] (Lenovo (Beijing) Limited -> Windows (R) Codename Longhorn DDK provider)
S3 Huawei; system32\DRIVERS\ewdcsc.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-04-13 12:08 - 2019-04-13 12:13 - 000017985 _____ C:\Users\Patrik\Downloads\FRST.txt
2019-04-12 22:13 - 2019-04-12 22:15 - 000000000 ____D C:\AdwCleaner
2019-04-12 22:12 - 2019-04-12 22:12 - 007025360 _____ (Malwarebytes) C:\Users\Patrik\Downloads\adwcleaner_7.3.exe
2019-04-12 21:37 - 2019-04-12 21:42 - 000031486 _____ C:\Users\Patrik\Downloads\Addition.txt
2019-04-12 21:22 - 2019-04-13 12:08 - 000000000 ____D C:\FRST
2019-04-12 21:20 - 2019-04-12 21:20 - 001793024 _____ (Farbar) C:\Users\Patrik\Downloads\FRST.exe
2019-04-12 20:48 - 2019-04-12 20:48 - 000000077 _____ C:\windows\system32\Drivers\aswSP.sys.sum
2019-04-08 23:27 - 2019-04-12 20:54 - 000000000 ____D C:\KMPlayer
2019-04-08 23:25 - 2019-04-08 23:26 - 049439248 _____ (PandoraTV) C:\Users\Patrik\Downloads\KMPlayer_4.2.2.24.exe
2019-04-08 23:13 - 2019-04-08 23:13 - 002131880 _____ ( ) C:\Users\Patrik\Downloads\kmplayer_4168747664.exe
2019-04-08 23:02 - 2019-04-12 14:47 - 000000000 ____D C:\Users\Patrik\AppData\Roaming\uTorrent
2019-04-08 23:02 - 2019-04-08 23:02 - 000000000 ____D C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2019-04-08 22:59 - 2019-04-08 23:00 - 001119512 _____ (emc) C:\Users\Patrik\Downloads\uTorrent221.exe
2019-04-08 20:51 - 2019-04-08 20:51 - 000000000 _____ C:\Users\Patrik\AppData\Local\{FF836D86-DEE3-4B75-90C9-E822EFD7F74C}
2019-04-08 20:51 - 2019-04-08 20:51 - 000000000 _____ C:\Users\Patrik\AppData\Local\{C0FA7BE3-DAC7-46C7-BD08-444D4947ACCD}
2019-04-05 18:26 - 2019-04-05 18:26 - 000719462 _____ C:\Users\Patrik\Downloads\prilohy_9245 (3).zip
2019-04-05 18:25 - 2019-04-05 18:25 - 000719462 _____ C:\Users\Patrik\Downloads\prilohy_9245 (2).zip
2019-04-05 18:25 - 2019-04-05 18:25 - 000719462 _____ C:\Users\Patrik\Downloads\prilohy_9245 (1).zip
2019-04-05 18:22 - 2019-04-05 18:24 - 000719462 _____ C:\Users\Patrik\Downloads\prilohy_9245.zip
2019-03-31 10:16 - 2019-03-31 10:16 - 010823910 _____ C:\Users\Patrik\Downloads\CRE_cenik_DPH_WEB_2019 (4).pdf
2019-03-31 10:16 - 2019-03-31 10:16 - 010823910 _____ C:\Users\Patrik\Downloads\CRE_cenik_DPH_WEB_2019 (3).pdf
2019-03-31 10:15 - 2019-03-31 10:16 - 010823910 _____ C:\Users\Patrik\Downloads\CRE_cenik_DPH_WEB_2019 (2).pdf
2019-03-31 10:15 - 2019-03-31 10:15 - 010823910 _____ C:\Users\Patrik\Downloads\CRE_cenik_DPH_WEB_2019.pdf
2019-03-31 10:15 - 2019-03-31 10:15 - 010823910 _____ C:\Users\Patrik\Downloads\CRE_cenik_DPH_WEB_2019 (1).pdf
2019-03-25 20:37 - 2019-03-25 20:38 - 043031886 _____ C:\Users\Patrik\Downloads\vypoctovy_program_kmbeta (1).zip
2019-03-25 20:37 - 2019-03-25 20:37 - 043031886 _____ C:\Users\Patrik\Downloads\vypoctovy_program_kmbeta.zip
2019-03-18 19:27 - 2019-03-18 19:23 - 000310664 _____ (AVAST Software) C:\windows\system32\aswBoot.exe

