VIRY.CZ

Dobrý den! Nějak se mi podařilo dostat do počítače defalut-search.net sajrajt, co se mi nacpal do všech prohlížečů a celkově asi budu mít systém dost v háji. Prosím o pomoc, Jakej sem mám hodit log??

Tady je log z Frst Launcheru
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-02-2014 02
Ran by user (administrator) on PC-STROMECEK on 27-02-2014 18:10:05
Running from C:\Documents and Settings\user\Plocha
Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 6
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Skype Technologies S.A.) C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
() C:\WINDOWS\vsnpstd3.exe
(Pinnacle Systems GmbH) C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft) C:\Documents and Settings\user\Local Settings\Apps\2.0\HEG4AW45.6H0\5OY21RBN.Q0H\yamm..tion_c3bce3770c238a49_0001.0000_c9b1c88880c289cb\Yammer.Notifier.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MpCmdRun.exe
(forum.viry.cz) C:\Documents and Settings\user\Plocha\FRSTLauncher.exe
(Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
(Microsoft Corporation) C:\WINDOWS\system32\ping.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.EXE [20065936 2012-06-06] (Realtek Semiconductor Corp.)
HKLM\...\Run: [NeroFilterCheck] - C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-03-01] (Nero AG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [snpstd3] - C:\WINDOWS\vsnpstd3.exe [339968 2005-09-05] ()
HKLM\...\Run: [USBToolTip] - C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe [199752 2007-02-20] (Pinnacle Systems GmbH)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)
HKU\.DEFAULT\...\Run: [DWQueuedReporting] - C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [437160 2007-02-26] (Microsoft Corporation)
HKU\S-1-5-21-1757981266-790525478-839522115-1003\...\Run: [LaunchList] - C:\Program Files\Pinnacle\Studio 11\LaunchList2.exe [145496 2007-03-21] (Pinnacle Systems)
HKU\S-1-5-21-1757981266-790525478-839522115-1003\...\Run: [Xvid] - C:\Program Files\Xvid\CheckUpdate.exe [8192 2011-01-17] ()
HKU\S-1-5-21-1757981266-790525478-839522115-1003\...\Run: [Yammer Notifier] - C:\Documents and Settings\user\Nabídka Start\Programy\Microsoft Corporation\Yammer\Yammer Notifier.appref-ms silent
AppInit_DLLs: C:\DOCUME~1\ALLUSE~1\DATAAP~1\Wincert\WIN32C~1.DLL => C:\Documents and Settings\All Users\Data aplikací\Wincert\win32cert.dll [7168 2013-11-04] ()
AppInit_DLLs: C:\PROGRA~1\SETTIN~1\systemk\syskldr.dll => C:\Program Files\Settings Manager\systemk\syskldr.dll [19984 2014-02-06] ()
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
HKLM\...\AppCertDlls: [x86] -> C:\Program Files\Settings Manager\systemk\sysapcrt.dll [485904 2014-02-06] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... R}&ar=home
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{SUB_RFC1766}/ ... chasst.htm
URLSearchHook: HKCU - (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope Software\Microsoft\Internet Explorer\SearchScopes URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?si ... earchTerms}
SearchScopes: HKCU - {D6566FE1-69A8-4266-A96B-9BF0D2BB20DF} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_12454
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU - &Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
Toolbar: HKCU - No Name - {4F524A2D-5637-4300-76A7-7A786E7484D7} - No File
DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/ ... ontrol.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 81.200.55.50 81.200.55.34

FireFox:
========
FF ProfilePath: C:\Documents and Settings\user\Data aplikací\Mozilla\Firefox\Profiles\wumls07h.default
FF NewTab: hxxp://www2.delta-search.com/?babsrc=NT_ss&mntrId=009E902B3475D2D2&affID=123621&tsp=4990
FF SearchEngineOrder.1: Ask.com
FF SearchEngineOrder.3: Bing
FF Homepage: hxxp://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Documents and Settings\user\Data aplikací\Mozilla\Firefox\Profiles\wumls07h.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Documents and Settings\user\Data aplikací\Mozilla\Firefox\Profiles\wumls07h.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Documents and Settings\user\Data aplikací\Mozilla\Firefox\Profiles\wumls07h.default\searchplugins\safeguard-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Default Tab - C:\Documents and Settings\user\Data aplikací\Mozilla\Firefox\Profiles\wumls07h.default\Extensions\addon@defaulttab.com.xpi [2013-11-08]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-02-16]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-02-16]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []

Chrome:
=======
CHR HomePage: hxxp://www.default-search.net?sid=476&aid=115& ... 69&src=hmp
CHR Extension: (Peněženka Google) - C:\Documents and Settings\user\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-27]
CHR HKLM\...\Chrome\Extension: [gjajpkikblccgefaibcafkfbanllpefi] - C:\Documents and Settings\user\Data aplikací\7go\7go.crx [2013-07-30]

========================== Services (Whitelisted) =================

S3 AppleChargerSrv; C:\WINDOWS\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [462048 2012-04-20] (Intel(R) Corporation)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2013-12-18] (Oracle Corporation)
R2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
S2 PCLEPCI; C:\WINDOWS\system32\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH)
R2 Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3275136 2013-10-09] (Skype Technologies S.A.)

==================== Drivers (Whitelisted) ====================

S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
R1 AppleCharger; C:\WINDOWS\System32\DRIVERS\AppleCharger.sys [19056 2012-03-08] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
R3 MarvinBus; C:\WINDOWS\System32\DRIVERS\MarvinBus.sys [171520 2005-09-23] (Pinnacle Systems GmbH)
R3 MEI; C:\WINDOWS\System32\DRIVERS\HECI.sys [55104 2012-07-02] (Intel Corporation)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
R0 MpFilter; C:\WINDOWS\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
R3 SNPSTD3; C:\WINDOWS\System32\DRIVERS\snpstd3.sys [8718848 2005-11-07] ()
S3 gdrv; \??\C:\WINDOWS\gdrv.sys [X]
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
S3 taphss; system32\DRIVERS\taphss.sys [X]
U1 WS2IFSL;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-27 18:10 - 2014-02-27 18:10 - 00014555 _____ () C:\Documents and Settings\user\Plocha\FRST.txt
2014-02-27 18:09 - 2014-02-27 18:10 - 00000000 ____D () C:\FRST
2014-02-27 18:09 - 2014-02-27 18:09 - 00029696 _____ () C:\Documents and Settings\user\Local Settings\Data aplikací\MSGBOX.EXE
2014-02-27 18:09 - 2014-02-27 18:09 - 00015327 _____ () C:\Documents and Settings\user\Plocha\LM.bat
2014-02-27 18:08 - 2014-02-27 18:08 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\user\Plocha\FRSTLauncher.exe
2014-02-27 18:05 - 2014-02-27 18:05 - 01143808 _____ (Farbar) C:\Documents and Settings\user\Plocha\FRST.exe
2014-02-27 18:00 - 2014-02-27 18:01 - 00000000 ____D () C:\e767734cab4a215d7d4e3725efb5d864
2014-02-27 18:00 - 2014-02-27 18:00 - 00000000 ____D () C:\WINDOWS\LastGood
2014-02-27 17:42 - 2014-02-27 17:42 - 00001818 _____ () C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
2014-02-27 17:42 - 2014-02-27 17:42 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Chrome
2014-02-27 17:41 - 2014-02-27 17:46 - 00000936 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-27 17:41 - 2014-02-27 17:46 - 00000932 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-27 17:32 - 2014-02-27 17:33 - 00032803 _____ () C:\WINDOWS\ie8Uninst.log
2014-02-27 17:17 - 2014-02-27 17:24 - 00000000 ____D () C:\Documents and Settings\user\Data aplikací\vlc
2014-02-27 17:17 - 2014-02-27 17:17 - 00000724 _____ () C:\Documents and Settings\All Users\Plocha\VLC media player.lnk
2014-02-27 17:17 - 2014-02-27 17:17 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\VideoLAN
2014-02-27 17:14 - 2014-02-27 17:14 - 00013136 _____ () C:\WINDOWS\WMFDist11Uninst.log
2014-02-27 17:06 - 2014-02-27 17:06 - 00000000 ____D () C:\Documents and Settings\user\Dokumenty\Přijaté soubory
2014-02-27 17:04 - 2014-02-27 17:37 - 00023392 _____ () C:\WINDOWS\system32\nscompat.tlb
2014-02-27 17:04 - 2014-02-27 17:37 - 00016832 _____ () C:\WINDOWS\system32\amcompat.tlb
2014-02-27 17:02 - 2014-02-27 17:38 - 00048706 _____ () C:\WINDOWS\spupdsvc.log
2014-02-27 17:02 - 2014-02-27 17:24 - 00021779 _____ () C:\WINDOWS\wmsetup.log
2014-02-27 17:02 - 2014-02-27 17:03 - 00012920 _____ () C:\WINDOWS\wmp11Uninst.log
2014-02-27 16:40 - 2014-02-27 16:41 - 22788448 _____ () C:\Documents and Settings\user\Plocha\Můj film 4.avi
2014-02-27 16:36 - 2014-02-27 16:38 - 45260719 _____ () C:\Documents and Settings\user\Plocha\Můj film 4.mp4
2014-02-27 16:24 - 2014-02-27 16:26 - 32412106 _____ () C:\Documents and Settings\user\Plocha\test adam mpeg.mp4
2014-02-27 16:21 - 2014-02-27 16:23 - 160734778 _____ () C:\Documents and Settings\user\Plocha\testadam.avi
2014-02-25 22:27 - 2014-02-25 22:49 - 00000000 ____D () C:\Documents and Settings\user\Plocha\Adam V. 21.2.2014 avi
2014-02-25 18:16 - 2014-02-25 18:16 - 00000000 ____D () C:\Documents and Settings\LocalService\Plocha
2014-02-25 18:16 - 2014-02-25 18:16 - 00000000 ____D () C:\Documents and Settings\LocalService\Nabídka Start\Programy
2014-02-25 18:16 - 2014-02-25 18:16 - 00000000 ____D () C:\Documents and Settings\LocalService\Nabídka Start
2014-02-25 18:15 - 2014-02-25 18:15 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací\Hotspot Shield
2014-02-25 18:07 - 2014-02-25 18:21 - 00000000 ____D () C:\Program Files\Linkey
2014-02-25 18:07 - 2014-02-25 18:07 - 00000000 ____D () C:\Program Files\Settings Manager
2014-02-25 18:07 - 2014-02-25 18:07 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\Wincert
2014-02-25 18:06 - 2014-02-25 18:06 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\systemk
2014-02-21 18:04 - 2014-02-27 15:50 - 00000000 ____D () C:\Documents and Settings\user\Plocha\A.V. 21.2.2014
2014-02-16 17:25 - 2014-02-16 17:25 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-16 13:25 - 2014-02-17 19:35 - 00000000 ____D () C:\Documents and Settings\user\Plocha\Trávník 02.2014
2014-02-13 08:01 - 2014-02-13 08:01 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2916036$
2014-02-13 07:44 - 2014-02-13 07:44 - 00015634 _____ () C:\WINDOWS\KB2909921-IE8.log
2014-02-13 07:43 - 2014-02-13 07:44 - 00008452 _____ () C:\WINDOWS\KB2909210-IE8.log
2014-02-13 02:04 - 2014-02-13 08:01 - 00021267 _____ () C:\WINDOWS\KB2916036.log
2014-02-09 18:07 - 2014-02-09 18:52 - 00000000 ____D () C:\Documents and Settings\user\Plocha\VTI 2
2014-02-03 17:56 - 2014-02-27 17:39 - 00000000 ____D () C:\Documents and Settings\user\Local Settings\Data aplikací\Deployment
2014-02-03 17:56 - 2014-02-03 17:56 - 00000392 _____ () C:\Documents and Settings\user\Plocha\Yammer Notifier.appref-ms
2014-02-03 17:56 - 2014-02-03 17:56 - 00000000 ____D () C:\Documents and Settings\user\Nabídka Start\Programy\Microsoft Corporation
2014-02-03 17:56 - 2014-02-03 17:56 - 00000000 ____D () C:\Documents and Settings\user\Data aplikací\Yammer
2014-02-03 17:56 - 2014-02-03 17:56 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\Yammer

