VIRY.CZ

Toto je ok.
tento system je legalny??,pretoze ja tu nevidim ziadnu infekciu.
Este jeden pokus.
Presne podla tohto navodu das log, vo FRST zafajknes vsetky moznosti.
http://forum.viry.cz/viewtopic.php?f=24 ... 3#p1228363

Stell, pytas sa ma dookola na veci ktore som uz pisal dvojmu predchodcovi . Notebook som kupova v Alza.sk aj s windows sedem takze predopkladam, ze bol legalny. Asi sa budem musiet zmerit s reinstalom.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by Administrator (administrator) on ROBERT-MSI on 22-05-2014 13:31:10
Running from C:\Users\Administrator\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: 041B
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Micro-Star International Co., Ltd.) C:\Program Files (x86)\S-Bar\MSIService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.4\bin\postgres.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.4\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.4\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.4\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.4\bin\postgres.exe
(BitTorrent Inc.) C:\Users\Administrator\AppData\Roaming\uTorrent\uTorrent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Google Inc.) C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\GoogleUpdate.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [THXCfg64] => C:\windows\system32\THXCfg64.dll [17920 2009-10-15] (Creative Technology Ltd.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-649568267-640355484-1299417552-500\...\Run: [uTorrent] => C:\Users\Administrator\AppData\Roaming\uTorrent\uTorrent.exe [1272400 2014-05-18] (BitTorrent Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\7h8i0kl5.default-1400748230195
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\ADMINI~1\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\ADMINI~1\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\atlas-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\azet-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\dunaj-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slovnik-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\zoznam-sk.xml
FF Extension: FTdownloader - C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\profiles\extensions\ftdownloader@ftdownloader.com.xpi [2012-11-29]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-05-15]

Chrome:
=======
CHR HomePage: hxxp://www.search.ask.com/?o=APN11459&gct=hp&d ... 21-351&t=4
CHR StartupUrls: "hxxp://www.search.ask.com/?o=APN11459&gct=hp&d ... 21-351&t=4", "hxxp://google.sk/"
CHR Extension: (Dokumenty Google) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-02]
CHR Extension: (Disk Google) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-02]
CHR Extension: (Web Developer) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbameneiokkgbdmiekhjnmfkcnldhhm [2014-05-03]
CHR Extension: (YouTube) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-02]
CHR Extension: (Adblock Plus) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-04-09]
CHR Extension: (Online TV From UK) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmimnpfphpmminhlhfijocolgmmhmibo [2014-04-09]
CHR Extension: (Hľadať v Google) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-02]
CHR Extension: (New XCommander) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dppefdlohekfhjenppnpjekkjjgndhdf [2014-04-09]
CHR Extension: (TweetDeck by Twitter) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdpomandigafcibbmofojjchbcdagbl [2014-05-02]
CHR Extension: (Mapy Google) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2014-04-09]
CHR Extension: (Peňaženka Google) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-02]
CHR Extension: (Gmail) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-02]

==================== Services (Whitelisted) =================

S4 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
S4 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
S2 gupdate; C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\GoogleUpdate.exe [116648 2014-05-22] (Google Inc.)
S3 gupdatem; C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\GoogleUpdate.exe [116648 2014-05-22] (Google Inc.)
R2 Micro Star SCM; C:\Program Files (x86)\S-Bar\MSIService.exe [160768 2011-06-24] (Micro-Star International Co., Ltd.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] ()
R2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [76888 2012-03-10] ()
R2 postgresql-8.4; C:/Program Files (x86)/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N "postgresql-8.4" -D "C:/Program Files (x86)/PostgreSQL/8.4/data" -w [X]