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-04-13 12:09 - 2012-03-31 14:32 - 000842296 _____ (Adobe) C:\windows\system32\FlashPlayerApp.exe
2019-04-13 12:09 - 2011-06-18 19:09 - 000175160 _____ (Adobe) C:\windows\system32\FlashPlayerCPLApp.cpl
2019-04-13 12:09 - 2011-06-18 19:09 - 000000000 ____D C:\windows\system32\Macromed
2019-04-13 12:02 - 2009-07-14 06:53 - 000000006 ____H C:\windows\Tasks\SA.DAT
2019-04-13 08:53 - 2009-07-14 06:34 - 000016160 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2019-04-13 08:53 - 2009-07-14 06:34 - 000016160 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2019-04-12 20:48 - 2011-07-16 16:46 - 000402872 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2019-04-12 20:47 - 2010-12-11 16:29 - 000669132 _____ C:\windows\system32\perfh005.dat
2019-04-12 20:47 - 2010-12-11 16:29 - 000141760 _____ C:\windows\system32\perfc005.dat
2019-04-12 20:47 - 2010-12-11 09:24 - 001584626 _____ C:\windows\system32\PerfStringBackup.INI
2019-04-12 20:47 - 2009-07-14 04:37 - 000000000 ____D C:\windows\inf
2019-04-12 20:40 - 2009-07-14 06:53 - 000032540 _____ C:\windows\Tasks\SCHEDLGU.TXT
2019-04-11 09:24 - 2016-07-31 12:38 - 000002130 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-04-11 09:24 - 2016-07-31 12:38 - 000002089 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-04-08 23:42 - 2014-02-01 14:42 - 000000000 ____D C:\ProgramData\Mozilla
2019-04-08 23:40 - 2017-04-02 08:06 - 000000000 ____D C:\Users\Patrik\AppData\LocalLow\Mozilla
2019-03-29 19:50 - 2011-08-14 13:54 - 000000000 ____D C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-03-29 19:50 - 2011-08-14 13:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-03-29 19:50 - 2011-08-14 13:54 - 000000000 ____D C:\Program Files\WinRAR
2019-03-26 12:16 - 2011-05-28 09:42 - 000000000 ____D C:\Users\Patrik\AppData\Roaming\Mozilla
2019-03-18 19:24 - 2019-02-19 21:01 - 000189288 _____ (AVAST Software) C:\windows\system32\Drivers\aswHdsKe.sys
2019-03-18 19:24 - 2018-10-25 18:39 - 000040688 _____ (AVAST Software) C:\windows\system32\Drivers\aswKbd.sys
2019-03-18 19:24 - 2013-12-26 13:38 - 000165256 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys
2019-03-18 19:24 - 2013-04-20 12:35 - 000308608 _____ (AVAST Software) C:\windows\system32\Drivers\aswVmm.sys
2019-03-18 19:24 - 2013-04-20 12:35 - 000072800 _____ (AVAST Software) C:\windows\system32\Drivers\aswRvrt.sys
2019-03-18 19:24 - 2012-03-31 14:09 - 000100984 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2019-03-18 19:24 - 2011-07-16 16:46 - 000140376 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2019-03-18 19:22 - 2019-01-17 19:34 - 000034696 _____ (AVAST Software) C:\windows\system32\Drivers\aswArDisk.sys
2019-03-18 19:22 - 2017-11-21 21:00 - 000172208 _____ (AVAST Software) C:\windows\system32\Drivers\aswArPot.sys
2019-03-18 19:22 - 2011-07-16 16:46 - 000785584 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2019-03-18 19:21 - 2019-01-17 19:40 - 000219472 _____ (AVAST Software) C:\windows\system32\Drivers\aswbidsdriver.sys
2019-03-18 19:21 - 2019-01-17 19:34 - 000255216 _____ (AVAST Software) C:\windows\system32\Drivers\aswblog.sys
2019-03-18 19:21 - 2019-01-17 19:34 - 000158096 _____ (AVAST Software) C:\windows\system32\Drivers\aswbidsh.sys
2019-03-18 19:21 - 2019-01-17 19:34 - 000051128 _____ (AVAST Software) C:\windows\system32\Drivers\aswbuniv.sys
2019-03-18 19:13 - 2018-04-08 19:30 - 000000000 ____D C:\Users\Patrik\AppData\Local\AVAST Software

==================== Files in the root of some directories =======

2016-05-13 17:03 - 2016-05-13 17:03 - 006748160 _____ () C:\Program Files\GUT27EB.tmp
2019-04-08 20:51 - 2019-04-08 20:51 - 000000000 _____ () C:\Users\Patrik\AppData\Local\{C0FA7BE3-DAC7-46C7-BD08-444D4947ACCD}
2016-05-13 17:07 - 2016-05-13 17:07 - 000000000 _____ () C:\Users\Patrik\AppData\Local\{F938AA29-E65A-4F06-8975-026857BF884F}
2019-04-08 20:51 - 2019-04-08 20:51 - 000000000 _____ () C:\Users\Patrik\AppData\Local\{FF836D86-DEE3-4B75-90C9-E822EFD7F74C}

Some files in TEMP:
====================
2015-11-12 11:17 - 2015-11-12 11:17 - 000144008 _____ (© 2015 Microsoft Corporation) C:\Users\Patrik\AppData\Local\Temp\BingSvc.exe
2015-10-05 11:12 - 2015-11-12 11:17 - 001118360 _____ (© 2015 Microsoft Corporation) C:\Users\Patrik\AppData\Local\Temp\BSvcProcessor.exe
2015-10-05 11:12 - 2015-11-12 11:16 - 000170128 _____ (© 2015 Microsoft Corporation) C:\Users\Patrik\AppData\Local\Temp\BSvcUpdater.exe
2015-01-28 18:50 - 2009-04-02 17:07 - 000110592 ____R (Huawei Technologies Co., Ltd.) C:\Users\Patrik\AppData\Local\Temp\DataCard_Setup.exe
2015-10-05 10:11 - 2015-10-05 10:11 - 002308240 _____ (Microsoft Corporation) C:\Users\Patrik\AppData\Local\Temp\DefaultPack.EXE
2011-07-16 18:20 - 2010-12-11 10:13 - 002934112 _____ (TODO: <公司名>) C:\Users\Patrik\AppData\Local\Temp\DeleteVF.exe
2014-02-01 14:59 - 2014-02-01 14:59 - 017888136 _____ (Adobe Systems Incorporated) C:\Users\Patrik\AppData\Local\Temp\fp_pl_pfs_installer.exe
2011-05-28 09:43 - 2010-08-13 17:19 - 000468232 _____ (Microsoft Corporation) C:\Users\Patrik\AppData\Local\Temp\MSNE92.exe
2018-04-08 19:46 - 2018-04-08 19:29 - 002646416 _____ () C:\Users\Patrik\AppData\Local\Temp\removeSZB.exe
2015-01-28 18:50 - 2009-03-18 12:46 - 000007168 ____R () C:\Users\Patrik\AppData\Local\Temp\ResetDevice.exe
2011-12-23 23:21 - 2011-12-23 23:29 - 019809280 _____ () C:\Users\Patrik\AppData\Local\Temp\SkypeSetup.exe
2015-10-22 19:46 - 2015-10-22 19:46 - 043326544 _____ (Google Inc.) C:\Users\Patrik\AppData\Local\Temp\{57076440-4679-4AB6-B242-2F9BF4CD7351}-46.0.2490.80_chrome_installer.exe
2015-11-10 20:35 - 2015-11-10 20:35 - 000970832 _____ () C:\Users\Patrik\AppData\Local\Temp\{85545935-416A-4E1E-828C-C916F3DFF448}-46.0.2490.86_46.0.2490.80_chrome_updater.exe
2016-09-14 02:59 - 2016-09-14 02:59 - 047018584 _____ (Google Inc.) C:\Users\Patrik\AppData\Local\Temp\{D14CDE32-B902-45E0-9326-F9F027EC16F1}-53.0.2785.116_chrome_installer.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\system32\dllhost.exe => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2019-03-28 17:50

