Pomalý notebook

[hommeros]

Dobrý den, notebook je nějaký pomalý, připojuji log. Jde to nějak vyřešit?
Děkuji za rady


Logfile of random's system information tool 1.09 (written by random/random)
Run by ČKT at 2012-06-18 00:47:38
Microsoft® Windows Vista™ Home Basic Service Pack 2
System drive C: has 35 GB (33%) free of 105 GB
Total RAM: 1015 MB (32% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 0:48:40, on 18.6.2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Spyware Terminator\st_rsser.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hp\HP Software Update\hpwuschd2.exe
C:\Program Files\MouseFone\MouseFone.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\TouchFreeze\TouchFreeze.exe
C:\Program Files\Google\Drive\googledrivesync.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files\Google\Drive\googledrivesync.exe
C:\Users\ČKT\AppData\Local\Google\Update\1.3.21.111\GoogleCrashHandler.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wuauclt.exe
C:\Users\ČKT\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\ČKT\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\ČKT\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Users\ČKT\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\conime.exe
C:\Users\ČKT\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\ČKT\Downloads\RSIT.exe
C:\Program Files\trend micro\ČKT.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://login.study/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId= ... &pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http://proxy.mlp.cz:3128
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\5.8\pdfforgeToolbarIE.dll
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
R3 - URLSearchHook: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: PhotoPos Toolbar - {5D0EC45B-D2E4-4DD0-A5B2-69DDEFE852A8} - C:\Program Files\PhotoposComTbr\PhotoposComTbrLib.dll
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files\facemoods.com\facemoods\1.4.17.11\bh\facemoods.dll
O2 - BHO: uTorrentControl2 - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\5.8\pdfforgeToolbarIE.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: PhotoPos Toolbar - {5D0EC45B-D2E4-4DD0-A5B2-69DDEFE852A8} - C:\Program Files\PhotoposComTbr\PhotoposComTbrLib.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll
O3 - Toolbar: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
O3 - Toolbar: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\5.8\pdfforgeToolbarIE.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [MouseFone] C:\Program Files\MouseFone\MouseFone.exe
O4 - HKLM\..\Run: [facemoods] "C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe" /md I
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [MouseFoneGenie] C:\Program Files\MouseFone\MouseFone.exe
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SpywareTerminatorShield] C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
O4 - HKLM\..\Run: [SpywareTerminatorUpdater] C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
O4 - HKCU\..\Run: [BlazeServoTool] "C:\Program Files\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\ČKT\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [TouchFreeze] C:\Program Files\TouchFreeze\TouchFreeze.exe
O4 - HKCU\..\Run: [SkyDrive] "C:\Users\ČKT\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [chromium] C:\Users\ČKT\AppData\Local\Google\Chrome\Application\chrome.exe --no-startup-window
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Avira Planificateur (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Protection temps réel (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files\Spyware Terminator\st_rsser.exe
O23 - Service: stllssvr - Unknown owner - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe (file missing)
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 11875 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1360120449-14308222-4181161192-1006Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1360120449-14308222-4181161192-1006UA.job
C:\Windows\tasks\HPCeeScheduleForČKT.job
C:\Windows\tasks\PCConfidential.job
C:\Windows\tasks\User_Feed_Synchronization-{05675538-A45F-4786-A8F0-DE0CD5E11E5B}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-03-26 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
Winamp Toolbar Loader - C:\Program Files\Winamp Toolbar\winamptb.dll [2009-05-06 1262888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5D0EC45B-D2E4-4DD0-A5B2-69DDEFE852A8}]
PhotoPos Toolbar - C:\Program Files\PhotoposComTbr\PhotoposComTbrLib.dll [2009-09-30 91584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64182481-4F71-486b-A045-B233BD0DA8FC}]
CescrtHlpr Object - C:\Program Files\facemoods.com\facemoods\1.4.17.11\bh\facemoods.dll [2011-09-05 265944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{687578b9-7132-4a7a-80e4-30ee31099e03}]
uTorrentControl2 Toolbar - C:\Program Files\uTorrentControl2\prxtbuTor.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2012-03-08 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}]
pdfforge Toolbar - C:\Program Files\pdfforge Toolbar\IE\5.8\pdfforgeToolbarIE.dll [2012-05-25 1125256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-04-01 1144072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-31 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Winamp Toolbar - C:\Program Files\Winamp Toolbar\winamptb.dll [2009-05-06 1262888]
{5D0EC45B-D2E4-4DD0-A5B2-69DDEFE852A8} - PhotoPos Toolbar - C:\Program Files\PhotoposComTbr\PhotoposComTbrLib.dll [2009-09-30 91584]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-04-01 1144072]
{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - facemoods Toolbar - C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll [2011-09-05 220888]
{687578b9-7132-4a7a-80e4-30ee31099e03} - uTorrentControl2 Toolbar - C:\Program Files\uTorrentControl2\prxtbuTor.dll [2011-05-09 176936]
{B922D405-6D13-4A2B-AE89-08A030DA4402} - pdfforge Toolbar - C:\Program Files\pdfforge Toolbar\IE\5.8\pdfforgeToolbarIE.dll [2012-05-25 1125256]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2007-09-12 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2007-09-12 154136]
"Persistence"=C:\Windows\system32\igfxpers.exe [2007-09-12 129560]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-03-01 472776]
"WAWifiMessage"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe [2007-01-10 317128]
"QlbCtrl"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2007-11-06 177456]
"HP Health Check Scheduler"=c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-10-09 75008]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2011-01-12 49208]
"MouseFone"=C:\Program Files\MouseFone\MouseFone.exe [2007-01-05 147456]
"facemoods"=C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe [2011-09-05 362200]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-03-27 37296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-02 843712]
"MouseFoneGenie"=C:\Program Files\MouseFone\MouseFone.exe [2007-01-05 147456]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 931200]
""= []
"SearchSettings"=C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe [2012-05-25 992648]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2012-02-15 258512]
"SpywareTerminatorShield"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2012-03-27 2786480]
"SpywareTerminatorUpdater"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2012-03-27 3669680]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BlazeServoTool"=C:\Program Files\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe []
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"Google Update"=C:\Users\ČKT\AppData\Local\Google\Update\GoogleUpdate.exe [2009-09-08 133104]
"eyeBeam SIP Client"= []
"TouchFreeze"=C:\Program Files\TouchFreeze\TouchFreeze.exe [2005-04-29 45056]
"SkyDrive"=C:\Users\ČKT\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2012-05-31 296672]
"GoogleDriveSync"=C:\Program Files\Google\Drive\googledrivesync.exe [2012-06-13 12163568]
"chromium"=C:\Users\ČKT\AppData\Local\Google\Chrome\Application\chrome.exe [2012-06-07 1239576]