==================== Drivers (Whitelisted) ====================

R1 avgtp; C:\windows\system32\drivers\avgtpx64.sys [49952 2014-03-20] (AVG Technologies)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-03-09] (DT Soft Ltd)
S3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2012-03-25] ()
S3 utqwmta5; C:\windows\SysWOW64\Drivers\utqwmta5.sys [7168 2014-05-22] ()
S1 vdqwmta5; C:\windows\SysWOW64\Drivers\vdqwmta5.sys [13312 2014-05-22] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
U3 aswMBR; \??\C:\Users\ADMINI~1\AppData\Local\Temp\aswMBR.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-22 11:32 - 2014-05-22 11:32 - 00001947 _____ () C:\Users\Administrator\Desktop\aswMBR.txt
2014-05-22 11:32 - 2014-05-22 11:32 - 00000512 _____ () C:\Users\Administrator\Desktop\MBR.dat
2014-05-22 11:06 - 2014-05-22 11:06 - 04745728 _____ (AVAST Software) C:\Users\Administrator\Downloads\aswmbr.exe
2014-05-22 10:43 - 2014-05-22 10:43 - 00000000 ____D () C:\Staré údaje Firefoxu
2014-05-22 10:24 - 2014-05-22 10:24 - 00013312 _____ () C:\windows\SysWOW64\Drivers\vdqwmta5.sys
2014-05-22 10:20 - 2014-05-22 10:21 - 00000255 _____ () C:\Users\Administrator\Downloads\script.txt
2014-05-22 10:17 - 2014-05-22 13:22 - 00000876 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-22 10:17 - 2014-05-22 10:54 - 00000872 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-22 10:17 - 2014-05-22 10:17 - 00918672 _____ (Google Inc.) C:\Users\Administrator\Downloads\ChromeSetup(3).exe
2014-05-22 10:17 - 2014-05-22 10:17 - 00003872 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-22 10:17 - 2014-05-22 10:17 - 00003620 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-21 22:20 - 2014-05-21 22:20 - 01069776 _____ (Solid State Networks) C:\Users\Administrator\Downloads\install_flashplayer13x32_mssa_aaa_aih.exe
2014-05-21 20:38 - 2014-05-22 10:24 - 00007168 _____ () C:\windows\SysWOW64\Drivers\utqwmta5.sys
2014-05-21 20:33 - 2014-05-21 20:33 - 00000000 ____D () C:\Users\Administrator\Downloads\avz4
2014-05-21 20:29 - 2014-05-21 20:29 - 09370136 _____ () C:\Users\Administrator\Downloads\avz4.zip
2014-05-20 19:25 - 2014-05-20 19:25 - 00000000 ____D () C:\Users\Public\Desktop\CC Support
2014-05-20 19:25 - 2014-05-20 19:25 - 00000000 ____D () C:\CC Support
2014-05-20 19:23 - 2014-05-20 19:23 - 04009167 _____ () C:\Users\Administrator\Downloads\ServicesRepair.exe
2014-05-20 18:43 - 2014-05-22 13:31 - 00010329 _____ () C:\Users\Administrator\Desktop\FRST.txt
2014-05-20 18:33 - 2014-05-20 18:34 - 00000541 _____ () C:\Users\Administrator\Downloads\fixlist.txt
2014-05-20 11:19 - 2014-05-20 11:19 - 00018027 _____ () C:\Users\Administrator\Downloads\[kickass.to]that.mitchell.and.webb.look.series.1.complete.torrent
2014-05-20 09:38 - 2014-05-20 09:38 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-05-19 20:03 - 2014-05-19 20:03 - 00000000 __SHD () C:\found.000
2014-05-19 19:50 - 2014-05-19 19:50 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-05-19 19:49 - 2014-05-19 19:50 - 10971424 _____ (SurfRight B.V.) C:\Users\Administrator\Downloads\HitmanPro_x64(1).exe
2014-05-19 19:46 - 2014-05-19 19:46 - 09741664 _____ (SurfRight B.V.) C:\Users\Administrator\Downloads\HitmanPro_x64.exe
2014-05-19 16:09 - 2014-05-19 16:09 - 00854367 _____ () C:\Users\Administrator\Downloads\SecurityCheck.exe
2014-05-19 15:51 - 2014-05-19 15:51 - 00918672 _____ (Google Inc.) C:\Users\Administrator\Downloads\ChromeSetup(2).exe
2014-05-19 15:43 - 2014-05-19 15:43 - 00003158 _____ () C:\windows\System32\Tasks\{8E78A38B-C310-4980-85FC-384FA9848BCE}
2014-05-19 15:42 - 2014-05-19 15:42 - 01677440 _____ (Skype Technologies S.A.) C:\Users\Administrator\Downloads\SkypeSetup.exe
2014-05-19 15:40 - 2014-05-19 15:40 - 00918672 _____ (Google Inc.) C:\Users\Administrator\Downloads\ChromeSetup(1).exe
2014-05-19 15:39 - 2014-05-19 15:39 - 00918672 _____ (Google Inc.) C:\Users\Administrator\Downloads\ChromeSetup.exe
2014-05-19 10:24 - 2014-05-19 10:24 - 00023848 _____ () C:\Users\Administrator\Downloads\cobofix.zip
2014-05-19 10:12 - 2014-05-19 10:12 - 00101800 _____ () C:\cobofix.txt
2014-05-19 10:09 - 2014-05-19 10:09 - 00101800 _____ () C:\ComboFix.txt
2014-05-19 09:09 - 2014-05-19 09:09 - 00026203 _____ () C:\Users\Administrator\Downloads\ComboFix.zip
2014-05-18 17:23 - 2014-05-18 17:23 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\Administrator\Downloads\rkill.com
2014-05-18 13:06 - 2014-05-18 13:06 - 00112640 _____ (forum.viry.cz) C:\Users\Administrator\Downloads\FRSTLauncher.exe
2014-05-18 13:05 - 2014-05-18 13:07 - 00055766 _____ () C:\Users\Administrator\Downloads\FRST.txt
2014-05-18 13:04 - 2014-05-18 13:05 - 02067456 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2014-05-18 12:49 - 2014-05-18 12:49 - 02347384 _____ (ESET) C:\Users\Administrator\Downloads\esetsmartinstaller_sky.exe
2014-05-18 12:19 - 2014-05-18 12:19 - 00000000 ____D () C:\Mozilla
2014-05-18 11:00 - 2014-05-18 11:00 - 00000873 _____ () C:\Users\Administrator\Desktop\µTorrent.lnk
2014-05-16 22:10 - 2014-05-16 22:17 - 20184042 _____ () C:\Users\Administrator\Desktop\Kika.avi
2014-05-15 18:23 - 2014-05-15 18:23 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Macromedia
2014-05-15 12:29 - 2014-05-15 12:29 - 00000000 ____D () C:\Users\Administrator\Documents\ipbox
2014-05-15 12:26 - 2014-05-15 12:26 - 00000984 _____ () C:\Users\UpdatusUser\Desktop\Relook PCEditor.lnk
2014-05-15 12:26 - 2014-05-15 12:26 - 00000984 _____ () C:\Users\robert\Desktop\Relook PCEditor.lnk
2014-05-15 12:26 - 2014-05-15 12:26 - 00000984 _____ () C:\Users\postgres\Desktop\Relook PCEditor.lnk
2014-05-15 12:26 - 2014-05-15 12:26 - 00000984 _____ () C:\Users\Administrator\Desktop\Relook PCEditor.lnk
2014-05-15 12:26 - 2014-05-15 12:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Relook PCEditor 1.2
2014-05-15 12:26 - 2014-05-15 12:26 - 00000000 ____D () C:\Program Files (x86)\Relook PCEditor
2014-05-15 12:10 - 2014-05-15 12:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-14 03:51 - 2014-05-14 03:55 - 00000000 ____D () C:\windows\rescache
2014-05-14 03:07 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-05-14 03:07 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-05-14 03:07 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-05-14 03:07 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-05-14 03:07 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-05-14 03:07 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-05-14 01:41 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2014-05-14 01:40 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-05-14 01:40 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-05-14 01:40 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2014-05-14 01:39 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2014-05-14 01:39 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2014-05-14 01:39 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-05-14 01:39 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2014-05-14 01:39 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2014-05-14 01:39 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2014-05-14 01:39 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2014-05-14 01:39 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2014-05-14 01:39 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-05-14 01:39 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2014-05-14 01:39 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-05-14 01:39 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\windows\system32\objsel.dll
2014-05-14 01:39 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2014-05-14 01:39 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-05-14 01:39 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-05-14 01:39 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-05-14 01:39 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-05-14 01:39 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\wincredprovider.dll
2014-05-14 01:39 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2014-05-14 01:39 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\windows\system32\cngprovider.dll
2014-05-14 01:39 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\adprovider.dll
2014-05-14 01:39 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\capiprovider.dll
2014-05-14 01:39 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\dpapiprovider.dll
2014-05-14 01:39 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\dimsroam.dll
2014-05-14 01:39 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-05-14 01:39 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2014-05-14 01:39 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2014-05-14 01:39 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-05-14 01:39 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\windows\SysWOW64\objsel.dll
