Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Vir v ntb

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Zdenek26
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 12 lis 2013 16:04

Vir v ntb

#1 Příspěvek od Zdenek26 »

Zdravím. Před půl hodinou jsem otevřel nějaký odkaz z veřejného chatu a kamarád mi napsal, že je tam prý nějaké svinstvo, tak prosím o kontrolu logu. Děkuji za pomoc.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2015
Ran by ntb (administrator) on NTB on 02-03-2015 22:05:18
Running from C:\Users\ntb\Desktop
Loaded Profiles: ntb (Available profiles: ntb & Guest)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Atheros) C:\Program Files (x86)\Dell Wireless\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\ToolbarUpdater.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\loggingserver.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Atheros Communications) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe
() C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
() C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
(MyHeritage) C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
() C:\Program Files (x86)\Dell\Stage Remote\DMR.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrvPXDiscrete.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(TeamSpeak Systems GmbH) C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Blizzard Entertainment) C:\Program Files (x86)\World of Warcraft Wrath of the Lich King\Wow.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1424896 2011-09-08] (IDT, Inc.)
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [609144 2011-04-13] (Alps Electric Co., Ltd.)
HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [3668336 2011-02-11] (Dell Inc.)
HKLM\...\Run: [Stage Remote] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2034752 2011-08-08] ()
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [617120 2011-03-31] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe [379552 2011-03-31] (Atheros Commnucations)
HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [2055016 2011-04-30] ()
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-11-14] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Dell Registration] => C:\Program Files (x86)\System Registration\prodreg.exe [4165440 2011-08-04] (Dell, Inc.)
HKLM-x32\...\Run: [AccuWeatherWidget] => C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [885760 2011-04-30] ()
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3710416 2015-02-19] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [577536 2014-06-12] (Creative Technology Ltd)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2662424 2014-10-06] ()
HKLM-x32\...\Run: [Family Tree Builder Update] => C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe [2534400 2014-05-14] (MyHeritage)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKU\S-1-5-21-1528081476-4034604499-1241316036-1002\...\Run: [OscarX7Mouse5Mode] => C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe [3521024 2012-03-20] ()
HKU\S-1-5-21-1528081476-4034604499-1241316036-1002\...\Run: [windows] => C:\Users\ntb\AppData\Roaming\windows\nircmd.exe [44032 2013-08-11] (NirSoft)
HKU\S-1-5-21-1528081476-4034604499-1241316036-1002\...\Run: [Search Protection] => "C:\Users\ntb\AppData\Roaming\Search Protection\SP.EXE" /autostart
HKU\S-1-5-21-1528081476-4034604499-1241316036-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1528081476-4034604499-1241316036-1002\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-1528081476-4034604499-1241316036-1002\...\Run: [ManyCam] => C:\Program Files (x86)\ManyCam\ManyCam.exe [9726760 2014-12-23] (Visicom Media Inc.)
HKU\S-1-5-21-1528081476-4034604499-1241316036-1002\...\RunOnce: [Adobe Speed Launcher] => 1424890864
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GamePark klient 2.lnk
ShortcutTarget: GamePark klient 2.lnk -> C:\Program Files\GamePark2\gpcl.exe (Allstar Group, s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1528081476-4034604499-1241316036-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
SearchScopes: HKLM -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKLM-x32 -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKU\S-1-5-21-1528081476-4034604499-1241316036-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1528081476-4034604499-1241316036-1002 -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} http://ccfiles.creative.com/Web/softwar ... TSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\3.2.0\ViProtocol.dll (AVG Secure Search)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.100.254

FireFox:
========
FF ProfilePath: C:\Users\ntb\AppData\Roaming\Mozilla\Firefox\Profiles\cq536sad.default
FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q=
FF SearchEngineOrder.1: Google
FF Homepage: https://www.seznam.cz/
FF Keyword.URL: https://search.yahoo.com/search?fr=gree ... =501549&p=
FF NetworkProxy: "http", "183.221.245.208"
FF NetworkProxy: "http_port", 80
FF NetworkProxy: "no_proxies_on", ""
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @cuminas.jp/DjVuPlugin -> C:\Program Files\Cuminas\Document Express DjVu Plug-in\npdjvu.dll (Cuminas Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1214154.dll (Adobe Systems, Inc.)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\3.2.0\\npsitesafety.dll No File
FF Plugin-x32: @cuminas.jp/DjVuPlugin -> C:\Program Files (x86)\Cuminas\Document Express DjVu Plug-in\npdjvu.dll (Cuminas Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1528081476-4034604499-1241316036-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\ntb\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR Profile: C:\Users\ntb\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\ntb\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-18]
CHR Extension: (YouTube) - C:\Users\ntb\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-05]
CHR Extension: (Google Search) - C:\Users\ntb\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-05]
CHR Extension: (Google Wallet) - C:\Users\ntb\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-05]
CHR Extension: (Gmail) - C:\Users\ntb\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-05]