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 17-03-2019
Ran by Patrik (13-04-2019 12:14:15)
Running from C:\Users\Patrik\Downloads
Microsoft Windows 7 Starter Service Pack 1 (X86) (2011-05-28 07:34:59)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-4150815367-1157255260-954900486-500 - Administrator - Disabled)
Guest (S-1-5-21-4150815367-1157255260-954900486-501 - Limited - Disabled)
Patrik (S-1-5-21-4150815367-1157255260-954900486-1000 - Administrator - Enabled) => C:\Users\Patrik

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 32 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 32.0.0.171 - Adobe)
Adobe Flash Player 32 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 32.0.0.171 - Adobe)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 19.3.2369 - AVAST Software)
Avast Secure Browser (HKLM\...\Avast Secure Browser) (Version: 72.0.1174.121 - Autoři prohlížeče Avast Secure Browser)
Avast Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.4.136.333 - AVAST Software) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 73.0.3683.103 - Google Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.7 - Google LLC) Hidden
Microsoft .NET Framework 4.7 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM\...\{95140000-00AF-0409-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (HKLM\...\{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (HKLM\...\A6A8668C0A13640CA28FE2A7D9654BE4AE478B13) (Version: 07/30/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom Bluetooth (09/11/2009 6.2.0.9407) (HKLM\...\755087041320E005CB1E8A67C5C55A260EB81B90) (Version: 09/11/2009 6.2.0.9407 - Broadcom)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinRAR 5.70 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-4150815367-1157255260-954900486-1000_Classes\CLSID\{93a3111f-4f74-4ed8-895e-d9708497629e}\InprocServer32 -> C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll => No File
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshlstb.dll [2011-05-27] (WinZip Computing -> WinZip Computing, S.L.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshlstb.dll [2011-05-27] (WinZip Computing -> WinZip Computing, S.L.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\windows\system32\igfxpph.dll [2010-10-25] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-18] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshlstb.dll [2011-05-27] (WinZip Computing -> WinZip Computing, S.L.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {18B0990A-1F26-4DB4-8EFC-276C748A113D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {4A269048-F8D8-462C-97E9-91F24BAFDCE0} - System32\Tasks\{0A5F7A48-060E-49E3-A507-2C472F5FBF9C} => C:\Program Files\Skype\\Phone\Skype.exe
Task: {5680CF31-6739-49A7-85FE-DC3929C82EF7} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {755C4AA5-D8A5-457B-A218-9DEA28F41DBE} - System32\Tasks\avastBCLRestartS-1-5-21-4150815367-1157255260-954900486-1000 => C:\Program Files\Mozilla Firefox\firefox.exe
Task: {768B89FF-097D-4896-860F-BC83C9C8164C} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {81B979EE-41CB-48CA-B78B-B82C73A35D9C} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe (AVAST Software s.r.o. -> AVAST Software) <==== ATTENTION
Task: {84A47980-C0F8-4B20-ABE1-8F09559F0A2C} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\windows\system32\Macromed\Flash\FlashUtil32_32_0_0_171_Plugin.exe (Adobe Inc. -> Adobe)
Task: {9C54834E-F590-4174-99E2-9152EEF86E49} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe (AVAST Software s.r.o. -> AVAST Software) <==== ATTENTION
Task: {A4440649-8B98-446C-B6FA-312C5A7A26C1} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {AC87C134-6D17-4EC7-BBA8-FFC421737C2F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {D39716BC-FADF-4AAC-8B8D-BAA8DB9AE8B4} - System32\Tasks\{41238BE1-779C-4312-B1C9-184B4E7CFB33} => "c:\program files\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.18.0.112/cs/abandoninstall?page=tsMain
Task: {D5365936-9A20-4D52-B0F2-9DC2E9953CA3} - System32\Tasks\{7561C04B-69B7-4056-BAFE-2A4500A1EDA6} => C:\Program Files\Skype\\Phone\Skype.exe
Task: {DD4F9CE7-5C85-4508-AC2B-4058BCEBE51C} - System32\Tasks\{813377BA-2EE9-4CBE-9568-0039A6A51AE5} => "c:\program files\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.18.0.112/cs/abandoninstall?page=tsMain
Task: {E82580C0-502A-4DA2-9CF9-E1E74A517B25} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Inc. -> Adobe)
Task: {F783E552-D354-4EC4-92F6-76D4A79FDC1A} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee Anti-Virus And Anti-Spyware\upgrade.exe (McAfee, Inc. -> McAfee, Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2017-09-18 21:27 - 2017-09-18 21:27 - 000452608 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\21d6f7363e0a6ff6999a7ce4e83a59e8\IAStorUtil.ni.dll
2010-12-11 09:29 - 2010-03-03 22:09 - 000032768 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\cs-CZ\IAStorIcon.resources.dll
2010-12-11 09:29 - 2010-03-03 22:08 - 001046528 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IntelVisualDesign.dll
2010-12-11 09:29 - 2010-03-03 22:09 - 000004608 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\cs-CZ\IntelVisualDesign.resources.dll
2010-12-11 09:29 - 2010-03-03 22:08 - 000163328 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorUIHelper.dll
2011-07-16 20:12 - 2011-07-16 20:12 - 001101824 _____ () C:\windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\MFC80.DLL