2014-05-14 01:39 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-05-14 01:39 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-05-14 01:39 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-05-14 01:39 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-05-14 01:39 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\cngprovider.dll
2014-05-14 01:39 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\windows\SysWOW64\adprovider.dll
2014-05-14 01:39 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\windows\SysWOW64\capiprovider.dll
2014-05-14 01:39 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpapiprovider.dll
2014-05-14 01:39 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\dimsroam.dll
2014-05-14 01:39 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wincredprovider.dll
2014-05-14 01:39 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-05-14 01:39 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2014-05-13 16:38 - 2014-05-13 16:38 - 00001072 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-05-13 16:38 - 2014-05-13 16:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-05-13 16:28 - 2014-05-18 11:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-13 16:28 - 2014-05-13 16:28 - 00001165 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-13 16:28 - 2014-05-13 16:28 - 00001153 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-07 03:01 - 2014-05-14 03:24 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-04-30 08:18 - 2014-04-30 08:18 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieUserList
2014-04-30 08:18 - 2014-04-30 08:18 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieSiteList
2014-04-30 03:01 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-04-30 03:01 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-04-30 03:01 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-04-30 03:01 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-04-30 03:01 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-04-30 03:01 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-04-30 03:01 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-04-30 03:01 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-04-30 03:01 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-04-30 03:01 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-04-30 03:01 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-04-30 03:01 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-04-30 03:01 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-04-30 03:01 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-04-30 03:01 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-04-30 03:01 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-04-30 03:01 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-04-30 03:01 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-04-30 03:01 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-04-30 03:01 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-04-30 03:01 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-04-30 03:01 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-04-30 03:01 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-04-30 03:01 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-04-30 03:01 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-04-30 03:01 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-04-30 03:01 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-04-30 03:01 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-04-30 03:01 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-04-30 03:01 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-04-30 03:01 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-30 03:01 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-04-30 03:01 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-04-30 03:01 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-04-30 03:01 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-04-30 03:01 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-04-30 03:01 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-04-30 03:01 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-04-30 03:01 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-04-30 03:01 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-04-30 03:01 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-04-30 03:01 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-04-30 03:01 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-04-30 03:01 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-04-28 11:58 - 2014-04-28 11:58 - 00002130 _____ () C:\Users\Public\Desktop\Popcorn-Time.lnk
2014-04-28 11:58 - 2014-04-28 11:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time
2014-04-28 11:58 - 2014-04-28 11:58 - 00000000 ____D () C:\Program Files (x86)\Time4Popcorn
2014-04-27 00:52 - 2014-04-27 00:53 - 00000000 ____D () C:\Users\Administrator\AppData\Local\{0DEAFC47-3D2A-4B02-89C5-70FAA7C88FB4}
2014-04-26 11:35 - 2014-04-26 11:35 - 00000117 _____ () C:\Users\Administrator\Downloads\rozhlas_audio (1).pls
2014-04-26 11:28 - 2014-04-26 11:28 - 00000048 _____ () C:\Users\Administrator\Downloads\listen.m3u
2014-04-26 10:11 - 2014-04-26 10:11 - 00017599 _____ () C:\Users\Administrator\Downloads\The_Beatles_-_Abbey_Road.Mp3.torrent
2014-04-26 08:32 - 2014-04-26 08:32 - 00036047 _____ () C:\Users\Administrator\Downloads\[kickass.to]moloko.catalogue.se.2006.2cd.6vids.cov.192kbps (1).torrent
2014-04-26 08:31 - 2014-04-26 08:31 - 00036047 _____ () C:\Users\Administrator\Downloads\[kickass.to]moloko.catalogue.se.2006.2cd.6vids.cov.192kbps.torrent
2014-04-26 08:14 - 2014-04-26 08:14 - 00005273 _____ () C:\Users\Administrator\Downloads\[kickass.to]moloko.things.to.make.and.do.torrent
2014-04-26 08:12 - 2014-04-26 08:12 - 00003611 _____ () C:\Users\Administrator\Downloads\[kickass.to]moloko.statues.torrent
2014-04-26 07:55 - 2014-04-26 07:55 - 00027513 _____ () C:\Users\Administrator\Downloads\[kickass.to]john.mayer.trio.try.torrent
2014-04-26 07:49 - 2014-04-26 07:49 - 00009317 _____ () C:\Users\Administrator\Downloads\[kickass.to]john.mayer.paradise.valley.chattchitto.rg.torrent
2014-04-26 07:34 - 2014-04-26 07:34 - 00028948 _____ () C:\Users\Administrator\Downloads\[kickass.to]tom.petty.wildflowers.192kbps.1994.torrent
2014-04-26 05:52 - 2014-04-26 05:52 - 00019805 _____ () C:\Users\Administrator\Downloads\[kickass.to]the.economist.april.25.2014.pdf.torrent
2014-04-25 16:15 - 2014-04-25 16:15 - 00014626 _____ () C:\Users\Administrator\Downloads\[kickass.to]lights.out.2011.s01e11.hdtv.xvid.asap.eztv.torrent
2014-04-25 16:11 - 2014-04-25 16:11 - 00014607 _____ () C:\Users\Administrator\Downloads\[kickass.to]lights.out.2011.s01e09.hdtv.xvid.fever.eztv.torrent
2014-04-25 16:11 - 2014-04-25 16:11 - 00014589 _____ () C:\Users\Administrator\Downloads\[kickass.to]lights.out.2011.s01e10.hdtv.xvid.asap.eztv.torrent
2014-04-25 16:10 - 2014-04-25 16:10 - 00014607 _____ () C:\Users\Administrator\Downloads\[kickass.to]lights.out.2011.s01e08.hdtv.xvid.fever.eztv.torrent
2014-04-25 16:09 - 2014-04-25 16:09 - 00053603 _____ () C:\Users\Administrator\Downloads\[kickass.to]joe.satriani.flac.discography (1).torrent
2014-04-25 15:43 - 2014-04-25 15:43 - 00006138 _____ () C:\Users\Administrator\Downloads\[kickass.to]the.big.bang.theory.s07e21.hdtv.x264.lol.eztv.torrent
2014-04-25 14:56 - 2014-04-25 14:56 - 00025765 _____ () C:\Users\Administrator\Downloads\[kickass.to]jazz.rosenberg.trio.6.cd.torrent
2014-04-25 14:43 - 2014-04-25 14:43 - 00000000 ____D () C:\Program Files\Bonjour
2014-04-25 14:43 - 2014-04-25 14:43 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-04-25 14:42 - 2014-04-25 14:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2014-04-25 14:37 - 2014-04-25 14:37 - 00017080 _____ () C:\Users\Administrator\Downloads\[CzT]Paul_McCartney_New_Deluxe_Ed_2013_ (1).torrent
2014-04-25 14:36 - 2014-04-25 14:36 - 00017081 _____ () C:\Users\Administrator\Downloads\[CzT]Paul_McCartney_New_Deluxe_Ed_2013_.torrent
2014-04-25 14:27 - 2014-04-25 14:27 - 00010138 _____ () C:\Users\Administrator\Downloads\[kickass.to]paul.mccartney.memory.almost.full.2007.cd.skidvid.cov.192kbps.torrent
2014-04-25 14:23 - 2014-04-25 14:23 - 00016378 _____ () C:\Users\Administrator\Downloads\[kickass.to]paul.mccartney.chaos.and.creation.in.the.backyard.2005.flac.torrent
2014-04-25 13:02 - 2014-04-25 13:02 - 00000000 ____D () C:\Users\Administrator\Downloads\Dežo-Ursiny-Pevnina-detstva
2014-04-25 12:58 - 2014-04-25 13:00 - 38013508 _____ () C:\Users\Administrator\Downloads\Dežo-Ursiny-Pevnina-detstva.rar
2014-04-24 11:07 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\SysWOW64\sqlite3.dll