==================== One Month Modified Files and Folders =======

2014-02-27 18:10 - 2014-02-27 18:10 - 00014555 _____ () C:\Documents and Settings\user\Plocha\FRST.txt
2014-02-27 18:10 - 2014-02-27 18:09 - 00000000 ____D () C:\FRST
2014-02-27 18:10 - 2013-05-01 11:40 - 00000000 ____D () C:\Documents and Settings\user\Plocha
2014-02-27 18:09 - 2014-02-27 18:09 - 00029696 _____ () C:\Documents and Settings\user\Local Settings\Data aplikací\MSGBOX.EXE
2014-02-27 18:09 - 2014-02-27 18:09 - 00015327 _____ () C:\Documents and Settings\user\Plocha\LM.bat
2014-02-27 18:09 - 2013-05-01 11:40 - 00000000 ___HD () C:\Documents and Settings\user\Local Settings\Data aplikací
2014-02-27 18:08 - 2014-02-27 18:08 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\user\Plocha\FRSTLauncher.exe
2014-02-27 18:08 - 2013-05-01 17:09 - 00000000 ____D () C:\Documents and Settings\user\Dokumenty\Stažené soubory
2014-02-27 18:05 - 2014-02-27 18:05 - 01143808 _____ (Farbar) C:\Documents and Settings\user\Plocha\FRST.exe
2014-02-27 18:05 - 2013-05-01 11:40 - 00000000 ___RD () C:\Documents and Settings\user\Dokumenty
2014-02-27 18:03 - 2013-05-01 11:04 - 01071988 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-27 18:01 - 2014-02-27 18:00 - 00000000 ____D () C:\e767734cab4a215d7d4e3725efb5d864
2014-02-27 18:01 - 2013-05-01 17:14 - 00001919 _____ () C:\WINDOWS\epplauncher.mif
2014-02-27 18:01 - 2013-05-01 17:13 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-02-27 18:00 - 2014-02-27 18:00 - 00000000 ____D () C:\WINDOWS\LastGood
2014-02-27 17:46 - 2014-02-27 17:41 - 00000936 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-27 17:46 - 2014-02-27 17:41 - 00000932 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-27 17:42 - 2014-02-27 17:42 - 00001818 _____ () C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
2014-02-27 17:42 - 2014-02-27 17:42 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Chrome
2014-02-27 17:42 - 2013-07-30 21:08 - 00000000 ____D () C:\Documents and Settings\user\Local Settings\Data aplikací\Google
2014-02-27 17:42 - 2013-05-01 17:46 - 00000000 ___RD () C:\Documents and Settings\All Users\Nabídka Start\Programy
2014-02-27 17:42 - 2013-05-01 17:46 - 00000000 ____D () C:\Documents and Settings\All Users\Plocha
2014-02-27 17:41 - 2013-07-30 21:07 - 00000000 ____D () C:\Program Files\Google
2014-02-27 17:39 - 2014-02-03 17:56 - 00000000 ____D () C:\Documents and Settings\user\Local Settings\Data aplikací\Deployment
2014-02-27 17:38 - 2014-02-27 17:02 - 00048706 _____ () C:\WINDOWS\spupdsvc.log
2014-02-27 17:38 - 2013-05-01 11:40 - 00000808 _____ () C:\Documents and Settings\user\Nabídka Start\Programy\Internet Explorer.lnk
2014-02-27 17:38 - 2013-05-01 11:05 - 00316640 _____ () C:\WINDOWS\WMSysPr9.prx
2014-02-27 17:38 - 2006-03-02 13:00 - 00013646 _____ () C:\WINDOWS\system32\wpa.dbl
2014-02-27 17:37 - 2014-02-27 17:04 - 00023392 _____ () C:\WINDOWS\system32\nscompat.tlb
2014-02-27 17:37 - 2014-02-27 17:04 - 00016832 _____ () C:\WINDOWS\system32\amcompat.tlb
2014-02-27 17:37 - 2013-05-01 17:48 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-02-27 17:37 - 2013-05-01 17:48 - 00000049 _____ () C:\WINDOWS\wiaservc.log
2014-02-27 17:37 - 2013-05-01 17:40 - 00000000 ____D () C:\WINDOWS\Help
2014-02-27 17:37 - 2013-05-01 11:39 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-27 17:33 - 2014-02-27 17:32 - 00032803 _____ () C:\WINDOWS\ie8Uninst.log
2014-02-27 17:33 - 2013-12-12 18:03 - 00024120 _____ () C:\WINDOWS\updspapi.log
2014-02-27 17:33 - 2013-11-16 19:07 - 00080049 _____ () C:\WINDOWS\iis6.log
2014-02-27 17:33 - 2013-11-16 19:07 - 00033852 _____ () C:\WINDOWS\tsoc.log
2014-02-27 17:33 - 2013-11-16 19:07 - 00024346 _____ () C:\WINDOWS\comsetup.log
2014-02-27 17:33 - 2013-11-16 19:07 - 00014766 _____ () C:\WINDOWS\ntdtcsetup.log
2014-02-27 17:33 - 2013-11-16 19:07 - 00004632 _____ () C:\WINDOWS\ocmsn.log
2014-02-27 17:33 - 2013-11-16 19:07 - 00003732 _____ () C:\WINDOWS\tabletoc.log
2014-02-27 17:33 - 2013-11-16 19:07 - 00001374 _____ () C:\WINDOWS\imsins.log
2014-02-27 17:33 - 2013-05-01 13:14 - 00000000 ____D () C:\WINDOWS\ie8updates
2014-02-27 17:33 - 2013-05-01 11:40 - 00000178 ___SH () C:\Documents and Settings\user\ntuser.ini
2014-02-27 17:33 - 2013-05-01 11:39 - 00032446 _____ () C:\WINDOWS\SchedLgU.Txt
2014-02-27 17:32 - 2013-11-16 19:07 - 00074188 _____ () C:\WINDOWS\FaxSetup.log
2014-02-27 17:32 - 2013-11-16 19:07 - 00035472 _____ () C:\WINDOWS\ocgen.log
2014-02-27 17:32 - 2013-11-16 19:07 - 00023168 _____ () C:\WINDOWS\msmqinst.log
2014-02-27 17:32 - 2013-11-16 19:07 - 00012996 _____ () C:\WINDOWS\netfxocm.log
2014-02-27 17:32 - 2013-11-16 19:07 - 00005100 _____ () C:\WINDOWS\MedCtrOC.log
2014-02-27 17:32 - 2013-11-16 19:07 - 00003708 _____ () C:\WINDOWS\msgsocm.log
2014-02-27 17:24 - 2014-02-27 17:17 - 00000000 ____D () C:\Documents and Settings\user\Data aplikací\vlc
2014-02-27 17:24 - 2014-02-27 17:02 - 00021779 _____ () C:\WINDOWS\wmsetup.log
2014-02-27 17:24 - 2013-05-01 11:40 - 00000797 _____ () C:\Documents and Settings\user\Nabídka Start\Programy\Windows Media Player.lnk
2014-02-27 17:24 - 2013-05-01 11:40 - 00000000 ___RD () C:\Documents and Settings\user\Nabídka Start\Programy
2014-02-27 17:18 - 2013-05-04 08:31 - 00000069 _____ () C:\WINDOWS\NeroDigital.ini
2014-02-27 17:18 - 2013-05-04 08:30 - 00058368 _____ () C:\Documents and Settings\user\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-02-27 17:17 - 2014-02-27 17:17 - 00000724 _____ () C:\Documents and Settings\All Users\Plocha\VLC media player.lnk
2014-02-27 17:17 - 2014-02-27 17:17 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\VideoLAN
2014-02-27 17:17 - 2013-05-01 11:40 - 00000000 __RHD () C:\Documents and Settings\user\Data aplikací
2014-02-27 17:16 - 2013-08-30 20:50 - 00000000 ____D () C:\Program Files\VideoLAN
2014-02-27 17:14 - 2014-02-27 17:14 - 00013136 _____ () C:\WINDOWS\WMFDist11Uninst.log
2014-02-27 17:06 - 2014-02-27 17:06 - 00000000 ____D () C:\Documents and Settings\user\Dokumenty\Přijaté soubory
2014-02-27 17:04 - 2013-08-30 20:51 - 00000000 ____D () C:\Documents and Settings\user\Data aplikací\Seznam.cz
2014-02-27 17:04 - 2006-03-02 13:00 - 00000886 _____ () C:\WINDOWS\win.ini
2014-02-27 17:03 - 2014-02-27 17:02 - 00012920 _____ () C:\WINDOWS\wmp11Uninst.log
2014-02-27 17:03 - 2013-10-14 23:19 - 00181688 _____ () C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
2014-02-27 17:03 - 2013-05-01 11:39 - 00000000 ___HD () C:\Documents and Settings\LocalService\Local Settings\Data aplikací
2014-02-27 17:02 - 2013-08-30 20:48 - 00000000 ____D () C:\Program Files\The KMPlayer
2014-02-27 17:02 - 2013-05-11 13:45 - 00000000 ____D () C:\Program Files\Windows Media Connect 2