2011-07-16 20:12 - 2011-07-16 20:12 - 001093120 _____ () C:\windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\MFC80U.DLL
2017-09-18 21:27 - 2017-09-18 21:27 - 000019968 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgrSvc\d30cc13aa8719dd416ea041e9e5a8197\IAStorDataMgrSvc.ni.exe
2017-09-18 21:27 - 2017-09-18 21:27 - 000176640 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgr\9c3c45033b328dd747682e6b6ad79d85\IAStorDataMgr.ni.dll
2017-09-18 21:29 - 2017-09-18 21:29 - 000170496 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\2b5f4a6496e65d431698f64ba7160604\IsdiInterop.ni.dll
2010-12-11 09:29 - 2010-03-03 22:09 - 000006656 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\cs-CZ\IAStorDataMgr.resources.dll
2010-12-11 09:29 - 2010-03-03 22:08 - 000058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2010-12-11 09:29 - 2010-03-03 21:53 - 000280064 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\ISDI.dll
2011-07-17 00:30 - 2011-07-17 00:30 - 000225280 _____ () C:\windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcm90.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2019-01-04 19:37 - 000000825 _____ C:\windows\system32\drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\Driver;C:\Program Files\Lenovo\Bluetooth Software\;C:\Program Files\Windows Live\Shared
HKU\S-1-5-21-4150815367-1157255260-954900486-1000\Control Panel\Desktop\\Wallpaper -> %windir%\web\wallpaper\windows\img0.jpg
DNS Servers: 10.255.255.10 - 10.255.255.20
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{E2BDAFB8-3191-467B-B9A3-7ED53570AE24}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe No File
FirewallRules: [{D3390092-5159-4784-9A08-52FB41FDC608}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe No File
FirewallRules: [{EA9C195E-21CD-4CAE-ABF4-B5C532AD0CA6}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3E915093-2EAA-4603-96CA-1DBF443860EC}] => (Allow) LPort=2869
FirewallRules: [{C7764EE7-79FF-4806-86AA-12A6A483E8AB}] => (Allow) LPort=1900
FirewallRules: [{FFEF3702-763A-43DC-A5F4-CA9D55B3CCA3}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4D3725C1-C636-47B4-9FC0-B9ADE2255CF1}] => (Allow) C:\Program Files\Windows Live\Mesh\MOE.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{AC1E7F6F-44A7-4B8D-BCD4-A4779E0AF116}] => (Allow) C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{7B7B5160-E83E-4590-B87E-9C669AD60D51}] => (Allow) C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{A745C376-45FF-4574-85FF-8E2BF1B179A1}] => (Allow) C:\windows\System32\IgrsSvcs.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{B96B444F-4E6A-44EB-8E4E-F30C8199CAF5}] => (Allow) C:\windows\System32\IgrsSvcs.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{F9DCEA51-A3FF-4980-9331-234F8A7849B8}] => (Allow) C:\Program Files\Lenovo\ReadyComm\ReadyCom.exe No File
FirewallRules: [{A64F6E7E-7A79-4BEC-9C9E-7BD681FBC2DF}] => (Allow) C:\Program Files\Lenovo\ReadyComm\ReadyComm.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{2A4E2A38-FF8E-418F-965E-A0528D77BB54}] => (Allow) C:\Program Files\Lenovo\ReadyComm\Projectionist.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{B4574F6F-C4A3-4057-8376-9B42B1866E6B}] => (Allow) C:\Program Files\Lenovo\ReadyComm\Projectionist.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{140BE23D-11C0-48DD-AE16-FF8A8D06E7F0}] => (Allow) C:\Program Files\Lenovo\ReadyComm\AppSvc.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{2E14A195-8051-4388-A253-B0C784EFA013}] => (Allow) C:\Program Files\Lenovo\ReadyComm\AppSvc.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{C20F6AC3-DE2A-49B4-8FB0-94577E2ED86B}] => (Allow) C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{BDD809F3-21C5-46F3-B942-8EFB85BD0348}] => (Allow) C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{77371890-6EB4-4CF1-8815-007837538BCC}] => (Allow) C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [{1E2A049F-B7B6-4926-99FB-13239D0413B3}] => (Allow) C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe (Lenovo (Beijing) Limited -> Lenovo Group Limited)
FirewallRules: [TCP Query User{3A4CFFB4-B3FD-48FF-B51B-05F177876752}C:\program files\altitude\altitude.exe] => (Block) C:\program files\altitude\altitude.exe No File
FirewallRules: [UDP Query User{41293234-CA28-4B17-B988-A6D4210CBB3B}C:\program files\altitude\altitude.exe] => (Block) C:\program files\altitude\altitude.exe No File
FirewallRules: [TCP Query User{65D3EA91-B614-42F6-9844-84A025F787B0}C:\program files\altitude\altitude.exe] => (Allow) C:\program files\altitude\altitude.exe No File
FirewallRules: [UDP Query User{E7CAF924-B712-4626-BA40-82F313CA54FA}C:\program files\altitude\altitude.exe] => (Allow) C:\program files\altitude\altitude.exe No File
FirewallRules: [{B357237C-A2E1-439F-95DC-2D415CE42A5B}] => (Allow) C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DBCD8051-89CF-4F7F-A1C2-7C84AB1078A9}] => (Allow) C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe (AVAST Software s.r.o. -> AVAST Software)
FirewallRules: [TCP Query User{DDF78533-FA69-4592-8B0A-B71D1194B27C}C:\users\patrik\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\patrik\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [UDP Query User{D8F84340-183A-4CD9-BE4A-C38861263E1C}C:\users\patrik\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\patrik\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [{AFF2DA28-CC2F-45B6-A5B0-3AB24FF10AD5}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)