Opera:
=======
StartMenuInternet: (HKLM) Operabeta - C:\Program Files (x86)\Opera Next\Launcher.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2011-11-14] (Advanced Micro Devices, Inc.) [File not signed]
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Dell Wireless\Ath_CoexAgent.exe [135168 2011-02-16] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [77984 2011-03-31] (Atheros Commnucations) [File not signed]
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3411408 2015-02-19] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [308720 2015-02-19] (AVG Technologies CZ, s.r.o.)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2013-10-05] (Macrovision Europe Ltd.) [File not signed]
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [99936 2006-11-10] ()
R2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [75064 2014-12-21] ()
R2 PnkBstrB; C:\windows\SysWOW64\PnkBstrB.exe [214520 2014-12-21] ()
R2 vToolbarUpdater3.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\ToolbarUpdater.exe [1843736 2014-08-29] (AVG Secure Search)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [270816 2015-02-19] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [203544 2014-11-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [341472 2015-02-03] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [133088 2015-01-23] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [284128 2015-01-16] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\windows\system32\drivers\avgtpx64.sys [50976 2014-08-29] (AVG Technologies)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-12-21] (Disc Soft Ltd)
S4 IObitUnlocker; C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlocker.sys [36944 2014-03-04] (IObit)
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [49304 2014-12-15] (Visicom Media Inc.)
R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35992 2014-12-15] (Visicom Media Inc.)
S3 EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 PCDSRVC{1E208CE0-FB7451FF-06020200}_0; \??\c:\program files\dell support center\pcdsrvc_x64.pkms [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-02 22:05 - 2015-03-02 22:06 - 00020010 _____ () C:\Users\ntb\Desktop\FRST.txt
2015-03-02 22:04 - 2015-03-02 22:05 - 00000000 ____D () C:\FRST
2015-03-02 22:02 - 2015-03-02 22:02 - 02092544 _____ (Farbar) C:\Users\ntb\Desktop\FRST64.exe
2015-03-02 21:42 - 2015-03-02 21:55 - 00000000 ____D () C:\Program Files (x86)\WoW
2015-02-25 16:18 - 2015-02-25 16:18 - 00001421 _____ () C:\Users\ntb\Desktop\ManyCam.lnk
2015-02-25 16:08 - 2015-02-25 16:08 - 01682552 _____ () C:\windows\Minidump\022515-71635-01.dmp
2015-02-24 19:26 - 2015-02-24 19:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ManyCam
2015-02-24 18:30 - 2002-01-08 17:14 - 00005632 ___SH () C:\Users\ntb\Downloads\Thumbs.db
2015-02-21 22:31 - 2015-02-21 22:31 - 00000000 ____D () C:\Users\ntb\AppData\Roaming\SketchUp
2015-02-21 22:30 - 2015-02-21 22:30 - 00000000 ____D () C:\ProgramData\Reprise
2015-02-21 22:30 - 2015-02-21 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2015
2015-02-21 22:29 - 2015-02-21 22:29 - 00000000 ____D () C:\ProgramData\SketchUp
2015-02-21 22:29 - 2015-02-21 22:29 - 00000000 ____D () C:\Program Files (x86)\SketchUp
2015-02-21 07:39 - 2015-02-25 16:13 - 00000000 ____D () C:\ProgramData\Electronic Arts
2015-02-21 04:47 - 2015-02-21 04:47 - 00000000 ____D () C:\Users\ntb\Documents\Electronic Arts
2015-02-21 04:43 - 2015-02-21 04:43 - 00001885 _____ () C:\Users\ntb\Desktop\The Sims 3.lnk
2015-02-21 04:33 - 2015-02-21 04:33 - 00000000 ____D () C:\Program Files (x86)\Microsoft WSE
2015-02-21 04:25 - 2015-02-25 16:13 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2015-02-19 21:26 - 2015-02-19 21:26 - 00270816 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgidsdrivera.sys
2015-02-16 06:06 - 2015-02-16 06:06 - 00000000 ____D () C:\Users\ntb\AppData\Roaming\ESET
2015-02-16 06:06 - 2015-02-16 06:06 - 00000000 ____D () C:\Users\ntb\AppData\Local\ESET
2015-02-16 06:02 - 2015-02-16 06:02 - 00000000 ____D () C:\ProgramData\ESET
2015-02-16 06:02 - 2015-02-16 06:02 - 00000000 ____D () C:\Program Files\ESET
2015-02-15 12:30 - 2015-02-15 12:30 - 00003170 _____ () C:\windows\System32\Tasks\{97875793-92FC-4774-9580-1C8B63ED7A61}
2015-02-15 12:30 - 2015-02-15 12:30 - 00000000 __SHD () C:\Users\ntb\AppData\Local\EmieBrowserModeList
2015-02-15 12:16 - 2015-02-16 06:42 - 00000000 ____D () C:\Program Files (x86)\RelevantKnowledge
2015-02-15 12:15 - 2015-02-15 12:15 - 00000000 ____D () C:\Users\ntb\AppData\Roaming\New Version Available
2015-02-10 15:21 - 2015-02-10 15:21 - 01682440 _____ () C:\windows\Minidump\021015-77080-01.dmp
2015-02-08 15:47 - 2015-02-08 15:47 - 00464704 _____ () C:\windows\Minidump\020815-49109-01.dmp
2015-02-08 03:11 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2015-02-07 07:33 - 2014-08-29 03:07 - 03179520 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2015-02-07 07:33 - 2014-05-08 10:32 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\RdpGroupPolicyExtension.dll
2015-02-07 07:32 - 2014-09-05 03:11 - 06584320 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2015-02-07 07:32 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2015-02-06 13:33 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbFlt.sys
2015-02-06 13:33 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-02-06 13:33 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-02-06 13:33 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\MsRdpWebAccess.dll
2015-02-06 13:33 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\windows\system32\wksprtPS.dll
2015-02-06 13:33 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2015-02-06 13:33 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\TsUsbGDCoInstaller.dll
2015-02-06 13:33 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2015-02-06 13:33 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\MsRdpWebAccess.dll
2015-02-06 13:33 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wksprtPS.dll
2015-02-06 13:33 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\windows\system32\wksprt.exe
2015-02-06 13:33 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2015-02-06 13:33 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe
2015-02-06 13:33 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2015-02-06 13:33 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe
2015-02-06 13:32 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2015-02-06 13:32 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2015-02-06 13:32 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbGD.sys
2015-02-06 13:32 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpendp_winip.dll
2015-02-06 13:32 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\windows\system32\rdpendp_winip.dll
2015-02-03 10:47 - 2015-02-03 10:47 - 00341472 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgloga.sys
2015-02-02 07:39 - 2015-02-02 07:39 - 00000000 ____D () C:\ProgramData\Blizzard
2015-01-31 20:26 - 2015-01-31 20:32 - 00000000 ____D () C:\Users\ntb\VirtualBox VMs
2015-01-31 06:42 - 2015-01-31 06:42 - 02916352 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-01-31 06:42 - 2015-01-31 06:42 - 02589696 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-01-31 06:42 - 2015-01-31 06:42 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-01-31 06:42 - 2015-01-31 06:42 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-01-31 06:42 - 2015-01-31 06:42 - 00191488 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-01-31 06:42 - 2015-01-31 06:42 - 00173056 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-01-31 06:42 - 2015-01-31 06:42 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-01-31 06:42 - 2015-01-31 06:42 - 00092672 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-01-31 06:42 - 2015-01-31 06:42 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-01-31 06:42 - 2015-01-31 06:42 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-01-31 06:42 - 2015-01-31 06:42 - 00037376 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-01-31 06:42 - 2015-01-31 06:42 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-01-31 06:42 - 2015-01-31 06:42 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-01-31 06:42 - 2015-01-31 06:42 - 00033792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-01-31 06:42 - 2015-01-31 06:42 - 00029696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-01-31 06:42 - 2015-01-31 06:42 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-02 21:35 - 2014-06-17 20:42 - 00000914 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2015-03-02 21:31 - 2014-06-18 21:04 - 00000952 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-02 21:10 - 2011-12-16 02:21 - 01764746 _____ () C:\windows\WindowsUpdate.log
2015-03-02 18:17 - 2013-11-23 19:20 - 00000000 ____D () C:\ProgramData\MFAData
2015-03-02 17:33 - 2014-12-16 22:25 - 00000000 ____D () C:\Users\ntb\AppData\Roaming\TS3Client
2015-03-02 15:31 - 2014-06-18 21:04 - 00000948 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-02 15:24 - 2012-12-15 17:58 - 00000000 ____D () C:\Users\ntb\AppData\Local\CrashDumps
2015-02-27 00:05 - 2013-01-22 16:42 - 00000000 ____D () C:\Users\ntb\AppData\Roaming\Skype
2015-02-26 23:37 - 2014-08-17 12:28 - 00000000 ____D () C:\Users\ntb\AppData\Local\ManyCam
2015-02-26 23:33 - 2011-12-16 03:54 - 00681726 _____ () C:\windows\system32\perfh005.dat
2015-02-26 23:33 - 2011-12-16 03:54 - 00146140 _____ () C:\windows\system32\perfc005.dat
2015-02-26 23:33 - 2009-07-14 06:13 - 01611012 _____ () C:\windows\system32\PerfStringBackup.INI
2015-02-25 18:22 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\rescache
2015-02-25 18:18 - 2009-07-14 05:45 - 00028576 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-25 18:18 - 2009-07-14 05:45 - 00028576 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-25 17:41 - 2014-10-26 13:32 - 00006263 _____ () C:\windows\setupact.log
2015-02-25 17:41 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-02-25 17:40 - 2014-10-27 12:23 - 00034854 _____ () C:\windows\PFRO.log
2015-02-25 16:20 - 2015-01-25 14:04 - 00000988 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2015-02-25 16:20 - 2015-01-25 14:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-02-25 16:08 - 2015-01-05 06:24 - 483966066 _____ () C:\windows\MEMORY.DMP
2015-02-25 16:08 - 2013-01-05 11:47 - 00000000 ____D () C:\windows\Minidump
2015-02-25 02:13 - 2014-11-25 00:43 - 00000000 ____D () C:\Users\ntb\Documents\Škola
2015-02-24 21:52 - 2014-09-16 21:48 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-02-24 21:52 - 2011-12-16 03:05 - 00000000 ____D () C:\ProgramData\Skype
2015-02-24 19:26 - 2014-08-17 12:24 - 00000000 ____D () C:\Program Files (x86)\ManyCam
2015-02-24 19:21 - 2014-10-11 14:31 - 00000000 ____D () C:\ProgramData\ManyCam
2015-02-21 04:37 - 2014-11-14 01:49 - 00000000 ____D () C:\Users\ntb\AppData\Roaming\NetBeans
2015-02-21 04:37 - 2014-11-14 01:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetBeans
2015-02-21 04:37 - 2014-11-14 01:41 - 00000000 ____D () C:\Users\ntb\.nbi
2015-02-21 04:33 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-02-21 04:25 - 2011-12-16 02:26 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-16 21:07 - 2012-03-22 11:41 - 00000000 ____D () C:\Users\ntb
2015-02-16 21:05 - 2012-07-12 20:17 - 00000000 ____D () C:\Users\Guest
2015-02-16 21:05 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\registration
2015-02-16 16:49 - 2014-06-19 22:51 - 00000000 ____D () C:\Program Files (x86)\Opera Next
2015-02-15 11:41 - 2014-11-18 21:19 - 00000000 ____D () C:\Users\ntb\Documents\SIPO
2015-02-13 06:29 - 2014-06-19 22:51 - 00003830 _____ () C:\windows\System32\Tasks\Opera scheduled Autoupdate 1403214698
2015-02-07 03:48 - 2011-02-23 14:08 - 00000000 ____D () C:\windows\Panther
2015-02-07 03:42 - 2015-01-21 01:47 - 00000000 ___HD () C:\$Windows.~BT
2015-02-06 19:52 - 2014-03-11 21:59 - 00000000 ____D () C:\Users\ntb\AppData\Local\Battle.net
2015-02-06 19:49 - 2014-03-12 21:14 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2015-02-06 19:42 - 2014-03-11 21:59 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2015-02-06 16:17 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-02-06 16:14 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2015-02-06 15:37 - 2014-10-27 14:10 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-02-06 13:36 - 2011-11-16 20:25 - 01560204 _____ () C:\windows\SysWOW64\PerfStringBackup.INI
2015-02-06 00:48 - 2013-11-23 17:33 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft Wrath of the Lich King
2015-02-05 12:35 - 2012-06-14 05:55 - 00701616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-02-05 12:35 - 2012-06-14 05:55 - 00003852 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-02-05 12:35 - 2011-12-16 02:30 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-04 15:26 - 2013-08-05 12:10 - 00003948 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-04 15:26 - 2013-08-05 12:10 - 00003696 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-02 18:40 - 2014-03-11 21:59 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2015-01-31 20:33 - 2015-01-30 21:15 - 00000000 ____D () C:\Users\ntb\.VirtualBox