==================== One Month Modified Files and Folders =======

2014-05-22 13:31 - 2014-05-20 18:43 - 00010329 _____ () C:\Users\Administrator\Desktop\FRST.txt
2014-05-22 13:31 - 2014-04-08 16:52 - 00000000 ____D () C:\FRST
2014-05-22 13:27 - 2013-01-14 11:08 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\uTorrent
2014-05-22 13:22 - 2014-05-22 10:17 - 00000876 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-22 11:32 - 2014-05-22 11:32 - 00001947 _____ () C:\Users\Administrator\Desktop\aswMBR.txt
2014-05-22 11:32 - 2014-05-22 11:32 - 00000512 _____ () C:\Users\Administrator\Desktop\MBR.dat
2014-05-22 11:06 - 2014-05-22 11:06 - 04745728 _____ (AVAST Software) C:\Users\Administrator\Downloads\aswmbr.exe
2014-05-22 11:02 - 2009-07-14 06:45 - 00024656 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-22 11:02 - 2009-07-14 06:45 - 00024656 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-22 10:58 - 2012-03-09 16:39 - 01085501 _____ () C:\windows\WindowsUpdate.log
2014-05-22 10:58 - 2009-07-14 07:13 - 00786514 _____ () C:\windows\system32\PerfStringBackup.INI
2014-05-22 10:54 - 2014-05-22 10:17 - 00000872 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-22 10:54 - 2014-03-23 11:10 - 00018431 _____ () C:\windows\setupact.log
2014-05-22 10:54 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-05-22 10:43 - 2014-05-22 10:43 - 00000000 ____D () C:\Staré údaje Firefoxu
2014-05-22 10:24 - 2014-05-22 10:24 - 00013312 _____ () C:\windows\SysWOW64\Drivers\vdqwmta5.sys
2014-05-22 10:24 - 2014-05-21 20:38 - 00007168 _____ () C:\windows\SysWOW64\Drivers\utqwmta5.sys
2014-05-22 10:24 - 2014-04-08 16:08 - 00007106 _____ () C:\windows\PFRO.log
2014-05-22 10:21 - 2014-05-22 10:20 - 00000255 _____ () C:\Users\Administrator\Downloads\script.txt
2014-05-22 10:17 - 2014-05-22 10:17 - 00918672 _____ (Google Inc.) C:\Users\Administrator\Downloads\ChromeSetup(3).exe
2014-05-22 10:17 - 2014-05-22 10:17 - 00003872 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-22 10:17 - 2014-05-22 10:17 - 00003620 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-22 10:01 - 2012-04-29 17:03 - 00000000 ____D () C:\Users\postgres
2014-05-21 22:20 - 2014-05-21 22:20 - 01069776 _____ (Solid State Networks) C:\Users\Administrator\Downloads\install_flashplayer13x32_mssa_aaa_aih.exe
2014-05-21 20:33 - 2014-05-21 20:33 - 00000000 ____D () C:\Users\Administrator\Downloads\avz4
2014-05-21 20:29 - 2014-05-21 20:29 - 09370136 _____ () C:\Users\Administrator\Downloads\avz4.zip
2014-05-21 07:48 - 2013-04-28 11:50 - 00000000 ____D () C:\Users\Administrator\Desktop\Pokerove vyukove videa low stakes
2014-05-21 07:48 - 2013-03-03 10:38 - 00000000 ____D () C:\Users\Administrator\Desktop\Poker-E-Books
2014-05-21 06:09 - 2012-03-10 17:07 - 00000000 ____D () C:\Users\Administrator\AppData\Local\CrashDumps
2014-05-20 19:25 - 2014-05-20 19:25 - 00000000 ____D () C:\Users\Public\Desktop\CC Support
2014-05-20 19:25 - 2014-05-20 19:25 - 00000000 ____D () C:\CC Support
2014-05-20 19:23 - 2014-05-20 19:23 - 04009167 _____ () C:\Users\Administrator\Downloads\ServicesRepair.exe
2014-05-20 18:34 - 2014-05-20 18:33 - 00000541 _____ () C:\Users\Administrator\Downloads\fixlist.txt
2014-05-20 11:19 - 2014-05-20 11:19 - 00018027 _____ () C:\Users\Administrator\Downloads\[kickass.to]that.mitchell.and.webb.look.series.1.complete.torrent
2014-05-20 09:38 - 2014-05-20 09:38 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-05-19 20:03 - 2014-05-19 20:03 - 00000000 __SHD () C:\found.000
2014-05-19 19:50 - 2014-05-19 19:50 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-05-19 19:50 - 2014-05-19 19:49 - 10971424 _____ (SurfRight B.V.) C:\Users\Administrator\Downloads\HitmanPro_x64(1).exe
2014-05-19 19:46 - 2014-05-19 19:46 - 09741664 _____ (SurfRight B.V.) C:\Users\Administrator\Downloads\HitmanPro_x64.exe
2014-05-19 16:09 - 2014-05-19 16:09 - 00854367 _____ () C:\Users\Administrator\Downloads\SecurityCheck.exe
2014-05-19 15:51 - 2014-05-19 15:51 - 00918672 _____ (Google Inc.) C:\Users\Administrator\Downloads\ChromeSetup(2).exe
2014-05-19 15:43 - 2014-05-19 15:43 - 00003158 _____ () C:\windows\System32\Tasks\{8E78A38B-C310-4980-85FC-384FA9848BCE}
2014-05-19 15:42 - 2014-05-19 15:42 - 01677440 _____ (Skype Technologies S.A.) C:\Users\Administrator\Downloads\SkypeSetup.exe
2014-05-19 15:40 - 2014-05-19 15:40 - 00918672 _____ (Google Inc.) C:\Users\Administrator\Downloads\ChromeSetup(1).exe
2014-05-19 15:40 - 2012-03-25 20:49 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-19 15:39 - 2014-05-19 15:39 - 00918672 _____ (Google Inc.) C:\Users\Administrator\Downloads\ChromeSetup.exe
2014-05-19 10:42 - 2014-04-08 16:49 - 02067456 _____ (Farbar) C:\Users\Administrator\Desktop\FRST64.exe
2014-05-19 10:38 - 2012-07-15 11:32 - 00000000 ____D () C:\windows\erdnt
2014-05-19 10:24 - 2014-05-19 10:24 - 00023848 _____ () C:\Users\Administrator\Downloads\cobofix.zip
2014-05-19 10:12 - 2014-05-19 10:12 - 00101800 _____ () C:\cobofix.txt
2014-05-19 10:09 - 2014-05-19 10:09 - 00101800 _____ () C:\ComboFix.txt
2014-05-19 10:00 - 2009-07-14 04:34 - 00000215 _____ () C:\windows\system.ini
2014-05-19 09:09 - 2014-05-19 09:09 - 00026203 _____ () C:\Users\Administrator\Downloads\ComboFix.zip
2014-05-18 20:31 - 2012-03-11 20:54 - 00000000 ____D () C:\Program Files (x86)\PokerStars
2014-05-18 17:29 - 2012-07-15 11:26 - 05200990 _____ (Swearware) C:\Users\Administrator\Downloads\ComboFix.exe
2014-05-18 17:23 - 2014-05-18 17:23 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\Administrator\Downloads\rkill.com
2014-05-18 13:07 - 2014-05-18 13:05 - 00055766 _____ () C:\Users\Administrator\Downloads\FRST.txt
2014-05-18 13:06 - 2014-05-18 13:06 - 00112640 _____ (forum.viry.cz) C:\Users\Administrator\Downloads\FRSTLauncher.exe
2014-05-18 13:05 - 2014-05-18 13:04 - 02067456 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2014-05-18 12:49 - 2014-05-18 12:49 - 02347384 _____ (ESET) C:\Users\Administrator\Downloads\esetsmartinstaller_sky.exe
2014-05-18 12:19 - 2014-05-18 12:19 - 00000000 ____D () C:\Mozilla
2014-05-18 11:36 - 2012-03-09 16:36 - 00000000 ____D () C:\Recovery
2014-05-18 11:16 - 2014-05-13 16:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-18 11:00 - 2014-05-18 11:00 - 00000873 _____ () C:\Users\Administrator\Desktop\µTorrent.lnk
2014-05-18 11:00 - 2013-12-21 18:29 - 00000853 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-05-18 10:45 - 2012-03-10 16:46 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Skype
2014-05-18 08:14 - 2014-03-30 15:27 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\vlc
2014-05-16 22:17 - 2014-05-16 22:10 - 20184042 _____ () C:\Users\Administrator\Desktop\Kika.avi
2014-05-16 21:57 - 2012-12-12 21:37 - 00000000 ____D () C:\Users\Administrator\AppData\Local\FullTiltPoker
2014-05-16 21:57 - 2012-12-12 21:37 - 00000000 ____D () C:\Program Files (x86)\Full Tilt Poker
2014-05-16 16:59 - 2014-02-08 00:23 - 00000000 ____D () C:\Users\Administrator\AppData\Local\AuxClient
2014-05-15 18:23 - 2014-05-15 18:23 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Macromedia
2014-05-15 18:15 - 2012-03-11 20:54 - 00000000 ____D () C:\Users\Administrator\AppData\Local\PokerStars
2014-05-15 12:29 - 2014-05-15 12:29 - 00000000 ____D () C:\Users\Administrator\Documents\ipbox
2014-05-15 12:26 - 2014-05-15 12:26 - 00000984 _____ () C:\Users\UpdatusUser\Desktop\Relook PCEditor.lnk
2014-05-15 12:26 - 2014-05-15 12:26 - 00000984 _____ () C:\Users\robert\Desktop\Relook PCEditor.lnk
2014-05-15 12:26 - 2014-05-15 12:26 - 00000984 _____ () C:\Users\postgres\Desktop\Relook PCEditor.lnk