==================== Restore Points =========================

06-08-2018 19:15:56 Naplánovaný kontrolní bod
25-12-2018 19:40:00 Naplánovaný kontrolní bod
02-04-2019 11:04:37 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/12/2019 09:29:42 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program FRST.exe verze 17.3.2019.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 1604

Čas spuštění: 01d4f1651a92c9b1

Čas ukončení: 21

Cesta k aplikaci: C:\Users\Patrik\Downloads\FRST.exe

ID hlášení: 362661d5-5d59-11e9-a1a5-f0def12a5d00

Error: (04/12/2019 08:41:07 PM) (Source: ESENT) (EventID: 413) (User: )
Description: DllHost (448) WebCacheLocal: Nový soubor protokolu nelze vytvořit, protože není možné zapisovat na jednotku protokolu. Jednotka může být označena jen pro čtení, na disku je nedostatek místa nebo je jednotka chybně nakonfigurována či poškozena. Chyba -1022

Error: (04/12/2019 08:41:07 PM) (Source: ESENT) (EventID: 488) (User: )
Description: DllHost (448) WebCacheLocal: Pokus o vytvoření souboru C:\Users\Patrik\AppData\Local\Microsoft\Windows\WebCache\V01tmp.log se nezdařil. Došlo k systémové chybě 1393 (0x00000571): Struktura disku je porušena a není čitelná. . Operace vytvoření souboru se nezdaří a dojde k chybě -1022 (0xfffffc02).

Error: (04/12/2019 08:41:07 PM) (Source: ESENT) (EventID: 413) (User: )
Description: DllHost (448) WebCacheLocal: Nový soubor protokolu nelze vytvořit, protože není možné zapisovat na jednotku protokolu. Jednotka může být označena jen pro čtení, na disku je nedostatek místa nebo je jednotka chybně nakonfigurována či poškozena. Chyba -1022

Error: (04/12/2019 08:41:07 PM) (Source: ESENT) (EventID: 488) (User: )
Description: DllHost (448) WebCacheLocal: Pokus o vytvoření souboru C:\Users\Patrik\AppData\Local\Microsoft\Windows\WebCache\V01tmp.log se nezdařil. Došlo k systémové chybě 1393 (0x00000571): Struktura disku je porušena a není čitelná. . Operace vytvoření souboru se nezdaří a dojde k chybě -1022 (0xfffffc02).

Error: (04/12/2019 08:41:07 PM) (Source: ESENT) (EventID: 413) (User: )
Description: DllHost (448) WebCacheLocal: Nový soubor protokolu nelze vytvořit, protože není možné zapisovat na jednotku protokolu. Jednotka může být označena jen pro čtení, na disku je nedostatek místa nebo je jednotka chybně nakonfigurována či poškozena. Chyba -1022

Error: (04/12/2019 08:41:07 PM) (Source: ESENT) (EventID: 488) (User: )
Description: DllHost (448) WebCacheLocal: Pokus o vytvoření souboru C:\Users\Patrik\AppData\Local\Microsoft\Windows\WebCache\V01tmp.log se nezdařil. Došlo k systémové chybě 1393 (0x00000571): Struktura disku je porušena a není čitelná. . Operace vytvoření souboru se nezdaří a dojde k chybě -1022 (0xfffffc02).

Error: (04/12/2019 08:41:07 PM) (Source: ESENT) (EventID: 413) (User: )
Description: DllHost (448) WebCacheLocal: Nový soubor protokolu nelze vytvořit, protože není možné zapisovat na jednotku protokolu. Jednotka může být označena jen pro čtení, na disku je nedostatek místa nebo je jednotka chybně nakonfigurována či poškozena. Chyba -1022


System errors:
=============
Error: (04/13/2019 12:05:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba %1!s! Update (avast) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (04/13/2019 12:05:38 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba 30000!s! Update (avast) bylo dosaženo časového limitu (30000 ms).

Error: (04/13/2019 12:03:07 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
cdrom

Error: (04/13/2019 12:03:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba VideoDownloadConverterService neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (04/13/2019 08:52:00 AM) (Source: Ntfs) (EventID: 55) (User: )
Description: Struktura systému souborů disku je poškozená a je nepoužitelná.
Je nutné na svazek \Device\HarddiskVolume2 spustit nástroj chkdsk.

Error: (04/13/2019 08:49:38 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Windows Update přestala během spouštění reagovat.

Error: (04/13/2019 08:47:22 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Intel(R) Rapid Storage Technology neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (04/13/2019 08:47:22 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Intel(R) Rapid Storage Technology bylo dosaženo časového limitu (30000 ms).