==================== Files in the root of some directories =======

2013-12-19 20:40 - 2014-01-12 14:55 - 0000028 _____ () C:\Users\ntb\AppData\Roaming\msbhcu.dat
2013-12-21 20:13 - 2014-01-12 14:57 - 0000029 _____ () C:\Users\ntb\AppData\Roaming\msmwetno.dat
2013-12-19 20:27 - 2014-01-12 14:51 - 0000027 _____ () C:\Users\ntb\AppData\Roaming\msmxre.dat
2013-12-19 20:27 - 2013-12-27 17:32 - 0001733 _____ () C:\Users\ntb\AppData\Roaming\mssrjkfp.dat
2013-12-19 20:30 - 2013-12-27 17:32 - 0001737 _____ () C:\Users\ntb\AppData\Roaming\mstklrxl.dat
2013-12-19 20:29 - 2014-01-12 14:56 - 0000029 _____ () C:\Users\ntb\AppData\Roaming\msurgmxb.dat
2013-12-19 20:30 - 2014-01-12 14:51 - 0000027 _____ () C:\Users\ntb\AppData\Roaming\mswmrhl.dat
2012-06-22 19:27 - 2012-06-22 19:27 - 0005243 _____ () C:\Users\ntb\AppData\Roaming\UserTile.png
2013-07-08 16:35 - 2013-07-08 16:35 - 0003584 _____ () C:\Users\ntb\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-12-15 16:47 - 2012-12-15 16:47 - 0000017 _____ () C:\Users\ntb\AppData\Local\resmon.resmoncfg

Some content of TEMP:
====================
C:\Users\ntb\AppData\Local\Temp\EAD22AC.exe
C:\Users\ntb\AppData\Local\Temp\EAD7DC6.exe
C:\Users\ntb\AppData\Local\Temp\EADAE9E.exe
C:\Users\ntb\AppData\Local\Temp\i4jdel0.exe
C:\Users\ntb\AppData\Local\Temp\InstHelper.exe
C:\Users\ntb\AppData\Local\Temp\ochelper.exe
C:\Users\ntb\AppData\Local\Temp\SearchProtectionSetup.exe
C:\Users\ntb\AppData\Local\Temp\UninstallEADM.dll
C:\Users\ntb\AppData\Local\Temp\~3D9C.exe
C:\Users\ntb\AppData\Local\Temp\~CE08.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-25 18:11

==================== End Of Log ============================
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir v ntb

#2 Příspěvek od Rudy »

Zdravím!
Spusťte nejprve tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zdenek26
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 12 lis 2013 16:04

Re: Vir v ntb

#3 Příspěvek od Zdenek26 »

# AdwCleaner v4.111 - Logfile created 02/03/2015 at 22:36:07
# Updated 18/02/2015 by Xplode
# Database : 2015-03-02.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : ntb - NTB
# Running from : C:\Users\ntb\Desktop\adwcleaner_4.111.exe
# Option : Cleaning

***** [ Services ] *****

Service Deleted : vToolbarUpdater3.2.0

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\ProgramData\AVG Security Toolbar
Folder Deleted : C:\ProgramData\ytd video downloader
Folder Deleted : C:\ProgramData\HitsBlender
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader
Folder Deleted : C:\Program Files (x86)\GreenTree Applications
Folder Deleted : C:\Program Files (x86)\RelevantKnowledge
Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Deleted : C:\Users\ntb\AppData\Local\HitsBlender
File Deleted : C:\Users\ntb\AppData\Roaming\Mozilla\Firefox\Profiles\ogxd59zl.default\searchplugins\yahoo_ff.xml