2014-02-27 17:01 - 2013-05-01 12:20 - 00000000 ____D () C:\Program Files\Return to Castle Wolfenstein
2014-02-27 17:01 - 2013-05-01 12:19 - 00000600 _____ () C:\WINDOWS\Rtcw.INI
2014-02-27 17:00 - 2013-06-27 22:16 - 00000000 ____D () C:\Program Files\Pinnacle
2014-02-27 16:57 - 2013-11-08 22:40 - 00000000 ____D () C:\Program Files\Mobogenie
2014-02-27 16:55 - 2013-05-04 13:07 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\NCH Software
2014-02-27 16:54 - 2013-05-01 17:46 - 00000000 ___RD () C:\Documents and Settings\All Users\Nabídka Start
2014-02-27 16:54 - 2013-05-01 14:56 - 00000000 ____D () C:\Program Files\CyberLink
2014-02-27 16:54 - 2013-05-01 11:55 - 00000000 ____D () C:\Program Files\GIGABYTE
2014-02-27 16:54 - 2013-05-01 11:53 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-02-27 16:52 - 2013-05-01 17:46 - 00000000 __RHD () C:\Documents and Settings\All Users\Data aplikací
2014-02-27 16:45 - 2013-06-27 22:14 - 00000349 _____ () C:\Documents and Settings\All Users\Dokumenty\PCLECHAL.INI
2014-02-27 16:41 - 2014-02-27 16:40 - 22788448 _____ () C:\Documents and Settings\user\Plocha\Můj film 4.avi
2014-02-27 16:38 - 2014-02-27 16:36 - 45260719 _____ () C:\Documents and Settings\user\Plocha\Můj film 4.mp4
2014-02-27 16:34 - 2013-05-01 17:12 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-02-27 16:26 - 2014-02-27 16:24 - 32412106 _____ () C:\Documents and Settings\user\Plocha\test adam mpeg.mp4
2014-02-27 16:23 - 2014-02-27 16:21 - 160734778 _____ () C:\Documents and Settings\user\Plocha\testadam.avi
2014-02-27 16:13 - 2013-06-28 20:45 - 00000013 _____ () C:\Documents and Settings\All Users\Data aplikací\__FileUploader.log
2014-02-27 15:50 - 2014-02-21 18:04 - 00000000 ____D () C:\Documents and Settings\user\Plocha\A.V. 21.2.2014
2014-02-27 15:30 - 2013-06-27 22:16 - 00000000 ____D () C:\Documents and Settings\All Users\Dokumenty\Pinnacle
2014-02-25 22:49 - 2014-02-25 22:27 - 00000000 ____D () C:\Documents and Settings\user\Plocha\Adam V. 21.2.2014 avi
2014-02-25 22:07 - 2013-05-04 12:31 - 00000000 ___RD () C:\Documents and Settings\user\Dokumenty\Filmy
2014-02-25 18:21 - 2014-02-25 18:07 - 00000000 ____D () C:\Program Files\Linkey
2014-02-25 18:19 - 2013-11-16 22:27 - 00058807 _____ () C:\WINDOWS\setupapi.log
2014-02-25 18:16 - 2014-02-25 18:16 - 00000000 ____D () C:\Documents and Settings\LocalService\Plocha
2014-02-25 18:16 - 2014-02-25 18:16 - 00000000 ____D () C:\Documents and Settings\LocalService\Nabídka Start\Programy
2014-02-25 18:16 - 2014-02-25 18:16 - 00000000 ____D () C:\Documents and Settings\LocalService\Nabídka Start
2014-02-25 18:16 - 2013-05-01 11:39 - 00000000 __SHD () C:\Documents and Settings\LocalService
2014-02-25 18:15 - 2014-02-25 18:15 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací\Hotspot Shield
2014-02-25 18:07 - 2014-02-25 18:07 - 00000000 ____D () C:\Program Files\Settings Manager
2014-02-25 18:07 - 2014-02-25 18:07 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\Wincert
2014-02-25 18:06 - 2014-02-25 18:06 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\systemk
2014-02-25 17:31 - 2013-05-01 14:46 - 00000000 ____D () C:\WINDOWS\ERDNT
2014-02-23 22:03 - 2013-05-01 17:53 - 00000000 ____D () C:\Documents and Settings\user\Data aplikací\Skype
2014-02-23 20:51 - 2013-05-04 11:03 - 00002283 _____ () C:\Documents and Settings\All Users\Plocha\Skype.lnk
2014-02-21 07:34 - 2013-05-01 17:12 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-02-21 07:34 - 2013-05-01 17:12 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-02-17 20:50 - 2013-09-01 09:43 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-17 19:35 - 2014-02-16 13:25 - 00000000 ____D () C:\Documents and Settings\user\Plocha\Trávník 02.2014
2014-02-16 17:25 - 2014-02-16 17:25 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-14 19:01 - 2013-05-01 11:47 - 00000000 ____D () C:\WINDOWS\Microsoft.NET
2014-02-13 08:01 - 2014-02-13 08:01 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2916036$
2014-02-13 08:01 - 2014-02-13 02:04 - 00021267 _____ () C:\WINDOWS\KB2916036.log
2014-02-13 08:01 - 2013-11-16 19:07 - 00001374 _____ () C:\WINDOWS\imsins.BAK
2014-02-13 07:57 - 2013-05-01 17:47 - 01392292 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-13 07:53 - 2013-08-15 20:59 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-02-13 07:52 - 2013-05-01 13:12 - 85946576 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-02-13 07:44 - 2014-02-13 07:44 - 00015634 _____ () C:\WINDOWS\KB2909921-IE8.log
2014-02-13 07:44 - 2014-02-13 07:43 - 00008452 _____ () C:\WINDOWS\KB2909210-IE8.log
2014-02-09 18:52 - 2014-02-09 18:07 - 00000000 ____D () C:\Documents and Settings\user\Plocha\VTI 2
2014-02-09 16:02 - 2013-05-01 17:30 - 00002561 _____ () C:\Documents and Settings\user\Plocha\Microsoft Office Word 2003.lnk
2014-02-09 15:59 - 2013-05-04 18:04 - 00000000 ____D () C:\Documents and Settings\user\Plocha\ZV VTI
2014-02-06 20:19 - 2013-06-28 21:56 - 00224558 _____ () C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-System.dat
2014-02-06 20:19 - 2013-06-28 21:56 - 00224558 _____ () C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-S-1-5-21-1757981266-790525478-839522115-1003-0.dat
2014-02-06 19:59 - 2013-05-01 11:40 - 00000000 ___RD () C:\Documents and Settings\user\Oblíbené položky
2014-02-06 08:19 - 2014-01-12 21:49 - 00000000 ____D () C:\Documents and Settings\user\Plocha\Kristýnka Skype
2014-02-06 00:08 - 2013-05-01 13:15 - 00522240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll
2014-02-06 00:08 - 2013-05-01 13:14 - 11113472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieframe.dll
2014-02-06 00:08 - 2013-05-01 13:14 - 02006016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll
2014-02-06 00:08 - 2013-05-01 13:14 - 00743424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll
2014-02-06 00:08 - 2013-05-01 13:14 - 00630272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeeds.dll
2014-02-06 00:08 - 2013-05-01 13:14 - 00247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll
2014-02-06 00:08 - 2013-05-01 13:14 - 00055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2014-02-06 00:08 - 2013-05-01 13:14 - 00012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll
2014-02-03 17:56 - 2014-02-03 17:56 - 00000392 _____ () C:\Documents and Settings\user\Plocha\Yammer Notifier.appref-ms
2014-02-03 17:56 - 2014-02-03 17:56 - 00000000 ____D () C:\Documents and Settings\user\Nabídka Start\Programy\Microsoft Corporation
2014-02-03 17:56 - 2014-02-03 17:56 - 00000000 ____D () C:\Documents and Settings\user\Data aplikací\Yammer
2014-02-03 17:56 - 2014-02-03 17:56 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\Yammer