C:\Users\ČKT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2007-08-24 204800]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"aux8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"aux9"=wdmaud.drv
"msacm.siren"=sirenacm.dll

======List of files/folders created in the last 1 month======

2012-06-18 00:47:40 ----D---- C:\Program Files\trend micro
2012-06-18 00:47:38 ----D---- C:\rsit
2012-06-17 23:03:01 ----A---- C:\Windows\system32\drivers\sp_rsdrv2.sys
2012-06-17 23:02:54 ----D---- C:\Users\ČKT\AppData\Roaming\Spyware Terminator
2012-06-17 23:02:54 ----D---- C:\ProgramData\Spyware Terminator
2012-06-17 23:01:45 ----D---- C:\Users\ČKT\AppData\Roaming\Avira
2012-06-17 22:59:05 ----D---- C:\Program Files\Spyware Terminator
2012-06-17 22:53:43 ----A---- C:\Windows\system32\drivers\ssmdrv.sys
2012-06-17 22:53:37 ----A---- C:\Windows\system32\drivers\avkmgr.sys
2012-06-17 22:53:37 ----A---- C:\Windows\system32\drivers\avipbb.sys
2012-06-17 22:53:37 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2012-06-17 22:53:31 ----D---- C:\ProgramData\Avira
2012-06-17 22:53:31 ----D---- C:\Program Files\Avira
2012-05-25 23:24:31 ----D---- C:\Windows\cs
2012-05-25 23:23:04 ----A---- C:\Windows\system32\drivers\fssfltr.sys
2012-05-25 23:06:28 ----D---- C:\Program Files\Application Updater
2012-05-25 23:06:27 ----D---- C:\Program Files\pdfforge Toolbar
2012-05-25 23:06:27 ----D---- C:\Program Files\Common Files\Spigot

======List of files/folders modified in the last 1 month======

2012-06-18 00:47:50 ----D---- C:\Windows\Temp
2012-06-18 00:47:40 ----D---- C:\Program Files
2012-06-18 00:38:35 ----D---- C:\Windows\system32\Tasks
2012-06-18 00:38:34 ----D---- C:\Windows\Tasks
2012-06-18 00:33:50 ----D---- C:\Windows\Prefetch
2012-06-17 23:29:06 ----D---- C:\Windows\system32\inetsrv
2012-06-17 23:03:01 ----D---- C:\Windows\system32\drivers
2012-06-17 23:02:54 ----HD---- C:\ProgramData
2012-06-17 22:54:35 ----D---- C:\Windows\system32\catroot
2012-06-17 22:52:42 ----SHD---- C:\Windows\Installer
2012-06-17 22:52:32 ----D---- C:\Windows\System32
2012-06-17 20:50:12 ----SHD---- C:\System Volume Information
2012-06-17 19:24:28 ----D---- C:\Windows\winsxs
2012-06-17 19:23:44 ----D---- C:\Windows\system32\catroot2
2012-06-05 15:11:38 ----D---- C:\Windows\system32\LogFiles
2012-05-27 02:15:57 ----D---- C:\Users\ČKT\AppData\Roaming\GrooveWalrus
2012-05-25 23:27:51 ----D---- C:\Windows\Microsoft.NET
2012-05-25 23:27:49 ----RSD---- C:\Windows\assembly
2012-05-25 23:24:31 ----D---- C:\Windows
2012-05-25 23:23:06 ----DC---- C:\Windows\system32\DRVSTORE
2012-05-25 23:17:35 ----D---- C:\Program Files\Windows Live
2012-05-25 23:06:27 ----D---- C:\Program Files\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-03-20 171064]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2012-02-15 137416]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2011-09-16 36000]
R1 MpKsl314a7733;MpKsl314a7733; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{EAA673AF-0C0F-4BE5-B01D-F7B71245E97C}\MpKsl314a7733.sys [2012-06-17 29904]
R1 sp_rsdrv2;Spyware Terminator 2012 Realtime Shield Driver; \??\C:\Windows\system32\drivers\sp_rsdrv2.sys [2011-06-21 32768]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2012-02-15 74640]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-11-28 8192]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT32.sys [2008-03-04 188416]
R3 E100B;Intel(R) PRO Network Connection Driver; C:\Windows\system32\DRIVERS\e100b325.sys [2006-10-31 165760]
R3 HBtnKey;HBtnKey; C:\Windows\system32\DRIVERS\cpqbttn.sys [2006-06-28 9472]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-12-07 985600]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-12-07 207360]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-08-24 1899008]
R3 NETw4v32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-09-14 2222080]
R3 teamviewervpn;TeamViewer VPN Adapter; C:\Windows\system32\DRIVERS\teamviewervpn.sys [2011-03-30 25088]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-12-07 659968]
S3 adusbser6501;AnyDATA CDMA USB Serial Port (PID 6501); C:\Windows\system32\DRIVERS\adusbser65.sys [2005-05-02 64896]
S3 AF15BDA;AF9015 BDA Device; C:\Windows\system32\DRIVERS\AF15BDA.sys [2010-06-29 483200]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2006-11-02 167936]
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 464384]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2006-11-02 19456]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2006-11-02 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2006-11-02 220160]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2006-11-02 29184]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 ewusbnet;HUAWEI USB-NDIS miniport; C:\Windows\system32\DRIVERS\ewusbnet.sys [2009-07-23 112128]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-03-08 39272]
S3 GT680x;GrandTechICNameNT; C:\Windows\System32\Drivers\gt680x.sys [2001-11-08 18120]
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDART.sys [2007-02-22 159232]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2009-07-23 102912]
S3 hwusbfake;Huawei DataCard USB Fake; C:\Windows\system32\DRIVERS\ewusbfake.sys [2009-07-23 100736]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-08-24 1899008]
S3 lgusbsmodem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgusbsmodem.sys []
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 netr73;RT73 USB Wireless LAN Card Driver for Vista; C:\Windows\system32\DRIVERS\netr73.sys [2008-01-16 489984]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 74112]
S3 PRISM_USB;Instant Wireless USB Network Adapter ver.2.5 Driver; C:\Windows\system32\DRIVERS\PRISMXP.sys [2002-02-18 49752]
S3 QuarticsWP;QuarticsWP_Display_Driver; C:\Windows\system32\DRIVERS\QuarticsWP.sys [2008-08-25 17497]
S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 2028032]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2006-11-02 49664]
S3 RTL2832UBDA;REALTEK 2832U BDA Driver; C:\Windows\system32\drivers\RTL2832UBDA.sys [2010-01-22 143264]
S3 RTL2832UUSB;REALTEK 2832U USB Driver; C:\Windows\System32\Drivers\RTL2832UUSB.sys [2010-01-22 32800]
S3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2006-11-02 9216]
S3 tap0901;tap0901; C:\Windows\system32\DRIVERS\tap0901.sys [2011-06-07 26112]
S3 TPM;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2006-11-02 41064]
S3 usbaudio;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-19 134016]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2006-11-02 128104]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files\BatteryCare\WinRing0.sys []
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2006-11-02 82432]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira Protection temps réel; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2012-02-15 110032]
R2 AntiVirSchedulerService;Avira Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2012-02-15 86224]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 Application Updater;Application Updater; C:\Program Files\Application Updater\ApplicationUpdater.exe [2012-05-25 785344]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-10-09 94208]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2007-12-05 144688]
R2 IISADMIN;@%windir%\system32\inetsrv\iisres.dll,-30007; C:\Windows\system32\inetsrv\inetinfo.exe [2008-01-19 13824]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 11552]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [2011-03-28 249648]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\Windows\System32\tcpsvcs.exe [2009-08-14 9728]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files\Spyware Terminator\st_rsser.exe [2012-03-27 482992]
R2 TeamViewer6;TeamViewer 6; C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-17 2358656]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-11-28 386560]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-11-23 136176]
S2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2007-02-10 89968]
S3 BBSvc;Bing Bar Update Service; C:\Program Files\Microsoft\BingBar\BBSvc.EXE [2011-04-01 183560]
S3 Com4Qlb;Com4Qlb; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe [2007-03-05 110592]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-11-23 136176]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-12-12 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-03-26 214952]
S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe []
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]

-----------------EOF-----------------

[Mc_Murphy]

Zdravím.

Mohu dotaz? Pokud se moc nepletu, tak je to nějaký firemní počítač, že ano?

[hommeros]

Otázka je v poho,
to CKT je česká kulturní ...neziskovka...Věnoval jsem ho pro nevýdělečné sdružení.

[Mc_Murphy]

Dobrá, když jsi jim ho věnoval, jaktože jsi u něj teď Ty?
A jak, prosím, souvisí Česká kulturní se společností LAM plus s.r.o., ze které nyní píšeš?

[hommeros]

Jedině mne napadá připojení na internet, v Pikovicích.... jinak nevím...neznám
A omlouvám se za komplikace....

[hommeros]

Jo a jsem teď na něm....a budu. Děkuju

[Mc_Murphy]

Né, v pořádku, nemusíš se omlouvat. Já se chci vším tím jen ujistit, že počítač není firemní, jelikož firemními PC se tu nezabýváme. Jsme zde totiž ve svém volném čase, dobrovolně a zcela zadarmo a nebylo by tedy zrovna košer, abychom tu suplovali práci placených IT techniků ve firmách, či podnikatelům, kteří si mohou zaplatit technika a náklady si potom odečíst z daní, že?
Mno a první jsem si všimnul názvu počítače a potom samozřejmě firmu, přes kterou jsi na internetu (IP adresa směřuje právě na firmu LAM plus s.r.o.). Proto se chci ujistit, že je to soukromý počítač a nebudu se tu vrtat v počítači, který má udržovat placený technik, který za to pak v klidu sebere výplatu, rozumíš?

Takže když mi na tohle rozumně a po pravdě odpovíš, pohneme se někam dále.

Pravidla máš zde: http://forum.viry.cz/viewtopic.php?f=12&t=5601 zvláště tedy bod č.6.

[hommeros]

Rozumím všemu,
tenhle počítač se jmenuje CKT dělá se na něm většinou pro neziskovky, soukromě a školně.
Žádná IT společnost nebo placený odborník s ním nemá nic spol. Je pomalý a chtěl bych aby ještě věrně sloužil....nic z toho všeho osobně jinak nemám a vím, že vy všichni tady z toho nemáte nic také...
Kdyby to ale nešlo, tak všechno v poho a příště někdy nashle ....

[Mc_Murphy]

V pořádku, tohle vysvětlení mi stačí a budu Ti věřit.
V PC vidím nějaký ten bordýlek (celkem dost), tak se na to vrhneme.


Takže jako první bych doporučil odinstalovat Spyware Terminator. Mám dojem, že u něj nejde vypnout spouštění při startu systému a spouštění rezidentního štítu. Toto může kolidovat s antivirem, který máš v počítači.

Potom, pokud je tam najdeš, tak v nabídce Přidat nebo odebrat programy odinstaluj tyto toolbary:

• Winamp Toolbar, PhotoPos Toolbar, Bing Bar, facemoods Toolbar a všechno s názvem facemoods, uTorrentControl2 Toolbar, pdfforge Toolbar a pokud to půjde, tak všechno s názvem Spigot.

Toolbary (lišty prohlížečů) jsou veliká "zdržovadla" systému a v případě například Ask.com Toolbar, Conduit Engine a dalších se dá hovořit už i o havěti a Ty jich máš v NTB dost nechutnou sbírku.

A vůbec, co se týče klienta µTorrent, u neziskové organizace ani u jiné organizace by tohle v počítači vůbec nemělo být.
Uvědom si prosím nebezpečí stahování z P2P sítí, které jsou potenciálním bezpečnostním rizikem a prakticky neustále jsou zdrojem virů.
Zbytečně se tím vystavuješ riziku a o tom, co se z torrentů stahuje především, nebudeme polemizovat, že?!

Mno a ještě vidím v NTB dva antiviry - Aviru a MSE - to je také špatně. Dva antiviry v počítači spolu budou kolidovat, počítač zpomalovat a mohou dokonce způsobovat i neočekávané pády systému. Musíš si vybrat a jeden z nich odinstalovat. Osobně bych asi doporučil ponechat Aviru a odebrat MSE, ale jsou i lidé s MSE spokojení, takže si vyber a jeden odinstaluj.

• MSE i Avira by měli jít bez problémů odebrat klasicky přes Přidat nebo odebrat programy nebo přes jejich odinstalační program.

A na závěr ještě aktualizuj MS Internet Explorer na poslední verzi. I když používáš prohlížeč Google Chrome, aktualizace řeší spoustu problémů i v systému samotném.


Je toho poměrně hodně, tak to vše a pečlivě proveď. Co v odinstalacích nenajdeš, tak přeskoč, já to potom odpálím ručně.
Kdyby byl s něčím problém, napiš, vyřešíme. Když bude vše probíhat v pořádku, napiš taky a hoď mi sem zároveň nový aktuální log ze RSITu a budeme pokračovat v čištění.

[hommeros]

Děkuju za postup, dělal jsem to podle návodu, možná bych mohl ještě něco odinstalovat, smazat a tak...
log připojuji,
Zdravím

Logfile of random's system information tool 1.09 (written by random/random)
Run by ČKT at 2012-06-22 20:16:32
Microsoft® Windows Vista™ Home Basic Service Pack 2
System drive C: has 34 GB (32%) free of 105 GB
Total RAM: 1015 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:18:13, on 22.6.2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16446)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hp\HP Software Update\hpwuschd2.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\ČKT\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
C:\Program Files\Google\Drive\googledrivesync.exe
C:\Users\ČKT\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Users\ČKT\AppData\Local\Google\Update\1.3.21.111\GoogleCrashHandler.exe
C:\Users\ČKT\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\ČKT\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Drive\googledrivesync.exe
C:\Users\ČKT\Downloads\RSIT (1).exe
C:\Program Files\trend micro\ČKT.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://login.study/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId= ... &pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http://proxy.mlp.cz:3128
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
R3 - URLSearchHook: (no name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [MouseFone] C:\Program Files\MouseFone\MouseFone.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [BlazeServoTool] "C:\Program Files\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\ČKT\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [SkyDrive] "C:\Users\ČKT\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [chromium] C:\Users\ČKT\AppData\Local\Google\Chrome\Application\chrome.exe --no-startup-window
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Planificateur (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Protection temps réel (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Secunia Update Agent - Unknown owner - C:\Program Files\Secunia\PSI\sua.exe (file missing)
O23 - Service: stllssvr - Unknown owner - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe (file missing)
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 9035 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1360120449-14308222-4181161192-1006Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1360120449-14308222-4181161192-1006UA.job
C:\Windows\tasks\HPCeeScheduleForČKT.job
C:\Windows\tasks\PCConfidential.job
C:\Windows\tasks\User_Feed_Synchronization-{05675538-A45F-4786-A8F0-DE0CD5E11E5B}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-03-26 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-06-18 329480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2012-03-08 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-06-18 59144]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2007-09-12 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2007-09-12 154136]
"Persistence"=C:\Windows\system32\igfxpers.exe [2007-09-12 129560]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-03-01 472776]
"WAWifiMessage"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe [2007-01-10 317128]
"QlbCtrl"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2007-11-06 177456]
"HP Health Check Scheduler"=c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-10-09 75008]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2011-01-12 49208]
"MouseFone"=C:\Program Files\MouseFone\MouseFone.exe []
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-03-27 37296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-02 843712]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2012-02-15 258512]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BlazeServoTool"=C:\Program Files\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe []
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"Google Update"=C:\Users\ČKT\AppData\Local\Google\Update\GoogleUpdate.exe [2009-09-08 133104]
"eyeBeam SIP Client"= []
"SkyDrive"=C:\Users\ČKT\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2012-05-31 296672]
"GoogleDriveSync"=C:\Program Files\Google\Drive\googledrivesync.exe [2012-06-13 12163568]
"chromium"=C:\Users\ČKT\AppData\Local\Google\Chrome\Application\chrome.exe [2012-06-07 1239576]

C:\Users\ČKT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2007-08-24 204800]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"aux8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"aux9"=wdmaud.drv
"msacm.siren"=sirenacm.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-06-22 19:06:12 ----A---- C:\Windows\system32\msls31.dll
2012-06-22 19:06:11 ----A---- C:\Windows\system32\wininet.dll
2012-06-22 19:06:11 ----A---- C:\Windows\system32\jsproxy.dll
2012-06-22 19:06:10 ----A---- C:\Windows\system32\msrating.dll
2012-06-22 19:06:10 ----A---- C:\Windows\system32\iertutil.dll
2012-06-22 19:06:09 ----A---- C:\Windows\system32\urlmon.dll
2012-06-22 19:06:09 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2012-06-22 19:06:09 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2012-06-22 19:06:09 ----A---- C:\Windows\system32\mshtmler.dll
2012-06-22 19:06:09 ----A---- C:\Windows\system32\iesysprep.dll
2012-06-22 19:06:08 ----A---- C:\Windows\system32\ieui.dll
2012-06-22 19:06:06 ----A---- C:\Windows\system32\ieframe.dll
2012-06-22 19:06:05 ----A---- C:\Windows\system32\dxtrans.dll
2012-06-22 19:06:05 ----A---- C:\Windows\system32\dxtmsft.dll
2012-06-22 19:06:04 ----A---- C:\Windows\system32\iesetup.dll
2012-06-22 19:06:04 ----A---- C:\Windows\system32\iernonce.dll
2012-06-22 19:06:04 ----A---- C:\Windows\system32\ieapfltr.dll
2012-06-22 19:06:04 ----A---- C:\Windows\system32\ieapfltr.dat
2012-06-22 19:06:04 ----A---- C:\Windows\system32\ie4uinit.exe
2012-06-22 19:06:04 ----A---- C:\Windows\system32\icardie.dll
2012-06-22 19:06:03 ----A---- C:\Windows\system32\url.dll
2012-06-22 19:06:03 ----A---- C:\Windows\system32\iedkcs32.dll
2012-06-22 19:06:02 ----A---- C:\Windows\system32\webcheck.dll
2012-06-22 19:06:02 ----A---- C:\Windows\system32\mshtmled.dll
2012-06-22 19:06:02 ----A---- C:\Windows\system32\licmgr10.dll
2012-06-22 19:06:02 ----A---- C:\Windows\system32\inseng.dll
2012-06-22 19:06:01 ----A---- C:\Windows\system32\wextract.exe
2012-06-22 19:06:01 ----A---- C:\Windows\system32\msfeeds.dll
2012-06-22 19:06:01 ----A---- C:\Windows\system32\iexpress.exe
2012-06-22 19:06:00 ----A---- C:\Windows\system32\vbscript.dll
2012-06-22 19:05:58 ----A---- C:\Windows\system32\pngfilt.dll
2012-06-22 19:05:58 ----A---- C:\Windows\system32\occache.dll
2012-06-22 19:05:58 ----A---- C:\Windows\system32\mshtml.dll
2012-06-22 19:05:58 ----A---- C:\Windows\system32\ieUnatt.exe
2012-06-22 19:05:57 ----A---- C:\Windows\system32\mshta.exe
2012-06-22 19:05:57 ----A---- C:\Windows\system32\jscript9.dll
2012-06-22 19:05:57 ----A---- C:\Windows\system32\ieakui.dll
2012-06-22 19:05:57 ----A---- C:\Windows\system32\ieaksie.dll
2012-06-22 19:05:57 ----A---- C:\Windows\system32\admparse.dll
2012-06-22 19:05:56 ----A---- C:\Windows\system32\jscript.dll
2012-06-22 19:05:56 ----A---- C:\Windows\system32\imgutil.dll
2012-06-22 19:05:56 ----A---- C:\Windows\system32\iepeers.dll
2012-06-22 19:05:56 ----A---- C:\Windows\system32\advpack.dll
2012-06-22 19:05:55 ----A---- C:\Windows\system32\msfeedssync.exe
2012-06-22 19:05:55 ----A---- C:\Windows\system32\msfeedsbs.dll
2012-06-22 19:05:55 ----A---- C:\Windows\system32\IEAdvpack.dll
2012-06-22 19:05:54 ----A---- C:\Windows\system32\ieakeng.dll
2012-06-22 18:52:12 ----A---- C:\Windows\system32\wups2.dll
2012-06-22 18:52:12 ----A---- C:\Windows\system32\wucltux.dll
2012-06-22 18:52:12 ----A---- C:\Windows\system32\wuauclt.exe
2012-06-22 18:52:11 ----A---- C:\Windows\system32\wuaueng.dll
2012-06-22 18:51:22 ----A---- C:\Windows\system32\wups.dll
2012-06-22 18:51:22 ----A---- C:\Windows\system32\wudriver.dll
2012-06-22 18:51:22 ----A---- C:\Windows\system32\wuapi.dll
2012-06-22 18:51:01 ----A---- C:\Windows\system32\wuwebv.dll
2012-06-22 18:51:01 ----A---- C:\Windows\system32\wuapp.exe
2012-06-18 11:21:21 ----HD---- C:\SkyDriveTemp
2012-06-18 02:14:10 ----D---- C:\ProgramData\Sun
2012-06-18 02:13:40 ----A---- C:\Windows\system32\npdeployJava1.dll
2012-06-18 02:13:40 ----A---- C:\Windows\system32\javaws.exe
2012-06-18 02:13:40 ----A---- C:\Windows\system32\deployJava1.dll
2012-06-18 02:13:39 ----A---- C:\Windows\system32\javaw.exe
2012-06-18 02:13:39 ----A---- C:\Windows\system32\java.exe
2012-06-18 01:58:54 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2012-06-18 01:30:23 ----D---- C:\Program Files\Secunia
2012-06-18 00:47:40 ----D---- C:\Program Files\trend micro
2012-06-18 00:47:38 ----D---- C:\rsit
2012-06-17 23:03:01 ----A---- C:\Windows\system32\drivers\sp_rsdrv2.sys
2012-06-17 23:01:45 ----D---- C:\Users\ČKT\AppData\Roaming\Avira
2012-06-17 22:53:43 ----A---- C:\Windows\system32\drivers\ssmdrv.sys
2012-06-17 22:53:37 ----A---- C:\Windows\system32\drivers\avkmgr.sys
2012-06-17 22:53:37 ----A---- C:\Windows\system32\drivers\avipbb.sys
2012-06-17 22:53:37 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2012-06-17 22:53:31 ----D---- C:\ProgramData\Avira
2012-06-17 22:53:31 ----D---- C:\Program Files\Avira
2012-06-17 19:26:48 ----A---- C:\Windows\system32\cryptsvc.dll
2012-06-17 19:26:48 ----A---- C:\Windows\system32\crypt32.dll
2012-06-17 19:26:47 ----A---- C:\Windows\system32\cryptnet.dll
2012-06-17 19:25:37 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-06-17 19:24:56 ----A---- C:\Windows\system32\win32k.sys
2012-05-25 23:24:31 ----D---- C:\Windows\cs
2012-05-25 23:23:04 ----A---- C:\Windows\system32\drivers\fssfltr.sys

======List of files/folders modified in the last 1 month======

2012-06-22 20:17:07 ----D---- C:\Windows\Temp
2012-06-22 20:08:34 ----D---- C:\Windows\system32\inetsrv
2012-06-22 19:57:56 ----D---- C:\Windows\rescache
2012-06-22 19:54:46 ----D---- C:\Program Files
2012-06-22 19:26:41 ----D---- C:\Windows\system32\cs-CZ
2012-06-22 19:26:41 ----D---- C:\Windows\System32
2012-06-22 19:26:33 ----D---- C:\Program Files\Internet Explorer
2012-06-22 19:26:31 ----RD---- C:\Windows\Offline Web Pages
2012-06-22 19:26:30 ----D---- C:\Windows\system32\wbem
2012-06-22 19:26:30 ----D---- C:\Windows\system32\migration
2012-06-22 19:26:30 ----D---- C:\Windows\system32\en-US
2012-06-22 19:26:30 ----D---- C:\Windows\PolicyDefinitions
2012-06-22 19:26:22 ----SD---- C:\Windows\Downloaded Program Files
2012-06-22 19:19:55 ----D---- C:\Windows
2012-06-22 19:19:16 ----D---- C:\Windows\winsxs
2012-06-22 19:19:02 ----D---- C:\Windows\system32\catroot2
2012-06-22 19:19:00 ----D---- C:\Windows\system32\catroot
2012-06-22 19:17:53 ----SHD---- C:\System Volume Information
2012-06-22 18:25:54 ----HD---- C:\Program Files\InstallShield Installation Information
2012-06-22 18:25:54 ----D---- C:\Program Files\InterVideo
2012-06-22 18:10:00 ----D---- C:\Program Files\Common Files
2012-06-22 17:56:37 ----SHD---- C:\Windows\Installer
2012-06-22 17:55:57 ----D---- C:\Windows\system32\drivers
2012-06-22 17:26:38 ----D---- C:\Program Files\Photo Pos Pro
2012-06-22 17:07:14 ----HD---- C:\ProgramData
2012-06-22 16:43:58 ----D---- C:\Windows\Prefetch
2012-06-22 16:22:55 ----RSD---- C:\Windows\assembly
2012-06-22 16:18:40 ----SD---- C:\ProgramData\Microsoft
2012-06-22 16:18:40 ----D---- C:\Program Files\Microsoft
2012-06-22 16:10:41 ----D---- C:\Users\ČKT\AppData\Roaming\uTorrent
2012-06-21 22:43:59 ----D---- C:\Users\ČKT\AppData\Roaming\XnView
2012-06-21 20:27:45 ----D---- C:\Windows\system32\Tasks
2012-06-21 20:27:44 ----D---- C:\Windows\Tasks
2012-06-20 23:37:24 ----D---- C:\Users\ČKT\AppData\Roaming\vlc
2012-06-18 11:47:02 ----D---- C:\Windows\Microsoft.NET
2012-06-18 08:04:09 ----A---- C:\Windows\system32\mrt.exe
2012-06-18 02:14:07 ----D---- C:\Program Files\Common Files\Java
2012-06-18 02:12:50 ----D---- C:\Program Files\Java
2012-06-18 02:08:57 ----D---- C:\Program Files\XnView
2012-06-05 15:11:38 ----D---- C:\Windows\system32\LogFiles
2012-05-27 02:15:57 ----D---- C:\Users\ČKT\AppData\Roaming\GrooveWalrus
2012-05-25 23:23:06 ----DC---- C:\Windows\system32\DRVSTORE
2012-05-25 23:17:35 ----D---- C:\Program Files\Windows Live

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2012-02-15 137416]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2011-09-16 36000]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2012-02-15 74640]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-11-28 8192]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT32.sys [2008-03-04 188416]
R3 E100B;Intel(R) PRO Network Connection Driver; C:\Windows\system32\DRIVERS\e100b325.sys [2006-10-31 165760]
R3 HBtnKey;HBtnKey; C:\Windows\system32\DRIVERS\cpqbttn.sys [2006-06-28 9472]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-12-07 985600]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-12-07 207360]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-08-24 1899008]
R3 NETw4v32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-09-14 2222080]
R3 teamviewervpn;TeamViewer VPN Adapter; C:\Windows\system32\DRIVERS\teamviewervpn.sys [2011-03-30 25088]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-12-07 659968]
S3 adusbser6501;AnyDATA CDMA USB Serial Port (PID 6501); C:\Windows\system32\DRIVERS\adusbser65.sys [2005-05-02 64896]
S3 AF15BDA;AF9015 BDA Device; C:\Windows\system32\DRIVERS\AF15BDA.sys [2010-06-29 483200]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2006-11-02 167936]
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 464384]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2006-11-02 19456]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2006-11-02 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2006-11-02 220160]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2006-11-02 29184]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 ewusbnet;HUAWEI USB-NDIS miniport; C:\Windows\system32\DRIVERS\ewusbnet.sys [2009-07-23 112128]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-03-08 39272]
S3 GT680x;GrandTechICNameNT; C:\Windows\System32\Drivers\gt680x.sys [2001-11-08 18120]
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDART.sys [2007-02-22 159232]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2009-07-23 102912]
S3 hwusbfake;Huawei DataCard USB Fake; C:\Windows\system32\DRIVERS\ewusbfake.sys [2009-07-23 100736]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-08-24 1899008]
S3 lgusbsmodem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgusbsmodem.sys []
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 netr73;RT73 USB Wireless LAN Card Driver for Vista; C:\Windows\system32\DRIVERS\netr73.sys [2008-01-16 489984]
S3 PRISM_USB;Instant Wireless USB Network Adapter ver.2.5 Driver; C:\Windows\system32\DRIVERS\PRISMXP.sys [2002-02-18 49752]
S3 QuarticsWP;QuarticsWP_Display_Driver; C:\Windows\system32\DRIVERS\QuarticsWP.sys [2008-08-25 17497]
S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 2028032]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2006-11-02 49664]
S3 RTL2832UBDA;REALTEK 2832U BDA Driver; C:\Windows\system32\drivers\RTL2832UBDA.sys [2010-01-22 143264]
S3 RTL2832UUSB;REALTEK 2832U USB Driver; C:\Windows\System32\Drivers\RTL2832UUSB.sys [2010-01-22 32800]
S3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2006-11-02 9216]
S3 tap0901;tap0901; C:\Windows\system32\DRIVERS\tap0901.sys [2011-06-07 26112]
S3 TPM;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2006-11-02 41064]
S3 usbaudio;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-19 134016]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2006-11-02 128104]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files\BatteryCare\WinRing0.sys []
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2006-11-02 82432]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira Protection temps réel; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2012-02-15 110032]
R2 AntiVirSchedulerService;Avira Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2012-02-15 86224]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-10-09 94208]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2007-12-05 144688]
R2 IISADMIN;@%windir%\system32\inetsrv\iisres.dll,-30007; C:\Windows\system32\inetsrv\inetinfo.exe [2008-01-19 13824]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\Windows\System32\tcpsvcs.exe [2009-08-14 9728]
R2 TeamViewer6;TeamViewer 6; C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-17 2358656]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-11-28 386560]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-11-23 136176]
S2 Secunia Update Agent;Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe --start-service []
S2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2007-02-10 89968]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-18 257224]
S3 Com4Qlb;Com4Qlb; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe [2007-03-05 110592]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-11-23 136176]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-12-12 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe []
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]

-----------------EOF-----------------

[hommeros]

PC je o poznání rychlejší, ještě pouštím CCleaner...

[Mc_Murphy]

PC je o poznání rychlejší, ještě pouštím CCleaner...

To rád čtu, ale nechvátej, ještě budu dočišťovat a mazat zbytky po toolbarech a povypínám nějaké zbytečnosti ve spouštění při startu systému (máš pravdu, běhá toho tam zbytečně hodně).
CCleaner jsi spouštět zatím nemusel, ten doporučuji až na konci prohlídky. Není moc dobré mi dělat nějaké mezikroky během prohlídky. Nevím pak, co všechno se s PC děje.


Fixni tedy v HJT níže uvedené položky.

• Fixnout znamená, že spustíš HJT, zvolíš možnost [Do a system scan only] a zaškrtneš čtvereček vlevo od mnou vypsaných položek.
• Poté klikneš na [Fix checked] a odsouhlasíš [ANO].
• Položky, které v seznamu nenajdeš, prostě přeskoč.
• HJT najdeš zde: C:\Program Files\trend micro\ČKT.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
R3 - URLSearchHook: (no name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - (no file)
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)


Dále stáhni utilitu OTM z jednoho z těchto odkazů:

• http://oldtimer.geekstogo.com/OTM.exe
• http://oldtimer.geekstogo.com/OTM.com
• http://oldtimer.geekstogo.com/OTM.scr

Ulož ji na Plochu a dvojklikem spusť.

Do levého okna Paste Instructions for Items to be Moved zkopíruj tento script (pouze zelená písmenka v bílém poli!):

Kód: Vybrat vše

:Commands
[ClearAllRestorePoints]
[ResetHosts]
[Purity]
[EmptyTemp]
[EmptyFlash]

:Services
AdobeFlashPlayerUpdateSvc
gupdate
gupdatem
gusvc
Secunia Update Agent
stllssvr

:Files
C:\Program Files\pdfforge Toolbar
C:\Program Files\Winamp Toolbar
C:\Program Files\facemoods.com
C:\Program Files\Microsoft\BingBar
C:\Program Files\Common Files\Spigot
C:\Program Files\uTorrentControl2\prxtbuTor.dll
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1360120449-14308222-4181161192-1006Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1360120449-14308222-4181161192-1006UA.job
C:\Windows\tasks\HPCeeScheduleForČKT.job
C:\Windows\tasks\PCConfidential.job
C:\Windows\tasks\User_Feed_Synchronization-{05675538-A45F-4786-A8F0-DE0CD5E11E5B}.job
C:\Users\ČKT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s

:Reg
[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsWelcomeCenter"=-
"Sidebar"=-
[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=-
"IgfxTray"=-
"Persistence"=-
"HP Software Update"=-
"Adobe Reader Speed Launcher"=-
"Adobe ARM"=-
"SunJavaUpdateSched"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=-
"eyeBeam SIP Client"=-
"chromium"=-

Nyní klikni na tlačítko [MoveIt!], čímž vše spustíš.
Po restartu mi sem hoď log, který najdeš v C:\_OTM\MovedFiles\

[hommeros]

Dík za trpělivost....postupuji podle rady, už žádné moje mezikroky...

Nejdřív to vypadalo že se PC něco nelíbí, chvíli nic, jakože se zasekl ale za chvíli naskočil a po restartu

tenhle txt:


Files moved on Reboot...
File move failed. C:\Windows\System32\drivers\etc\Hosts scheduled to be moved on reboot.

Registry entries deleted on Reboot...

[Mc_Murphy]

OK, není problém. Zkus aplikovat script pro OTM ještě jednou, tentokrát ale v Nouzovém režimu.

[hommeros]

Snad jsem to pochopil dobře .... postupoval podle tvého návodu a tady je log na dvě části , má víc jak 8tis. znaků.
Díky

All processes killed
========== COMMANDS ==========

Error creating restore point.
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: Administrator

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Guest
->Temp folder emptied: 50473 bytes
->Temporary Internet Files folder emptied: 6423334 bytes
->Flash cache emptied: 589 bytes

User: Public

User: ČKT
->Temp folder emptied: 70082806 bytes
->Temporary Internet Files folder emptied: 698833 bytes
->Java cache emptied: 46693235 bytes
->FireFox cache emptied: 30399681 bytes
->Google Chrome cache emptied: 42816107 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 1028 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1049018 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33172 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 19424896 bytes
RecycleBin emptied: 2316 bytes

Total Files Cleaned = 208,00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Guest
->Flash cache emptied: 0 bytes

User: Public

User: ČKT
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb

========== SERVICES/DRIVERS ==========
Service AdobeFlashPlayerUpdateSvc stopped successfully!
Service AdobeFlashPlayerUpdateSvc deleted successfully!
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
Service gusvc stopped successfully!
Service gusvc deleted successfully!
Error: No service named Secunia Update Agent was found to stop!
Service\Driver key Secunia Update Agent not found.
Error: No service named stllssvr was found to stop!
Service\Driver key stllssvr not found.
========== FILES ==========
File/Folder C:\Program Files\pdfforge Toolbar not found.
File/Folder C:\Program Files\Winamp Toolbar not found.
File/Folder C:\Program Files\facemoods.com not found.
File/Folder C:\Program Files\Microsoft\BingBar not found.
File/Folder C:\Program Files\Common Files\Spigot not found.
File/Folder C:\Program Files\uTorrentControl2\prxtbuTor.dll not found.
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1360120449-14308222-4181161192-1006Core.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1360120449-14308222-4181161192-1006UA.job moved successfully.
C:\Windows\tasks\HPCeeScheduleForČKT.job moved successfully.
C:\Windows\tasks\PCConfidential.job moved successfully.
C:\Windows\tasks\User_Feed_Synchronization-{05675538-A45F-4786-A8F0-DE0CD5E11E5B}.job moved successfully.
C:\Users\ČKT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk moved successfully.
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP169B.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1A05.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1E0B.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1FBF.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2EBD.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP44EF.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP60D4.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP815F.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9AF7.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA12E.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA5B0.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA87F.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPABD8.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB0D7.tmp folder moved successfully.
C:\Windows\Installer\MSI8F56.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1014.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC103C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1079.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC10C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC10F1.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1137.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC113F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1154.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1156.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1160.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1163.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC117E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC11BC.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC11E7.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC11F1.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC11FA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC120.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC122B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC123A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1313.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1332.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC137D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1380.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC13C4.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC13EE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1408.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC142B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC144F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC146A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1515.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1554.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1571.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1573.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC159D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC15D1.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1616.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC161F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1640.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1645.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC167.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC168D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC16CD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC16F8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1714.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1767.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC17B7.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC17E7.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC17EA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1841.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC188.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC18F9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC191D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC19AB.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1A16.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1A7B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1B40.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1B5E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1B84.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1BEB.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1BF0.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1C56.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1C67.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1CA3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1CBF.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1CD5.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1D0B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1D2B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1D38.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1D42.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1D55.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1DED.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1E0D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1E78.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1E79.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1E87.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1EA3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1EA9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1F81.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1F8C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1F9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC1FFE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC203F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2043.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC204C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2051.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC205F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC207A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2099.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC20F8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC213.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2146.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2158.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2165.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2179.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC21FD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2211.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2242.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2275.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC22CD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC232B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC232C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2331.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2339.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC234A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2388.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC238A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC239C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC23A6.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC23C4.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC23C7.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC23D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC23F6.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2423.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC245.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2453.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC24AD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC24C3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2520.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC253D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC253E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC258B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC259A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC25C2.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC25C8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC25DB.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC25DC.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC26.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC260.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2606.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2616.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2637.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2653.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2655.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC26E3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2737.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC27CA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC27D5.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2830.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2852.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC28A7.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC28CE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2905.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2907.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC291F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2968.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC296B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC298A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2990.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC29BE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC29FC.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2A0F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2A2E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2A2F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2A35.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2A4E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2A85.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2A8F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2AA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2AE9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2AEC.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2B56.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2B93.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2BB2.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2BE0.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2C5E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2C91.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2CAD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2CB8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2CCB.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2CD9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2CDA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2CE9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2CEA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2D39.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2D44.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2D59.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2D85.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2D87.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2D94.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2DAB.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2DD7.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2DF2.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2DF8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2E07.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2E31.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2E6F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2E8F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2EA0.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2EFB.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2F3A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2F59.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2F68.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2FA8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2FC8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2FE1.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC2FFD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC306.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC310E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC313D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC313E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3170.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC318C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC31AD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC31E8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC328B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC32B3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC32BA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC32C3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC32F2.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3304.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC333F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3344.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC337E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3391.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3429.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3449.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3458.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3473.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3476.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3478.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC349B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC34F9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC34FD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC354C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3583.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC35A0.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC35B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC35C3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC361D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC364D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC369.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC36B9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC36BA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3707.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3708.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3726.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3764.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC37D3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3818.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3830.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3860.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3898.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC38A8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC38BC.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC38D3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC38EA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC38F8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3920.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC394.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3997.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC39E9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC39F3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3A62.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3ADD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3AF4.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3B24.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3B7E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3B8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3BBF.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3C0B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3C25.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3C42.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3C83.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3C91.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3D12.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3D1E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3D28.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3D2E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3D84.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3DB8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3DD9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3DF5.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3E0B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3E6A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3E84.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3E88.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3E99.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3ECB.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3F82.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3F8F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3FB6.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3FCD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3FCE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC3FEE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC400B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC402.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4037.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4084.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC40CB.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4134.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC41A3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC41D9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC41EF.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC429B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC429E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC42A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC42A0.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC42BA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4350.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4375.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC43D6.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4401.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4423.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4438.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4440.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4441.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC444B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4452.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC446F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4517.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC451D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC453B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC45A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4665.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC469E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC46B1.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC46B5.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC46E2.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4710.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4717.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC472F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4754.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4770.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC477B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC478C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4795.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC47A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC47BD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC47DB.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4807.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4831.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4836.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4837.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4884.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4916.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4937.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC49B9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4A1C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4A2.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4A55.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4A75.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4A82.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4AC6.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4B1.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4B42.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4B62.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4BA0.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4BED.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4C1C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4C2E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4C3D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4C7D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4C93.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4C9C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4CB9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4CCC.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4CD8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4D0C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4D3A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4D96.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4DB7.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4E6.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4E78.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4EAB.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4EEF.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4F0.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4F3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4F38.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4F45.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4F8D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4FC9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC4FF3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5005.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5023.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5050.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC507A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC509F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC50AE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC50B0.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC50DE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC50EF.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5126.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5157.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC51A8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC51A9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC51E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC520D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC522F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC523F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC52B3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC52B4.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC52E1.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5324.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC53CB.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5401.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5419.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5479.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC549C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC54C1.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC550C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5521.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5551.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC55AC.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC561B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC563D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5640.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5697.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5698.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC56C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC56D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5714.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5725.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC572A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5772.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC578D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5792.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC579F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC57C3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC57CD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC57D4.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5810.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5829.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC583D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC587B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC58BB.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC58BF.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC58DA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC58E1.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC58FD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC58FF.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5921.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5939.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5959.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5965.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC59E8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC59ED.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5ACC.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5AD5.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5B5E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5B6C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5B99.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5BB6.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5BED.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5C04.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5C24.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5CB0.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5CB3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5CCF.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5CEF.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5D0D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5D35.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5D47.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5D50.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5D5A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5D6E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5D9A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5DAC.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5E01.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5E19.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5E2A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5E32.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5E98.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5EB3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5F32.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5F4.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5F64.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5F6E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5F7.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5F7B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5FBC.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5FD3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC5FEC.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC603C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC604C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC60AE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC60F8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6102.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC61E6.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC61F7.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC623D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC623E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC623F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6249.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6266.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC62AC.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC62B5.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC62BD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC62C6.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC62D7.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC62FA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6310.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6317.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6345.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC635F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6366.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6373.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6375.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6452.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC64EE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC65A5.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC65F6.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6614.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC662C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6633.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC663B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6660.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC66BE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC66BF.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC66E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC676.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6769.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC67FE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6843.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6874.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC68D7.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC68EA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC68F9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC691C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC692D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC696D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6992.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC69BE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6A5.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6A5A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6A96.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6B31.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6B5A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6B76.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6B8F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6B97.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6BB2.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6BBD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6C1D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6C2D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6C3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6C35.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6C90.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6D62.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6DA0.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6DC0.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6DE0.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6E01.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6E14.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6E23.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6E2E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6ECF.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6EE0.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6F1C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6F58.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC6F86.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC704.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC709B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC70D5.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC70EC.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7129.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7146.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7148.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC714E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC71F4.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC72.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7239.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7242.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7272.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC72A0.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC72A1.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC732B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7359.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC738A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC738E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC73EF.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7409.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7459.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7466.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC748C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC74AA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC74B3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC74B4.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC74D7.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC750.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC756A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7592.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC759D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC75AE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC761A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7629.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7637.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7639.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC76B5.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC772.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7723.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC778C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC77A9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC77DD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC77EE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7805.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7810.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC784C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC787A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7889.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC78A3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC78FF.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7954.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7979.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7985.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC79E8.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC79EA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7A2F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7A3F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7A49.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7A63.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7A74.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7AA5.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7AD6.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7ADC.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7AEE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7B2B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7B52.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7B69.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7BA6.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7BAA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7BE1.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7C44.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7C95.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7CD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7CED.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7D09.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7D17.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7D1C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7D24.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7D6B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7DCA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7E34.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7E50.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7E95.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7EA1.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7ED1.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7ED3.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7EE7.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7F11.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC7F5A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC80C4.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8158.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC81D9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8206.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8243.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC826C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8288.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC828C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC82AE.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC82B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC82DB.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC82F5.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8336.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8353.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC835F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC83D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC83E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC83E1.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8413.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8435.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC844D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8466.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC846C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC848A.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC84B9.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC84E4.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8525.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC852F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC85FD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC865E.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC869D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC86D7.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC870B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC870F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8719.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC871D.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8739.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8748.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC879F.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC87A6.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC87B7.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC87DD.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC87E4.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC881C.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8855.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC88EF.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC88FA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8994.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC89DA.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC89DC.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8A17.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8A4B.tmp moved successfully.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\RAC8A59.tmp moved successfully.