***** [ Scheduled tasks ] *****

Task Deleted : YourFile DownloaderUpdate

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Search Protection]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\AppDataLow\Software\Search Protection
Key Deleted : HKLM\SOFTWARE\Email Notifier
Key Deleted : HKLM\SOFTWARE\mystarttb
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Search Protection
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A2D81E70-2A98-4A08-A628-94388B063C5E}
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Mozilla Firefox v35.0.1 (x86 cs)


-\\ Google Chrome v40.0.2214.115


*************************

AdwCleaner[R1].txt - [4195 bytes] - [02/03/2015 22:33:11]
AdwCleaner[S1].txt - [4159 bytes] - [02/03/2015 22:36:07]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [4218 bytes] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir v ntb

#4 Příspěvek od Rudy »

Dejte nový log FRST.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zdenek26
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 12 lis 2013 16:04

Re: Vir v ntb

#5 Příspěvek od Zdenek26 »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2015
Ran by ntb (administrator) on NTB on 04-03-2015 00:01:09
Running from C:\Users\ntb\Desktop
Loaded Profiles: ntb (Available profiles: ntb & Guest)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Atheros) C:\Program Files (x86)\Dell Wireless\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Atheros Communications) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(MyHeritage) C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Program Files (x86)\Dell\Stage Remote\DMR.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(TeamSpeak Systems GmbH) C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft) C:\Program Files (x86)\WoW\Fishing\MrFishIt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Blizzard Entertainment) C:\Program Files (x86)\World of Warcraft Wrath of the Lich King\Wow.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1424896 2011-09-08] (IDT, Inc.)
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [609144 2011-04-13] (Alps Electric Co., Ltd.)
HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [3668336 2011-02-11] (Dell Inc.)
HKLM\...\Run: [Stage Remote] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2034752 2011-08-08] ()
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [617120 2011-03-31] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe [379552 2011-03-31] (Atheros Commnucations)
HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [2055016 2011-04-30] ()
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-11-14] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Dell Registration] => C:\Program Files (x86)\System Registration\prodreg.exe [4165440 2011-08-04] (Dell, Inc.)
HKLM-x32\...\Run: [AccuWeatherWidget] => C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [885760 2011-04-30] ()
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3710416 2015-02-19] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [577536 2014-06-12] (Creative Technology Ltd)
HKLM-x32\...\Run: [Family Tree Builder Update] => C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe [2534400 2014-05-14] (MyHeritage)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKU\S-1-5-21-1528081476-4034604499-1241316036-1002\...\Run: [OscarX7Mouse5Mode] => C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe [3521024 2012-03-20] ()
HKU\S-1-5-21-1528081476-4034604499-1241316036-1002\...\Run: [windows] => C:\Users\ntb\AppData\Roaming\windows\nircmd.exe [44032 2013-08-11] (NirSoft)
HKU\S-1-5-21-1528081476-4034604499-1241316036-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1528081476-4034604499-1241316036-1002\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-1528081476-4034604499-1241316036-1002\...\Run: [ManyCam] => C:\Program Files (x86)\ManyCam\ManyCam.exe [9726760 2014-12-23] (Visicom Media Inc.)
HKU\S-1-5-21-1528081476-4034604499-1241316036-1002\...\RunOnce: [Adobe Speed Launcher] => 1425332350
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GamePark klient 2.lnk
ShortcutTarget: GamePark klient 2.lnk -> C:\Program Files\GamePark2\gpcl.exe (Allstar Group, s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1528081476-4034604499-1241316036-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
SearchScopes: HKLM -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKLM-x32 -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1528081476-4034604499-1241316036-1002 -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} http://ccfiles.creative.com/Web/softwar ... TSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.100.254

FireFox:
========
FF ProfilePath: C:\Users\ntb\AppData\Roaming\Mozilla\Firefox\Profiles\cq536sad.default
FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q=
FF SearchEngineOrder.1: Google
FF Homepage: https://www.seznam.cz/
FF Keyword.URL: https://search.yahoo.com/search?fr=gree ... =501549&p=
FF NetworkProxy: "http", "183.221.245.208"
FF NetworkProxy: "http_port", 80
FF NetworkProxy: "no_proxies_on", ""
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @cuminas.jp/DjVuPlugin -> C:\Program Files\Cuminas\Document Express DjVu Plug-in\npdjvu.dll (Cuminas Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1214154.dll (Adobe Systems, Inc.)
FF Plugin-x32: @cuminas.jp/DjVuPlugin -> C:\Program Files (x86)\Cuminas\Document Express DjVu Plug-in\npdjvu.dll (Cuminas Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1528081476-4034604499-1241316036-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\ntb\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR Profile: C:\Users\ntb\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\ntb\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-18]
CHR Extension: (YouTube) - C:\Users\ntb\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-05]
CHR Extension: (Google Search) - C:\Users\ntb\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-05]
CHR Extension: (Google Wallet) - C:\Users\ntb\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-05]
CHR Extension: (Gmail) - C:\Users\ntb\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-05]

