VIRY.CZ

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014
Ran by Jarda (administrator) on JARDA-PC on 28-07-2014 19:43:16
Running from C:\Users\Jarda\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(TomTom) C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Desktop.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(forum.viry.cz) C:\Users\Jarda\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11101800 2010-07-28] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-08-03] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ATICustomerCare] => C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe [311296 2010-03-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast5] => "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-1052438392-2691681072-92008891-1000\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe [473496 2013-11-29] (TomTom)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://search.icq.com/search/results.ph ... &ch_id=osd
SearchScopes: HKCU - 48866573DE3F427BB8453B0D23EA0D5B URL = http://www.google.com/search?q={searchT ... Page}&rlz=
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL =
SearchScopes: HKCU - {4482076C-F11B-4317-9EE3-6931E87AB362} URL = http://www.czechcomputer.cz/fulltext.js ... earchTerms}
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://search.icq.com/search/results.ph ... &ch_id=osd
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome:
=======
CHR DefaultSearchKeyword: bing.com
CHR DefaultNewTabURL:
CHR Extension: (Peněženka Google) - C:\Users\Jarda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)
S2 Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
S3 lmimirr; system32\DRIVERS\lmimirr.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-28 19:43 - 2014-07-28 19:44 - 00008070 _____ () C:\Users\Jarda\Desktop\FRST.txt
2014-07-28 19:42 - 2014-07-28 19:43 - 00000000 ____D () C:\FRST
2014-07-28 19:42 - 2014-07-28 19:41 - 02093568 _____ (Farbar) C:\Users\Jarda\Desktop\FRST64.exe
2014-07-28 19:42 - 2014-07-28 19:40 - 00112640 _____ (forum.viry.cz) C:\Users\Jarda\Desktop\FRSTLauncher.exe
2014-07-28 19:41 - 2014-07-28 19:41 - 02093568 _____ (Farbar) C:\Users\Jarda\Downloads\FRST64.exe
2014-07-28 19:40 - 2014-07-28 19:40 - 00112640 _____ (forum.viry.cz) C:\Users\Jarda\Downloads\FRSTLauncher.exe
2014-07-28 19:39 - 2014-07-28 19:39 - 01084416 _____ (Farbar) C:\Users\Jarda\Downloads\FRST.exe
2014-07-09 20:44 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-09 20:44 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-09 20:44 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 20:44 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-09 20:44 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 20:44 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 20:44 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-09 20:44 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-09 20:44 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-09 20:44 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-09 20:44 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-09 20:44 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-09 20:44 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-09 20:44 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-09 20:44 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-09 20:44 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-09 20:44 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-09 20:44 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 20:44 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 20:44 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 20:44 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-09 20:44 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-09 20:44 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 20:44 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 20:44 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 20:44 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-09 20:44 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-09 20:44 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-09 20:44 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-09 20:44 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-09 20:44 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 20:44 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-09 20:44 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-09 20:44 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-09 20:44 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 20:44 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-09 20:44 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-09 20:44 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-09 20:44 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-09 20:44 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-09 20:44 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-09 20:44 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-09 20:44 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-09 20:44 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 20:44 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-09 20:44 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-09 20:44 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 20:44 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-09 20:44 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-09 20:44 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-09 20:44 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-09 20:44 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 20:44 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-09 20:44 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-09 20:44 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-09 20:44 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-09 20:44 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-09 20:44 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-09 20:44 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 20:44 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 20:44 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-09 20:44 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-09 20:44 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-09 20:44 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-09 20:44 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-09 20:44 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-09 20:44 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-09 20:44 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-09 20:44 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-09 20:44 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-09 20:44 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-09 20:44 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-09 20:44 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-09 20:44 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-09 20:44 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-09 20:44 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-09 20:43 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-09 20:43 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-09 20:43 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-28 19:44 - 2014-07-28 19:43 - 00008070 _____ () C:\Users\Jarda\Desktop\FRST.txt
2014-07-28 19:43 - 2014-07-28 19:42 - 00000000 ____D () C:\FRST
2014-07-28 19:41 - 2014-07-28 19:42 - 02093568 _____ (Farbar) C:\Users\Jarda\Desktop\FRST64.exe
2014-07-28 19:41 - 2014-07-28 19:41 - 02093568 _____ (Farbar) C:\Users\Jarda\Downloads\FRST64.exe
2014-07-28 19:40 - 2014-07-28 19:42 - 00112640 _____ (forum.viry.cz) C:\Users\Jarda\Desktop\FRSTLauncher.exe
2014-07-28 19:40 - 2014-07-28 19:40 - 00112640 _____ (forum.viry.cz) C:\Users\Jarda\Downloads\FRSTLauncher.exe
2014-07-28 19:40 - 2009-07-14 06:45 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-28 19:40 - 2009-07-14 06:45 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-28 19:39 - 2014-07-28 19:39 - 01084416 _____ (Farbar) C:\Users\Jarda\Downloads\FRST.exe
2014-07-28 19:39 - 2009-07-14 17:18 - 00672136 _____ () C:\Windows\system32\perfh005.dat
2014-07-28 19:39 - 2009-07-14 17:18 - 00142732 _____ () C:\Windows\system32\perfc005.dat
2014-07-28 19:39 - 2009-07-14 07:13 - 01593150 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-28 19:36 - 2010-09-05 19:54 - 01071383 _____ () C:\Windows\WindowsUpdate.log
2014-07-28 19:33 - 2014-05-25 14:18 - 00007840 _____ () C:\Windows\setupact.log
2014-07-28 19:33 - 2010-09-08 16:45 - 00000946 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-28 19:33 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-28 17:30 - 2010-09-08 16:45 - 00000950 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-28 10:07 - 2012-06-17 20:28 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-28 07:29 - 2010-10-15 18:05 - 00003970 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{E1B83D0C-4241-42E1-9A34-9BAEBC376F79}
2014-07-27 17:31 - 2010-09-07 15:11 - 00000000 ____D () C:\Users\Jarda\AppData\Roaming\Skype
2014-07-24 18:59 - 2012-12-10 00:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 18:59 - 2012-12-10 00:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 17:43 - 2012-12-10 00:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-24 17:14 - 2010-09-07 01:42 - 00000000 ____D () C:\Users\Jarda\AppData\Roaming\ICQ
2014-07-20 11:45 - 2014-05-23 15:50 - 00000000 ____D () C:\Users\Jarda\AppData\Roaming\vlc
2014-07-15 18:59 - 2013-10-22 19:42 - 00000000 ____D () C:\Users\Jarda\Documents\Preventivky
2014-07-12 15:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-07-12 13:40 - 2014-01-01 20:18 - 00000000 ____D () C:\Users\Jarda\Documents\AUTO+Tom Tom
2014-07-10 06:35 - 2014-05-25 14:16 - 00346256 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-10 06:33 - 2009-07-14 17:37 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-10 06:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-10 06:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-09 21:15 - 2013-08-13 21:44 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-09 21:14 - 2010-09-07 15:29 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-09 21:14 - 2010-09-06 20:04 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-09 21:07 - 2012-06-17 20:28 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-09 21:07 - 2012-06-17 20:28 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-09 21:07 - 2011-09-30 07:27 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-03 05:51 - 2014-02-26 19:04 - 00003246 _____ () C:\Windows\System32\Tasks\SidebarExecute