2014-05-15 12:26 - 2014-05-15 12:26 - 00000984 _____ () C:\Users\Administrator\Desktop\Relook PCEditor.lnk
2014-05-15 12:26 - 2014-05-15 12:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Relook PCEditor 1.2
2014-05-15 12:26 - 2014-05-15 12:26 - 00000000 ____D () C:\Program Files (x86)\Relook PCEditor
2014-05-15 12:26 - 2013-03-04 07:10 - 02229974 _____ (Based on DGStation PCEditor 1.0 by JonDoe ) C:\Users\Administrator\Desktop\Setup_PCEditor_1.2.60.exe
2014-05-15 12:26 - 2012-03-09 14:11 - 00000000 ____D () C:\Users\Administrator
2014-05-15 12:20 - 2012-09-21 15:15 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\GHISLER
2014-05-15 12:10 - 2014-05-15 12:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-14 04:08 - 2012-03-09 14:11 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-14 04:08 - 2012-03-09 14:11 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-14 03:55 - 2014-05-14 03:51 - 00000000 ____D () C:\windows\rescache
2014-05-14 03:24 - 2014-05-07 03:01 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-05-14 03:07 - 2012-03-25 17:42 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-14 03:06 - 2013-07-15 03:04 - 00000000 ____D () C:\windows\system32\MRT
2014-05-14 03:03 - 2012-03-13 08:32 - 93223848 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-05-13 21:55 - 2013-01-13 19:40 - 00692400 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-05-13 21:55 - 2013-01-13 19:40 - 00070832 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-13 21:55 - 2013-01-13 19:40 - 00003768 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-05-13 16:38 - 2014-05-13 16:38 - 00001072 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-05-13 16:38 - 2014-05-13 16:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-05-13 16:28 - 2014-05-13 16:28 - 00001165 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-13 16:28 - 2014-05-13 16:28 - 00001153 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-13 16:28 - 2012-05-21 16:43 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mozilla
2014-05-09 08:14 - 2014-05-14 01:40 - 00477184 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-14 01:40 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-05-07 07:40 - 2012-03-31 05:27 - 00000000 ____D () C:\Users\Administrator\Documents\My Kindle Content
2014-05-06 06:40 - 2014-05-14 03:07 - 23544320 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-14 03:07 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-14 03:07 - 17382912 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-14 03:07 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-14 03:07 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-14 03:07 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-04-30 12:02 - 2012-03-09 17:24 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-04-30 08:18 - 2014-04-30 08:18 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieUserList
2014-04-30 08:18 - 2014-04-30 08:18 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieSiteList
2014-04-30 03:19 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\sk-SK
2014-04-30 03:19 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\sk-SK
2014-04-30 03:19 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2014-04-28 12:21 - 2014-03-20 06:37 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Popcorn-Time
2014-04-28 11:58 - 2014-04-28 11:58 - 00002130 _____ () C:\Users\Public\Desktop\Popcorn-Time.lnk
2014-04-28 11:58 - 2014-04-28 11:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time
2014-04-28 11:58 - 2014-04-28 11:58 - 00000000 ____D () C:\Program Files (x86)\Time4Popcorn
2014-04-27 11:47 - 2012-05-03 12:11 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Apple Computer
2014-04-27 00:53 - 2014-04-27 00:52 - 00000000 ____D () C:\Users\Administrator\AppData\Local\{0DEAFC47-3D2A-4B02-89C5-70FAA7C88FB4}
2014-04-26 11:35 - 2014-04-26 11:35 - 00000117 _____ () C:\Users\Administrator\Downloads\rozhlas_audio (1).pls
2014-04-26 11:28 - 2014-04-26 11:28 - 00000048 _____ () C:\Users\Administrator\Downloads\listen.m3u
2014-04-26 10:11 - 2014-04-26 10:11 - 00017599 _____ () C:\Users\Administrator\Downloads\The_Beatles_-_Abbey_Road.Mp3.torrent
2014-04-26 08:32 - 2014-04-26 08:32 - 00036047 _____ () C:\Users\Administrator\Downloads\[kickass.to]moloko.catalogue.se.2006.2cd.6vids.cov.192kbps (1).torrent
2014-04-26 08:31 - 2014-04-26 08:31 - 00036047 _____ () C:\Users\Administrator\Downloads\[kickass.to]moloko.catalogue.se.2006.2cd.6vids.cov.192kbps.torrent
2014-04-26 08:14 - 2014-04-26 08:14 - 00005273 _____ () C:\Users\Administrator\Downloads\[kickass.to]moloko.things.to.make.and.do.torrent
2014-04-26 08:12 - 2014-04-26 08:12 - 00003611 _____ () C:\Users\Administrator\Downloads\[kickass.to]moloko.statues.torrent
2014-04-26 07:55 - 2014-04-26 07:55 - 00027513 _____ () C:\Users\Administrator\Downloads\[kickass.to]john.mayer.trio.try.torrent
2014-04-26 07:49 - 2014-04-26 07:49 - 00009317 _____ () C:\Users\Administrator\Downloads\[kickass.to]john.mayer.paradise.valley.chattchitto.rg.torrent
2014-04-26 07:34 - 2014-04-26 07:34 - 00028948 _____ () C:\Users\Administrator\Downloads\[kickass.to]tom.petty.wildflowers.192kbps.1994.torrent
2014-04-26 05:52 - 2014-04-26 05:52 - 00019805 _____ () C:\Users\Administrator\Downloads\[kickass.to]the.economist.april.25.2014.pdf.torrent
2014-04-25 16:15 - 2014-04-25 16:15 - 00014626 _____ () C:\Users\Administrator\Downloads\[kickass.to]lights.out.2011.s01e11.hdtv.xvid.asap.eztv.torrent
2014-04-25 16:11 - 2014-04-25 16:11 - 00014607 _____ () C:\Users\Administrator\Downloads\[kickass.to]lights.out.2011.s01e09.hdtv.xvid.fever.eztv.torrent
2014-04-25 16:11 - 2014-04-25 16:11 - 00014589 _____ () C:\Users\Administrator\Downloads\[kickass.to]lights.out.2011.s01e10.hdtv.xvid.asap.eztv.torrent
2014-04-25 16:10 - 2014-04-25 16:10 - 00014607 _____ () C:\Users\Administrator\Downloads\[kickass.to]lights.out.2011.s01e08.hdtv.xvid.fever.eztv.torrent
2014-04-25 16:09 - 2014-04-25 16:09 - 00053603 _____ () C:\Users\Administrator\Downloads\[kickass.to]joe.satriani.flac.discography (1).torrent
2014-04-25 15:43 - 2014-04-25 15:43 - 00006138 _____ () C:\Users\Administrator\Downloads\[kickass.to]the.big.bang.theory.s07e21.hdtv.x264.lol.eztv.torrent
2014-04-25 14:56 - 2014-04-25 14:56 - 00025765 _____ () C:\Users\Administrator\Downloads\[kickass.to]jazz.rosenberg.trio.6.cd.torrent
2014-04-25 14:43 - 2014-04-25 14:43 - 00000000 ____D () C:\Program Files\Bonjour
2014-04-25 14:43 - 2014-04-25 14:43 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-04-25 14:42 - 2014-04-25 14:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2014-04-25 14:37 - 2014-04-25 14:37 - 00017080 _____ () C:\Users\Administrator\Downloads\[CzT]Paul_McCartney_New_Deluxe_Ed_2013_ (1).torrent
2014-04-25 14:36 - 2014-04-25 14:36 - 00017081 _____ () C:\Users\Administrator\Downloads\[CzT]Paul_McCartney_New_Deluxe_Ed_2013_.torrent
2014-04-25 14:27 - 2014-04-25 14:27 - 00010138 _____ () C:\Users\Administrator\Downloads\[kickass.to]paul.mccartney.memory.almost.full.2007.cd.skidvid.cov.192kbps.torrent
2014-04-25 14:23 - 2014-04-25 14:23 - 00016378 _____ () C:\Users\Administrator\Downloads\[kickass.to]paul.mccartney.chaos.and.creation.in.the.backyard.2005.flac.torrent
2014-04-25 13:02 - 2014-04-25 13:02 - 00000000 ____D () C:\Users\Administrator\Downloads\Dežo-Ursiny-Pevnina-detstva
2014-04-25 13:00 - 2014-04-25 12:58 - 38013508 _____ () C:\Users\Administrator\Downloads\Dežo-Ursiny-Pevnina-detstva.rar
2014-04-24 11:07 - 2014-04-08 18:44 - 00000000 ____D () C:\AdwCleaner