Opera:
=======
StartMenuInternet: (HKLM) Operabeta - C:\Program Files (x86)\Opera Next\Launcher.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2011-11-14] (Advanced Micro Devices, Inc.) [File not signed]
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Dell Wireless\Ath_CoexAgent.exe [135168 2011-02-16] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [77984 2011-03-31] (Atheros Commnucations) [File not signed]
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3411408 2015-02-19] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [308720 2015-02-19] (AVG Technologies CZ, s.r.o.)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2013-10-05] (Macrovision Europe Ltd.) [File not signed]
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [99936 2006-11-10] ()
R2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [75064 2014-12-21] ()
R2 PnkBstrB; C:\windows\SysWOW64\PnkBstrB.exe [214520 2014-12-21] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [270816 2015-02-19] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [203544 2014-11-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [341472 2015-02-03] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [133088 2015-01-23] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [284128 2015-01-16] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\windows\system32\drivers\avgtpx64.sys [50976 2014-08-29] (AVG Technologies)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-12-21] (Disc Soft Ltd)
S4 IObitUnlocker; C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlocker.sys [36944 2014-03-04] (IObit)
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [49304 2014-12-15] (Visicom Media Inc.)
R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35992 2014-12-15] (Visicom Media Inc.)
S3 EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 PCDSRVC{1E208CE0-FB7451FF-06020200}_0; \??\c:\program files\dell support center\pcdsrvc_x64.pkms [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-02 22:32 - 2015-03-02 22:36 - 00000000 ____D () C:\AdwCleaner
2015-03-02 22:30 - 2015-03-02 22:30 - 02126848 _____ () C:\Users\ntb\Desktop\adwcleaner_4.111.exe
2015-03-02 22:05 - 2015-03-04 00:02 - 00018674 _____ () C:\Users\ntb\Desktop\FRST.txt
2015-03-02 22:04 - 2015-03-04 00:01 - 00000000 ____D () C:\FRST
2015-03-02 22:02 - 2015-03-02 22:02 - 02092544 _____ (Farbar) C:\Users\ntb\Desktop\FRST64.exe
2015-03-02 21:42 - 2015-03-03 01:01 - 00000000 ____D () C:\Program Files (x86)\WoW
2015-02-25 16:18 - 2015-02-25 16:18 - 00001421 _____ () C:\Users\ntb\Desktop\ManyCam.lnk
2015-02-25 16:08 - 2015-02-25 16:08 - 01682552 _____ () C:\windows\Minidump\022515-71635-01.dmp
2015-02-24 19:26 - 2015-02-24 19:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ManyCam
2015-02-24 18:30 - 2002-01-08 17:14 - 00005632 ___SH () C:\Users\ntb\Downloads\Thumbs.db
2015-02-21 22:31 - 2015-02-21 22:31 - 00000000 ____D () C:\Users\ntb\AppData\Roaming\SketchUp
2015-02-21 22:30 - 2015-02-21 22:30 - 00000000 ____D () C:\ProgramData\Reprise
2015-02-21 22:30 - 2015-02-21 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2015
2015-02-21 22:29 - 2015-02-21 22:29 - 00000000 ____D () C:\ProgramData\SketchUp
2015-02-21 22:29 - 2015-02-21 22:29 - 00000000 ____D () C:\Program Files (x86)\SketchUp
2015-02-21 07:39 - 2015-02-25 16:13 - 00000000 ____D () C:\ProgramData\Electronic Arts
2015-02-21 04:47 - 2015-02-21 04:47 - 00000000 ____D () C:\Users\ntb\Documents\Electronic Arts
2015-02-21 04:43 - 2015-02-21 04:43 - 00001885 _____ () C:\Users\ntb\Desktop\The Sims 3.lnk
2015-02-21 04:33 - 2015-02-21 04:33 - 00000000 ____D () C:\Program Files (x86)\Microsoft WSE
2015-02-21 04:25 - 2015-02-25 16:13 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2015-02-19 21:26 - 2015-02-19 21:26 - 00270816 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgidsdrivera.sys
2015-02-16 06:06 - 2015-02-16 06:06 - 00000000 ____D () C:\Users\ntb\AppData\Roaming\ESET
2015-02-16 06:06 - 2015-02-16 06:06 - 00000000 ____D () C:\Users\ntb\AppData\Local\ESET
2015-02-16 06:02 - 2015-02-16 06:02 - 00000000 ____D () C:\ProgramData\ESET
2015-02-16 06:02 - 2015-02-16 06:02 - 00000000 ____D () C:\Program Files\ESET
2015-02-15 12:30 - 2015-02-15 12:30 - 00003170 _____ () C:\windows\System32\Tasks\{97875793-92FC-4774-9580-1C8B63ED7A61}
2015-02-15 12:30 - 2015-02-15 12:30 - 00000000 __SHD () C:\Users\ntb\AppData\Local\EmieBrowserModeList
2015-02-15 12:15 - 2015-02-15 12:15 - 00000000 ____D () C:\Users\ntb\AppData\Roaming\New Version Available
2015-02-10 15:21 - 2015-02-10 15:21 - 01682440 _____ () C:\windows\Minidump\021015-77080-01.dmp
2015-02-08 15:47 - 2015-02-08 15:47 - 00464704 _____ () C:\windows\Minidump\020815-49109-01.dmp
2015-02-08 03:11 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2015-02-07 07:33 - 2014-08-29 03:07 - 03179520 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2015-02-07 07:33 - 2014-05-08 10:32 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\RdpGroupPolicyExtension.dll
2015-02-07 07:32 - 2014-09-05 03:11 - 06584320 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2015-02-07 07:32 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2015-02-06 13:33 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbFlt.sys
2015-02-06 13:33 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-02-06 13:33 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-02-06 13:33 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\MsRdpWebAccess.dll
2015-02-06 13:33 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\windows\system32\wksprtPS.dll
2015-02-06 13:33 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2015-02-06 13:33 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\TsUsbGDCoInstaller.dll
2015-02-06 13:33 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2015-02-06 13:33 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\MsRdpWebAccess.dll
2015-02-06 13:33 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wksprtPS.dll
2015-02-06 13:33 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\windows\system32\wksprt.exe
2015-02-06 13:33 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2015-02-06 13:33 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe
2015-02-06 13:33 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2015-02-06 13:33 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe
2015-02-06 13:32 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2015-02-06 13:32 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2015-02-06 13:32 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbGD.sys
2015-02-06 13:32 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpendp_winip.dll
2015-02-06 13:32 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\windows\system32\rdpendp_winip.dll
2015-02-03 10:47 - 2015-02-03 10:47 - 00341472 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgloga.sys
2015-02-02 07:39 - 2015-02-02 07:39 - 00000000 ____D () C:\ProgramData\Blizzard

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-03 23:35 - 2014-06-17 20:42 - 00000914 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2015-03-03 23:31 - 2014-06-18 21:04 - 00000952 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-03 21:10 - 2011-12-16 02:21 - 01768509 _____ () C:\windows\WindowsUpdate.log
2015-03-03 15:31 - 2014-06-18 21:04 - 00000948 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-03 12:03 - 2012-12-15 17:58 - 00000000 ____D () C:\Users\ntb\AppData\Local\CrashDumps
2015-03-03 00:50 - 2014-08-17 12:28 - 00000000 ____D () C:\Users\ntb\AppData\Local\ManyCam
2015-03-02 22:46 - 2009-07-14 05:45 - 00028576 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-02 22:46 - 2009-07-14 05:45 - 00028576 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-02 22:43 - 2014-12-16 22:25 - 00000000 ____D () C:\Users\ntb\AppData\Roaming\TS3Client
2015-03-02 22:38 - 2014-10-27 12:23 - 00035496 _____ () C:\windows\PFRO.log
2015-03-02 22:38 - 2014-10-26 13:32 - 00006319 _____ () C:\windows\setupact.log
2015-03-02 22:38 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-03-02 18:17 - 2013-11-23 19:20 - 00000000 ____D () C:\ProgramData\MFAData
2015-02-27 00:05 - 2013-01-22 16:42 - 00000000 ____D () C:\Users\ntb\AppData\Roaming\Skype
2015-02-26 23:33 - 2011-12-16 03:54 - 00681726 _____ () C:\windows\system32\perfh005.dat
2015-02-26 23:33 - 2011-12-16 03:54 - 00146140 _____ () C:\windows\system32\perfc005.dat
2015-02-26 23:33 - 2009-07-14 06:13 - 01611012 _____ () C:\windows\system32\PerfStringBackup.INI
2015-02-25 18:22 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\rescache
2015-02-25 16:20 - 2015-01-25 14:04 - 00000988 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2015-02-25 16:20 - 2015-01-25 14:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-02-25 16:08 - 2015-01-05 06:24 - 483966066 _____ () C:\windows\MEMORY.DMP
2015-02-25 16:08 - 2013-01-05 11:47 - 00000000 ____D () C:\windows\Minidump
2015-02-25 02:13 - 2014-11-25 00:43 - 00000000 ____D () C:\Users\ntb\Documents\Škola
2015-02-24 21:52 - 2014-09-16 21:48 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-02-24 21:52 - 2011-12-16 03:05 - 00000000 ____D () C:\ProgramData\Skype
2015-02-24 19:26 - 2014-08-17 12:24 - 00000000 ____D () C:\Program Files (x86)\ManyCam
2015-02-24 19:21 - 2014-10-11 14:31 - 00000000 ____D () C:\ProgramData\ManyCam
2015-02-21 04:37 - 2014-11-14 01:49 - 00000000 ____D () C:\Users\ntb\AppData\Roaming\NetBeans
2015-02-21 04:37 - 2014-11-14 01:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetBeans
2015-02-21 04:37 - 2014-11-14 01:41 - 00000000 ____D () C:\Users\ntb\.nbi
2015-02-21 04:33 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-02-21 04:25 - 2011-12-16 02:26 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-16 21:07 - 2012-03-22 11:41 - 00000000 ____D () C:\Users\ntb
2015-02-16 21:05 - 2012-07-12 20:17 - 00000000 ____D () C:\Users\Guest
2015-02-16 21:05 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\registration
2015-02-16 16:49 - 2014-06-19 22:51 - 00000000 ____D () C:\Program Files (x86)\Opera Next
2015-02-15 11:41 - 2014-11-18 21:19 - 00000000 ____D () C:\Users\ntb\Documents\SIPO
2015-02-13 06:29 - 2014-06-19 22:51 - 00003830 _____ () C:\windows\System32\Tasks\Opera scheduled Autoupdate 1403214698
2015-02-07 03:48 - 2011-02-23 14:08 - 00000000 ____D () C:\windows\Panther
2015-02-07 03:42 - 2015-01-21 01:47 - 00000000 ___HD () C:\$Windows.~BT
2015-02-06 19:52 - 2014-03-11 21:59 - 00000000 ____D () C:\Users\ntb\AppData\Local\Battle.net
2015-02-06 19:49 - 2014-03-12 21:14 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2015-02-06 19:42 - 2014-03-11 21:59 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2015-02-06 16:17 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-02-06 16:14 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2015-02-06 15:37 - 2014-10-27 14:10 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-02-06 13:36 - 2011-11-16 20:25 - 01560204 _____ () C:\windows\SysWOW64\PerfStringBackup.INI
2015-02-06 00:48 - 2013-11-23 17:33 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft Wrath of the Lich King
2015-02-05 12:35 - 2012-06-14 05:55 - 00701616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-02-05 12:35 - 2012-06-14 05:55 - 00003852 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-02-05 12:35 - 2011-12-16 02:30 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-04 15:26 - 2013-08-05 12:10 - 00003948 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-04 15:26 - 2013-08-05 12:10 - 00003696 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-02 18:40 - 2014-03-11 21:59 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment

==================== Files in the root of some directories =======

2013-12-19 20:40 - 2014-01-12 14:55 - 0000028 _____ () C:\Users\ntb\AppData\Roaming\msbhcu.dat
2013-12-21 20:13 - 2014-01-12 14:57 - 0000029 _____ () C:\Users\ntb\AppData\Roaming\msmwetno.dat
2013-12-19 20:27 - 2014-01-12 14:51 - 0000027 _____ () C:\Users\ntb\AppData\Roaming\msmxre.dat
2013-12-19 20:27 - 2013-12-27 17:32 - 0001733 _____ () C:\Users\ntb\AppData\Roaming\mssrjkfp.dat
2013-12-19 20:30 - 2013-12-27 17:32 - 0001737 _____ () C:\Users\ntb\AppData\Roaming\mstklrxl.dat
2013-12-19 20:29 - 2014-01-12 14:56 - 0000029 _____ () C:\Users\ntb\AppData\Roaming\msurgmxb.dat
2013-12-19 20:30 - 2014-01-12 14:51 - 0000027 _____ () C:\Users\ntb\AppData\Roaming\mswmrhl.dat
2012-06-22 19:27 - 2012-06-22 19:27 - 0005243 _____ () C:\Users\ntb\AppData\Roaming\UserTile.png
2013-07-08 16:35 - 2013-07-08 16:35 - 0003584 _____ () C:\Users\ntb\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-12-15 16:47 - 2012-12-15 16:47 - 0000017 _____ () C:\Users\ntb\AppData\Local\resmon.resmoncfg

Some content of TEMP:
====================
C:\Users\ntb\AppData\Local\Temp\EAD22AC.exe
C:\Users\ntb\AppData\Local\Temp\EAD7DC6.exe
C:\Users\ntb\AppData\Local\Temp\EADAE9E.exe
C:\Users\ntb\AppData\Local\Temp\i4jdel0.exe
C:\Users\ntb\AppData\Local\Temp\InstHelper.exe
C:\Users\ntb\AppData\Local\Temp\ochelper.exe
C:\Users\ntb\AppData\Local\Temp\Quarantine.exe
C:\Users\ntb\AppData\Local\Temp\SearchProtectionSetup.exe
C:\Users\ntb\AppData\Local\Temp\sqlite3.dll
C:\Users\ntb\AppData\Local\Temp\UninstallEADM.dll
C:\Users\ntb\AppData\Local\Temp\~3D9C.exe
C:\Users\ntb\AppData\Local\Temp\~CE08.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-25 18:11

==================== End Of Log ============================
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir v ntb

#6 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
Start
SearchScopes: HKLM -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKLM-x32 -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1528081476-4034604499-1241316036-1002 -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL =
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
C:\Program Files (x86)\Google\Google Toolbar
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\ntb\AppData\Local\Temp
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zdenek26
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 12 lis 2013 16:04

Re: Vir v ntb

#7 Příspěvek od Zdenek26 »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-03-2015
Ran by ntb at 2015-03-05 07:49:50 Run:1
Running from C:\Users\ntb\Desktop
Loaded Profiles: ntb (Available profiles: ntb & Guest)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
SearchScopes: HKLM -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKLM-x32 -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1528081476-4034604499-1241316036-1002 -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL =
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
C:\Program Files (x86)\Google\Google Toolbar
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\ntb\AppData\Local\Temp
End
*****************

"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53}" => Key deleted successfully.
HKCR\CLSID\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-1528081476-4034604499-1241316036-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53}" => Key deleted successfully.
HKCR\CLSID\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => Key deleted successfully.
"HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => Key deleted successfully.
C:\Program Files (x86)\Google\Google Toolbar => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully.
HKCR\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9} => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => value deleted successfully.
"HKCR\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}" => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => value deleted successfully.
"HKCR\Wow6432Node\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}" => Key deleted successfully.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin" => Key deleted successfully.
C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA => Moved successfully.
C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore => Moved successfully.