Windows Defender:
===================================
Date: 2011-12-23 22:25:11.244
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=159633
Název:Adware:Win32/OpenCandy
ID:159633
Závažnost:Nízké
Kategorie:Software placený zobrazováním reklamy
Nalezeno v cestě:containerfile:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe;file:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe->(inno#005940)
Typ zjišťování:Konkrétní
Zdroj zjišťování:Systém
Stav:Neznámý
Uživatel:NT AUTHORITY\SYSTEM
Název procesu:

Date: 2011-12-22 21:41:09.873
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=159633
Název:Adware:Win32/OpenCandy
ID:159633
Závažnost:Nízké
Kategorie:Software placený zobrazováním reklamy
Nalezeno v cestě:containerfile:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe;file:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe->(inno#005940)
Typ zjišťování:Konkrétní
Zdroj zjišťování:Systém
Stav:Neznámý
Uživatel:NT AUTHORITY\SYSTEM
Název procesu:

Date: 2011-12-19 21:27:24.778
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=159633
Název:Adware:Win32/OpenCandy
ID:159633
Závažnost:Nízké
Kategorie:Software placený zobrazováním reklamy
Nalezeno v cestě:containerfile:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe;file:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe->(inno#005940)
Typ zjišťování:Konkrétní
Zdroj zjišťování:Systém
Stav:Neznámý
Uživatel:NT AUTHORITY\SYSTEM
Název procesu:

Date: 2011-12-18 19:20:02.461
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=159633
Název:Adware:Win32/OpenCandy
ID:159633
Závažnost:Nízké
Kategorie:Software placený zobrazováním reklamy
Nalezeno v cestě:containerfile:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe;file:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe->(inno#005940)
Typ zjišťování:Konkrétní
Zdroj zjišťování:Systém
Stav:Neznámý
Uživatel:NT AUTHORITY\SYSTEM
Název procesu:

Date: 2011-12-18 07:34:20.478
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=159633
Název:Adware:Win32/OpenCandy
ID:159633
Závažnost:Nízké
Kategorie:Software placený zobrazováním reklamy
Nalezeno v cestě:containerfile:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe;file:C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe->(inno#005940)
Typ zjišťování:Konkrétní
Zdroj zjišťování:Systém
Stav:Neznámý
Uživatel:NT AUTHORITY\SYSTEM
Název procesu:

Date: 2016-09-30 20:04:11.244
Description:
Prohledávání Windows Defender zjistilo chybu při pokusu o načtení podpisů a pokusí se o obnovení sady podpisů, jejichž správnost je potvrzena.
Podpisy, které se měly načíst:Aktuální
Kód chyby:0x80070002
Popis chyby:Systém nemůže nalézt uvedený soubor.
Verze podpisu:0.0.0.0
Verze modulu:0.0.0.0

Date: 2016-09-30 20:04:10.339
Description:
Program Windows Defender zjistil chybu při pokusu o aktualizaci.
Nová verze podpisu:
Předchozí verze podpisu:
Zdroj aktualizace:Složka aktualizace podpisů
Typ podpisu:Antispywarový program
Typ aktualizace:Delta
Uživatel:NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu:
Kód chyby:0x80070002
Popis chyby:Systém nemůže nalézt uvedený soubor.

Date: 2016-08-26 20:19:45.088
Description:
Prohledávání Windows Defender zjistilo chybu při pokusu o načtení podpisů a pokusí se o obnovení sady podpisů, jejichž správnost je potvrzena.
Podpisy, které se měly načíst:Aktuální
Kód chyby:0x80070002
Popis chyby:Systém nemůže nalézt uvedený soubor.
Verze podpisu:0.0.0.0
Verze modulu:0.0.0.0

Date: 2016-08-26 20:19:45.010
Description:
Program Windows Defender zjistil chybu při pokusu o aktualizaci.
Nová verze podpisu:
Předchozí verze podpisu:
Zdroj aktualizace:Složka aktualizace podpisů
Typ podpisu:Antispywarový program
Typ aktualizace:Delta
Uživatel:NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu:
Kód chyby:0x80070002
Popis chyby:Systém nemůže nalézt uvedený soubor.

Date: 2016-08-26 20:05:28.139
Description:
Prohledávání Windows Defender zjistilo chybu při pokusu o načtení podpisů a pokusí se o obnovení sady podpisů, jejichž správnost je potvrzena.
Podpisy, které se měly načíst:Aktuální
Kód chyby:0x80070002
Popis chyby:Systém nemůže nalézt uvedený soubor.
Verze podpisu:0.0.0.0
Verze modulu:0.0.0.0

==================== Memory info ===========================

Processor: Intel(R) Atom(TM) CPU N550 @ 1.50GHz
Percentage of memory in use: 97%
Total physical RAM: 1013.42 MB
Available physical RAM: 27.68 MB
Total Virtual: 2037.42 MB
Available Virtual: 422.13 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:188.94 GB) (Free:149.54 GB) NTFS
Drive d: (LENOVO) (Fixed) (Total:29 GB) (Free:28.22 GB) NTFS

\\?\Volume{86ec045f-04f5-11e0-a164-806e6f6e6963}\ () (Fixed) (Total:0.2 GB) (Free:0.16 GB) NTFS