Some content of TEMP:
====================
C:\Users\Jarda\AppData\Local\Temp\update_626422.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-18 19:38




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (OS_APLIKACE) (Fixed) (Total:195.21 GB) (Free:111.88 GB) NTFS
Drive d: (DATA) (Fixed) (Total:736.2 GB) (Free:711.09 GB) NTFS
Drive f: (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Available physical RAM: 4603.62 MB
Total physical RAM: 6141.48 MB
Percentage of memory in use: 25%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 4C8FA832)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=195 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=736 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\TEMP:DF462FF6

==================== Security Center ==================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Jarda\Desktop" je 2 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Děkuji.

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://search.icq.com/search/results.ph ... &ch_id=osd
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://search.icq.com/search/results.ph ... &ch_id=osd
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
CHR DefaultSearchKeyword: bing.com
CHR DefaultNewTabURL:
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Users\Jarda\AppData\Local\Temp
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-07-2014
Ran by Jarda at 2014-07-30 20:11:20 Run:1
Running from C:\Users\Jarda\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://search.icq.com/search/results.ph ... &ch_id=osd
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://search.icq.com/search/results.ph ... &ch_id=osd
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
CHR DefaultSearchKeyword: bing.com
CHR DefaultNewTabURL:
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Users\Jarda\AppData\Local\Temp
End
*****************

HKCU\Software\Microsoft\Internet Explorer\Main\\ICQ Search => Value not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}" => Key not found.
"HKCR\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19}" => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} => value deleted successfully.
"HKCR\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}" => Key not found.
"HKLM\Software\MozillaPlugins\FF Plugin: @microsoft.com/GENUINE - disabled No File" => Key not found.
"FF Plugin: @microsoft.com/GENUINE - disabled No File" => not found.
"HKLM\Software\Wow6432Node\MozillaPlugins\FF Plugin-x32: @microsoft.com/GENUINE - disabled No File" => Key not found.
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File not found.
CHR DefaultSearchKeyword: bing.com ==> The Chrome "Settings" can be used to fix the entry.
CHR DefaultNewTabURL: => Error: No automatic fix found for this entry.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.

"C:\Users\Jarda\AppData\Local\Temp" directory move:

C:\Users\Jarda\AppData\Local\Temp\1001011.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\10274600.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\107203.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\10777703.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\11032265.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\11209295.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\11406371.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\1142660.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\1166310.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\12218856.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\12426337.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\125892.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\12596690.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\126158.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\1270206.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\12836292.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\128981.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\13233892.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\1365336.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\1413197.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\143318.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\148185.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\150384.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\1517187.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\151851.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\15444473.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\1557264.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\157732.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\1593753.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\16304553.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\16330699.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\16347344.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\16514109.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\166172.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\1778083.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\17884438.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\18810210.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\19089655.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\19132134.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\1914335.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\20206840.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\2029947.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\211521.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\212832.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\2154217.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\2156136.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\218479.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\21853337.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\221318.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\22232700.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\22700267.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\227246.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\232238.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\232956.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\2351512.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\235935.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\23727502.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\2441166.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\249039.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\24991609.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\251099.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\2514985.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\26352765.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\2789329.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\2856206.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\28590178.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\2933380.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\295793.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\29770950.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\301986.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\307649.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\310239.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\3144636.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\318008.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\3300216.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\3391617.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\348365.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\348537.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\35250906.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\3631063.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\369269.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\3735194.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\3826454.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\38469.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\38641.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\3882537.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\392592.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\394152.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\3983360.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\39873.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\40963803.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\41324.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\4187222.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\4207393.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\424697.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\42525.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\42572.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\43227.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\433760.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\44148.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\4433205.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\445757.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\44600.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\44725.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\4503842.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\45177.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\4591546.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\4647051.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\46519.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\4653353.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\4800088.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\48063.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\4812287.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\48329.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\48516.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\48609.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\4865000.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\49124.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\50123.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\5059221.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\50981.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\52166.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\5354562.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\53711.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\53960.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\54818.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\55739.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\5618376.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\56487.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\5649591.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\5711539.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\5734908.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\58266.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\583740.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\58375.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\58718.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\59342.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\593895.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\6012091.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\6042901.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\6084818.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\6093227.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\6115285.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\6161243.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\6174457.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\6258011.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\632194.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\65114.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\6585379.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\6612117.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\662661.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\6750350.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\7023336.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\7089465.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\7230646.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\72680.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\7269864.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\73351.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\745060.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\7597233.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\7720785.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\77813.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\781518.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\7964662.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\81494.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\8259285.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\8281359.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\84661.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\84BC573C-A56C-4C40-8461-CA07F7A5376C.Diagnose.Admin.0.etl => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\8504113.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\8549712.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\86284.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\862981.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\8863836.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\9059726.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\9209035.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\9277582.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\9293946.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\9368764.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\941294.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\95503.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\9552378.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\9615262.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\9625542.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\978531.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\99029.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\9952910.od => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\AdobeARM.log => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\chrome_installer.log => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR129.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR1BE8.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR1C7D.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR1C85.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR1E87.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR21A3.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR2683.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR26B3.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR2AE8.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR2B05.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR2D39.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR2FCB.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR2FD6.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR2FE5.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR3295.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR3312.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR34B7.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR3515.