Some content of TEMP:
====================
C:\Documents and Settings\TEMP\Local Settings\Temp\NeroSearchTrayHook_{4FE0D29A-0365-4937-A263-3FE3BFD82337}.dll
C:\Documents and Settings\user\Local Settings\Temp\APNSetup.exe
C:\Documents and Settings\user\Local Settings\Temp\JiveXViewerStart1386257062.exe
C:\Documents and Settings\user\Local Settings\Temp\jre-7u45-windows-i586-iftw.exe
C:\Documents and Settings\user\Local Settings\Temp\jre-7u51-windows-i586-iftw.exe
C:\Documents and Settings\user\Local Settings\Temp\KMP_3.8.0.120.exe
C:\Documents and Settings\user\Local Settings\Temp\ntdll_dump.dll
C:\Documents and Settings\user\Local Settings\Temp\SettingsManagerSetup.exe
C:\Documents and Settings\user\Local Settings\Temp\VisusClient.dll
C:\Documents and Settings\user\Local Settings\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe
[2006-03-02 13:00] - [2008-04-14 07:52] - 1034240 ____A (Microsoft Corporation) 27afd587c462e280ee046b8cca3c2cd1

C:\WINDOWS\system32\winlogon.exe
[2006-03-02 13:00] - [2008-04-14 07:52] - 0507904 ____A (Microsoft Corporation) cddb1f8e1aea356f3ad106f2cf9b7fea

C:\WINDOWS\system32\svchost.exe
[2006-03-02 13:00] - [2008-04-14 07:52] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93

C:\WINDOWS\system32\services.exe
[2006-03-02 13:00] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7

C:\WINDOWS\system32\User32.dll
[2006-03-02 13:00] - [2008-04-14 07:52] - 0578560 ____A (Microsoft Corporation) e16e0990967374e76f3e40cacafd3d53

C:\WINDOWS\system32\userinit.exe
[2006-03-02 13:00] - [2008-04-14 07:52] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239

C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\volsnap.sys
[2006-03-02 13:00] - [2008-04-14 06:42] - 0052480 ____A (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1


==================== End Of Log ============================

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-1757981266-790525478-839522115-1003\...\Run: [Yammer Notifier] - C:\Documents and Settings\user\Nabídka Start\Programy\Microsoft Corporation\Yammer\Yammer Notifier.appref-ms silent
C:\Documents and Settings\user\Nabídka Start\Programy\Microsoft Corporation\Yammer
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{SUB_RFC1766}/ ... chasst.htm
URLSearchHook: HKCU - (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope Software\Microsoft\Internet Explorer\SearchScopes URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?si ... &src=ds&p={searchTerms}
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
C:\Program Files\Skype\Toolbars
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
Toolbar: HKCU - No Name - {4F524A2D-5637-4300-76A7-7A786E7484D7} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
FF ProfilePath: C:\Documents and Settings\user\Data aplikací\Mozilla\Firefox\Profiles\wumls07h.default
FF NewTab: hxxp://www2.delta-search.com/?babsrc=NT ... 1&tsp=4990
FF SearchEngineOrder.1: Ask.com
FF SearchEngineOrder.3: Bing
CHR HKLM\...\Chrome\Extension: [gjajpkikblccgefaibcafkfbanllpefi] - C:\Documents and Settings\user\Data aplikací\7go\7go.crx [2013-07-30]
R2 Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3275136 2013-10-09] (Skype Technologies S.A.)
S4 IntelIde; No ImagePath
U1 WS2IFSL;
C:\Documents and Settings\user\Plocha\Yammer Notifier.appref-ms
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\WMSysPr9.prx
C:\Documents and Settings\user\Local Settings\Temp
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 27-02-2014 02
Ran by user at 2014-02-27 18:29:18 Run:1
Running from C:\Documents and Settings\user\Plocha
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-1757981266-790525478-839522115-1003\...\Run: [Yammer Notifier] - C:\Documents and Settings\user\Nabídka Start\Programy\Microsoft Corporation\Yammer\Yammer Notifier.appref-ms silent
C:\Documents and Settings\user\Nabídka Start\Programy\Microsoft Corporation\Yammer
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{SUB_RFC1766}/ ... chasst.htm
URLSearchHook: HKCU - (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope Software\Microsoft\Internet Explorer\SearchScopes URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?si ... &src=ds&p={searchTerms}
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
C:\Program Files\Skype\Toolbars
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
Toolbar: HKCU - No Name - {4F524A2D-5637-4300-76A7-7A786E7484D7} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
FF ProfilePath: C:\Documents and Settings\user\Data aplikací\Mozilla\Firefox\Profiles\wumls07h.default
FF NewTab: hxxp://www2.delta-search.com/?babsrc=NT ... 1&tsp=4990
FF SearchEngineOrder.1: Ask.com
FF SearchEngineOrder.3: Bing
CHR HKLM\...\Chrome\Extension: [gjajpkikblccgefaibcafkfbanllpefi] - C:\Documents and Settings\user\Data aplikací\7go\7go.crx [2013-07-30]
R2 Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3275136 2013-10-09] (Skype Technologies S.A.)
S4 IntelIde; No ImagePath
U1 WS2IFSL;
C:\Documents and Settings\user\Plocha\Yammer Notifier.appref-ms
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\WMSysPr9.prx
C:\Documents and Settings\user\Local Settings\Temp
End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKU\S-1-5-21-1757981266-790525478-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Run\\Yammer Notifier => Value deleted successfully.
C:\Documents and Settings\user\Nabídka Start\Programy\Microsoft Corporation\Yammer => Moved successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bitguard.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bprotect.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bpsvc.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browserdefender.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browserprotect.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browsersafeguard.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\dprotectsvc.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\protectedsearch.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchprotection.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchprotector.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\snapdo.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\stinst32.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\stinst64.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\utiljumpflip.exe => Key deleted successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Bar => Value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{D8278076-BC68-4484-9233-6E7F1628B56C} => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} => Key deleted successfully.
HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} => Key deleted successfully.
C:\Program Files\Skype\Toolbars => Moved successfully.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} => Value deleted successfully.
HKCR\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} => Value deleted successfully.
HKCR\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4F524A2D-5637-4300-76A7-7A786E7484D7} => Value deleted successfully.
HKCR\CLSID\{4F524A2D-5637-4300-76A7-7A786E7484D7} => Key not found.
HKCR\PROTOCOLS\Handler\skype-ie-addon-data => Key deleted successfully.
HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8} => Key deleted successfully.
C:\Program Files\Skype\Toolbars => Should not be moved.
Firefox newtab deleted successfully.
Firefox SearchEngineOrder.1 deleted successfully.
Firefox SearchEngineOrder.3 deleted successfully.
HKLM\SOFTWARE\Google\Chrome\Extensions\gjajpkikblccgefaibcafkfbanllpefi => Key deleted successfully.
C:\Documents and Settings\user\Data aplikací\7go\7go.crx => Moved successfully.
Skype C2C Service => Service deleted successfully.
IntelIde => Service deleted successfully.
WS2IFSL => Service deleted successfully.
C:\Documents and Settings\user\Plocha\Yammer Notifier.appref-ms => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\WINDOWS\WMSysPr9.prx => Moved successfully.

