VIRY.CZ

Zdravím, zhruba každé dvě sekundy mi blikne u myši načítací kolečko. Celý notebook mě připadá pomalejší. Všechno bylo ok než jsem začal odinstalovávat zbytečné programy, omylem jsem smazal ovladač na wifi, potom znova nainstaloval a od té doby je celý pc pomalejší. Byl to sítový adaptér Broadcom 802.11.

Zdravím!
Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-10-2014
Ran by PC (administrator) on HONZA-HP on 09-10-2014 21:15:15
Running from C:\Users\PC\Plocha
Loaded Profile: PC (Available profiles: PC & Administrator)
Platform: Microsoft® Windows Vista™ Home Basic Service Pack 2 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 9
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Hewlett-Packard Corporation) C:\Windows\System32\hpservice.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Agere Systems) C:\Windows\System32\agrsmsvc.exe
() C:\Windows\runSW.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
() C:\Program Files\Edimax\Edimax AC1200 Wireless LAN Driver\WPSService20.exe
(Realtek) C:\Windows\SwUSB.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Informer Technologies, Inc.) C:\Program Files\Software Informer\softinfo.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
(Microsoft) C:\Program Files\OnTranslator.com\OnTranslator.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Informer Technologies, Inc.) C:\Program Files\Software Informer\softinfo.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
(Opera Software) C:\Program Files\Opera\opera.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Informer Technologies, Inc.) C:\Program Files\Software Informer\softinfo.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-01-21] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1545512 2009-07-29] (Synaptics Incorporated)
HKLM\...\Run: [QlbCtrl.exe] => C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [288312 2009-07-27] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2012-01-03] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [947176 2012-09-12] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254896 2012-09-17] (Sun Microsystems, Inc.)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-761669904-710429162-1290869662-1000\...\Run: [Software Informer] => C:\Program Files\Software Informer\softinfo.exe [921600 2014-09-26] (Informer Technologies, Inc.)
HKU\S-1-5-21-761669904-710429162-1290869662-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-761669904-710429162-1290869662-1000\...\MountPoints2: {3e7619c6-5500-11df-9ead-0024814963b4} - I:\AutoTransfer.exe
HKU\S-1-5-21-761669904-710429162-1290869662-1000\...\MountPoints2: {61e11d78-930e-11df-8a11-00226462000f} - "I:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-761669904-710429162-1290869662-1000\...\MountPoints2: {9d1ce8b5-1f4f-11e1-b59d-00247e34eea8} - J:\LaunchU3.exe -a
HKU\S-1-5-21-761669904-710429162-1290869662-1000\...\MountPoints2: {e93ee49f-dcdd-11df-aef6-00247e34eea8} - I:\LaunchU3.exe -a
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OnTranslator.lnk
ShortcutTarget: OnTranslator.lnk -> C:\Program Files\OnTranslator.com\OnTranslator.exe (Microsoft)
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [GDriveBlacklistedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedEditOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedViewOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncingOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=108602 ... 247e34eea8
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://search.icq.com/search/results.ph ... &ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File
URLSearchHook: HKLM - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
URLSearchHook: HKCU - QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\PC\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
URLSearchHook: HKCU - (No Name) - {EEE6C35D-6118-11DC-9C72-001320C79847} - No File
URLSearchHook: HKCU - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
SearchScopes: HKLM - DefaultScope {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL =
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.as ... =CT2786678
SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?sr ... earchTerms}
SearchScopes: HKCU - DefaultScope {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL = http://search.qip.ru/search?query={searchTerms}&from=IE
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTer ... 247e34eea8
SearchScopes: HKCU - {5B291E6C-9A74-4034-971B-A4B007A0B315} URL = http://radiobar.toolbarhome.com/search. ... }&srch=dsp
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://search.icq.com/search/results.ph ... &ch_id=osd
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={2D8A ... 2012-05-31 21:11:27&v=10.0.0.7&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL = http://search.qip.ru/search?query={searchTerms}&from=IE
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.as ... =CT2786678
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?sr ... earchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: No Name -> {2EECD738-5844-4a99-B4B6-146BF802613B} -> No File
BHO: Conduit Engine -> {30F9B915-B755-4826-820B-08FBA6BD249D} -> C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
BHO: RadioBar Toolbar -> {5B291E6C-9A74-4034-971B-A4B007A0B315} -> C:\Program Files\RadioBar\toolbar.ni.dll (IMEDIX WEB TECHNOLOGIES LTD.)
BHO: CIEDownload Object -> {67BCF957-85FC-4036-8DC4-D4D80E00A77B} -> C:\Program Files\SMART Technologies\Notebook Software\NotebookPlugin.dll (SMART Technologies ULC.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: QIPBHO Class -> {95289393-33EA-4F8D-B952-483415B9C955} -> C:\Users\PC\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: uTorrentBar Toolbar -> {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} -> C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - RadioBar Toolbar - {5B291E6C-9A74-4034-971B-A4B007A0B315} - C:\Program Files\RadioBar\toolbar.ni.dll (IMEDIX WEB TECHNOLOGIES LTD.)
Toolbar: HKLM - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
Toolbar: HKLM - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
Toolbar: HKCU - SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File
Toolbar: HKCU - RadioBar Toolbar - {5B291E6C-9A74-4034-971B-A4B007A0B315} - C:\Program Files\RadioBar\toolbar.ni.dll (IMEDIX WEB TECHNOLOGIES LTD.)
Toolbar: HKCU - uTorrentBar Toolbar - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: toolbarchrome - {718733BC-AD64-4e5f-AC18-A85FBD75D54D} - C:\Program Files\RadioBar\toolbar.ni.dll (IMEDIX WEB TECHNOLOGIES LTD.)
Winsock: Catalog5 02 %SystemRoot%\system32\napinsp.dll [50176] (Společnost Microsoft)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default
FF DefaultSearchEngine: uTorrentBar Customized Web Search
FF SearchEngineOrder.1: Search the web (Babylon)
FF SelectedSearchEngine: AVG Secure Search
FF Homepage: hxxp://search.babylon.com/?affID=108602&tt=290312_bexdll&babsrc=HP_ss&mntrId=7cfae64700000000000000247e34eea8
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CTXXXX&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_135.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=1.6.0_37 -> C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin.gif
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin.src
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\qip-search.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
FF Extension: Battlefield Heroes Updater - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\battlefieldheroespatcher@ea.com [2010-09-14]
FF Extension: Conduit Engine - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\engine@conduit.com [2011-07-23]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-02-23]
FF Extension: QipAuthorizer - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89} [2011-07-31]
FF Extension: ICQ Toolbar - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-12-18]
FF Extension: uTorrentBar - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} [2014-08-30]
FF Extension: SweetPacks Toolbar for Firefox - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi [2011-04-19]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012-04-26]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2012-10-30]
FF Extension: SMART Notebook Extension - C:\Program Files\Mozilla Firefox\extensions\{D6D05E6F-D5C1-4e03-8E33-73F92B05E262} [2011-08-08]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-01-15]

Chrome:
=======
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\19.0.1084.52\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\19.0.1084.52\pdf.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\19.0.1084.52\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Skype Click to Call) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.11.0.9874_0\npSkypeChromePlugin.dll (Skype Technologies S.A.)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (QuickTime Plug-in 7.6.5) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.5) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.5) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.5) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.5) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.5) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.5) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Profile: C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-17]
CHR Extension: (Vyhledávání Google) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-17]
CHR Extension: (Skype Click to Call) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-05-27]
CHR Extension: (Gmail) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-17]
CHR HKLM\...\Chrome\Extension: [bejbohlohkkgompgecdcbbglkpjfjgdj] - C:\Users\PC\AppData\Local\Temp\crxB19A.tmp []
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-04-09]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\PC\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-10-09]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [20472 2012-09-12] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [287824 2012-09-12] (Microsoft Corporation)
R2 RunSwUSB; C:\Windows\runSW.exe [36864 2012-12-14] () [File not signed]
R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3063968 2012-04-09] (Skype Technologies S.A.)
R2 WPSService20; C:\Program Files\Edimax\Edimax AC1200 Wireless LAN Driver\WPSService20.exe [92160 2013-01-29] () [File not signed]
R2 yksvc; C:\Windows\System32\yk60x86.dll [282624 2009-07-17] (Marvell)
S2 ekrn; "C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2010-04-13] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [218688 2011-03-24] (DT Soft Ltd)
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [190424 2009-04-11] (Společnost Microsoft)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [94336 2011-10-09] (ITE )
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2010-04-13] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [193552 2012-08-30] (Microsoft Corporation)
R3 Ntfs; C:\Windows\system32\Drivers\Ntfs.sys [1083880 2009-04-11] (Společnost Microsoft)
S3 Ph3xIB32; C:\Windows\System32\DRIVERS\Ph3xIB32.sys [1131136 2007-04-03] (Philips Semiconductors GmbH)
R1 prodrv06; C:\Windows\System32\drivers\prodrv06.sys [54368 2004-09-03] (Protection Technology) [File not signed]
R0 prohlp02; C:\Windows\System32\drivers\prohlp02.sys [115680 2004-09-03] (Protection Technology) [File not signed]
R0 prosync1; C:\Windows\System32\drivers\prosync1.sys [7040 2004-07-19] (Protection Technology) [File not signed]
S3 SE27bus; C:\Windows\System32\DRIVERS\SE27bus.sys [61600 2006-05-15] (MCCI) [File not signed]
S3 SE27mdfl; C:\Windows\System32\DRIVERS\SE27mdfl.sys [9360 2006-05-15] (MCCI) [File not signed]
S3 SE27mdm; C:\Windows\System32\DRIVERS\SE27mdm.sys [97184 2006-05-15] (MCCI) [File not signed]
R0 sfhlp01; C:\Windows\System32\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1810856 2008-10-09] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [721904 2010-01-06] () [File not signed]
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys [X]
S2 eamon; system32\DRIVERS\eamon.sys [X]
S1 easdrv; system32\DRIVERS\easdrv.sys [X]
S1 epfwtdir; system32\DRIVERS\epfwtdir.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 RTL8192cu; system32\DRIVERS\rtwlanu.sys [X]
S2 TinaKey; No ImagePath
S3 UIUSys; system32\DRIVERS\UIUSYS.SYS [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-09 21:15 - 2014-10-09 21:16 - 00027966 _____ () C:\Users\PC\Plocha\FRST.txt
2014-10-09 21:14 - 2014-10-09 21:15 - 00000000 ____D () C:\FRST
2014-10-09 21:12 - 2014-10-09 21:14 - 00029696 _____ () C:\Users\PC\AppData\Local\MSGBOX.EXE
2014-10-09 21:12 - 2014-10-09 21:12 - 01101312 _____ (Farbar) C:\Users\PC\Plocha\FRST.exe
2014-10-09 21:12 - 2014-10-09 21:12 - 00112640 _____ (forum.viry.cz) C:\Users\PC\Plocha\FRSTLauncher.exe
2014-10-09 21:11 - 2014-10-09 21:11 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-09 21:11 - 2014-10-09 21:11 - 00000000 _____ () C:\Windows\setupact.log
2014-10-09 21:00 - 2014-10-09 21:00 - 00000028 _____ () C:\Users\PC\Plocha\Nový textový dokument.txt
2014-10-09 20:45 - 2014-10-09 20:51 - 00000000 ___RD () C:\Users\PC\Disk Google
2014-10-09 20:45 - 2014-10-09 20:45 - 00000000 ____D () C:\Users\PC\AppData\Local\CrashDumps
2014-10-09 20:41 - 2014-10-09 20:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-10-09 20:40 - 2014-10-09 20:40 - 00895120 _____ (Google Inc.) C:\Users\PC\Plocha\googledrivesync.exe
2014-10-06 21:23 - 2014-10-09 20:54 - 00045612 _____ () C:\Windows\WindowsUpdate.log
2014-09-29 21:42 - 2014-09-29 21:44 - 00000000 ____D () C:\Friends
2014-09-28 23:59 - 2014-09-28 23:59 - 00000000 ____D () C:\Windows\pss
2014-09-27 20:34 - 2014-10-09 20:36 - 00000340 _____ () C:\Windows\Tasks\DriverToolkit Autorun.job
2014-09-27 20:34 - 2014-09-27 20:34 - 00000000 ____D () C:\Program Files\Cisco
2014-09-27 20:31 - 2014-09-27 20:31 - 00000000 ____D () C:\Program Files\Broadcom
2014-09-27 20:31 - 2014-09-27 20:30 - 03866624 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv.dll
2014-09-27 20:31 - 2014-09-27 20:30 - 03555328 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui.dll
2014-09-27 20:31 - 2014-09-27 20:30 - 02707448 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\BCMWL6.SYS
2014-09-27 20:31 - 2014-09-27 20:30 - 00091376 _____ (Broadcom Corporation) C:\Windows\system32\bcmwlcoi.dll
2014-09-27 20:31 - 2014-09-27 20:30 - 00006656 _____ () C:\Windows\system32\bcmwlrc.dll
2014-09-27 20:15 - 2014-09-27 20:41 - 00000000 ____D () C:\Program Files\Easeware
2014-09-27 20:15 - 2014-09-27 20:36 - 00000400 _____ () C:\Windows\Tasks\DriverEasy Scheduled Scan.job
2014-09-27 20:15 - 2014-09-27 20:15 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Easeware
2014-09-27 20:13 - 2014-09-27 20:13 - 00000000 ____D () C:\Users\PC\AppData\Local\Deployment
2014-09-27 20:00 - 2014-09-27 20:00 - 00000000 ____D () C:\Users\PC\AppData\Local\DriverToolkit
2014-09-27 19:59 - 2014-10-09 21:16 - 01253961 _____ () C:\Windows\runSW.log
2014-09-27 19:59 - 2014-09-27 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Edimax Wireless LAN
2014-09-27 19:59 - 2014-09-27 19:59 - 00000000 ____D () C:\Program Files\Edimax
2014-09-27 19:59 - 2013-01-24 17:32 - 00430080 _____ (Realtek) C:\Windows\SwUSB.exe
2014-09-27 19:59 - 2012-12-14 15:54 - 00036864 ____N () C:\Windows\runSW.exe
2014-09-27 19:58 - 2014-09-27 19:58 - 00000000 ____D () C:\ProgramData\Informer Technologies, Inc
2014-09-27 19:35 - 2014-09-27 19:35 - 00000279 ____R () C:\YukonInstall.log
2014-09-27 19:35 - 2014-09-27 19:35 - 00000000 ____D () C:\Program Files\Marvell
2014-09-27 18:46 - 2014-09-27 18:46 - 00001024 _____ () C:\Users\PC\.rnd
2014-09-27 18:42 - 2014-09-27 18:42 - 00000046 _____ () C:\Windows\system32\Install.log
2014-09-27 18:28 - 2014-09-27 18:28 - 00000090 _____ () C:\Users\PC\AppData\Local\fusioncache.dat
2014-09-27 18:07 - 2014-09-27 18:13 - 00000000 ____D () C:\Users\PC\Plocha\Záloha záložek opera 12.16
2014-09-27 17:43 - 2014-09-27 17:43 - 00000803 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 24.lnk
2014-09-27 17:43 - 2014-09-27 17:43 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Opera Software
2014-09-27 17:43 - 2014-09-27 17:43 - 00000000 ____D () C:\Users\PC\AppData\Local\Opera Software

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-09 21:15 - 2011-09-05 17:35 - 00000000 ___RD () C:\Users\PC\Plocha
2014-10-09 21:14 - 2010-01-21 14:18 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Software Informer
2014-10-09 21:11 - 2006-11-02 14:45 - 00004528 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-09 21:11 - 2006-11-02 14:45 - 00004528 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-09 20:45 - 2010-01-05 17:23 - 00000000 ____D () C:\Users\PC
2014-10-09 20:41 - 2010-01-06 20:47 - 00000000 ____D () C:\Users\PC\AppData\Local\Google
2014-10-09 20:41 - 2010-01-06 20:47 - 00000000 ____D () C:\Program Files\Google
2014-10-09 20:41 - 2006-11-02 12:33 - 01468576 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-09 20:36 - 2013-08-10 15:58 - 00000000 ____D () C:\Users\PC\AppData\Roaming\OnTranslator
2014-10-09 20:36 - 2010-01-06 20:47 - 00000928 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-09 20:35 - 2006-11-02 14:58 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-09 20:31 - 2010-01-06 08:18 - 00000000 ____D () C:\Program Files\Hewlett-Packard
2014-10-09 20:31 - 2009-05-14 12:40 - 00002140 _____ () C:\Windows\bthservsdp.dat
2014-10-09 20:31 - 2006-11-02 14:58 - 00032588 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-06 23:22 - 2010-01-06 20:47 - 00000932 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-06 21:23 - 2010-02-09 20:45 - 00000000 ____D () C:\Users\PC\AppData\Roaming\uTorrent
2014-10-06 00:21 - 2010-01-05 17:23 - 00000680 _____ () C:\Users\PC\AppData\Local\d3d9caps.dat
2014-09-29 21:48 - 2014-07-25 21:18 - 00000000 ____D () C:\Users\PC\Plocha\Study English
2014-09-29 21:42 - 2012-12-27 23:04 - 00000000 ____D () C:\Program Files\The KMPlayer
2014-09-29 00:04 - 2012-05-28 16:10 - 00000000 ____D () C:\Program Files\uTorrent
2014-09-28 15:57 - 2010-01-06 08:18 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-09-27 20:57 - 2014-07-25 20:40 - 00000000 ____D () C:\Users\PC\Documents\Počítač
2014-09-27 20:49 - 2012-05-24 17:08 - 00000000 ____D () C:\Program Files\REALTEK
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\zh-TW
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\zh-CN
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\th-TH
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\sv-SE
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\sl-SI
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\sk-SK
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\ru-RU
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\ro-RO
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\pt-PT
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\pt-BR
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\nl-NL
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\nb-NO
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\lv-LV
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\lt-LT
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\ko-KR
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\ja-JP
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\it-IT
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\hu-HU
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\hr-HR
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\he-IL
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\fr-FR
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\fi-FI
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\et-EE
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\el-GR
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\de-DE
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\bg-BG
2014-09-27 20:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\ar-SA
2014-09-27 20:13 - 2010-06-03 18:39 - 00000000 ____D () C:\Users\PC\AppData\Local\Apps\2.0
2014-09-27 19:51 - 2010-01-21 14:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Software Informer
2014-09-27 19:51 - 2010-01-21 14:18 - 00000000 ____D () C:\Program Files\Software Informer
2014-09-27 18:48 - 2010-11-30 21:47 - 00000000 ____D () C:\Program Files\7-Zip
2014-09-27 18:47 - 2010-01-06 08:58 - 00000000 ____D () C:\Program Files\Common Files\Nero
2014-09-27 18:46 - 2010-01-06 08:59 - 00000188 _____ () C:\Windows\system32\MsiExec.exe.log
2014-09-27 18:42 - 2011-11-11 18:27 - 00000000 ____D () C:\ProgramData\Ulead Systems
2014-09-27 18:42 - 2011-11-11 18:26 - 00000000 ____D () C:\Program Files\Corel
2014-09-27 18:36 - 2010-01-06 08:30 - 00000000 ____D () C:\Program Files\Winamp
2014-09-27 18:31 - 2010-01-13 17:56 - 00000000 ____D () C:\Users\PC\AppData\Roaming\BSplayer
2014-09-27 18:29 - 2010-10-13 23:12 - 00000000 ____D () C:\ProgramData\ESTsoft
2014-09-27 18:28 - 2011-01-26 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-09-27 18:28 - 2011-01-26 20:01 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-09-27 18:19 - 2010-01-06 18:35 - 00000069 _____ () C:\Windows\NeroDigital.ini
2014-09-27 17:50 - 2010-01-06 18:35 - 00159232 _____ () C:\Users\PC\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-09-27 17:43 - 2010-01-06 18:46 - 00000000 ____D () C:\Program Files\Opera
2014-09-27 17:36 - 2010-02-02 12:54 - 00002675 _____ () C:\Users\PC\Plocha\Microsoft Office Word 2007.lnk
2014-09-22 08:41 - 2010-01-06 11:03 - 00231568 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-09-19 20:25 - 2010-01-06 09:02 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-16 22:20 - 2014-07-25 20:43 - 00000000 ____D () C:\Users\PC\Documents\Ostatní
2014-09-16 21:49 - 2011-10-24 13:07 - 00000000 ____D () C:\SOŠP Břeclav

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-09 20:45

==================== End Of Log ============================

ještě přidávám ten Addition

Otevřte poznámkový blok a zkopírujte do něj:

Start
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254896 2012-09-17] (Sun Microsystems, Inc.)
HKU\S-1-5-21-761669904-710429162-1290869662-1000\...\MountPoints2: {3e7619c6-5500-11df-9ead-0024814963b4} - I:\AutoTransfer.exe
HKU\S-1-5-21-761669904-710429162-1290869662-1000\...\MountPoints2: {61e11d78-930e-11df-8a11-00226462000f} - "I:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-761669904-710429162-1290869662-1000\...\MountPoints2: {9d1ce8b5-1f4f-11e1-b59d-00247e34eea8} - J:\LaunchU3.exe -a
HKU\S-1-5-21-761669904-710429162-1290869662-1000\...\MountPoints2: {e93ee49f-dcdd-11df-aef6-00247e34eea8} - I:\LaunchU3.exe -a
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=108602 ... 247e34eea8
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://search.icq.com/search/results.ph ... &ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
URLSearchHook: HKLM - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File
URLSearchHook: HKLM - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
URLSearchHook: HKCU - QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\PC\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
URLSearchHook: HKCU - (No Name) - {EEE6C35D-6118-11DC-9C72-001320C79847} - No File
URLSearchHook: HKCU - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
SearchScopes: HKLM - DefaultScope {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL =
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.as ... =CT2786678
SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?sr ... earchTerms}
SearchScopes: HKCU - DefaultScope {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL = http://search.qip.ru/search?query={searchTerms}&from=IE
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTer ... 247e34eea8
SearchScopes: HKCU - {5B291E6C-9A74-4034-971B-A4B007A0B315} URL = http://radiobar.toolbarhome.com/search. ... }&srch=dsp
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://search.icq.com/search/results.ph ... &ch_id=osd
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={2D8A ... 2012-05-31 21:11:27&v=10.0.0.7&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL = http://search.qip.ru/search?query={searchTerms}&from=IE
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.as ... =CT2786678
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?sr ... earchTerms}
BHO: No Name -> {2EECD738-5844-4a99-B4B6-146BF802613B} -> No File
BHO: Conduit Engine -> {30F9B915-B755-4826-820B-08FBA6BD249D} -> C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
BHO: RadioBar Toolbar -> {5B291E6C-9A74-4034-971B-A4B007A0B315} -> C:\Program Files\RadioBar\toolbar.ni.dll (IMEDIX WEB TECHNOLOGIES LTD.)
BHO: QIPBHO Class -> {95289393-33EA-4F8D-B952-483415B9C955} -> C:\Users\PC\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: uTorrentBar Toolbar -> {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} -> C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
Toolbar: HKLM - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
Toolbar: HKLM - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
Toolbar: HKCU - SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File
Toolbar: HKCU - RadioBar Toolbar - {5B291E6C-9A74-4034-971B-A4B007A0B315} - C:\Program Files\RadioBar\toolbar.ni.dll (IMEDIX WEB TECHNOLOGIES LTD.)
Toolbar: HKCU - uTorrentBar Toolbar - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
FF DefaultSearchEngine: uTorrentBar Customized Web Search
FF SearchEngineOrder.1: Search the web (Babylon)
FF SelectedSearchEngine: AVG Secure Search
FF Homepage: hxxp://search.babylon.com/?affID=108602 ... 247e34eea8
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.as ... =CTXXXX&q=
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin.gif
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin.src
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\qip-search.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml
FF Extension: Conduit Engine - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\engine@conduit.com [2011-07-23]
FF Extension: ICQ Toolbar - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-12-18]
FF Extension: uTorrentBar - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} [2014-08-30]
FF Extension: SweetPacks Toolbar for Firefox - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi [2011-04-19]
CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR HKLM\...\Chrome\Extension: [bejbohlohkkgompgecdcbbglkpjfjgdj] - C:\Users\PC\AppData\Local\Temp\crxB19A.tmp []
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-04-09]
S2 TinaKey; No ImagePath
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
Conduit Engine (HKLM\...\conduitEngine) (Version: - Conduit Ltd.) <==== ATTENTION
C:\Users\PC\AppData\Local\Temp
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 08-10-2014
Ran by PC at 2014-10-09 21:52:33 Run:1
Running from C:\Users\PC\Plocha
Loaded Profile: PC (Available profiles: PC & Administrator)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254896 2012-09-17] (Sun Microsystems, Inc.)
HKU\S-1-5-21-761669904-710429162-1290869662-1000\...\MountPoints2: {3e7619c6-5500-11df-9ead-0024814963b4} - I:\AutoTransfer.exe
HKU\S-1-5-21-761669904-710429162-1290869662-1000\...\MountPoints2: {61e11d78-930e-11df-8a11-00226462000f} - "I:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-761669904-710429162-1290869662-1000\...\MountPoints2: {9d1ce8b5-1f4f-11e1-b59d-00247e34eea8} - J:\LaunchU3.exe -a
HKU\S-1-5-21-761669904-710429162-1290869662-1000\...\MountPoints2: {e93ee49f-dcdd-11df-aef6-00247e34eea8} - I:\LaunchU3.exe -a
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=108602 ... 247e34eea8
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://search.icq.com/search/results.ph ... &ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
URLSearchHook: HKLM - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File
URLSearchHook: HKLM - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
URLSearchHook: HKCU - QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\PC\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
URLSearchHook: HKCU - (No Name) - {EEE6C35D-6118-11DC-9C72-001320C79847} - No File
URLSearchHook: HKCU - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
SearchScopes: HKLM - DefaultScope {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL =
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.as ... =CT2786678
SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?sr ... earchTerms}
SearchScopes: HKCU - DefaultScope {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL = http://search.qip.ru/search?query={searchTerms}&from=IE
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTer ... 247e34eea8
SearchScopes: HKCU - {5B291E6C-9A74-4034-971B-A4B007A0B315} URL = http://radiobar.toolbarhome.com/search. ... }&srch=dsp
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://search.icq.com/search/results.ph ... &ch_id=osd
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={2D8A ... 2012-05-31 21:11:27&v=10.0.0.7&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL = http://search.qip.ru/search?query={searchTerms}&from=IE
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.as ... =CT2786678
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?sr ... earchTerms}
BHO: No Name -> {2EECD738-5844-4a99-B4B6-146BF802613B} -> No File
BHO: Conduit Engine -> {30F9B915-B755-4826-820B-08FBA6BD249D} -> C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
BHO: RadioBar Toolbar -> {5B291E6C-9A74-4034-971B-A4B007A0B315} -> C:\Program Files\RadioBar\toolbar.ni.dll (IMEDIX WEB TECHNOLOGIES LTD.)
BHO: QIPBHO Class -> {95289393-33EA-4F8D-B952-483415B9C955} -> C:\Users\PC\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: uTorrentBar Toolbar -> {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} -> C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
Toolbar: HKLM - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
Toolbar: HKLM - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
Toolbar: HKCU - SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File
Toolbar: HKCU - RadioBar Toolbar - {5B291E6C-9A74-4034-971B-A4B007A0B315} - C:\Program Files\RadioBar\toolbar.ni.dll (IMEDIX WEB TECHNOLOGIES LTD.)
Toolbar: HKCU - uTorrentBar Toolbar - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
FF DefaultSearchEngine: uTorrentBar Customized Web Search
FF SearchEngineOrder.1: Search the web (Babylon)
FF SelectedSearchEngine: AVG Secure Search
FF Homepage: hxxp://search.babylon.com/?affID=108602 ... 247e34eea8
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.as ... =CTXXXX&q=
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin.gif
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin.src
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\qip-search.xml
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml
FF Extension: Conduit Engine - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\engine@conduit.com [2011-07-23]
FF Extension: ICQ Toolbar - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-12-18]
FF Extension: uTorrentBar - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} [2014-08-30]
FF Extension: SweetPacks Toolbar for Firefox - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi [2011-04-19]
CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR HKLM\...\Chrome\Extension: [bejbohlohkkgompgecdcbbglkpjfjgdj] - C:\Users\PC\AppData\Local\Temp\crxB19A.tmp []
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-04-09]
S2 TinaKey; No ImagePath
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
Conduit Engine (HKLM\...\conduitEngine) (Version: - Conduit Ltd.) <==== ATTENTION
C:\Users\PC\AppData\Local\Temp
End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
"HKU\S-1-5-21-761669904-710429162-1290869662-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3e7619c6-5500-11df-9ead-0024814963b4}" => Key deleted successfully.
"HKCR\CLSID\{3e7619c6-5500-11df-9ead-0024814963b4}" => Key not found.
"HKU\S-1-5-21-761669904-710429162-1290869662-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{61e11d78-930e-11df-8a11-00226462000f}" => Key deleted successfully.
"HKCR\CLSID\{61e11d78-930e-11df-8a11-00226462000f}" => Key not found.
"HKU\S-1-5-21-761669904-710429162-1290869662-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9d1ce8b5-1f4f-11e1-b59d-00247e34eea8}" => Key deleted successfully.
"HKCR\CLSID\{9d1ce8b5-1f4f-11e1-b59d-00247e34eea8}" => Key not found.
"HKU\S-1-5-21-761669904-710429162-1290869662-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e93ee49f-dcdd-11df-aef6-00247e34eea8}" => Key deleted successfully.
"HKCR\CLSID\{e93ee49f-dcdd-11df-aef6-00247e34eea8}" => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\ICQ Search => value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Search Bar => value deleted successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} => value deleted successfully.
HKLM\Software\Microsoft\Internet Explorer\URLSearchHooks\\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} => value deleted successfully.
"HKCR\CLSID\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}" => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{95289393-33EA-4F8D-B952-483415B9C955} => value deleted successfully.
"HKCR\CLSID\{95289393-33EA-4F8D-B952-483415B9C955}" => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{EEE6C35D-6118-11DC-9C72-001320C79847} => value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} => value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}" => Key deleted successfully.
"HKCR\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}" => Key deleted successfully.
"HKCR\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}" => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}" => Key deleted successfully.
"HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5B291E6C-9A74-4034-971B-A4B007A0B315}" => Key deleted successfully.
"HKCR\CLSID\{5B291E6C-9A74-4034-971B-A4B007A0B315}" => Key deleted successfully.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}" => Key deleted successfully.
"HKCR\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}" => Key deleted successfully.
"HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}" => Key deleted successfully.
"HKCR\CLSID\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}" => Key deleted successfully.
"HKCR\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}" => Key deleted successfully.
"HKCR\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}" => Key deleted successfully.
"HKCR\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}" => Key deleted successfully.
"HKCR\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5B291E6C-9A74-4034-971B-A4B007A0B315}" => Key deleted successfully.
"HKCR\CLSID\{5B291E6C-9A74-4034-971B-A4B007A0B315}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}" => Key deleted successfully.
"HKCR\CLSID\{95289393-33EA-4F8D-B952-483415B9C955}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
"HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}" => Key deleted successfully.
"HKCR\CLSID\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}" => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} => value deleted successfully.
"HKCR\CLSID\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}" => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{30F9B915-B755-4826-820B-08FBA6BD249D} => value deleted successfully.
"HKCR\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}" => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} => value deleted successfully.
"HKCR\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}" => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{5B291E6C-9A74-4034-971B-A4B007A0B315} => value deleted successfully.
"HKCR\CLSID\{5B291E6C-9A74-4034-971B-A4B007A0B315}" => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} => value deleted successfully.
"HKCR\CLSID\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}" => Key not found.
"HKCR\PROTOCOLS\Handler\skype-ie-addon-data" => Key deleted successfully.
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
Firefox DefaultSearchEngine deleted successfully.
Firefox SearchEngineOrder.1 deleted successfully.
Firefox SelectedSearchEngine deleted successfully.
Firefox homepage deleted successfully.
Firefox Keyword.URL deleted successfully.
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\conduit.xml => Moved successfully.
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-1.xml => Moved successfully.
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-2.xml => Moved successfully.
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-3.xml => Moved successfully.
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-4.xml => Moved successfully.
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-5.xml => Moved successfully.
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin-6.xml => Moved successfully.
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin.gif => Moved successfully.
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin.src => Moved successfully.
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\icqplugin.xml => Moved successfully.
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\qip-search.xml => Moved successfully.
Could not move "C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\searchplugins-backup" => Scheduled to move on reboot.
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\sweetim.xml => Moved successfully.
C:\Program Files\mozilla firefox\searchplugins\babylon.xml => Moved successfully.
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\engine@conduit.com => Moved successfully.
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} => Moved successfully.
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} => Moved successfully.
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi => Moved successfully.
C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll not found.
C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll not found.
C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll not found.
"HKLM\SOFTWARE\Google\Chrome\Extensions\bejbohlohkkgompgecdcbbglkpjfjgdj" => Key deleted successfully.
"C:\Users\PC\AppData\Local\Temp\crxB19A.tmp" => File/Directory not found.
"HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl" => Key deleted successfully.
C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx => Moved successfully.
TinaKey => Service deleted successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
Conduit Engine (HKLM\...\conduitEngine) (Version: - Conduit Ltd.) <==== ATTENTION => Error: No automatic fix found for this entry.

"C:\Users\PC\AppData\Local\Temp" directory move:

Could not move "C:\Users\PC\AppData\Local\Temp\AdobeARM.log" => Scheduled to move on reboot.
C:\Users\PC\AppData\Local\Temp\ArmUI.ini => Moved successfully.
C:\Users\PC\AppData\Local\Temp\au-descriptor-1.7.0_67-b01.xml => Moved successfully.
C:\Users\PC\AppData\Local\Temp\CProgram FilesOpera24.0.1558.64opera_autoupdate.download.lock => Moved successfully.
C:\Users\PC\AppData\Local\Temp\CProgram FilesOpera24.0.1558.64opera_autoupdate.metrics.lock => Moved successfully.
C:\Users\PC\AppData\Local\Temp\jusched.log => Moved successfully.
C:\Users\PC\AppData\Local\Temp\log3 => Moved successfully.
C:\Users\PC\AppData\Local\Temp\PC.bmp => Moved successfully.
C:\Users\PC\AppData\Local\Temp\tmp.feed => Moved successfully.
C:\Users\PC\AppData\Local\Temp\~231A.tmp => Moved successfully.
C:\Users\PC\AppData\Local\Temp\~2839.tmp => Moved successfully.
C:\Users\PC\AppData\Local\Temp\~DF2DA7.tmp => Moved successfully.
C:\Users\PC\AppData\Local\Temp\~DF6368.tmp => Moved successfully.
Could not move "C:\Users\PC\AppData\Local\Temp\~DF90AB.tmp" => Scheduled to move on reboot.
C:\Users\PC\AppData\Local\Temp\~E34D.tmp => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\bz2.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\gdi32.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\hashobjs_ext.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\kernel32.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\main.exe.manifest => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\mfc90.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\mfc90u.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\mfcm90.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\mfcm90u.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\msvcp100.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\msvcr100.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\psapi.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\pyexpat.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\pysqlite2._sqlite.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\python27.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\pythoncom27.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\PyWinTypes27.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\select.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\shell32.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\unicodedata.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32api.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32com.shell.shell.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32crypt.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32event.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32evtlog.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32file.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32gui.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32inet.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32pdh.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32pipe.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32process.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32profile.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32security.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32trace.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32ts.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32ui.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\win32wnet.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\windows._lib_cacheinvalidation.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\wx._animate.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\wx._controls_.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\wx._core_.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\wx._gdi_.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\wx._html2.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\wx._misc_.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\wx._windows_.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\wx._wizard.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\wxbase294u_net_vc90.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\wxbase294u_vc90.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\wxmsw294u_adv_vc90.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\wxmsw294u_core_vc90.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\wxmsw294u_html_vc90.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\wxmsw294u_webview_vc90.dll => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\_ctypes.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\_elementtree.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\_hashlib.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\_multiprocessing.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\_socket.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\_ssl.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\_win32sysloader.pyd => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\support\gen_py\__init__.py => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\mime\drive.mime.types => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\js\XMLHttpRequest.js => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\docs.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gdoc16.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gdoc256.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gdoc32.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gdoc48.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gdraw16.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gdraw256.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gdraw32.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gdraw48.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gform16.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gform256.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gform32.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gform48.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-glink16.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-glink256.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-glink32.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-glink48.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gsheet16.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gsheet256.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gsheet32.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gsheet48.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gslides16.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gslides256.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gslides32.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-gslides48.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-photos-logo.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-sync16.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-sync16.xpm => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-sync256.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-sync32.xpm => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\drive-sync64.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\exclaim.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\file.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\folder-mac.icns => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\folder-winseven.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\folder-winxp.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\folder.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\gdoc.icns => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\gdoc.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\gdraw.icns => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\gdraw.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\gform.icns => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\gform.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\glink.icns => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\glink.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\gnote.icns => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\gnote.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\gscript.icns => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\gscript.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\gsheet.icns => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\gsheet.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\gslides.icns => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\gslides.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\gtable.icns => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\gtable.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\image_resources.py => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\image_resources.pyo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate1-inverse.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate1-inverse_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate1.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate1_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate2-inverse.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate2-inverse_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate2.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate2_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate3-inverse.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate3-inverse_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate3.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate3_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate4-inverse.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate4-inverse_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate4.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate4_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate5-inverse.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate5-inverse_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate5.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate5_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate6-inverse.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate6-inverse_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate6.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate6_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate7-inverse.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate7-inverse_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate7.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate7_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate8-inverse.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate8-inverse_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate8.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-animate8_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-error-inverse.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-error-inverse_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-error.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-error_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-inactive-inverse.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-inactive-inverse_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-inactive.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-inactive_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-normal-inverse.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-normal-inverse_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-normal.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-normal_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-pause-inverse_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-paused-inverse.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-paused-inverse_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-paused.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\mac-paused_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_backups.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_backups_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_check.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_check_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_create.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_create_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_docs_16.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_down-arrow.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_down-arrow_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_drive-logo.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_drive-logo_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_error.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_error_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_file_32.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_folder.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_folder_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_folder_32.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_google-logo-gray.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_google-logo-gray_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_link.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_link_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_pause.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_pause_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_resume.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_resume_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_settings.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_settings_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_share.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_share_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_sheets_16.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_slides_16.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_sm_warning_red.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_sm_warning_red_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_sm_warning_yellow.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_sm_warning_yellow_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_sync-paused.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_sync.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_sync_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_sync_anim.gif => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_sync_anim_2x.gif => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_sync_anim_grey.gif => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_up-arrow.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_up-arrow_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_warning.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_warning_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_warning_color.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_warning_color_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_web.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\menu_web_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\setup1.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\setup2-mac.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\setup2-win.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\setup3-bottom.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\setup3-right.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\setup4-mac.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\setup4-win.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\setup5-mac.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\setup5-win.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\sharedfolder-mac.icns => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\sharedfolder-winseven.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\sharedfolder-winxp.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\shareguyicon.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\sheets.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\slides.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\sync.icns => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\sync.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\sync.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\sync_128.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\sync_menu_done.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\sync_menu_done_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\sync_menu_error.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\sync_menu_error_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\sync_menu_syncing.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\sync_menu_syncing_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\toprighticon.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\warning-hdpi_2x.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\warning_128.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\warning_256.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\warning_64.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\win-animate1.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\win-animate2.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\win-animate3.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\win-animate4.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\win-animate5.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\win-animate6.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\win-animate7.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\win-animate8.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\win-normal.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\win7-error.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\win7-inactive.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\win7-paused.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\winxp-error.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\winxp-inactive.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\winxp-paused.png => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\__init__.py => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\__init__.pyo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\overlays\Blacklisted.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\overlays\Shared.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\overlays\Synced.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\images\overlays\Syncing.ico => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\zh_TW\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\zh_HK\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\zh_CN\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\zh-Hant\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\zh-Hans\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\zh\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\vi\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\uk\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\tr\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\th\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\te\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\ta\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\sv\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\sr\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\sl\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\sk\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\ru\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\ro\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\pt_PT\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\pt_BR\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\pt\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\pl\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\no\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\nl\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\mr\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\ml\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\lv\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\lt\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\ko\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\kn\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\ja\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\it\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\id\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\hu\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\hr\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\hi\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\he\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\gu\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\fr\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\fil\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\fi\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\es\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\en_US\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\en_GB\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\en\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\el\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\de\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\da\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\cs\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\ca\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\bn\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\bg\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\i18n\locale\ar\LC_MESSAGES\syncclient.mo => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\fonts\OpenSans-Light.ttf => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\fonts\Roboto-Bold.ttf => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\fonts\Roboto-Regular.ttf => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\fonts\Roboto-Thin.ttf => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\chrome_ext\apdfllckaahabafndbhieahigkjlhalf_live.crx => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\chrome_ext\com.google.drive.nativeproxy.json.template => Moved successfully.
C:\Users\PC\AppData\Local\Temp\_MEI42562\resources\chrome_ext\nknebiagdodnminbdpflhpkgfpeijdbf_live.crx => Moved successfully.
C:\Users\PC\AppData\Local\Temp\Temp1_7tmp00.zip\install.rdf => Moved successfully.
Could not move "C:\Users\PC\AppData\Local\Temp" directory. => Scheduled to move on reboot.


=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-10-09 22:02:18)<=

C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\searchplugins\searchplugins-backup => Is moved successfully.
C:\Users\PC\AppData\Local\Temp\AdobeARM.log => Is moved successfully.
C:\Users\PC\AppData\Local\Temp\~DF90AB.tmp => Is moved successfully.
C:\Users\PC\AppData\Local\Temp => Moved successfully.

==== End of Fixlog ====

Smazáno. Nastala nějaká změna?

ne, bohužel

Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

log

Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

Firefox::
FF - ProfilePath - c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\9cty066g.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.1&q=
FF - ExtSQL: !HIDDEN! 2010-01-20 01:11; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=108602&tt=290312_bexdll
FF - user.js: extensions.BabylonToolbar_i.babExt -
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar_i.id - 7cfae64700000000000000247e34eea8
FF - user.js: extensions.BabylonToolbar_i.hardId - 7cfae64700000000000000247e34eea8
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15438
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1723:40
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - base
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst

Regnull::
[HKEY_USERS\S-1-5-21-761669904-710429162-1290869662-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
[HKEY_USERS\S-1-5-21-761669904-710429162-1290869662-1000\Software\SecuROM\License information*]

Reglock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spsutí a vykoná příkazy ze skriptu.

druhý log

Smazáno. CF odinstalujte pomocí T-Cleaneru: http://vyosek.ic.cz/pro_usery/T-Cleaner.exe . Nastala nějaká změna?

Možná je počítač rychlejší, hlavně po zapnutí to netrvá tak dlouho, jak před tím a je možné dřív začít pracovat. To načítací kolečko, pořád načítá, ale na to by se dalo zvyknout, každopádně díky.

Co máte spuštěno, když ta myš načítá? Povypínejte vše, co je možné a zjistíte, co to způsobuje.