Prikladam Fix log
Fix result of Farbar Recovery Scan Tool (x64) Version: 3-07-2019
Ran by Michal (07-07-2019 21:19:11) Run:3
Running from C:\Users\Michal\Desktop\FRST
Loaded Profiles: Michal (Available Profiles: Michal)
Boot Mode: Normal
==============================================
fixlist content:
*****************
CloseProcesses:
CreateRestorePoint:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {430392D6-18CD-4199-8851-CAB5407D6820} - \GoogleUpdateTaskMachineCore -> No File <==== ATTENTION
Task: {BC587310-D6AF-4510-A616-B3F7718A1E9F} - \GoogleUpdateTaskMachineUA -> No File <==== ATTENTION
FF Extension: (No Name) - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\jo0mc75n.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-04-21]
FF Extension: (No Name) - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi [not found]
S3 rpcapd; "%ProgramFiles(x86)%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles(x86)%\WinPcap\rpcapd.ini" [X]
S3 WsDrvInst; "C:\Program Files (x86)\Wondershare\Wondershare Video Converter Ultimate\Transfer\DriverInstall.exe" [X]
S3 cpuz137; \??\C:\Program Files (x86)\CPUID\PC Wizard 2013\pcwiz_x64.sys [X]
S3 FreshIO; \??\C:\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys [X]
Shortcut: C:\Users\Michal\Desktop\programi\??zill? Fir?f??.lnk -> C:\Program Files (x86)\HPTurtle\TurtleStarter.exe (No File) <==== Cyrillic
Shortcut: C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Int?rn?t ???l?r?r.lnk -> C:\Program Files (x86)\HPTurtle\TurtleStarter.exe (No File) <==== Cyrillic
Shortcut: C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Int?rn?t ???l?r?r (N? ?dd-?ns).lnk -> C:\Program Files (x86)\HPTurtle\TurtleStarter.exe (No File) <==== Cyrillic
AlternateDataStreams: C:\ProgramData\TEMP:15B79D44 [139]
AlternateDataStreams: C:\Users\Michal\Desktop\pot2.jpeg:3or4kl4x13tuuug3Byamue2s4b [93]
AlternateDataStreams: C:\Users\Michal\Desktop\pot2.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\Michal\Desktop\potvrdenie.jpeg:3or4kl4x13tuuug3Byamue2s4b [93]
AlternateDataStreams: C:\Users\Michal\Desktop\potvrdenie.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
FirewallRules: [{06885066-EAD1-4E28-9D0F-97443AF7424D}] => (Allow) C:\Program Files\Common Files\Siemens\sws\almsrv\almsrv64x.exe No File
FirewallRules: [{FA2D92B7-6A10-4429-AB46-5DCD2D37CE86}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{24CDE195-283E-4318-A621-1BF04C767A06}] => (Allow) C:\Program Files\GNS3\gns3server.exe () [File not signed]
FirewallRules: [{9012649C-6825-4FC2-ACC4-95D64ACEA092}] => (Allow) C:\Program Files\GNS3\gns3server.exe () [File not signed]
FirewallRules: [{71819DF6-0CFA-45ED-A80D-2F867B3BB2D9}] => (Allow) C:\Program Files\GNS3\ubridge.exe () [File not signed]
FirewallRules: [{FB05FC84-2F7E-4182-8035-FB942643F695}] => (Allow) C:\Program Files\GNS3\ubridge.exe () [File not signed]
FirewallRules: [{A119C0DA-55C6-4852-B836-86D65833D20F}] => (Allow) C:\Program Files\GNS3\dynamips\dynamips.exe () [File not signed]
FirewallRules: [{58F456B6-F9F3-416F-B63D-8A439DDA68DA}] => (Allow) C:\Program Files\GNS3\dynamips\dynamips.exe () [File not signed]
FirewallRules: [{70C337D7-11E5-4284-A7C3-5D83DA871B71}] => (Allow) C:\Program Files\GNS3\vpcs\vpcs.exe () [File not signed]
FirewallRules: [{D516D2A6-69B8-412C-9D76-D6025C4907E4}] => (Allow) C:\Program Files\GNS3\vpcs\vpcs.exe () [File not signed]
FirewallRules: [{4F844E97-A294-4720-8FC2-AF7C43101F16}] => (Allow) C:\Program Files\GNS3\qemu-0.11.0\qemu.exe () [File not signed]
FirewallRules: [{5F9B7E6D-E553-4708-BB1F-7732A14B5990}] => (Allow) C:\Program Files\GNS3\qemu-0.11.0\qemu.exe () [File not signed]
FirewallRules: [{C284DEFA-E200-4760-AC21-CCEDA0EF9B25}] => (Allow) C:\Program Files\GNS3\qemu-2.4.0\qemu-system-i386w.exe (Stefan Weil -> hxxp://
www.qemu.org/) [File not signed]
FirewallRules: [{96219185-9930-4B47-B68A-B21B1E7790DB}] => (Allow) C:\Program Files\GNS3\qemu-2.4.0\qemu-system-i386w.exe (Stefan Weil -> hxxp://
www.qemu.org/) [File not signed]
FirewallRules: [{AC803BA4-E237-4C98-96AC-D25F0163C4F1}] => (Allow) C:\Program Files\GNS3\qemu-2.4.0\qemu-system-x86_64w.exe (Stefan Weil -> hxxp://
www.qemu.org/) [File not signed]
FirewallRules: [{10ECAB87-6982-4B6A-A8B6-7A7C5BA643C6}] => (Allow) C:\Program Files\GNS3\qemu-2.4.0\qemu-system-x86_64w.exe (Stefan Weil -> hxxp://
www.qemu.org/) [File not signed]
FirewallRules: [TCP Query User{6E4D85F1-C8C6-4620-A870-18CA39BB88AC}C:\program files (x86)\sysm monitor\sysm-monitor.exe] => (Allow) C:\program files (x86)\sysm monitor\sysm-monitor.exe (Monitor) [File not signed]
FirewallRules: [UDP Query User{ED6C8155-B5B1-4A28-85DE-000BB926D403}C:\program files (x86)\sysm monitor\sysm-monitor.exe] => (Allow) C:\program files (x86)\sysm monitor\sysm-monitor.exe (Monitor) [File not signed]
FirewallRules: [TCP Query User{6E338FED-6124-415E-8145-1444DC89A189}C:\program files (x86)\sysm\sysm.exe] => (Block) C:\program files (x86)\sysm\sysm.exe () [File not signed]