"C:\Documents and Settings\user\Local Settings\Temp" directory move:

Could not move "C:\Documents and Settings\user\Local Settings\Temp\etilqs_QbHkjTKHTX27uBe" => Scheduled to move on reboot.
C:\Documents and Settings\user\Local Settings\Temp\Finnish.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\fla8D.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\French.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\German.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Greek.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hebrew.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\HssInstaller.txt => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hungarian.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\iereseticons.log => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\IMG_5087.jpg => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\IMT49.xml => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\IMT4A.xml => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\IMT4B.xml => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Italian.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Japanese.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\JAUReg.log => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\JavaDeployReg.log => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\java_install_reg.log => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\java_install_sp.log => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jinstall.cfg => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\JiveXViewerStart1386257062.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\JiveXViewerStart1386257062.ini => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jre-7u45-windows-i586-iftw.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jre-7u51-windows-i586-iftw.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst102.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst118.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst119.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst11C.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst11D.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst11E.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst128.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst129.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst22.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst24.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst25.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst28.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst29.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst33.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst36.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst37.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst3A.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst3C.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst3D.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst3F.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst40.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst44.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst45.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst4E.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst51.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst52.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst54.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst5A.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst5D.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst60.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst61.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst62.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst63.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst64.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst65.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst66.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst69.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst6A.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst6D.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst7C.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jst7D.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jstB9.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jstC1.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jstCA.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jstCE.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jstE.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jstE8.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jstEA.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jstF6.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jstF7.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jstF8.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jstFF.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jusched.log => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\KMP_3.8.0.120.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Korean.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Lithuanian.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\log3 => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\MpCmdRun.log => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Norwegian.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsa75.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nseBB.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nseBC.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsgD3.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsgD4.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsgD5.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nspB9.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nspBA.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nssDB.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nstDD.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\ntdll_dump.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Perflib_Perfdata_3bc.dat => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Polish.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Portuguese(Brazil).bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Portuguese.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\RD12C.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\RD12E.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\RD3E.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\RD40.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Russian.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\sdhss.cfg => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\set117.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\SettingsManagerSetup.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\SimChin.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Slovak.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Slovenian.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Spanish.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\SWEDISH.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Thai.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\toolbar_log.txt => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\TradChin.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Turkish.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VGX17.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VGX3A.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCounts.txt => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VisusClient.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_100.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_10D.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_113.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_116.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_117.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_118.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_11C.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_11D.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_11F.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_122.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_123.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_124.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_127.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_128.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_12A.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_12F.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_13.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_135.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_13B.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_141.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_158.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_15E.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_164.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_16A.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_16B.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_171.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_177.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_17D.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_183.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_189.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_18F.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_195.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_1E.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_21.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_24.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_29.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_2E.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_2F.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_30.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_31.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_37.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_38.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_3D.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_3F.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_42.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_44.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_45.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_48.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_4B.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_4C.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_4F.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_53.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_54.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_55.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_57.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_59.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_5A.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_5B.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_5C.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_5D.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_60.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_61.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_62.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_66.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_67.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_68.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_6A.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_6B.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_6D.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_6E.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_70.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_71.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_74.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_75.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_76.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_78.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_79.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_7A.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_7B.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_7D.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_7E.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_7F.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_81.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_83.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_84.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_85.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_86.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_89.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_8A.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_8B.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_8D.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_8E.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_93.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_94.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_95.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_96.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_99.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_9B.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_9C.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_9F.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_A0.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_A1.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_A3.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_A5.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_A8.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_AA.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_AB.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_AC.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_AD.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_AF.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_B3.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_B4.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_B5.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_B9.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_BB.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_BD.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_BF.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_C0.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_C1.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_C4.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_C7.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_C8.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_CB.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_CD.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_D0.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_D2.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_D3.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_D4.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_D5.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_DA.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_DB.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_E1.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_E6.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_E7.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_EB.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_ED.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_F0.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_F3.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_F6.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\_FA.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\~131.bat => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\~131.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\~DA.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\~DF3E14.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\~DF6D8D.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\~DF80.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\~DF843F.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\~DFB60.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\~DFB7E2.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\~~VisusStarter.bin => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3044-10.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3044-11.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3044-12.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3044-5.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3044-6.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3044-7.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3044-8.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3044-9.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3416-1.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3416-2.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3688-0.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3940-13.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3940-14.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3940-23.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3940-24.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3940-27.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-3940-28.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-496-17.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-496-18.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-496-21.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-496-22.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-496-25.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-496-26.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-496-29.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-496-30.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-496-31.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-496-32.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-496-33.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-496-34.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-496-35.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-496-36.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-496-37.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\1088-496-38.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2024-2540-5.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2024-2540-6.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2024-3248-3.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2024-3248-4.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2024-3484-0.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2024-4068-1.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2024-4068-2.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-1596-1.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-1596-2.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-1596-8.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-1596-9.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-1840-60.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-1840-61.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-1840-62.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-1840-63.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-2904-0.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-2904-7.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-3448-58.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-3448-59.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-3448-64.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-3448-65.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-3588-12.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-3588-13.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-3588-3.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-3588-4.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-3588-44.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-3588-45.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-3588-50.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-3588-51.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-3588-56.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-3588-57.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-10.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-11.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-14.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-15.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-16.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-17.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-18.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-19.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-20.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-21.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-22.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-23.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-24.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-25.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-26.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-27.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-28.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-29.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-30.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-31.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-32.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-33.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-34.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-35.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-36.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-37.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-38.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-39.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-40.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-41.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-42.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-43.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-46.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-47.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-48.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-49.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-5.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-52.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-53.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-54.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-55.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2088-996-6.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-3064-0.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-3252-35.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-3252-36.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-4772-1.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-4772-2.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-10.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-11.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-12.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-13.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-14.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-15.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-16.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-17.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-18.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-19.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-20.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-21.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-22.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-23.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-24.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-25.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-26.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-27.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-28.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-29.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-30.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-31.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-32.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-33.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-34.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-5.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-6.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-7.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-8.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2108-5084-9.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1520-66.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1520-67.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1520-80.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1520-81.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1612-100.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1612-101.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1612-102.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1612-103.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1612-104.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1612-88.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1612-89.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1612-95.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1612-96.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1612-97.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1612-98.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1612-99.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1700-90.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1776-91.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-1776-92.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3236-28.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3236-29.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3236-30.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3236-31.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3236-6.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3236-7.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3304-50.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3304-51.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3724-107.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3724-108.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-52.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-53.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-54.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-55.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-56.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-57.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-60.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-61.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-62.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-63.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-64.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-65.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-68.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-69.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-72.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-73.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-74.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-75.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-76.