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR35B.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR35D2.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR35DF.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR36F9.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR3A41.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR3A8.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR3BE8.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR3D8E.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR3E29.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR3E47.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR3E58.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR3E7C.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR3F50.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR3FCE.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR405C.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR4062.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR42C9.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR44C6.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR4633.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR48F7.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR4A77.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR4B61.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR4FD5.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR50BE.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR510C.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR511B.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR5179.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR5199.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR54B6.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR54F8.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR555F.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR562.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR56BA.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR5779.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR5B78.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR5CEE.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR5D0F.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR5E64.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR6029.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR6086.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR60EB.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR61BE.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR6316.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR67D7.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR6805.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR6D5.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR6DFF.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR6F84.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR70D0.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR71E8.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR7467.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR7499.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR7500.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR7550.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR77AE.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR7AF9.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR7C23.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR7D5B.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR81FC.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR82C5.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR8361.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR84CB.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR87F6.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR890C.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR8B0F.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR8DEC.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR8E.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR8FD1.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR904D.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR908E.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR950E.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR9636.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR96D2.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR9990.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR9B93.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR9BA2.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR9C61.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVR9E60.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRA15D.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRA275.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRA2B4.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRA4F.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRA535.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRA582.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRA5FE.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRA61D.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRA8BC.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRA9F9.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRAC55.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRAE19.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRAEA5.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRB05A.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRB1B1.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRB442.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRB598.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRB79E.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRB922.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRBAC8.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRBBBF.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRBBCF.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRBCB9.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRBCBB.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRBD74.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRBDC2.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRBFC5.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRC081.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRC1FA.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRC23.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRC284.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRC310.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRC331.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRC3BB.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRC705.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRC728.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRC800.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRC9A9.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRCBB7.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRCBE6.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRCCC0.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRCD3D.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRCF51.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRD07A.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRD1AF.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRD2A9.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRD4DB.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRD548.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRD613.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRD8D2.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRD8E.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRD9BB.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRDA28.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRDC88.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRDDC4.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRDE8E.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRDEE9.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRDFC6.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRE198.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRE2DA.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRE38A.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRE3E8.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRE456.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRE495.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRE516.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRE54F.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRE668.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRE7AF.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRE83C.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRE88B.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVREBB5.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRECB1.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRECBE.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRECCE.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVREDB.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVREDE8.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVREE63.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVREEE4.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVREEE6.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRF4BC.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRF7D5.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRF97B.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRF9AB.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRFBA.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRFBBC.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRFC3D.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRFD90.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRFE5A.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRFE7.tmp.cvr => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\CVRFE9A.tmp.cvr => Moved successfully.
Could not move "C:\Users\Jarda\AppData\Local\Temp\FXSAPIDebugLogFile.txt" => Scheduled to move on reboot.
C:\Users\Jarda\AppData\Local\Temp\Jarda.bmp => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\prikaz-15.07.2014-signed_437427A7179D90847.rtf => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\StructuredQuery.log => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\temp_cab_193425.cab => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\temp_cab_397100.cab => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\update_626422.exe => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\wmplog00.sqm => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\wmsetup.log => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\~68D0.tmp => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\~7B27.tmp => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\~DFA556ADC734D1E50D.TMP => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\~DFABEBCD8A1B4D8EEC.TMP => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\~DFC0A9466632B9484F.TMP => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\~DFE49C37740D84E979.TMP => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\~F9.bat => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\~F9.tmp => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\Rar$EX00.195\prikaz-15.07.2014-signed_437427A7179D90847.exe => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\msohtmlclip1\01\clip_colorschememapping.xml => Moved successfully.
C:\Users\Jarda\AppData\Local\Temp\msohtmlclip1\01\clip_themedata.thmx => Moved successfully.
Could not move "C:\Users\Jarda\AppData\Local\Temp" directory. => Scheduled to move on reboot.


=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-07-30 20:14:35)<=

C:\Users\Jarda\AppData\Local\Temp\FXSAPIDebugLogFile.txt => Is moved successfully.
C:\Users\Jarda\AppData\Local\Temp => Moved successfully.

==== End of Fixlog ====

Vše smazáno. Ještě spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v3.307 - Report created 19/08/2014 at 16:46:27
# Updated 17/08/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Jarda - JARDA-PC
# Running from : C:\Users\Jarda\Desktop\adwcleaner_3.307.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\ICQ\ICQToolbar
Folder Deleted : C:\Program Files (x86)\ICQ6Toolbar
Folder Deleted : C:\Users\Jarda\AppData\Local\PackageAware

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Key Deleted : HKLM\SOFTWARE\ICQ\ICQToolbar

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17239


-\\ Google Chrome v36.0.1985.143

[ File : C:\Users\Jarda\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1427 octets] - [19/08/2014 16:45:29]
AdwCleaner[S0].txt - [1366 octets] - [19/08/2014 16:46:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1426 octets] ##########

Vše smazáno, PC by již měl být čistý.

Děkuji Vám !

Rádo se stalo!