FirewallRules: [UDP Query User{6326A225-085B-4575-82C5-E293662194FE}C:\program files (x86)\sysm\sysm.exe] => (Block) C:\program files (x86)\sysm\sysm.exe () [File not signed]
FirewallRules: [TCP Query User{97E747F7-018B-4AC6-BCCE-7ACEAF9328A3}C:\program files (x86)\sysm monitor\sysm-monitor.exe] => (Allow) C:\program files (x86)\sysm monitor\sysm-monitor.exe (Monitor) [File not signed]
FirewallRules: [UDP Query User{38FDB1EF-6DD6-4E54-92F5-8871D9D8FD15}C:\program files (x86)\sysm monitor\sysm-monitor.exe] => (Allow) C:\program files (x86)\sysm monitor\sysm-monitor.exe (Monitor) [File not signed]
EmptyTemp:
*****************
Processes closed successfully.
Restore point was successfully created.
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{430392D6-18CD-4199-8851-CAB5407D6820}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{430392D6-18CD-4199-8851-CAB5407D6820}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BC587310-D6AF-4510-A616-B3F7718A1E9F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BC587310-D6AF-4510-A616-B3F7718A1E9F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => not found
C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\jo0mc75n.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi => moved successfully
C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi => path removed successfully
HKLM\System\CurrentControlSet\Services\rpcapd => removed successfully
rpcapd => service removed successfully
HKLM\System\CurrentControlSet\Services\WsDrvInst => removed successfully
WsDrvInst => service removed successfully
HKLM\System\CurrentControlSet\Services\cpuz137 => removed successfully
cpuz137 => service removed successfully
HKLM\System\CurrentControlSet\Services\FreshIO => removed successfully
FreshIO => service removed successfully
"C:\Users\Michal\Desktop\programi\??zill? Fir?f??.lnk" => Could not move.
"C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Int?rn?t ???l?r?r.lnk" => Could not move.
"C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Int?rn?t ???l?r?r (N? ?dd-?ns).lnk" => Could not move.
C:\ProgramData\TEMP => ":15B79D44" ADS removed successfully
C:\Users\Michal\Desktop\pot2.jpeg => ":3or4kl4x13tuuug3Byamue2s4b" ADS removed successfully
C:\Users\Michal\Desktop\pot2.jpeg => ":{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}" ADS removed successfully
C:\Users\Michal\Desktop\potvrdenie.jpeg => ":3or4kl4x13tuuug3Byamue2s4b" ADS removed successfully
C:\Users\Michal\Desktop\potvrdenie.jpeg => ":{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{06885066-EAD1-4E28-9D0F-97443AF7424D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FA2D92B7-6A10-4429-AB46-5DCD2D37CE86}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{24CDE195-283E-4318-A621-1BF04C767A06}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9012649C-6825-4FC2-ACC4-95D64ACEA092}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{71819DF6-0CFA-45ED-A80D-2F867B3BB2D9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FB05FC84-2F7E-4182-8035-FB942643F695}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A119C0DA-55C6-4852-B836-86D65833D20F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{58F456B6-F9F3-416F-B63D-8A439DDA68DA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{70C337D7-11E5-4284-A7C3-5D83DA871B71}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D516D2A6-69B8-412C-9D76-D6025C4907E4}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4F844E97-A294-4720-8FC2-AF7C43101F16}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5F9B7E6D-E553-4708-BB1F-7732A14B5990}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C284DEFA-E200-4760-AC21-CCEDA0EF9B25}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{96219185-9930-4B47-B68A-B21B1E7790DB}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AC803BA4-E237-4C98-96AC-D25F0163C4F1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{10ECAB87-6982-4B6A-A8B6-7A7C5BA643C6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{6E4D85F1-C8C6-4620-A870-18CA39BB88AC}C:\program files (x86)\sysm monitor\sysm-monitor.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{ED6C8155-B5B1-4A28-85DE-000BB926D403}C:\program files (x86)\sysm monitor\sysm-monitor.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{6E338FED-6124-415E-8145-1444DC89A189}C:\program files (x86)\sysm\sysm.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6326A225-085B-4575-82C5-E293662194FE}C:\program files (x86)\sysm\sysm.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{97E747F7-018B-4AC6-BCCE-7ACEAF9328A3}C:\program files (x86)\sysm monitor\sysm-monitor.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{38FDB1EF-6DD6-4E54-92F5-8871D9D8FD15}C:\program files (x86)\sysm monitor\sysm-monitor.exe" => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 8497462 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 7711514 B
Edge => 0 B
Chrome => 0 B
Firefox => 729548950 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 0 B
Michal => 180321769 B
RecycleBin => 18089372 B
EmptyTemp: => 908.4 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 21:21:52 ====