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-77.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-78.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-79.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-82.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-3892-83.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-0.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-1.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-10.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-11.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-14.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-15.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-16.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-17.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-2.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-20.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-21.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-22.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-23.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-26.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-27.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-3.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-32.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-33.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-34.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-35.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-36.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-37.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-38.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-39.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-4.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-40.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-41.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-42.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-43.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-44.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-45.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-46.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-47.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-48.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-49.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-5.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-8.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-728-9.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-956-105.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2392-956-106.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1192-0.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1192-3.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-10.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-11.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-12.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-13.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-14.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-15.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-16.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-17.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-18.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-19.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-24.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-25.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-26.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-27.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-32.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-33.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-34.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-35.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-36.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-37.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-40.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-41.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-42.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-43.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-46.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-47.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-48.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-49.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-52.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-53.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-54.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-55.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-58.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-59.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-60.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-61.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-64.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-65.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-66.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-67.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-68.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-69.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-8.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1740-9.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1976-1.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1976-2.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1976-4.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-1976-5.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-20.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-21.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-22.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-23.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-28.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-29.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-30.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-31.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-38.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-39.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-50.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-51.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-56.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-57.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-6.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-62.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-63.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-7.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-70.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-71.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-72.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\2984-3492-73.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\3744-1664-10.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\3744-1664-11.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\3744-2704-7.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\3744-2704-8.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\3744-3084-5.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\3744-3084-6.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\3744-3092-1.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\3744-3092-2.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\3744-3560-0.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\3744-3560-9.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\4544-2672-0.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\VideoPadCache\4544-2672-1.cache => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Skype\gilasterr.log => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Skype\DbTemp\temp-BHCnwXpW2obAgdgxnxKQhvPR => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Skype\DbTemp\temp-GwRsmgNojhWnvgIWzribTcZT => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Skype\DbTemp\temp-SDjSFq9FJbId4JEK5b2URrsE => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Skype\DbTemp\temp-V0iecDaYs43TOePptjpa1179 => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\scoped_dir_3660_29893\drive.crx => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nst46.tmp\background.bmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nst46.tmp\BgWorker.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nst46.tmp\btn_min.bmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nst46.tmp\install.ico => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nst46.tmp\KillProcDLL.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nst46.tmp\nsis7z.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nst46.tmp\SkinBtn.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nst46.tmp\System.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nst46.tmp\uninstall.ico => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsnB8\Helper.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsnB8\Starter.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsnB8\~nssDB.tmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsnB8\nseBC.tmp\mediabar.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsnB8\nseBC.tmp\pack.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsnB8\nseBC.tmp\SettingsManagerMediaBar.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsh74\Helper.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsb5C.tmp\background.bmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsb5C.tmp\BgWorker.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsb5C.tmp\btn_min.bmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsb5C.tmp\install.ico => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsb5C.tmp\KillProcDLL.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsb5C.tmp\nsis7z.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsb5C.tmp\SkinBtn.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsb5C.tmp\System.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsb5C.tmp\uninstall.ico => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsaD2\Helper.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\nsaD2\Uninstall.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre.timestamp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\CHANGES => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\COPYRIGHT => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\LICENSE => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\README.txt => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\THIRDPARTYLICENSEREADME.txt => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\Welcome.html => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\charsets.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\classlist => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\content-types.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\deploy.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\flavormap.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\fontconfig.98.bfc => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\fontconfig.98.properties.src => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\fontconfig.bfc => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\fontconfig.Me.bfc => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\fontconfig.Me.properties.src => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\fontconfig.properties.src => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\javaws.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\jce.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\jvm.hprof.txt => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\logging.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\net.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\psfont.properties.ja => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\psfontj2d.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\rt.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\sound.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\tzmappings => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\security\cacerts => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\security\java.policy => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\security\java.security => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\security\javaws.policy => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\security\local_policy.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\security\local_policy.jar.limited => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\security\US_export_policy.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\management\jmxremote.access => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\management\jmxremote.password.template => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\management\management.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\management\snmp.acl.template => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\javaws\messages.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\javaws\messages_de.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\javaws\messages_es.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\javaws\messages_fr.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\javaws\messages_it.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\javaws\messages_ja.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\javaws\messages_ko.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\javaws\messages_sv.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\javaws\messages_zh_CN.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\javaws\messages_zh_HK.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\javaws\messages_zh_TW.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\javaws\miniSplash.jpg => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\images\cursors\cursors.properties => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\images\cursors\invalid32x32.gif => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\images\cursors\win32_CopyDrop32x32.gif => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\images\cursors\win32_LinkDrop32x32.gif => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\images\cursors\win32_MoveDrop32x32.gif => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\im\indicim.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\im\thaiim.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\i386\jvm.cfg => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\ext\dnsns.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\ext\localedata.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\ext\sunjce_provider.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\ext\sunpkcs11.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\deploy\ffjcext.zip => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\cmm\CIEXYZ.pf => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\cmm\GRAY.pf => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\cmm\LINEAR_RGB.pf => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\cmm\PYCC.pf => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\cmm\sRGB.pf => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\lib\audio\soundbank.gm => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\awt.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\axbridge.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\cmm.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\dcpr.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\deploy.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\dt_shmem.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\dt_socket.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\eula.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\fontmanager.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\hpi.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\hprof.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\instrument.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\ioser12.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\j2pkcs11.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\jaas_nt.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\java.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\java.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\javacpl.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\javaw.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\JavaWebStart.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\javaws.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\java_crw_demo.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\jawt.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\JdbcOdbc.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\jdwp.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\JiveX[dv] light => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\jpeg.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\jpicom32.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\jpicpl32.cpl => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\jpiexp32.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\jpinscp.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\jpioji.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\jpishare.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\jsound.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\jsoundds.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\jucheck.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\keytool.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\kinit.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\klist.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\ktab.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\management.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\net.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\nio.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\NPJava11.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\NPJava12.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\NPJava13.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\NPJava14.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\NPJava32.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\NPJPI150_14.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\NPOJI610.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\orbd.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\pack200.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\policytool.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\RegUtils.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\rmi.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\rmid.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\rmiregistry.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\servertool.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\ssv.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\tnameserv.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\unicows.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\unpack.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\unpack200.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\verify.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\w2k_lsa_auth.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\zip.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\client\jvm.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\client\Xusage.txt => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\DVLIGHT_RUN_SUCCESS => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\DVStart.exe => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\DVStart.ini => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\guiconf.xml => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer.timestamp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\AcrobatViewer.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\activation.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\backport-util-concurrent-3.1.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\bcpg-jdk14.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\bcprov-jdk14.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\clib.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\clibwrapper_jiio.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\custom.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\default_trial_key-lic.pcd.jdv.mainkey.vlk => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\jai_codec.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\jai_core.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\jai_imageio.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\jiveXDVViewer.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\log4j.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\lwfjp2000.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\lwf_jp2_jni.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\mail.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\mlibwrapper_jai.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\modernthemepack.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\sax2.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\skinlf.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\user.opt => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\user.pref => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\usermanual_jdv_light_de.pdf => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\usermanual_jdv_light_en.pdf => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\vecmath.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\VisusClient.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\4.3.0.2\viewer\xerces.jar => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\AskToolbar.html => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\BingDSMSNHPOffer.html => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\CheckAskPage.html => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\HssFinishPage.html => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\HssSafeSearchWelcomePage.html => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\HSSSlideShow.html => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\HSSSlideShowStep1.html => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\HSSSlideShowStep2.html => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\HSSSlideShowStep3.html => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\HSSSlideShowStep4.html => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\HssWelcomePage.html => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\UnCloseBrowsers.html => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\UnUninstallFiles.html => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\styles\AskToolbar.css => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\styles\bing.css => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\styles\HssFinishPage.css => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\styles\HssSafeSearchWelcomePage.css => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\styles\HssWelcomePage.css => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\styles\styles.css => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\slider\index.html => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\slider\img\bg.jpg => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\slider\img\s.png => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\slider\img\s1.png => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\slider\img\s2.png => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\slider\img\s3.png => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\slider\img\s4.png => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\slider\img\s_icons.png => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\scripts\AskToolbar.js => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\scripts\BingDSMSNHPOffer.js => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\scripts\CheckAskPage.js => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\scripts\common.js => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\scripts\HssFinishPage.js => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\scripts\HssSafeSearchWelcomePage.js => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\scripts\HssWelcomePage.js => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\scripts\nsidefs.js => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\scripts\Toolbars.js => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\scripts\UnCloseBrowsers.js => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\scripts\UnUninstallFiles.js => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\lang\English.js => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\lang\Internationalization.js => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\lang\Japanese.js => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\img\ask_toolbar.bmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\img\bingHeaderOption1.png => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\img\bingNextButton.png => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\img\bingNextButtonBckg.png => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\img\bingNextButton_jpn.png => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\img\conduit_toolbar.bmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\img\HSSLogo.png => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\img\logo_grey.bmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\Hotspot Shield\html\img\safesearch_toolbar.bmp => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\be29e7f1-71ae-4703-50cb-1d52be512f51\twapi-be29e7f1-71ae-4703-50cb-1d52be512f51.dll => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\APN-Stub\ORJ-V7C\Msi11fe8a9b-844d-4fe4-bd90-da96e72fcee7.log => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\APN-Stub\ORJ-V7C\Stb11fe8a9b-844d-4fe4-bd90-da96e72fcee7.log => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\APN\ReportingData.dat => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\acrord32_sbx\Temporary Internet Files\Content.IE5\desktop.ini => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\acrord32_sbx\Temporary Internet Files\Content.IE5\index.dat => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\acrord32_sbx\Temporary Internet Files\Content.IE5\UP0TJT6U\desktop.ini => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\acrord32_sbx\Temporary Internet Files\Content.IE5\J1YI9BWZ\desktop.ini => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\acrord32_sbx\Temporary Internet Files\Content.IE5\7Y6JOZ23\desktop.ini => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\acrord32_sbx\Temporary Internet Files\Content.IE5\1S4V5O3J\desktop.ini => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\acrord32_sbx\History\History.IE5\desktop.ini => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\acrord32_sbx\History\History.IE5\index.dat => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\acrord32_sbx\Cookies\index.dat => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\980_12590\crl-set => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\980_12590\manifest.fingerprint => Moved successfully.
C:\Documents and Settings\user\Local Settings\Temp\980_12590\manifest.json => Moved successfully.
Could not move "C:\Documents and Settings\user\Local Settings\Temp" directory. => Scheduled to move on reboot.