Files to move or delete:
====================
C:\Users\robert\DTLite4453-0297.exe
C:\Users\robert\install_flash_player_64bit.exe
C:\Users\robert\SkypeSetup.exe


Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\HitmanPro.exe
C:\Users\Administrator\AppData\Local\Temp\Kickstarter.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2014-05-14 01:39] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-19 02:47

==================== End Of Log ============================

Stell, pytas sa ma dookola na veci ktore som uz pisal dvojmu predchodcovi

add 1:Nechci odomna aby som studoval aj to ,co si pisal kolegovi.
Add2.Ja musim kilometrove logy studovat a nefrflem.
Add3:Ked sa ta nieco spytam tak budes odpovedat, ak nie mozes formatovat.
3: Ak by si prestudoval navod, tak by si zistil.ze uplne inak mas vytvorit,log.
4:Ak ta to nebavi mozeme to ukoncit,

Stiahni a uloz na plochu Fixlixt.txt.
http://leteckaposta.co/file/974805014.1 ... bc0db84/cs

Spust program Frst, ako Admin, pravy klik a spust, ale teraz kliknes na gombik FIX
Fixlog.txt sa ti ulozi na plochu,
Ak sa uz bude sa dat kopirovat, tak obsah fixlog.txt vloz sem, ak nie tak to nahraj na
http://leteckaposta.cz/
link vloz sem.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-05-2014
Ran by Administrator at 2014-05-22 16:08:27 Run:3
Running from C:\Users\Administrator\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Extension: FTdownloader - C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\profiles\extensions\ftdownloader@ftdownloader.com.xpi [2012-11-29]
C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\profiles\extensions\ftdownloader@ftdownloader.com.xpi
CHR HomePage: hxxp://www.search.ask.com/?o=APN11459&g ... 21-351&t=4
CHR StartupUrls: "hxxp://www.search.ask.com/?o=APN11459&gct=hp&d ... 21-351&t=4", "hxxp://google.sk/"
CHR Extension: (YouTube) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-02]
CHR Extension: (Adblock Plus) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-04-09]
CHR Extension: (Online TV From UK) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmimnpfphpmminhlhfijocolgmmhmibo [2014-04-09]
CHR Extension: (New XCommander) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dppefdlohekfhjenppnpjekkjjgndhdf [2014-04-09]
CHR Extension: (TweetDeck by Twitter) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdpomandigafcibbmofojjchbcdagbl [2014-05-02]
S2 gupdate; C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\GoogleUpdate.exe [116648 2014-05-22] (Google Inc.)
S3 gupdatem; C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\GoogleUpdate.exe [116648 2014-05-22] (Google Inc.)
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp
S3 utqwmta5; C:\windows\SysWOW64\Drivers\utqwmta5.sys [7168 2014-05-22] ()
S1 vdqwmta5; C:\windows\SysWOW64\Drivers\vdqwmta5.sys [13312 2014-05-22] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
U3 aswMBR; \??\C:\Users\ADMINI~1\AppData\Local\Temp\aswMBR.sys [X]
C:\Users\robert\DTLite4453-0297.exe
C:\Users\robert\install_flash_player_64bit.exe
C:\Users\robert\SkypeSetup.exe
C:\Users\Administrator\AppData\Local\Temp
Hosts:
End.
*****************