"C:\Users\ntb\AppData\Local\Temp" directory move:

C:\Users\ntb\AppData\Local\Temp\142D3DF3-0DA0-478C-A1DC-E2AB805CBC6C.Diagnose.0.etl => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\142D3DF3-0DA0-478C-A1DC-E2AB805CBC6C.Repair.1.etl => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\142D3DF3-0DA0-478C-A1DC-E2AB805CBC6C.Verify.2.etl => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\1F83B4AB-C34B-41AC-8C66-0A5AD1FEF030.Repair.4.etl => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\1F83B4AB-C34B-41AC-8C66-0A5AD1FEF030.Repair.6.etl => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\1F83B4AB-C34B-41AC-8C66-0A5AD1FEF030.Verify.5.etl => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\1F83B4AB-C34B-41AC-8C66-0A5AD1FEF030.Verify.7.etl => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\2061wrfiles.~lk => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\20A2E50C-2F31-4184-814A-6EBD020C770C.Diagnose.8.etl => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\5524wradata.~lk => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\68889FF3-6988-45F9-907F-EB5B042B1BBC.Repair.4.etl => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\6AD40578-FF77-4EDE-AB2F-C3E3755B9353.Repair.1.etl => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\6AD40578-FF77-4EDE-AB2F-C3E3755B9353.Verify.2.etl => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\AdobeARM.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\AdobeARM_NotLocked.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\adwcleaner.db => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\AdwCleaner.jpg => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\alm.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\amt.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\AUCHECK_PARSER.txt => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\avginfo.id => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\BA9E6434-48C4-4C39-A7C7-35445F27155B.Repair.1.etl => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\BA9E6434-48C4-4C39-A7C7-35445F27155B.Verify.2.etl => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\binsis142.xml => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\binsischeck654.xml => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\bugsplat.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CCA177.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CCAADA.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Channels-3ot35grp.ylz.xml => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Channels-dupqbbsc.rrr.xml => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Channels-fjawpkxw.tew.xml => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Channels-hgbeiyvu.nfz.xml => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Channels-iuatdgg1.1bb.xml => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Channels-j1qdkwqa.3x4.xml => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Channels-xlntf01g.lni.xml => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\chrome_installer.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Cleaning.ico => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\clipboardcache => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\clipboardcache-1 => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\clipboardcache-2 => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\clipboardcache-3 => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\clipboardcache-4 => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\clipboardcache-5 => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\clipboardcache-6 => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\cpal3d.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CProgram Files (x86)Opera Next26.0.1656.8opera_autoupdate.download.lock => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CProgram Files (x86)Opera Next26.0.1656.8opera_autoupdate.metrics.lock => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR1006.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR1578.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR19F.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR207F.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR216F.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR2EE1.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR3079.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR37E6.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR3AB4.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR3D04.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR3E1F.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR3EA3.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR47FC.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR4BFD.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR528.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR58AC.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR5B5E.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR5EF6.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR5FD.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR691E.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR6C97.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR6E1D.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR70C1.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR7695.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR81BA.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR828C.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR8F82.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVR9013.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVRA1F1.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVRA5F9.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVRAC8E.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVRC19B.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVRC8A3.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVRD1E3.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVRD64F.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVRD71A.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVRE913.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVRED41.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVRF08A.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\CVRFEEC.tmp.cvr => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\D0B9807E-D512-4663-BD97-11929428A452.Diagnose.0.etl => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\D0B9807E-D512-4663-BD97-11929428A452.Repair.1.etl => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\dd_vcredistMSI572C.txt => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\dd_vcredistUI572C.txt => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\dd_vcredist_amd64_20141029055426.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\dd_vcredist_amd64_20141029055426_0_vcRuntimeMinimum_x64.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\dd_vcredist_amd64_20141029055426_1_vcRuntimeAdditional_x64.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\dd_vcredist_amd64_20141029064033.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\dd_vcredist_amd64_20141029064033_0_vcRuntimeMinimum_x64.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\dd_vcredist_amd64_20141029064033_1_vcRuntimeAdditional_x64.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\dd_vcredist_x86_20141029055330.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\dd_vcredist_x86_20141029055330_0_vcRuntimeMinimum_x86.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\dd_vcredist_x86_20141029055330_1_vcRuntimeAdditional_x86.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\dd_vcredist_x86_20141029063943.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\dd_vcredist_x86_20141029063943_0_vcRuntimeMinimum_x86.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\dd_vcredist_x86_20141029063943_1_vcRuntimeAdditional_x86.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\devrestart.html => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\EAD22AC.exe => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\EAD22AC.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\EAD7DC6.exe => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\EAD7DC6.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\EADAE9E.exe => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\EADAE9E.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_34zn8IBXPFBnnOW => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_455IxSUbTYnCkp6 => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_boryxDiWYsWXOOt => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_cDxxPusgTXvTGf9 => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_G1VkENprZb4rlBD => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_hFo0S7h7tiZ2ATT => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_hIsCHzKwhPMFwaX => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_Hzigzg7wehPvOo1 => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_l343d94b5i7Rn60 => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_LHNkk1qe943oAet => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_nRXVr74bgweaphI => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_OA7cX9XC8Rpnzn2 => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_sKMheBEXHJM0bhY => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_v1QLRCSE8minhrm => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_VXLiZSwKl25xrf0 => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_wb35vMyfwDcp69q => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_Wn5FbrFghqLsZd7 => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_yYmb7lBsrxGFOgy => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\etilqs_ZkAKOdxMj9sknmn => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\EULA.txt => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\F7312621-D0C3-4E8D-AB6F-3844C97A35EA.Diagnose.3.etl => Moved successfully.
Could not move "C:\Users\ntb\AppData\Local\Temp\FXSAPIDebugLogFile.txt" => Scheduled to move on reboot.
C:\Users\ntb\AppData\Local\Temp\global1.cvs => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\global2.cvs => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Harm_roku_Leg3.doc => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\i4jdel0.exe => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\InstHelper.exe => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\JAUReg.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\JavaDeployReg.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\java_install.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\java_install_reg.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\java_install_sp.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\jinstall.cfg => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\jusched.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_20141029_063922920-MSI_vc_red.msi.txt => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_20141029_063922920.html => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_20141108_192118808-Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219-MSP0.txt => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_20141108_192118808-MSI_vc_red.msi.txt => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_20141108_192118808.html => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_20141029_063907039-MSI_vc_red.msi.txt => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_20141029_063907039.html => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\MyHeritage_Updates.ini => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\nocam.html => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\nosignal.html => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\NoticeNoLic4002211.mht => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\nsb147.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\nsr699B.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\nss4C7A.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\nssDA38.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\ochelper.exe => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\opera_crashreporter.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\osi9060.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\PMBUninst.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\qtsingleapp-contro-edcf-1-lockfile => Moved successfully.
Could not move "C:\Users\ntb\AppData\Local\Temp\qtsingleapp-dmrexe-14ce-1-lockfile" => Scheduled to move on reboot.
C:\Users\ntb\AppData\Local\Temp\qtsingleapp-stager-fe9f-1-lockfile => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Report.ico => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Scan.ico => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\SearchProtectionSetup.exe => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\SketchUpUndo-2015-02-22-08_00_26.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\sqlite3.dll => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\SymCCISDll.txt => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp11CD.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp703.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp7320.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp7551.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp77D3.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp7840.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp790C.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp79C8.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp79E8.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp7A18.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp7A38.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp7A67.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp7A77.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp823F.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp8472.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp84B1.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp8517.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp854E.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp8555.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp858E.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp859E.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp860C.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp86EE.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp87BA.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp8876.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp88A6.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp8943.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp8963.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp8A9C.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmp94C3.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpCF4C.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpCF93.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpD140.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpD23B.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpD26B.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpD28B.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpD3B4.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpD3C5.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpD423.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpD609.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpD644.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpD687.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpD6D6.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpD6E7.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpD7B2.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpD801.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpD850.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpD9DE.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpDA4C.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpDA6C.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpDB86.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpDBC5.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpDBF5.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpDC35.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpDD36.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpE7D1.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpE986.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpEB1D.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpEBF8.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpEC28.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpEC96.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpECC6.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tmpED44.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\toolbar_log.txt => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\tracefile.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\TWAIN.LOG => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Twain001.Mtx => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Twunk001.MTX => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Twunk002.MTX => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Uninstall.ico => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\UninstallEADM.dll => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\updates.ini => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\v3init2.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\wmplog00.sqm => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~3D9C.exe => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~3D9C.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~CE08.exe => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~CE08.tmp => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF031E9F461C252C49.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF0595E7CD816DDDDD.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF065AD9C947AD870E.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF15CEE3C9307E53F2.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF1F7562F325342158.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF234D9DB5E71AE807.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF2598890569E27C22.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF2E0FBAD015BF17A0.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF383E21C72EFE1DB5.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF45A55BC29D24C1B0.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF47544C9959FF65C5.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF504848622F4D587C.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF539F3B8A59431786.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF581676C27251A4BB.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF6529B160EDB96497.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF6CC6337F770921A4.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF6D74C85CCA80F992.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF6EB000F00ECE5DAB.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF7214300A28495003.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF7CBCE98B0ADBFA1C.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF81E6C73CA060A283.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF8F163FA193A8E917.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF900ADE2282ED2962.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF90700DBC9075DE52.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF92A05F11F3DC1635.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF988EAE0509F992DE.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DF9C5608B149CBEEEF.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFA09E7627AFDFC87F.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFA9E287E2422BB949.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFABFDE09402250B77.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFB21241F79113B616.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFB99C81D2E217C9EC.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFBE90AF9C6DB2B6CD.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFC30426ED9F3578C3.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFCA314CE7157BC08E.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFCF6545E6C8BA35FE.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFD17C7E672EC26E34.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFD324E38359C4EEDC.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFD8D75C5B05F3DB83.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFDCF38AEB5FE5B260.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFEA1DCA05DB721A59.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFF1BDF8E41EABF137.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFF2874D22A0682D5C.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFF9D37CCA214FC36A.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFFAA47737234E8D53.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~DFFFEEEBC21B7CCCB5.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\~e5.0001 => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\VSDF84B.tmp\install.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\UnityWebPlayer\UnityWebPlayerUpdate.exe => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Temp1_Minecraft-1.6.2-BEZ-HESLA!!!.zip\Minecraft 1.6.2\Minecraft 1.6.2.exe => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\TCD90D0.tmp\CleanGradient.thmx => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\TCD6EA0.tmp\CleanGradient.thmx => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\TCD2722.tmp\CleanGradient.thmx => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\TCD13E3.tmp\CleanGradient.thmx => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Skype\gilasterr.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\sketchup_install\setup.exe => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\sketchup_install\SketchUp2015-x86.msi => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\nst1085.tmp\DTLite.exe => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\nsr4737.tmp\SketchUpWENx.exe => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\msohtmlclip1\01\clip_colorschememapping.xml => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\msohtmlclip1\01\clip_themedata.thmx => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\Low\JavaDeployReg.log => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\e4j9268.tmp_dir\MinecraftSP.jar => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\e4j6F6C.tmp_dir\MinecraftSP.jar => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\e4j2700.tmp_dir\MinecraftSP.jar => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DF18FFC7CFAE2402B3.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DF36A1BFE93DF8137C.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DF4043CFDB546F99F4.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DF4361DB84766DA6F6.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DF4C71DF7E8B8670CE.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DF522CE55AD3E5FED5.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DF5FAAF79799B209C9.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DF63336C87E21E2186.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DF766483A275C69AF5.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DF7D8DCCDB6F1BBB08.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DF91A1B6CDEE708F5A.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DF98BD9D741C6D1055.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DFB18CFDC257B92ACD.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DFC8BD89BEF2A599F2.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DFD625A3011C359848.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DFDDD5E098CE7A17D1.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DFE3DCC75E07E6D9EB.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\acro_rd_dir\~DFEB741214C86E4D51.TMP => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\7238966d-8de5-493c-9a37-fd57a34a11d1\Windows6.1-KB2990214-x64.cab => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\7238966d-8de5-493c-9a37-fd57a34a11d1\Windows6.1-KB2990214-x86.cab => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\7238966d-8de5-493c-9a37-fd57a34a11d1\Windows8.1-KB3014460-x64.cab => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\7238966d-8de5-493c-9a37-fd57a34a11d1\Windows8.1-KB3014460-x86.cab => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\6202wrdata.~lk\swfdata0 => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\.insomniacache\towtruck2014\.command\2222acae.icom => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\.insomniacache\towtruck2014\.command\53280955.icom => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\.insomniacache\towtruck2014\.command\7fd95941.icom => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\.insomniacache\towtruck2014\.command\a002ed75.icom => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\.insomniacache\towtruck2014\.command\b5d9c1e3.icom => Moved successfully.
C:\Users\ntb\AppData\Local\Temp\.insomniacache\towtruck2014\.command\b8ede82d.icom => Moved successfully.
Could not move "C:\Users\ntb\AppData\Local\Temp" directory. => Scheduled to move on reboot.