=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-02-27 18:31:11)<=

"C:\Documents and Settings\user\Local Settings\Temp\etilqs_QbHkjTKHTX27uBe" => File could not move.
C:\Documents and Settings\user\Local Settings\Temp => Is moved successfully.

==== End of Fixlog ====

Smazáno. Nastala nějaká změna?

Bohužel ne, je to stále stejné.

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Pokud se stav nezmění, dejte log Combofix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

Logfile of random's system information tool 1.09 (written by random/random)
Run by user at 2014-02-27 20:55:32
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 233 GB (72%) free of 323 GB
Total RAM: 1938 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:56:07, on 27.2.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\vsnpstd3.exe
C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\user\Dokumenty\Downloads\RSIT (1).exe
C:\Program Files\trend micro\user.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LaunchList] C:\Program Files\Pinnacle\Studio 11\LaunchList2.exe
O4 - HKCU\..\Run: [Xvid] C:\Program Files\Xvid\CheckUpdate.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 7407471418
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\DOCUME~1\ALLUSE~1\DATAAP~1\Wincert\WIN32C~1.DLL C:\PROGRA~1\SETTIN~1\systemk\syskldr.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AppleChargerSrv - Unknown owner - C:\WINDOWS\system32\AppleChargerSrv.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PCLEPCI - Pinnacle Systems GmbH - C:\WINDOWS\system32\drivers\pclepci.sys
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

--
End of file - 6540 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\user\Data aplikací\Mozilla\Firefox\Profiles\wumls07h.default

prefs.js - "browser.search.useDBForOrder" - "false"
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.70 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Documents and Settings\user\Data aplikací\Mozilla\Firefox\Profiles\wumls07h.default\searchplugins\
askcom.xml
bingp.xml
safeguard-secure-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2012-01-25 143128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2012-01-25 181528]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2012-01-25 169752]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2012-06-06 20065936]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"snpstd3"=C:\WINDOWS\vsnpstd3.exe [2005-09-05 339968]
"USBToolTip"=C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe [2007-02-20 199752]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 948440]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"LaunchList"=C:\Program Files\Pinnacle\Studio 11\LaunchList2.exe [2007-03-21 145496]
"Xvid"=C:\Program Files\Xvid\CheckUpdate.exe [2011-01-17 8192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\DOCUME~1\ALLUSE~1\DATAAP~1\Wincert\WIN32C~1.DLL C:\PROGRA~1\SETTIN~1\systemk\syskldr.dll "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2012-01-16 301568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\CyberLink\PowerDVD10\PowerDVD10.exe"="C:\Program Files\CyberLink\PowerDVD10\PowerDVD10.exe:*:Enabled:CyberLink PowerDVD 10.0"
"E:\Installation\Setupx.exe"="E:\Installation\Setupx.exe:*:Enabled:Nero ProductSetup"
"C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Pinnacle\Studio 11\programs\RM.exe"="C:\Program Files\Pinnacle\Studio 11\programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 11\programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 11\programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 11\programs\PMSRegisterFile.exe"="C:\Program Files\Pinnacle\Studio 11\programs\PMSRegisterFile.exe:*:Enabled:PMSRegisterFile"
"C:\Program Files\Pinnacle\Studio 11\programs\umi.exe"="C:\Program Files\Pinnacle\Studio 11\programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\JiveX[dv] light"="C:\Documents and Settings\user\Local Settings\Temp\jivexviewer\jre\bin\JiveX[dv] light:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"C:\Program Files\PANDORA.TV\PanService\PanProcess.exe"="C:\Program Files\PANDORA.TV\PanService\PanProcess.exe:*:Enabled:PanProcess"
"C:\Program Files\PANDORA.TV\PanService\PandoraService.exe"="C:\Program Files\PANDORA.TV\PanService\PandoraService.exe:*:Enabled:PandoraService"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\CyberLink\PowerDVD10\PowerDVD10.exe"="C:\Program Files\CyberLink\PowerDVD10\PowerDVD10.exe:*:Enabled:CyberLink PowerDVD 10.0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=L3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.mjpg"=Pvmjpg30.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv

======List of files/folders created in the last 1 month======

2014-02-27 20:55:32 ----D---- C:\rsit
2014-02-27 20:55:32 ----D---- C:\Program Files\trend micro
2014-02-27 20:09:01 ----D---- C:\_OTM
2014-02-27 18:13:06 ----D---- C:\Documents and Settings\user\Data aplikací\WinRAR
2014-02-27 18:12:48 ----D---- C:\Program Files\WinRAR
2014-02-27 18:09:42 ----D---- C:\FRST
2014-02-27 17:17:35 ----D---- C:\Documents and Settings\user\Data aplikací\vlc
2014-02-25 18:07:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\Wincert
2014-02-25 18:07:19 ----D---- C:\Program Files\Linkey
2014-02-25 18:07:01 ----D---- C:\Program Files\Settings Manager
2014-02-25 18:06:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\systemk
2014-02-16 17:25:03 ----D---- C:\Program Files\Mozilla Firefox
2014-02-13 08:01:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2916036$
2014-02-03 17:56:39 ----D---- C:\Documents and Settings\user\Data aplikací\Yammer
2014-02-03 17:56:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Yammer

======List of files/folders modified in the last 1 month======

2014-02-27 20:55:32 ----RD---- C:\Program Files
2014-02-27 20:33:05 ----SD---- C:\WINDOWS\Tasks
2014-02-27 20:29:56 ----D---- C:\WINDOWS\system32\CatRoot2
2014-02-27 20:28:34 ----D---- C:\WINDOWS\Temp
2014-02-27 20:23:05 ----A---- C:\WINDOWS\system32\log.txt
2014-02-27 20:22:25 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-02-27 20:16:45 ----D---- C:\WINDOWS\system32
2014-02-27 20:16:44 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-27 18:30:34 ----D---- C:\WINDOWS
2014-02-27 18:29:19 ----D---- C:\Documents and Settings\user\Data aplikací\7go
2014-02-27 18:01:36 ----SHD---- C:\WINDOWS\Installer
2014-02-27 18:01:36 ----D---- C:\Config.Msi
2014-02-27 18:01:35 ----D---- C:\Program Files\Microsoft Security Client
2014-02-27 18:01:34 ----D---- C:\WINDOWS\system32\drivers
2014-02-27 17:41:55 ----D---- C:\Program Files\Google
2014-02-27 17:37:48 ----RSHDC---- C:\WINDOWS\system32\dllcache
2014-02-27 17:37:48 ----D---- C:\WINDOWS\system32\cs-cz
2014-02-27 17:37:47 ----HD---- C:\WINDOWS\inf
2014-02-27 17:37:47 ----D---- C:\WINDOWS\Help
2014-02-27 17:37:47 ----D---- C:\Program Files\Windows Media Player
2014-02-27 17:37:47 ----D---- C:\Program Files\Internet Explorer
2014-02-27 17:33:45 ----D---- C:\WINDOWS\ie8updates
2014-02-27 17:33:07 ----D---- C:\WINDOWS\WBEM
2014-02-27 17:18:33 ----A---- C:\WINDOWS\NeroDigital.ini
2014-02-27 17:16:46 ----D---- C:\Program Files\VideoLAN
2014-02-27 17:14:26 ----D---- C:\WINDOWS\system32\drivers\UMDF
2014-02-27 17:14:15 ----D---- C:\WINDOWS\Prefetch
2014-02-27 17:04:58 ----D---- C:\Documents and Settings\user\Data aplikací\Seznam.cz
2014-02-27 17:04:51 ----A---- C:\WINDOWS\win.ini
2014-02-27 17:02:56 ----D---- C:\Program Files\Windows Media Connect 2
2014-02-27 17:02:30 ----D---- C:\Program Files\The KMPlayer
2014-02-27 17:01:41 ----D---- C:\Program Files\Return to Castle Wolfenstein
2014-02-27 17:01:34 ----A---- C:\WINDOWS\Rtcw.INI
2014-02-27 17:00:11 ----D---- C:\Program Files\Pinnacle
2014-02-27 16:57:37 ----D---- C:\Program Files\Mobogenie
2014-02-27 16:55:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\NCH Software
2014-02-27 16:54:33 ----D---- C:\Program Files\GIGABYTE
2014-02-27 16:54:14 ----HD---- C:\Program Files\InstallShield Installation Information
2014-02-27 16:54:11 ----D---- C:\Program Files\CyberLink
2014-02-27 16:54:10 ----D---- C:\Program Files\Common Files
2014-02-25 17:31:06 ----D---- C:\WINDOWS\ERDNT
2014-02-23 22:03:13 ----D---- C:\Documents and Settings\user\Data aplikací\Skype
2014-02-21 07:34:33 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2014-02-17 20:50:05 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-02-14 19:01:49 ----D---- C:\WINDOWS\Microsoft.NET
2014-02-14 19:01:48 ----RSD---- C:\WINDOWS\assembly
2014-02-13 08:01:12 ----A---- C:\WINDOWS\imsins.BAK
2014-02-13 07:57:21 ----D---- C:\WINDOWS\WinSxS
2014-02-13 07:53:54 ----D---- C:\WINDOWS\system32\MRT
2014-02-13 07:52:13 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\WINDOWS\system32\DRIVERS\MpFilter.sys [2013-09-27 214696]
R1 AppleCharger;AppleCharger; C:\WINDOWS\system32\DRIVERS\AppleCharger.sys [2012-03-08 19056]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2012-01-16 2514752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2012-06-19 6141584]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 MEI;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\HECI.sys [2012-07-02 55104]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2011-12-08 327400]
R3 SNPSTD3;USB PC Camera (SNPSTD3); C:\WINDOWS\system32\DRIVERS\snpstd3.sys [2005-11-07 8718848]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-07-17 60160]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 taphss;Anchorfree HSS Adapter; C:\WINDOWS\system32\DRIVERS\taphss.sys []
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 462048]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-12-18 182696]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 22208]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-27 116648]
S2 PCLEPCI;PCLEPCI; C:\WINDOWS\system32\drivers\pclepci.sys [2005-02-09 14165]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21 257928]
S3 AppleChargerSrv;AppleChargerSrv; C:\WINDOWS\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-27 116648]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-16 118896]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Toto je log RSIT, nikoli ComboFix.

omlouvám se, provedu.

ComboFix 14-02-24.02 - user 27.02.2014 21:17:27.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1938.1332 [GMT 1:00]
Spuštěný z: c:\documents and settings\user\Dokumenty\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\msmqinst.log
c:\windows\system32\Cache
c:\windows\system32\Cache\075884af680ff6dc.fb
c:\windows\system32\Cache\227113dfa1ca894d.fb
c:\windows\system32\Cache\2f4fb61b398031a3.fb
c:\windows\system32\Cache\36ea9860c4b36e7e.fb
c:\windows\system32\Cache\493cc004644e30c7.fb
c:\windows\system32\Cache\49fbbc5a8678d502.fb
c:\windows\system32\Cache\5c54eb1a1655b076.fb
c:\windows\system32\Cache\613e8ce7ab7106af.fb
c:\windows\system32\Cache\633a76311867bd11.fb
c:\windows\system32\Cache\691f14230153a9e1.fb
c:\windows\system32\Cache\6cb409d7ac73d9f1.fb
c:\windows\system32\Cache\7614bd6cfa99e546.fb
c:\windows\system32\Cache\77664b6ccc36be9f.fb
c:\windows\system32\Cache\881b3593316772f0.fb
c:\windows\system32\Cache\96e05ae32642ec9c.fb
c:\windows\system32\Cache\98657d0579ae1930.fb
c:\windows\system32\Cache\d5c0f4e7bbe35bf3.fb
c:\windows\system32\Cache\d9ca663388d21ec0.fb
c:\windows\system32\Cache\f2cda51fd108941f.fb
c:\windows\system32\Cache\f34d8db84131d925.fb
c:\windows\system32\roboot.exe
c:\windows\system32\SETAB.tmp
c:\windows\system32\SETAD.tmp
c:\windows\system32\SETB2.tmp
c:\windows\system32\SETB9.tmp
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-01-27 do 2014-02-27 )))))))))))))))))))))))))))))))
.
.
2014-02-27 19:58 . 2014-02-27 19:58 39464 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A45AEBB4-6D9F-457C-86FD-F51BE19FF735}\MpKsl6f9ea9fe.sys
2014-02-27 19:55 . 2014-02-27 19:56 -------- d-----w- C:\rsit
2014-02-27 19:55 . 2014-02-27 19:56 -------- d-----w- c:\program files\trend micro
2014-02-27 19:09 . 2014-02-27 19:09 -------- d-----w- C:\_OTM
2014-02-27 17:42 . 2014-02-06 07:08 7947048 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A45AEBB4-6D9F-457C-86FD-F51BE19FF735}\mpengine.dll
2014-02-27 17:09 . 2014-02-27 17:31 -------- d-----w- C:\FRST
2014-02-27 16:17 . 2014-02-27 16:24 -------- d-----w- c:\documents and settings\user\Data aplikací\vlc
2014-02-26 17:38 . 2014-02-06 07:08 7947048 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-02-25 17:16 . 2014-02-25 17:16 -------- d-----w- c:\documents and settings\LocalService\Plocha
2014-02-25 17:16 . 2014-02-25 17:16 -------- d-----w- c:\documents and settings\LocalService\Nabídka Start
2014-02-25 17:15 . 2014-02-25 17:15 -------- d-----w- c:\documents and settings\LocalService\Data aplikací\Hotspot Shield
2014-02-25 17:10 . 2014-02-25 17:10 -------- d-----w- c:\documents and settings\user\AppData
2014-02-25 17:07 . 2014-02-25 17:07 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Wincert
2014-02-25 17:07 . 2014-02-25 17:21 -------- d-----w- c:\program files\Linkey
2014-02-25 17:07 . 2014-02-25 17:07 -------- d-----w- c:\program files\Settings Manager
2014-02-25 17:06 . 2014-02-25 17:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací\systemk
2014-02-03 16:56 . 2014-02-03 16:56 -------- d-----w- c:\documents and settings\user\Data aplikací\Yammer
2014-02-03 16:56 . 2014-02-03 16:56 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Yammer
2014-02-03 16:56 . 2014-02-27 16:39 -------- d-----w- c:\documents and settings\user\Local Settings\Data aplikací\Deployment
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-21 06:34 . 2013-05-01 16:12 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-02-21 06:34 . 2013-05-01 16:12 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-01-19 07:32 . 2013-05-01 16:17 231584 ------w- c:\windows\system32\MpSigStub.exe
2013-12-18 20:10 . 2014-01-24 19:31 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-12-18 19:46 . 2014-01-24 19:31 145408 ----a-w- c:\windows\system32\javacpl.cpl
2013-12-05 11:26 . 2006-03-02 12:00 1172992 ----a-w- c:\windows\system32\msxml3.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchList"="c:\program files\Pinnacle\Studio 11\LaunchList2.exe" [2007-03-21 145496]
"Xvid"="c:\program files\Xvid\CheckUpdate.exe" [2011-01-17 8192]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-01-24 143128]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-01-24 181528]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-01-24 169752]
"RTHDCPL"="RTHDCPL.EXE" [2012-06-06 20065936]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"snpstd3"="c:\windows\vsnpstd3.exe" [2005-09-05 339968]
"USBToolTip"="c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe" [2007-02-20 199752]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-10-23 948440]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-25 437160]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\umi.exe"=
"c:\\Program Files\\Pinnacle\\Studio 11\\programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 11\\programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 11\\programs\\PMSRegisterFile.exe"=
"c:\\Program Files\\Pinnacle\\Studio 11\\programs\\umi.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Documents and Settings\\user\\Local Settings\\Temp\\jivexviewer\\jre\\bin\\JiveX[dv] light"=
.
R1 AppleCharger;AppleCharger;c:\windows\system32\drivers\AppleCharger.sys [1.5.2013 11:55 19056]
R1 MpKsl6f9ea9fe;MpKsl6f9ea9fe;c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A45AEBB4-6D9F-457C-86FD-F51BE19FF735}\MpKsl6f9ea9fe.sys [27.2.2014 20:58 39464]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe [20.4.2012 13:11 462048]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe [1.5.2013 11:55 166720]
R2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [1.5.2013 11:55 365376]
R3 MEI;Intel(R) Management Engine Interface ;c:\windows\system32\drivers\HECI.sys [1.5.2013 11:54 55104]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [5.9.2013 10:34 171680]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [1.5.2013 11:53 1691480]
S3 AppleChargerSrv;AppleChargerSrv;system32\AppleChargerSrv.exe --> system32\AppleChargerSrv.exe [?]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MPKSL6F9EA9FE
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-27 16:41 1150280 ----a-w- c:\program files\Google\Chrome\Application\33.0.1750.117\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-02-27 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-01 06:34]
.
2014-02-27 c:\windows\Tasks\Microsoft Antimalware Scheduled Scan.job
- c:\program files\Microsoft Security Client\MpCmdRun.exe [2013-10-23 14:01]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
TCP: DhcpNameServer = 81.200.55.50 81.200.55.34
FF - ProfilePath - c:\documents and settings\user\Data aplikací\Mozilla\Firefox\Profiles\wumls07h.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-10 - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2014-02-27 21:21
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_12_0_0_70_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_12_0_0_70_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(756)
c:\program files\Settings Manager\systemk\sysapcrt.dll
.
Celkový čas: 2014-02-27 21:23:48
ComboFix-quarantined-files.txt 2014-02-27 20:23
.
Před spuštěním: Volných bajtů: 243 887 509 504
Po spuštění: Volných bajtů: 244 106 522 624
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - EF649C263FB805A81E689EA22A0DF05A
413FC2A0C716421B3158746D63736515

Po spuštění prohlížeče pořád naskakuje defalut-search.net jako homepage.

CF odinstalujte pomocí T-Cleaneru: http://vyosek.tym.cz/pro_usery/T-Cleaner.exe . Dále spusťte JunkwareRemovalTool:

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

Ulozte nejlepe na plochu
Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
Probehne vytvoreni zalohy a nasledne prohledavani
Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Aplikace JRT nejde spustit, i po opětovném stáhnutí mi to hází tuto chybovou hlášku: Aplikace nemohla být spuštěna, protože součást DBGHELP.dll nelze najít. Potíže pravděpodobně odstraníte opětovnou instalací aplikace.

Zkuste JRT přeinstalovat a pak spusťte v nouz. režimu.