==================== MBR & Partition Table ==================

==================== End of Addition.txt ============================

Re: Prosím o kontrolu logu, hlásí poškození systémových soub

Napsal: 13 dub 2019 11:49
od Rudy
Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-4150815367-1157255260-954900486-1000\...\Run: [BingSvc] => C:\Users\Patrik\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (Microsoft Corporation -> © 2015 Microsoft Corporation)
HKU\S-1-5-21-4150815367-1157255260-954900486-1000\...\MountPoints2: {3057baf8-a6d8-11e4-8762-f0def12a5d00} - E:\AutoRun.exe
C:\Users\Patrik\AppData\Local\Microsoft\BingSvc
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
URLSearchHook: HKU\S-1-5-21-4150815367-1157255260-954900486-1000 - (No Name) - {93a3111f-4f74-4ed8-895e-d9708497629e} - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll No File
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-4150815367-1157255260-954900486-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
FF Plugin: @VideoDownloadConverter_4z.com/Plugin -> C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll [No File]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
S2 0256851461221501mcinstcleanup; C:\windows\TEMP\025685~1.EXE -cleanup -nolog [X]
C:\Users\Patrik\AppData\Local\{FF836D86-DEE3-4B75-90C9-E822EFD7F74C}
C:\Users\Patrik\AppData\Local\{C0FA7BE3-DAC7-46C7-BD08-444D4947ACCD}
C:\Program Files\GUT27EB.tmp
C:\Users\Patrik\AppData\Local\{F938AA29-E65A-4F06-8975-026857BF884F}
C:\Users\Patrik\AppData\Local\Temp
Task: {18B0990A-1F26-4DB4-8EFC-276C748A113D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {AC87C134-6D17-4EC7-BBA8-FFC421737C2F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {81B979EE-41CB-48CA-B78B-B82C73A35D9C} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe (AVAST Software s.r.o. -> AVAST Software) <==== ATTENTION
Task: {9C54834E-F590-4174-99E2-9152EEF86E49} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe (AVAST Software s.r.o. -> AVAST Software) <==== ATTENTION
FirewallRules: [{F9DCEA51-A3FF-4980-9331-234F8A7849B8}] => (Allow) C:\Program Files\Lenovo\ReadyComm\ReadyCom.exe No File
C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe

EmptyTemp:
End
Uložte do C:\Users\Patrik\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: Prosím o kontrolu logu, hlásí poškození systémových soub

Napsal: 13 dub 2019 12:15
od Janka30
Zde posílám. Je to pořád stejné při každém zapnutí netbooku se spustí kontrola disku C, který se neprovede, protože nastalo poškození nebo chyba vlivem nedávno naistalovaného software balíčku, mám obnovit systém. Když chci obnovit systém k dřívějšímu datu, napíše to, že je chyba na disku a nejdříve musím chyby opravit a dokolečka dokola. Tak nevím, zda už odešel pevný disk. Netbook, ale jinak funguje normálně, spustí se, vše jde.

Fix result of Farbar Recovery Scan Tool (x86) Version: 17-03-2019
Ran by Patrik (13-04-2019 12:56:24) Run:1
Running from C:\Users\Patrik\Downloads
Loaded Profiles: Patrik (Available Profiles: Patrik)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-4150815367-1157255260-954900486-1000\...\Run: [BingSvc] => C:\Users\Patrik\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (Microsoft Corporation -> � 2015 Microsoft Corporation)
HKU\S-1-5-21-4150815367-1157255260-954900486-1000\...\MountPoints2: {3057baf8-a6d8-11e4-8762-f0def12a5d00} - E:\AutoRun.exe
C:\Users\Patrik\AppData\Local\Microsoft\BingSvc
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
URLSearchHook: HKU\S-1-5-21-4150815367-1157255260-954900486-1000 - (No Name) - {93a3111f-4f74-4ed8-895e-d9708497629e} - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll No File
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-4150815367-1157255260-954900486-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
FF Plugin: @VideoDownloadConverter_4z.com/Plugin -> C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll [No File]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
S2 0256851461221501mcinstcleanup; C:\windows\TEMP\025685~1.EXE -cleanup -nolog [X]
C:\Users\Patrik\AppData\Local\{FF836D86-DEE3-4B75-90C9-E822EFD7F74C}
C:\Users\Patrik\AppData\Local\{C0FA7BE3-DAC7-46C7-BD08-444D4947ACCD}
C:\Program Files\GUT27EB.tmp
C:\Users\Patrik\AppData\Local\{F938AA29-E65A-4F06-8975-026857BF884F}
C:\Users\Patrik\AppData\Local\Temp
Task: {18B0990A-1F26-4DB4-8EFC-276C748A113D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {AC87C134-6D17-4EC7-BBA8-FFC421737C2F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {81B979EE-41CB-48CA-B78B-B82C73A35D9C} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe (AVAST Software s.r.o. -> AVAST Software) <==== ATTENTION
Task: {9C54834E-F590-4174-99E2-9152EEF86E49} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe (AVAST Software s.r.o. -> AVAST Software) <==== ATTENTION
FirewallRules: [{F9DCEA51-A3FF-4980-9331-234F8A7849B8}] => (Allow) C:\Program Files\Lenovo\ReadyComm\ReadyCom.exe No File
C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully.
"HKU\S-1-5-21-4150815367-1157255260-954900486-1000\Software\Microsoft\Windows\CurrentVersion\Run\\BingSvc" => removed successfully.
HKU\S-1-5-21-4150815367-1157255260-954900486-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3057baf8-a6d8-11e4-8762-f0def12a5d00} => removed successfully.
HKLM\Software\Classes\CLSID\{3057baf8-a6d8-11e4-8762-f0def12a5d00} => not found
C:\Users\Patrik\AppData\Local\Microsoft\BingSvc => moved successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
"HKU\S-1-5-21-4150815367-1157255260-954900486-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{93a3111f-4f74-4ed8-895e-d9708497629e}" => removed successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully.
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => not found
HKU\S-1-5-21-4150815367-1157255260-954900486-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully.
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => not found
"HKLM\Software\Mozilla\Thunderbird\Extensions\\eplgTb@eset.com" => removed successfully.
HKLM\Software\MozillaPlugins\@VideoDownloadConverter_4z.com/Plugin => removed successfully.
HKLM\SOFTWARE\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki => removed successfully.
HKLM\System\CurrentControlSet\Services\0256851461221501mcinstcleanup => removed successfully.
0256851461221501mcinstcleanup => service removed successfully.
C:\Users\Patrik\AppData\Local\{FF836D86-DEE3-4B75-90C9-E822EFD7F74C} => moved successfully
C:\Users\Patrik\AppData\Local\{C0FA7BE3-DAC7-46C7-BD08-444D4947ACCD} => moved successfully
C:\Program Files\GUT27EB.tmp => moved successfully
C:\Users\Patrik\AppData\Local\{F938AA29-E65A-4F06-8975-026857BF884F} => moved successfully

"C:\Users\Patrik\AppData\Local\Temp" folder move:

Could not move "C:\Users\Patrik\AppData\Local\Temp" => Scheduled to move on reboot.