HKLM\Software\MozillaPlugins\FF Plugin: @microsoft.com/GENUINE - disabled No File => Key not found.
"FF Plugin: @microsoft.com/GENUINE - disabled No File" => not found.
C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\profiles\extensions\ftdownloader@ftdownloader.com.xpi => Moved successfully.
"C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\profiles\extensions\ftdownloader@ftdownloader.com.xpi" => File/Directory not found.
CHR HomePage: hxxp://www.search.ask.com/?o=APN11459&g ... 21-351&t=4 ==> The Chrome "Settings" can be used to fix the entry.
CHR StartupUrls: "hxxp://www.search.ask.com/?o=APN11459&gct=hp&d ... 21-351&t=4", "hxxp://google.sk/" ==> The Chrome "Settings" can be used to fix the entry.
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo => Moved successfully.
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb => Moved successfully.
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmimnpfphpmminhlhfijocolgmmhmibo => Moved successfully.
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dppefdlohekfhjenppnpjekkjjgndhdf => Moved successfully.
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdpomandigafcibbmofojjchbcdagbl => Moved successfully.
gupdate => Service deleted successfully.
gupdatem => Service deleted successfully.

"C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp" directory move:

C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\GoogleCrashHandler.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\GoogleCrashHandler64.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\GoogleUpdate.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\GoogleUpdateBroker.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\GoogleUpdateComRegisterShell64.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\GoogleUpdateHelper.msi => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\GoogleUpdateOnDemand.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\GoogleUpdateSetup.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdate.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_am.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_ar.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_bg.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_bn.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_ca.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_cs.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_da.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_de.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_el.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_en-GB.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_en.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_es-419.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_es.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_et.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_fa.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_fi.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_fil.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_fr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_gu.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_hi.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_hr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_hu.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_id.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_is.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_it.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_iw.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_ja.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_kn.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_ko.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_lt.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_lv.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_ml.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_mr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_ms.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_nl.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_no.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_pl.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_pt-BR.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_pt-PT.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_ro.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_ru.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_sk.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_sl.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_sr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_sv.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_sw.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_ta.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_te.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_th.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_tr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_uk.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_ur.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_vi.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_zh-CN.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\goopdateres_zh-TW.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\npGoogleUpdate3.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\psmachine.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\psmachine_64.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\psuser.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\psuser_64.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\GoogleCrashHandler.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\GoogleCrashHandler64.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\GoogleUpdate.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\GoogleUpdateBroker.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\GoogleUpdateComRegisterShell64.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\GoogleUpdateHelper.msi => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\GoogleUpdateOnDemand.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\GoogleUpdateSetup.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdate.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_am.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_ar.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_bg.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_bn.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_ca.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_cs.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_da.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_de.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_el.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_en-GB.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_en.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_es-419.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_es.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_et.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_fa.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_fi.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_fil.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_fr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_gu.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_hi.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_hr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_hu.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_id.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_is.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_it.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_iw.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_ja.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_kn.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_ko.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_lt.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_lv.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_ml.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_mr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_ms.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_nl.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_no.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_pl.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_pt-BR.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_pt-PT.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_ro.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_ru.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_sk.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_sl.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_sr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_sv.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_sw.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_ta.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_te.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_th.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_tr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_uk.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_ur.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_vi.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_zh-CN.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\goopdateres_zh-TW.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\npGoogleUpdate3.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\psmachine.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\psmachine_64.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\psuser.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp\1.3.24.7\psuser_64.dll => Moved successfully.
Could not move "C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp" directory. => Scheduled to move on reboot.

utqwmta5 => Service deleted successfully.
vdqwmta5 => Service deleted successfully.
catchme => Service deleted successfully.
aswMBR => Service deleted successfully.
C:\Users\robert\DTLite4453-0297.exe => Moved successfully.
C:\Users\robert\install_flash_player_64bit.exe => Moved successfully.
C:\Users\robert\SkypeSetup.exe => Moved successfully.

"C:\Users\Administrator\AppData\Local\Temp" directory move:

C:\Users\Administrator\AppData\Local\Temp\etilqs_6VS35tPXYrJ5Cns => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\etilqs_Ii2ZFFwY3xcWBjs => Moved successfully.
Could not move "C:\Users\Administrator\AppData\Local\Temp\etilqs_yQxK91Gtk0OfpgI" => Scheduled to move on reboot.
Could not move "C:\Users\Administrator\AppData\Local\Temp\FXSAPIDebugLogFile.txt" => Scheduled to move on reboot.
C:\Users\Administrator\AppData\Local\Temp\GB AVIS FINANCIER T1 2014.pdf => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUTCA13.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\HitmanPro.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\Kickstarter.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\SPH996F.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\SPR9C6B.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\wmplog00.sqm => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\wmplog01.sqm => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\wmplog02.sqm => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\wmplog03.sqm => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\wmplog04.sqm => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\_av4_\aswCmnB.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\_av4_\aswCmnOS.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\_av4_\aswCmnS.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\_av4_\aswEngin.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\_av4_\aswScan.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\_av4_\data\400.vps => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\AVDisplayName.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\AVstate.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\check.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\checkup.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\chrome.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\chrome2.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\chrome3.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\chrome4.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\chrome5.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\chrome6.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\chrome7.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\defragcheck.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\defragcheck2.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\ff2.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\ff3.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\flash.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\flash2.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\flashcheck.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\flashx64.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\hostcopy.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\IEversion.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\IEVersion2.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\install.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\MSEx64.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup10.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup11.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup12.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup13.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup14.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup15.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup16.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup17.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup18.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup19.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup2.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup20.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup21.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup22.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup23.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup24.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup25.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup26.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup27.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup28.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup29.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup3.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup30.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup31.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup32.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup4.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup5.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup6.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup7.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup8.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\notcheckup9.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\Objlist.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\OS1check.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\OS1check2.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\prelimcheckup.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\prelimcheckup2.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\prelimcheckup3.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\prelimproccheck.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\prelimspycheck.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\prelimspycheck2.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process10.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process11.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process12.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process13.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process14.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process15.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process16.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process17.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process18.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process19.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process2.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process20.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process21.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process22.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process23.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process24.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process25.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process26.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process27.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process28.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process29.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process30.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process31.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process32.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process33.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process34.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process35.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process36.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process37.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process38.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process39.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process4.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process40.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process5.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process6.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process7.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process8.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\process9.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\runprocesses.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\SecurityCheck.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\tb2.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\UAC.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\UAC2.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\uninstalllist.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\Vista7FirewallCheck1.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\Vista7FirewallCheck2.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\wscsvc1.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\x64SPcheck.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\cmdinfo.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\Copyright Information.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\nircmdc.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\sed.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\swreg.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\Update History.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\GoogleCrashHandler.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\GoogleCrashHandler64.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\GoogleUpdate.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\GoogleUpdateBroker.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\GoogleUpdateComRegisterShell64.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\GoogleUpdateHelper.msi => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\GoogleUpdateOnDemand.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\GoogleUpdateSetup.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdate.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_am.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_ar.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_bg.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_bn.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_ca.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_cs.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_da.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_de.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_el.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_en-GB.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_en.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_es-419.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_es.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_et.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_fa.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_fi.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_fil.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_fr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_gu.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_hi.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_hr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_hu.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_id.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_is.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_it.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_iw.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_ja.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_kn.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_ko.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_lt.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_lv.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_ml.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_mr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_ms.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_nl.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_no.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_pl.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_pt-BR.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_pt-PT.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_ro.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_ru.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_sk.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_sl.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_sr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_sv.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_sw.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_ta.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_te.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_th.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_tr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_uk.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_ur.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_vi.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_zh-CN.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\goopdateres_zh-TW.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\npGoogleUpdate3.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\psmachine.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\psmachine_64.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\psuser.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM7B3.tmp\1.3.24.7\psuser_64.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\GoogleCrashHandler.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\GoogleCrashHandler64.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\GoogleUpdate.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\GoogleUpdateBroker.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\GoogleUpdateComRegisterShell64.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\GoogleUpdateHelper.msi => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\GoogleUpdateOnDemand.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\GoogleUpdateSetup.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdate.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_am.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_ar.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_bg.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_bn.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_ca.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_cs.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_da.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_de.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_el.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_en-GB.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_en.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_es-419.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_es.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_et.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_fa.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_fi.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_fil.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_fr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_gu.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_hi.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_hr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_hu.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_id.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_is.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_it.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_iw.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_ja.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_kn.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_ko.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_lt.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_lv.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_ml.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_mr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_ms.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_nl.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_no.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_pl.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_pt-BR.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_pt-PT.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_ro.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_ru.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_sk.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_sl.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_sr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_sv.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_sw.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_ta.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_te.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_th.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_tr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_uk.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_ur.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_vi.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_zh-CN.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\goopdateres_zh-TW.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\npGoogleUpdate3.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\psmachine.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\psmachine_64.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\psuser.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM651E.tmp\1.3.24.7\psuser_64.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\GoogleCrashHandler.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\GoogleCrashHandler64.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\GoogleUpdate.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\GoogleUpdateBroker.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\GoogleUpdateComRegisterShell64.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\GoogleUpdateHelper.msi => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\GoogleUpdateOnDemand.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\GoogleUpdateSetup.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdate.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_am.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_ar.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_bg.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_bn.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_ca.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_cs.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_da.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_de.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_el.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_en-GB.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_en.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_es-419.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_es.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_et.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_fa.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_fi.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_fil.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_fr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_gu.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_hi.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_hr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_hu.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_id.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_is.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_it.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_iw.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_ja.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_kn.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_ko.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_lt.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_lv.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_ml.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_mr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_ms.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_nl.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_no.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_pl.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_pt-BR.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_pt-PT.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_ro.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_ru.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_sk.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_sl.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_sr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_sv.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_sw.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_ta.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_te.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_th.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_tr.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_uk.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_ur.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_vi.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_zh-CN.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\goopdateres_zh-TW.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\npGoogleUpdate3.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\psmachine.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\psmachine_64.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\psuser.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\GUM5391.tmp\1.3.24.7\psuser_64.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\Adobe\Acrobat\9.0\UserCache.bin => Moved successfully.
Could not move "C:\Users\Administrator\AppData\Local\Temp" directory. => Scheduled to move on reboot.

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-05-22 16:09:30)<=

C:\Users\Administrator\AppData\Local\Temp\GUMCA12.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\etilqs_yQxK91Gtk0OfpgI => Is moved successfully.
C:\Users\Administrator\AppData\Local\Temp\FXSAPIDebugLogFile.txt => Is moved successfully.
C:\Users\Administrator\AppData\Local\Temp => Moved successfully.

==== End of Fixlog ====

Otvor chrome>>nastavenie>>nastavenie a v sekcii po spusteni>>nastav na otvorit nova karta,
Este su problemy??

problemy prertrvavaju, a to nastavenie otvorenia novej karty mam nastavene. Co je ale zaujmave , tak nad odsekom "po spusteni" je odsek "prohlasit sa" a ten svieti na cerveno a hlasi "infirnacie o prihlaseni do uctu su neaktualne" Znova sa prihlasit

no skus sa prihlasit
https://support.google.com/chrome/answe ... gn_in&rd=1

nejde to

No tak cez pridat odobrat programy odinstaluj chrome.
Restartuj pc
Ak chces chrome, stiahni ti s Firefoxom a naistaluj to znova.
a odskusaj, ako pises system Windows funguje dobre, len prehliadace a internet blbne.

Ja som nikde nepovedal, ze windows funguje dobre, nejde ani jeden browser okrem firefoxu. nefunguje skype, nefunguju ziadne videa u webu, vsetky videa v PC musim pustat cez VLC, ostatne prehravace nefunguju. Budes zase nahnevany ze frflem ale uz aj tebe som pisal, ze ked zapnem panel nastrojov a chcem odinstalovat chrom, tak ho ani nevidim v progamoch, to iste plati pre ostatne prehliadace, dokonca tam nevidim ani firefox a ten pri tom funguje. Stihanut chrom sa da ale vzdy podane instalacia. Stale nefunguje copy past, takze o tom ze by windows fungoval bez problemov nemoze byt ani reci, pri kliknuti na subor pravou mysou musim cakat cca 2 min kym sa rozbali ponuka povelov, atd.

Hm, a ak sa nalogujes do toho specialneho admin uctu,co sme vytvorili,tak v pridat odobrat programy tiez nevidis tieto programy??
Pretoze ak tam to nevidis, tak nemozu ani fungovat spravne.

Je to takto, mam dva ucty .Jeden ktory som si otvoril na zaciatku a je po mojim menom, potom ma ale prestali baviť obmedzenia a kamos otvoril ucet administratorsky ktory teraz pouzivam. Ked som urobil co si mi napisal po restarte som ziadny novy ucet neobjavil. Tak som sa logol do uctu admina ale nezmenilo sa nic. A samozrejme ze tie programy tam nevidim, je jasne ze nefunguju dobre ))).

Aha, tak to si mal uz davno napisat, preto ze ten ucet co kamos vytvoril je na prd.
Pravdepodobne len aktivoval specialny ucet, a infekcia to rozbila, mal si tam specialnu infekciu co dokaze rozbit system.
Takze skus z toho uctu co kamos vytvoril, vytvorit dalsi spravcovsky ucet.

Pojdes cez ovladacie panely>>uzivatelske ucty, a vytvor novy spravcovsky ucet,
Das tam meno bez dlznov a mekcenov, a daj tam heslo. este raz heslo,,a pockas kym sa vytvori ucet.Restart a prihlas sa do noveho uctu, ak tam budes tak napis.

bohuzial , vsetko v poriadku az kym pridem ku riadku " vytvorit nove konto" ., vtedy pc nereaguje, nic sa nedeje, ostatne linky okolo funguju ale tento enreaguje