=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-03-05 07:56:11)<=

C:\Users\ntb\AppData\Local\Temp\FXSAPIDebugLogFile.txt => Is moved successfully.
C:\Users\ntb\AppData\Local\Temp\qtsingleapp-dmrexe-14ce-1-lockfile => Is moved successfully.
C:\Users\ntb\AppData\Local\Temp => Moved successfully.

==== End of Fixlog 07:56:11 ====
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir v ntb

#8 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zdenek26
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 12 lis 2013 16:04

Re: Vir v ntb

#9 Příspěvek od Zdenek26 »

Pokud chci např. vytvořit novou složku, tak se zobrazuje "Přístup byl odepřen."
Přílohy
1.PNG
1.PNG (42.6 KiB) Zobrazeno 2967 x
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir v ntb

#10 Příspěvek od Rudy »

Co se stane, když kliknete na "Pokračovat"?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zdenek26
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 12 lis 2013 16:04

Re: Vir v ntb

#11 Příspěvek od Zdenek26 »

Vytvoří se Nová složka. :D
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir v ntb

#12 Příspěvek od Rudy »

Máte plná práva k vašemu profilu? Pokud ano, zkontrolujtem jak to vypadá s přístupem. Klik pravým myšítkem>vlastnosti>zabezpečení.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zdenek26
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 12 lis 2013 16:04

Re: Vir v ntb

#13 Příspěvek od Zdenek26 »

Nemám a ty práva nejdou změnit.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir v ntb

#14 Příspěvek od Rudy »

V tom případě vám nemohu pomoci. K odvirování jsou bezpodmínečně zapotřebí.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zdenek26
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 12 lis 2013 16:04

Re: Vir v ntb

#15 Příspěvek od Zdenek26 »

OK, téma můžete zamknout. Děkuji za pomoc.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“