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{18B0990A-1F26-4DB4-8EFC-276C748A113D}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{18B0990A-1F26-4DB4-8EFC-276C748A113D}" => removed successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AC87C134-6D17-4EC7-BBA8-FFC421737C2F}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC87C134-6D17-4EC7-BBA8-FFC421737C2F}" => removed successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{81B979EE-41CB-48CA-B78B-B82C73A35D9C}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{81B979EE-41CB-48CA-B78B-B82C73A35D9C}" => removed successfully.
C:\Windows\System32\Tasks\AvastUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AvastUpdateTaskMachineUA" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9C54834E-F590-4174-99E2-9152EEF86E49}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9C54834E-F590-4174-99E2-9152EEF86E49}" => removed successfully.
C:\Windows\System32\Tasks\AvastUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AvastUpdateTaskMachineCore" => removed successfully.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F9DCEA51-A3FF-4980-9331-234F8A7849B8}" => removed successfully.
"C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AEFS0R4V\smbx13.exe" => not found

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 7300547 B
Java, Flash, Steam htmlcache => 506 B
Windows/system/drivers => 2092636048 B
Edge => 0 B
Chrome => 794755732 B
Firefox => 471314745 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 355033148 B
LocalService => 66228 B
NetworkService => 174290 B
Patrik => 756423532 B

RecycleBin => 4258959 B
EmptyTemp: => 4.2 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 13-04-2019 13:05:49)

C:\Users\Patrik\AppData\Local\Temp => moved successfully

==== End of Fixlog 13:05:52 ====

Re: Prosím o kontrolu logu, hlásí poškození systémových soub

Napsal: 13 dub 2019 15:02
od Rudy
Smazáno. Ještě bych doporučil spustit kontrolu a případnou opravu systémových souborů. Startmenu>spustit>(napsat) cmd>Enter. Do otevřeného okna napište:
sfc /scannow
a odentrujte.
Systém spustí sken a případnou opravu systémových souborů.

Re: Prosím o kontrolu logu, hlásí poškození systémových soub

Napsal: 13 dub 2019 16:41
od Janka30
scan jsem spustila , probehl a program nenasel zadne naruseni integrity. Ale kdyz restartuji, tak se opet spusti kontrola disku C, ktera se neprovede, protoze doslo k poskozeni vlivem nedavne instalace software a kdyz jdu na obnoveni systemu pise mi to, system windows zjistil poskozeni systemu souboru na disku C. Pred spustenim je treba vyhledat chyby a kdyz to udelam, opet se spusti kontrola, ktera se neprovede :?:

Re: Prosím o kontrolu logu, hlásí poškození systémových soub

Napsal: 13 dub 2019 17:11
od Rudy
Takže by měl být systém v pořádku, až na to, že vlivem instalace nějakého sw, se narušila integrita systému. Zajímavé už proto, že žádné narušení zjištěno nebylo. Budete tedy muset odinstalovat onen sw, který problém způsbuje.

Re: Prosím o kontrolu logu, hlásí poškození systémových soub

Napsal: 13 dub 2019 17:19
od Janka30
Já ale nevím jaký, podle toho logu z frst jsem odinstalovala vsechny programy, které byly nedávno naistalované a stejně to pořá dělá, vůbec nevím čím to je. Vím, že nedávno se tam instalovala stará verze Kmplayeru z nějakých stránek a byly nějaké problém při instalaci, nakonec se program nenaistaloval, tak jsem myslela, zda si tam mamka nestáhla něco škodlivého, ale ted uz nevim :shock:

Re: Prosím o kontrolu logu, hlásí poškození systémových soub

Napsal: 13 dub 2019 17:54
od Rudy
Na malware to nevypadá. Zkuste tedy obnovu systému k datu, kda korektně fungoval.

Re: Prosím o kontrolu logu, hlásí poškození systémových soub

Napsal: 13 dub 2019 18:12
od Janka30
Obnova prvě není mozna, pokud se snazim obnovit system k drivejsimu datu, napise mi to, ze jsou chyby na disku C a nejdrive musim opravit je a kdyz to udelam, spusti se ta kontrola, ktera se neprovede a mam obnovit system a takhle dokola :D

Re: Prosím o kontrolu logu, hlásí poškození systémových soub

Napsal: 13 dub 2019 18:50
od Rudy
Ještě zbývá oprava systému pomocí WindowsRepair: https://www.stahuj.cz/utility_a_ostatni ... ws-repair/ . Doporučuji ovšem před tím udělat zálohu dat.

Re: Prosím o kontrolu logu, hlásí poškození systémových soub

Napsal: 13 dub 2019 21:31
od Janka30
Pouzila jsem, ale vysledek stale stejny. Uz to necham byt, stejne je to stary krap :) , jinak vse funguje bez problému, program taky vse opravil a stale nic. presto dekuji moc za pomoc a straveny cas :thumbsup:
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz