VIRY.CZ

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:12-10-2015
Ran by think (administrator) on THINK-PC (13-10-2015 14:08:40)
Running from C:\Users\think\Desktop
Loaded Profiles: think & Administrator (Available Profiles: think & Administrator)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ZOOM\TpScrex.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\AcSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
() C:\ProgramData\MobileBrServ\mbbService.exe
(pdfforge GbR) C:\Program Files\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files\PDF Architect\ConversionService.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\SvcGuiHlpr.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version6\TeamViewer.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\TrackPoint\tp4serv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Epson Software\Event Manager\EEventManager.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FATIJCE.EXE
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe
(Lenovo Group Limited) C:\Program Files\ThinkPad\Utilities\SCHTASK.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Avanquest Software ) C:\Program Files\Digital Line Detect\DLG.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Intel Corporation) C:\Program Files\Common Files\Intel\Privacy Icon\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files\Intel\AMT\LMS.exe
(Intel Corporation) C:\Program Files\Common Files\Intel\Privacy Icon\UNS\UNS.exe
(Lenovo) C:\Program Files\ThinkPad\Utilities\PWMDBSVC.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTStackServer.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files\Evernote\Evernote\EvernoteClipper.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_19_0_0_185_ActiveX.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(eM Client, Inc.) C:\Program Files\eM Client\MailClient.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [342312 2013-08-21] (Lenovo.)
HKLM\...\Run: [TrackPointSrv] => C:\Program Files\Lenovo\TrackPoint\tp4serv.exe [95264 2011-11-01] (Lenovo Group Limited)
HKLM\...\Run: [picon] => C:\Program Files\Common Files\Intel\Privacy Icon\PIconStartup.exe [111640 2010-02-04] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [307768 2009-11-19] ()
HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [60920 2013-05-29] (Lenovo Group Limited)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2011-09-27] (Apple Inc.)
HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-20] (CyberLink)
HKLM\...\Run: [AcWin7Hlpr] => C:\Program Files\Lenovo\Access Connections\AcTBenabler.exe [63728 2015-06-08] (Lenovo)
HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [PWMTRV] => rundll32 "C:\Program Files\ThinkPad\Utilities\PWMTR32V.DLL",PwrMgrBkGndMonitor
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [782008 2015-08-30] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-09-10] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIJCE.EXE [249440 2012-02-29] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\Run: [GUDelayStartup] => C:\Program Files\Glary Utilities 5\StartupManager.exe [37152 2015-08-17] (Glarysoft Ltd)
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\Run: [HP Deskjet 3520 series (NET)] => C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [1837672 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [3579120 2015-05-21] (Disc Soft Ltd)
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [833240 2014-12-23] (ZONER software)
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\RunOnce: [Application Restart #1] => C:\Program Files\Google\Chrome\Application\chrome.exe [815944 2015-09-24] (Google Inc.)
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\MountPoints2: {0d59b097-7e44-11e3-9465-c417fef4bb80} - E:\AutoRun.exe
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\MountPoints2: {2b7b2443-d69f-11e4-b052-c417fef4bb80} - F:\AutoRun.exe
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\MountPoints2: {3ccac1ed-0f5f-11e4-be4f-c417fef4bb80} - F:\LenovoUsbDriver.exe
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\MountPoints2: {44bef74e-53e2-11e5-88e2-0026c6b20dae} - H:\AutoRun.exe
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\MountPoints2: {4a933143-c297-11e4-a15f-c417fef4bb80} - F:\AutoRun.exe
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\MountPoints2: {4a933146-c297-11e4-a15f-c417fef4bb80} - F:\AutoRun.exe
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\MountPoints2: {542514c1-f25c-11e3-8271-c417fef4bb80} - F:\AutoRun.exe
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\MountPoints2: {542514c8-f25c-11e3-8271-c417fef4bb80} - E:\AutoRun.exe
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\MountPoints2: {5425157d-f25c-11e3-8271-c417fef4bb80} - F:\AutoRun.exe
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\MountPoints2: {5425166f-f25c-11e3-8271-c417fef4bb80} - H:\AutoRun.exe
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\MountPoints2: {5e9ee5a7-a517-11e4-a4a7-00262df0eeb9} - F:\AutoRun.exe
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\MountPoints2: {a15677e1-63bf-11e3-90a1-c417fef4bb80} - E:\AutoRun.exe
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\MountPoints2: {a15677e5-63bf-11e3-90a1-c417fef4bb80} - E:\AutoRun.exe
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\MountPoints2: {a15677f1-63bf-11e3-90a1-c417fef4bb80} - F:\AutoRun.exe
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\MountPoints2: {b098a6cb-e690-11e3-a5d0-c417fef4bb80} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\Common_Handset_USB_Driver.exe
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\MountPoints2: {c6cef49c-1321-11e5-a11d-c417fef4bb80} - H:\SETUP.EXE
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [878592 2010-11-20] (Microsoft Corporation)
Lsa: [Notification Packages] scecli ACGina
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-07-29] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-07-29] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-07-29] (Google)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk [2012-04-25]
ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files\Digital Line Detect\DLG.exe (Avanquest Software )
BootExecute: autocheck autochk *

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{4ABA8A0D-31F5-4C7B-9823-40AB982B465F}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{7CC7301A-5358-4A69-84DE-B4B0044F7BFB}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{AD6FB339-3421-4216-BD1E-3C69848D73AE}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{F5BAEB36-614E-4333-9265-D431F9FE020B}: [DhcpNameServer] 192.168.8.1 192.168.8.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Google.com
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.cz/?gws_rd=ssl
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKLM -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-19 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-20 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2614697979-3659547987-3114649223-1000 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}&rlz=
SearchScopes: HKU\S-1-5-21-2614697979-3659547987-3114649223-1000 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}&rlz=
BHO: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files\PDF Architect\PDFIEHelper.dll [2013-01-09] (pdfforge GbR)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-18] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files\Evernote\Evernote\EvernoteIE.dll [2015-03-03] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2012-01-25] (SEIKO EPSON CORPORATION)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-27] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: No Name -> {B97F523B-C6A0-F98E-EB46-CDBBB1DB6F47} -> => No File
BHO: Internet Panel -> {CE7C3CF0-4B15-11D1-ABED-709549C10000} -> C:\Program Files\NetSoftware\IEHelper.dll [2013-04-18] (Gemius)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08] (Oracle Corporation)
Toolbar: HKLM - No Name - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - No File
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2012-01-25] (SEIKO EPSON CORPORATION)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-27] (Google Inc.)
DPF: {CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\think\AppData\Roaming\Mozilla\Firefox\Profiles\5gpkw1vx.default
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF Session Restore: -> is enabled.
FF Homepage:
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (GARMIN Corp.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-10-08] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-10-08] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-10-08] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2014-06-27] (globalUpdate)
FF Plugin: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2014-06-27] (globalUpdate)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-18] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-18] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\think\AppData\Roaming\Mozilla\Firefox\Profiles\5gpkw1vx.default\user.js [2014-04-28]
FF Extension: Torntv V9.0 - C:\Users\think\AppData\Roaming\Mozilla\Firefox\Profiles\5gpkw1vx.default\Extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com [2014-06-27]
FF Extension: Total-1.8 - C:\Users\think\AppData\Roaming\Mozilla\Firefox\Profiles\5gpkw1vx.default\Extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com [2014-06-27]
FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt [2013-01-16]
FF HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\...\Firefox\Extensions: [gemgecko@gemius.com] - C:\Program Files\NetSoftware\gemgecko_ext
FF Extension: Výzkum NetMonitor - C:\Program Files\NetSoftware\gemgecko_ext [2012-06-18]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.cz/
CHR StartupUrls: Default -> "hxxp://www.google.cz/"
CHR Profile: C:\Users\think\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Angry Birds) - C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2013-12-23]
CHR Extension: (Dokumenty Google) - C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-23]
CHR Extension: (Disk Google) - C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-23]
CHR Extension: (YouTube) - C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-29]
CHR Extension: (Vyhledávání Google) - C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-29]
CHR Extension: (Avira Browser Safety) - C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-07-13]
CHR Extension: (Dokumenty Google offline) - C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-17]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2014-11-06]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Gmail) - C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-29]
CHR Extension: () - C:\Users\think\AppData\Local\Total Builder\Component [2015-06-29]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\think\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-08-02]
CHR HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jmlmanpnnbnpabnonijjmnmplnbfcgbf] - C:\Program Files\NetSoftware\chromegem.crx [2012-06-18]
CHR HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AcPrfMgrSvc; C:\Program Files\Lenovo\Access Connections\AcPrfMgrSvc.exe [133360 2015-06-08] (Lenovo)
R2 AcSvc; C:\Program Files\Lenovo\Access Connections\AcSvc.exe [276720 2015-06-08] (Lenovo)
S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [461672 2015-08-30] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [461672 2015-08-30] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-08-30] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [240872 2015-09-10] (Avira Operations GmbH & Co. KG)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1026288 2015-05-21] (Disc Soft Ltd)
R2 EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
S4 EpsonCustomerResearchParticipation; C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe [581184 2013-09-05] (SEIKO EPSON CORPORATION)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc.exe [122000 2011-12-12] (Seiko Epson Corporation)
S2 globalUpdate; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-06-27] (globalUpdate) [File not signed] <==== ATTENTION
S3 globalUpdatem; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-06-27] (globalUpdate) [File not signed] <==== ATTENTION
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 LENOVO.CAMMUTE; C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe [44024 2013-05-29] (Lenovo Group Limited)
S2 LENOVO.MICMUTE; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [110128 2014-05-27] (Lenovo Group Limited)
R2 LENOVO.TPKNRSVC; C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe [62456 2013-05-29] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [127336 2011-07-12] (Lenovo Group Limited)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [239696 2013-07-23] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)
R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1324104 2013-01-09] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [795208 2013-01-09] (pdfforge GbR)
S3 PwmEWSvc; C:\Program Files\ThinkPad\Utilities\PWMEWSVC.EXE [1664808 2013-09-03] (Lenovo Group Limited)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [22008 2015-07-01] ()
R2 TPHKLOAD; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [116208 2014-06-10] (Lenovo Group Limited)
R2 UNS; C:\Program Files\Common Files\Intel\Privacy Icon\UNS\UNS.exe [2058776 2010-02-04] (Intel Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108448 2015-07-25] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136728 2015-07-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2015-05-05] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-10] (Avira Operations GmbH & Co. KG)
R0 Bhbase; C:\Windows\System32\drivers\Bhbase.sys [47456 2014-03-11] (Baidu, Inc.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [25016 2015-06-15] (Disc Soft Ltd)
S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [17472 2015-08-23] (Glarysoft Ltd)
S3 leusbser; C:\Windows\System32\DRIVERS\leusbser.sys [201216 2013-08-01] (QUALCOMM Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-06-18] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)
R1 MpKsl3ee9a263; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{58722D82-1831-4B8E-BFA3-6067EFE06482}\MpKsl3ee9a263.sys [39168 2015-10-13] (Microsoft Corporation)
R3 NETwNs32; C:\Windows\System32\DRIVERS\NETwNs32.sys [7522304 2011-10-31] (Intel Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [31848 2015-06-16] (Avira Operations GmbH & Co. KG)
R3 Tp4Track; C:\Windows\System32\DRIVERS\tp4track.sys [24872 2011-11-01] (Lenovo Group Limited)
S3 BprotectEx; \??\C:\Windows\System32\drivers\BprotectEx.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_cdcecm; system32\DRIVERS\ew_jucdcecm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-13 14:09 - 2015-10-13 14:09 - 00061950 _____ C:\Users\think\Desktop\RSIT info.txt
2015-10-13 14:08 - 2015-10-13 14:09 - 00032196 _____ C:\Users\think\Desktop\FRST.txt
2015-10-13 14:08 - 2015-10-13 14:08 - 00000000 ____D C:\FRST
2015-10-13 14:06 - 2015-10-13 14:07 - 01699840 _____ (Farbar) C:\Users\think\Desktop\FRST.exe
2015-10-13 14:06 - 2015-10-13 14:06 - 00074236 _____ C:\Users\think\Desktop\RSIT.txt
2015-10-13 13:56 - 2015-10-13 13:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-10-13 13:56 - 2015-10-13 13:56 - 00000000 ____D C:\Program Files\Common Files\Skype
2015-10-13 13:45 - 2015-10-13 13:59 - 00000000 ____D C:\rsit
2015-10-13 13:45 - 2015-10-13 13:58 - 00000000 ____D C:\Program Files\trend micro
2015-10-12 08:20 - 2015-10-12 08:20 - 00000110 ____H C:\Users\think\Desktop\chrome reklama.jpg.uid-zps
2015-10-11 19:01 - 2015-10-11 19:01 - 00051200 _____ C:\Users\think\Desktop\DNS Kalman_Petr.xls
2015-10-03 22:01 - 2015-10-03 22:01 - 00000000 ____D C:\Users\think\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zařízení Bluetooth
2015-10-03 20:31 - 2015-10-13 12:44 - 00000840 _____ C:\Windows\setupact.log
2015-10-03 20:31 - 2015-10-03 20:31 - 00000000 _____ C:\Windows\setuperr.log
2015-09-27 18:12 - 2015-08-18 03:14 - 00344168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-09-27 18:12 - 2015-08-15 07:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-09-27 18:12 - 2015-08-15 07:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-09-27 18:12 - 2015-08-15 07:40 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-09-27 18:12 - 2015-08-15 07:39 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-09-27 18:12 - 2015-08-15 07:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-09-27 18:12 - 2015-08-15 07:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-09-27 18:12 - 2015-08-15 07:29 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-09-27 18:12 - 2015-08-15 07:29 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-09-27 18:12 - 2015-08-15 07:29 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-09-27 18:12 - 2015-08-15 07:24 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-27 18:12 - 2015-08-15 07:21 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-09-27 18:12 - 2015-08-15 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-27 18:12 - 2015-08-15 07:14 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-09-27 18:12 - 2015-08-15 07:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-09-27 18:12 - 2015-08-15 07:02 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-09-27 18:12 - 2015-08-15 07:01 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-09-27 18:12 - 2015-08-15 06:43 - 01951232 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-09-27 18:12 - 2015-08-15 06:39 - 01310720 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-09-27 18:12 - 2015-08-15 06:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-09-27 18:11 - 2015-08-15 08:06 - 19856896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-09-27 18:11 - 2015-08-15 07:40 - 00504832 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-09-27 18:11 - 2015-08-15 07:39 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-09-27 18:11 - 2015-08-15 07:38 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-09-27 18:11 - 2015-08-15 07:35 - 02279424 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-09-27 18:11 - 2015-08-15 07:30 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-09-27 18:11 - 2015-08-15 07:29 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-09-27 18:11 - 2015-08-15 07:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-09-27 18:11 - 2015-08-15 07:11 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-09-27 18:11 - 2015-08-15 07:10 - 04520448 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-09-27 18:11 - 2015-08-15 07:04 - 12857344 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-09-27 18:11 - 2015-08-15 07:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-09-27 18:05 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-09-27 18:05 - 2015-08-27 19:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-09-27 18:05 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-09-27 18:05 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-09-27 18:05 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-09-27 18:05 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-09-27 18:04 - 2015-08-26 19:56 - 02953728 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-09-27 18:04 - 2015-08-26 19:56 - 02061824 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-09-27 18:04 - 2015-08-26 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-09-27 18:04 - 2015-08-26 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-09-27 18:04 - 2015-08-26 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-09-27 18:04 - 2015-08-26 19:56 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-09-27 18:04 - 2015-08-26 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-09-27 18:04 - 2015-08-26 19:55 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-09-27 18:04 - 2015-08-26 19:55 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-09-27 18:04 - 2015-08-26 19:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-09-27 18:04 - 2015-08-26 19:55 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-09-27 18:04 - 2015-08-05 19:41 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-27 18:04 - 2015-08-04 19:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-09-27 18:04 - 2015-08-04 19:47 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-09-27 18:04 - 2015-08-04 19:47 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-09-27 18:04 - 2015-08-04 19:46 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-09-27 18:04 - 2015-08-04 19:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-09-27 18:04 - 2015-08-04 18:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-09-27 18:03 - 2015-07-22 19:57 - 03989952 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-09-27 18:03 - 2015-07-22 19:57 - 03934656 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-09-27 18:03 - 2015-07-22 19:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-09-27 18:03 - 2015-07-22 19:53 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-09-27 18:03 - 2015-07-22 19:53 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-09-27 18:03 - 2015-07-22 19:53 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-09-27 18:03 - 2015-07-22 19:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-09-27 18:03 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-09-27 18:03 - 2015-07-22 19:53 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-09-27 18:03 - 2015-07-22 19:53 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-09-27 18:03 - 2015-07-22 19:53 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-09-27 18:03 - 2015-07-22 19:53 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-09-27 18:03 - 2015-07-22 19:52 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-09-27 18:03 - 2015-07-22 18:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-09-27 18:02 - 2015-07-22 19:57 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-09-27 18:02 - 2015-07-22 19:57 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-09-27 18:02 - 2015-07-22 19:53 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-09-27 18:02 - 2015-07-22 19:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-09-27 18:02 - 2015-07-22 19:53 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-09-27 18:02 - 2015-07-22 19:53 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-09-27 18:02 - 2015-07-22 19:53 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-09-27 18:02 - 2015-07-22 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-09-27 18:02 - 2015-07-22 19:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-09-27 18:02 - 2015-07-22 19:53 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-09-27 18:02 - 2015-07-22 19:53 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-09-27 18:02 - 2015-07-22 19:53 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-09-27 18:02 - 2015-07-22 19:52 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-09-27 18:02 - 2015-07-22 19:52 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-09-27 18:02 - 2015-07-22 19:52 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-09-27 18:02 - 2015-07-22 19:47 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-09-27 18:02 - 2015-07-22 19:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-09-27 18:02 - 2015-07-22 19:42 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-09-27 18:02 - 2015-07-22 19:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-09-27 18:02 - 2015-07-22 18:34 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-09-27 18:02 - 2015-07-22 18:34 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-09-27 18:02 - 2015-07-22 18:33 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-09-23 22:49 - 2015-06-25 11:48 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-09-23 22:49 - 2015-06-25 11:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-09-23 22:49 - 2015-06-25 11:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-09-23 22:40 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-09-23 22:40 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-23 22:40 - 2015-09-02 04:48 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-09-23 22:40 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-09-23 22:40 - 2015-09-02 03:36 - 02384896 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-09-23 22:40 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-23 22:22 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-09-23 22:22 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-09-21 21:47 - 2015-09-21 21:49 - 00000000 ____D C:\Users\think\Desktop\Counter-Strike 1.6

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-13 13:59 - 2012-09-10 06:39 - 00000940 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-13 13:57 - 2012-06-26 23:01 - 00000000 ____D C:\Users\think\AppData\Roaming\Skype
2015-10-13 13:56 - 2013-08-05 16:49 - 00000000 ___RD C:\Program Files\Skype
2015-10-13 13:56 - 2012-06-26 23:01 - 00000000 ____D C:\ProgramData\Skype
2015-10-13 13:45 - 2014-06-27 13:45 - 00001418 _____ C:\Windows\Tasks\5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-7.job
2015-10-13 13:43 - 2012-04-25 17:06 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-10-13 13:41 - 2014-06-27 13:41 - 00001430 _____ C:\Windows\Tasks\cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-7.job
2015-10-13 13:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2015-10-13 13:20 - 2013-02-01 20:25 - 00000000 ____D C:\Users\think\AppData\Roaming\eM Client
2015-10-13 13:20 - 2013-02-01 20:19 - 00000890 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eM Client.lnk
2015-10-13 13:20 - 2013-02-01 20:19 - 00000000 ____D C:\Program Files\eM Client
2015-10-13 12:57 - 2012-04-25 13:43 - 01560631 _____ C:\Windows\WindowsUpdate.log
2015-10-13 12:54 - 2009-07-14 06:34 - 00032224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-13 12:54 - 2009-07-14 06:34 - 00032224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-13 12:49 - 2010-11-20 23:01 - 01583226 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-13 12:47 - 2014-07-13 16:28 - 00000000 ____D C:\ProgramData\Package Cache
2015-10-13 12:45 - 2014-06-27 13:46 - 00002332 _____ C:\Windows\Tasks\5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-4.job
2015-10-13 12:45 - 2014-06-27 13:46 - 00001486 _____ C:\Windows\Tasks\5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-1.job
2015-10-13 12:45 - 2014-06-27 13:46 - 00001402 _____ C:\Windows\Tasks\5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-5_user.job
2015-10-13 12:45 - 2014-06-27 13:46 - 00001382 _____ C:\Windows\Tasks\5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-5.job
2015-10-13 12:45 - 2014-06-27 13:46 - 00001292 _____ C:\Windows\Tasks\5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-2.job
2015-10-13 12:45 - 2014-06-27 13:45 - 00003432 _____ C:\Windows\Tasks\5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-11.job
2015-10-13 12:45 - 2014-06-27 13:45 - 00002750 _____ C:\Windows\Tasks\5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-3.job
2015-10-13 12:45 - 2014-06-27 13:45 - 00001478 _____ C:\Windows\Tasks\5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-6.job
2015-10-13 12:45 - 2014-06-27 13:42 - 00002236 _____ C:\Windows\Tasks\cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-4.job
2015-10-13 12:45 - 2014-06-27 13:42 - 00001498 _____ C:\Windows\Tasks\cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-1.job
2015-10-13 12:45 - 2014-06-27 13:42 - 00001410 _____ C:\Windows\Tasks\cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-5_user.job
2015-10-13 12:45 - 2014-06-27 13:42 - 00001390 _____ C:\Windows\Tasks\cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-5.job
2015-10-13 12:45 - 2014-06-27 13:42 - 00001284 _____ C:\Windows\Tasks\cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-2.job
2015-10-13 12:45 - 2014-06-27 13:41 - 00003436 _____ C:\Windows\Tasks\cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-11.job
2015-10-13 12:45 - 2014-06-27 13:41 - 00001490 _____ C:\Windows\Tasks\cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-6.job
2015-10-13 12:45 - 2014-06-27 13:41 - 00000898 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-10-13 12:45 - 2013-02-01 14:07 - 00000428 ____H C:\Windows\Tasks\schedule!1143840799.job
2015-10-13 12:45 - 2012-09-10 06:39 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-13 12:45 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-12 20:50 - 2014-06-27 13:41 - 00000902 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-10-12 14:07 - 2014-07-13 16:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-10-09 21:03 - 2014-12-28 07:02 - 00000000 ____D C:\Users\think\Desktop\Nový Zéland
2015-10-09 00:32 - 2015-04-10 00:08 - 00000000 ___SD C:\Windows\system32\GWX
2015-10-06 22:01 - 2013-03-26 15:54 - 00000000 ____D C:\Users\think\AppData\Local\CrashDumps
2015-09-30 22:05 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2015-09-28 21:45 - 2012-04-25 17:06 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-09-28 21:45 - 2012-04-25 17:06 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-09-27 22:29 - 2012-04-25 17:21 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-09-27 22:29 - 2009-07-14 04:04 - 00000580 _____ C:\Windows\win.ini
2015-09-27 22:25 - 2013-07-12 09:19 - 00000000 ____D C:\Windows\system32\MRT
2015-09-27 17:41 - 2009-07-14 06:33 - 00440392 _____ C:\Windows\system32\FNTCACHE.DAT
2015-09-23 21:48 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2015-09-21 21:51 - 2012-12-24 21:00 - 00000000 ____D C:\Users\think\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-09-21 21:26 - 2012-04-25 17:13 - 00000000 ____D C:\Users\think\AppData\Local\Google

==================== Files in the root of some directories =======

2015-01-05 09:55 - 2015-05-04 18:27 - 0003584 _____ () C:\Users\think\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-10-04 12:20 - 2014-05-15 19:53 - 0007610 _____ () C:\Users\think\AppData\Local\resmon.resmoncfg
2013-10-16 09:29 - 2013-10-16 09:29 - 0000057 _____ () C:\ProgramData\Ament.ini

Some files in TEMP:
====================
C:\Users\think\AppData\Local\Temp\avgnt.exe
C:\Users\think\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-10-11 20:13

==================== End of FRST.txt ============================

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Po spusteni probehne stazeni databaze
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner[C?].txt, ten sem vlozte

# AdwCleaner v5.013 - Logfile created 13/10/2015 at 22:45:15
# Updated 09/10/2015 by Xplode
# Database : 2015-10-09.3 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x86)
# Username : think - THINK-PC
# Running from : C:\Users\think\Desktop\adwcleaner_5.013.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : globalUpdate
[-] Service Deleted : globalUpdatem

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\globalUpdate
[-] Folder Deleted : C:\Program Files\goforfiles
[-] Folder Deleted : C:\Program Files\Torntv V9.0
[-] Folder Deleted : C:\Users\Administrator\AppData\Roaming\iSafe
[-] Folder Deleted : C:\Users\think\AppData\Local\globalUpdate
[-] Folder Deleted : C:\Users\think\AppData\Roaming\eCyber
[-] Folder Deleted : C:\Users\think\AppData\Roaming\goforfiles
[-] Folder Deleted : C:\Users\think\AppData\Roaming\iSafe
[-] Folder Deleted : C:\Users\think\AppData\Roaming\OpenCandy
[-] Folder Deleted : C:\Users\think\AppData\Roaming\pdfforge
[-] Folder Deleted : C:\Users\think\AppData\Roaming\RHEng
[-] Folder Deleted : C:\Users\think\AppData\Roaming\Mozilla\Firefox\Profiles\5gpkw1vx.default\Extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com
[-] Folder Deleted : C:\Users\think\AppData\Roaming\Mozilla\Firefox\Profiles\5gpkw1vx.default\Extensions\staged\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com

***** [ Files ] *****

[-] File Deleted : C:\Program Files\Mozilla Firefox\browser\searchplugins\yahoo.xml
[-] File Deleted : C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.superfish.com_0.localstorage-journal
[-] File Deleted : C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxps_www.superfish.com_0.localstorage-journal
[-] File Deleted : C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage
[-] File Deleted : C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage-journal
[-] File Deleted : C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_hdapp1008-a.akamaihd.net_0.localstorage
[-] File Deleted : C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_hdapp1008-a.akamaihd.net_0.localstorage-journal
[-] File Deleted : C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
[-] File Deleted : C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
[-] File Deleted : C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage
[-] File Deleted : C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal
[-] File Deleted : C:\Users\think\AppData\Roaming\Mozilla\Firefox\Profiles\5gpkw1vx.default\user.js

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : BrowserDefendert
[-] Task Deleted : globalUpdateUpdateTaskMachineCore
[-] Task Deleted : globalUpdateUpdateTaskMachineUA
[-] Task Deleted : GoforFilesUpdate
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-1
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-11
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-2
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-3
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-4
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-5
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-5_user
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-6
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-7
[-] Task Deleted : cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-1
[-] Task Deleted : cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-11
[-] Task Deleted : cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-2
[-] Task Deleted : cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-4
[-] Task Deleted : cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-5
[-] Task Deleted : cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-5_user
[-] Task Deleted : cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-6
[-] Task Deleted : cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-7
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-1
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-11
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-2
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-3
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-4
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-5
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-5_user
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-6
[-] Task Deleted : 5549b7ed-75c1-4594-84cd-2da2fd4c6cd6-7
[-] Task Deleted : cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-1
[-] Task Deleted : cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-11
[-] Task Deleted : cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-2
[-] Task Deleted : cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-4
[-] Task Deleted : cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-5
[-] Task Deleted : cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-5_user
[-] Task Deleted : cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-6
[-] Task Deleted : cb039ecc-1c36-41c4-bc7c-6f5fdea92cd6-7
[-] Task Deleted : globalUpdateUpdateTaskMachineCore
[-] Task Deleted : globalUpdateUpdateTaskMachineUA

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Classes\iLivid.torrent
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\S
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
[-] Key Deleted : HKLM\System\CurrentControlSet\Services\Eventlog\Application\Update TowerTilt
[-] Key Deleted : HKCU\Software\5e57dbdbe23fbf40
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{363F46BE-27B4-4C8D-99E7-B1E049B84376}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{90A9B7D2-3794-45EA-9E23-140E3938D2D9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A753A1EC-973E-4718-AF8E-A3F554D45C44}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02AFA80F-4BEE-41FD-8572-214B58A9EF90}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8e117d99-b829-466c-b141-d1f6b6e74033}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e3c4abc5-5933-49d1-b5a4-58105a7055af}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{327C2873-E90D-4C37-AA9D-10AC9BABA46C}]
[-] Key Deleted : HKCU\Software\GlobalUpdate
[-] Key Deleted : HKCU\Software\GoforFiles
[-] Key Deleted : HKCU\Software\ilivid
[-] Key Deleted : HKCU\Software\InstalledBrowserExtensions
[-] Key Deleted : HKCU\Software\powerpack
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Total-1.8
[-] Key Deleted : HKCU\Software\AppDataLow\Software\PassShow
[-] Key Deleted : HKLM\SOFTWARE\GlobalUpdate
[-] Key Deleted : HKLM\SOFTWARE\GoforFiles
[-] Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : HKLM\SOFTWARE\Total-1.8
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9563BC59-9556-4805-8CD4-886781779D8D}
[!] Key Not Deleted : HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\AppDataLow\Software\Total-1.8
[!] Key Not Deleted : HKU\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\AppDataLow\Software\PassShow
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4340C4778499EED41AE496DC3D613EC6
[-] Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\4340C4778499EED41AE496DC3D613EC6
[-] Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\4340C4778499EED41AE496DC3D613EC6

***** [ Web browsers ] *****

[-] [C:\Users\think\AppData\Roaming\Mozilla\Firefox\Profiles\5gpkw1vx.default\prefs.js] [Preference] Deleted : user_pref("extensions.JIB3eHe.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"warnalert11.com\")>-1url.indexOf(\"sumorobo[...]
[-] [C:\Users\think\AppData\Roaming\Mozilla\Firefox\Profiles\5gpkw1vx.default\prefs.js] [Preference] Deleted : user_pref("extensions.crossrider.bic", "14929aacfcb60f719146d02d9e981821");

*************************

:: Winsock settings cleared

*************************

C:\AdwCleaner[R1].txt - [16395 bytes] - [29/05/2013 18:44:33]
C:\AdwCleaner[R2].txt - [3861 bytes] - [06/06/2013 18:39:35]
C:\AdwCleaner[S1].txt - [16159 bytes] - [29/05/2013 18:45:42]
C:\AdwCleaner[S2].txt - [323 bytes] - [06/06/2013 18:40:21]
C:\AdwCleaner[S3].txt - [3965 bytes] - [06/06/2013 19:21:10]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [16172 bytes] ##########

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  resethosts;
  emptyclsid;
  IEdefaults;
  FFdefaults;
  CHRdefaults;
  emptyIEcache;
  emptyFFcache;
  emptyCHRcache;
  emptyalltemp;
  emptyflash;
  emptyjava;
  emptyrecycle.bin;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Zoek.exe v5.0.0.1 Updated 13-October-2015
Tool run by think on st 14.10.2015 at 19:47:13,81.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x86
Running in: Normal Mode Internet Access Detected
Launched: D:\Documents\gDisk\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

14.10.2015 19:49:12 Zoek.exe System Restore Point Created Successfully.

==== Empty Folders Check ======================

C:\PROGRA~2\Log deleted successfully
C:\Users\think\AppData\Roaming\baidu deleted successfully
C:\Users\think\AppData\Roaming\Nico Mak Computing deleted successfully
C:\Users\think\AppData\Roaming\Opera Software deleted successfully
C:\Users\think\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\think\AppData\Local\EmieSiteList deleted successfully
C:\Users\think\AppData\Local\EmieUserList deleted successfully
C:\Users\think\AppData\Local\Opera Software deleted successfully
C:\Users\think\AppData\Local\PDFCreator deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B97F523B-C6A0-F98E-EB46-CDBBB1DB6F47} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B97F523B-C6A0-F98E-EB46-CDBBB1DB6F47} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16A2A651-AEA7-448F-A788-53F23B83DDBB} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1930149E-97A6-4276-AD65-75A8FBA1CF63} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1A90B15D-B841-4BB8-9FD8-5B3DBC9586E4} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1DA6F3CF-AFEB-4E46-93BC-50339A69CA46} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1DD789FD-F277-4027-9945-E149FEAB9C53} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E5EF871-8B39-4EDA-B585-7AB74B89F6E} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E5FC93F-ED92-4EA5-997C-9D6FAAAF91C8} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F0229D5-7F3E-4558-8D24-E9B3AB1EB9CE} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F75A3-6C44-4407-BF4F-F5AE22EDE550} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F959170-9252-451A-97BD-60A01F88A5F9} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20A6D423-AE45-4C96-9D1F-4DE4424B72F} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{210D8E3C-C7CF-4410-AE3C-3D4872E20A} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{212AF37F-8081-48F4-B577-D2B5A89E1160} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{22003DC5-4C59-4227-A0F-9EA4DC7954B2} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{224BD383-15E0-4E6D-A7A8-6E888B1777D2} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{22F7292B-6A08-439A-91A4-D36711E344C6} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{23CBD28D-29BB-4138-8C2-3BA61161AF91} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2BEFCDB5-B4C2-4E8D-81B6-FF3C54DF09A} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D21A0C2-118A-4837-9F93-CF504235E040} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2FD711C9-6372-430D-B528-644BE11B552F} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{333E7D29-5EF0-4BCB-A4BA-41F482ADFD49} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{35B0AEDA-A522-4649-B241-1ABED8A27164} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{35D69013-D387-4B3C-B1A5-938577668E63} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3A7DCC8C-8B75-417A-AE88-8D22793AF013} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3F4D3448-3EF9-408E-BEE5-A0DFA9A4EFEF} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{403826F2-9817-4001-84C6-C67C9C50B2} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4194C23D-88D8-4DF8-8726-81202B65AE9} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{41AC5216-FBF7-4572-92D7-E377A473931} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{429A122E-BB9F-4357-8A77-BA7BE995E1A3} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{43DE6A47-4F1D-48E8-ACD1-2FD8FE7F13B} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{46ED0DFC-60B-4A6F-8FB7-8C4930C88B2B} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{49D4418E-526E-4ECC-A4EB-D4F7A2618B4B} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4EEE97F6-B8B0-41C5-A2CD-63262FDA5772} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{53236A2A-2C07-4BB1-A56E-DC7277898BC} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5457C334-2963-428F-A54D-368EE83D6DCC} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{58EFAD2A-AB2-4EB4-A7AD-BC1A9D58999B} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{58F201BA-F97B-4251-A39A-2CC3C428F8E8} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5944F5A5-752A-4B88-B436-6903CB82C5B} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59DB9E2-7D69-453F-AE43-6D3EB65E78D} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{602DD04D-8B64-4E00-8EEA-D3F0E7A919F6} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6063E476-2C6D-4AFF-8FB0-3EC93C58CE} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{668398FF-5F95-4F3B-A570-BEAD95456F1} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6826FDBA-8CEE-49AE-BB62-26BD3198274} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{690633F7-EF01-48EC-B38B-FB65E222698} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{692F78B1-D794-4C91-A5BC-96D9F9444041} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6A12B4E2-1B91-4136-BA52-1CEEC3181488} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6d911351-8c20-4308-b21c-afbb06674124} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F3224E1-4369-4649-8D17-E33521E12955} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{700BD477-9884-4BB8-91B9-69CF47528DF} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{742F5049-CDBA-4799-8515-4CCF24413B6B} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77E4E392-6265-4C4E-88D0-F2B33DD4431F} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7955781F-72D4-4AC5-8862-AC55FB8CAEA6} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A27A15-ECBA-45B6-8311-962E198BE440} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7CC50D60-402B-4FEE-9A91-1377399694D} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7EF0488F-D252-48E0-86DB-DF73C44FCFF2} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FE2D7A6-1352-4F5A-A84C-2110E0B68863} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FEB691B-62D-4723-9DCF-E73FF5AF14D} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{81759FFD-E120-449F-B663-4CEC91CA82C9} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{81F81E35-8BD4-4777-A687-D7F64CA516B} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8517A248-262B-478F-A162-3C6133C7AE2B} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{865A720A-EE65-4D91-946E-0CAD4A927AB} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8a94229a-b8b8-488b-8f04-abd641d4e80c} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8B01D247-750-4F86-8E11-284150029} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8e117d99-b829-466c-b141-d1f6b6e74033} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{944ED8DD-6504-4998-93A5-1E3598405DBE} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9B7F7FFA-4FA5-45C5-AEFE-443F6D7B6BDD} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C11FC3D-CA2A-4F3F-A5D9-6A8AACD1DFB} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C25EEDA-FECD-4343-8EDB-256B2AA822AA} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A243981-3526-4AA4-AC5F-449C53B9133} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ABFC32C9-9017-4948-9AF5-F305A734F39} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AEF7F2B8-9542-4192-B057-EA5DC99992F2} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AF8F141-C479-452B-AB89-346D36C9DB5A} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B3622FE7-4014-4CA6-B291-D2D73EDE139F} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B7B2567F-F625-43E6-92B2-1EC48D26DDD} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B86866B2-846C-4A0F-B5A9-DF2323175FB} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B94AE90F-AB66-4178-9167-B17838B131D2} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BA0075D5-E93C-4EB2-9C94-E98883D24C2B} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BC07BACD-FAE1-4360-B321-F01806C6266} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C0A841ED-4E59-4097-B4A5-B38AC37314BD} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C1960E37-383F-4BC7-9A47-3609AF4F0} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C456F32C-9894-4249-9F26-E6F413B3E26F} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C498C3DA-481D-43FF-AAA4-145F20D94A38} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C87E6725-2DBD-4916-9DEA-864A4D2A328B} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CDA28D6E-AE2B-4AD9-9BF1-56A169A33832} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D090969D-F9DB-46DD-8772-491E9B97196} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D12C0A2C-74BD-41F3-8BD1-34C3AB4EEFE8} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D3879B79-6990-4339-9854-8F33FEE5F722} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D391F403-1468-462E-8BDE-585D841CBB6} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D56A0AA5-B33-47C8-88CC-151496BE366} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D6B1F9B6-89B8-4618-B75F-979ACE7A87C5} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D8F4A736-5241-451B-90B-7C7122F0A2AD} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB2D1D25-6443-4647-9A1-195E380F061} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DC33AB1F-8CD0-453D-86F1-42DE772C1FA3} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E1708478-709F-4A3D-A85C-BBF9BE7D5CD} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E250B320-D350-4012-9583-EFB15477C37E} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E28DAD5C-70-49A9-A446-F17D696B2A45} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E29CA08-441F-40D2-8E7D-83B662C0521} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e3c4abc5-5933-49d1-b5a4-58105a7055af} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E3F02953-1FCB-48BC-8AD9-ED7EC0583DD6} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E419DD62-502F-41D5-99BD-1E91885CA310} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E4995CE0-1C7-406F-9D6A-328B39DA4F18} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E4ADBA48-F4D5-4CEA-84AB-5595ABAAEC9} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EA8FFD26-4C5F-4CA9-B54E-5BC29D33D1} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EBE9FA7D-9879-46AF-B93D-E5FA384FC328} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EFA42DF4-142A-4695-8374-A87EE92A9A1} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F0AEE6FD-9668-428C-A3B0-89BF30D91285} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F0EFABCE-25C1-4019-8A3F-B685AE6BD1D} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F16D171F-B844-40B4-95F5-15B8601BA1} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F17F5DC4-281F-4064-B4F7-B68EFD21E76} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1891419-5335-4BEA-8925-26111BAF1DB} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1CBC65E-364C-4AE1-A34C-543B565BD848} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F21A478F-CC3B-4097-902D-F0C68BBF4662} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F21F1EA-3833-443B-95F6-2D45E4EA6479} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F31B8911-9834-4564-BC99-E3B37A77827} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F50343BC-2D0D-4F9B-8DA6-75718E45D2EB} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F55D0716-101B-4F29-BE72-C495BAE4EFE3} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F668DCDE-DCB2-4F73-B580-A4A07CC68BB8} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F71A90E0-3F11-4A84-BDA8-E3A4B653B229} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F73D7CA2-5B50-4256-948-89C0C2FD3547} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F8EB4DAA-8A7D-4EC6-A7CA-DF7F33B2ADF2} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FA806CC1-F975-45D8-9E82-C06C7F69AB53} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{faee0191-4d59-42c9-8b72-c799b096955d} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FD754DE8-6A7F-4B2C-995B-12B7CEF2B3D} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FE6EAA42-2C64-4999-A1AB-52BD1F121FA} deleted successfully
HKEY_USERS\S-1-5-21-2614697979-3659547987-3114649223-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF5A73C0-9FC9-48F5-BB8C-792CDE9F4C11} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B97F523B-C6A0-F98E-EB46-CDBBB1DB6F47} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6d911351-8c20-4308-b21c-afbb06674124} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8a94229a-b8b8-488b-8f04-abd641d4e80c} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{faee0191-4d59-42c9-8b72-c799b096955d} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TPHDEXLGSVC deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\TPHDEXLGSVC deleted successfully

==== FireFox Fix ======================

Deleted from C:\Users\think\AppData\Roaming\Mozilla\Firefox\Profiles\5gpkw1vx.default\prefs.js:
user_pref("browser.startup.homepage", "");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("browser.search.useDBForOrder", true);

Added to C:\Users\think\AppData\Roaming\Mozilla\Firefox\Profiles\5gpkw1vx.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\think\AppData\Roaming\Mozilla\Firefox\Profiles\5gpkw1vx.default

user.js not found
---- Lines browser.startup.page removed from prefs.js ----
user_pref("browser.startup.page", 3);
---- Lines extensions.JIB3eHe removed from prefs.js ----
user_pref("extensions.JIB3eHe.epoch", "1413829706");
user_pref("extensions.JIB3eHe.url", "http://blacknewtransferjob.net/sync2/?q ... 8tMFHhd9Fq
---- Lines FFPDFArchitectConverter@pdfarchitect.com modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"FFPDFArchitectConverter@pdfarchitect.com\":{\"descriptor\":\"C:\\
---- FireFox user.js and prefs.js backups ----

prefs_14.10.2015_2008_.backup

==== Deleting Files \ Folders ======================

C:\Program Files\Glary Utilities 3 deleted
C:\Program Files\Glary Utilities 4 deleted
C:\Users\think\AppData\Local\Total Builder deleted
C:\Users\think\AppData\Roaming\calibre deleted
C:\Windows\system32\Tasks\schedule!1143840799 deleted
C:\Program Files\Media Player Classic - Home Cinema deleted
C:\Program Files\Common Files\DVDVideoSoft\bin deleted
C:\PROGRA~2\InstallMate deleted
C:\PROGRA~2\Package Cache deleted
C:\Users\think\AppData\LocalLow\saveeNshare deleted
C:\Windows\wininit.ini deleted
C:\Windows\system32\GroupPolicy\Machine deleted
C:\Windows\system32\GroupPolicy\User deleted
C:\Windows\system32\GroupPolicy\gpt.ini deleted
C:\Windows\System32\searchplugins deleted
C:\Windows\System32\Extensions deleted
C:\Users\think\AppData\Roaming\Mozilla\Firefox\Profiles\5gpkw1vx.default\extensions\staged deleted
C:\Users\think\AppData\Roaming\Mozilla\Firefox\Profiles\5gpkw1vx.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com deleted
"C:\Windows\system32\tasks\Total Builder" deleted
"C:\Windows\Installer\5a3731e.msi" deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\think\AppData\Roaming\Mozilla\Firefox\Profiles\5gpkw1vx.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"FFPDFArchitectConverter@pdfarchitect.com"=hex(2):43,00,3a,00,5c,00,50,00,72,\ []
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"gemgecko@gemius.com"="C:\Program Files\NetSoftware\gemgecko_ext" [18.06.2012 16:01]

==== Firefox Extensions ======================

AppDir: C:\Program Files\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\think\AppData\Roaming\Mozilla\Firefox\Profiles\5gpkw1vx.default
C2D756C95D5AE3D030E7D394B9C771B9 - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin
5B4DA1113F240C3F06FFF9D52761528B - C:\Program Files\Google\Picasa3\npPicasa3.dll - Picasa
BE40D3882DCDC3E4BD8B284B8D5F4FDB - C:\Program Files\Garmin GPS Plugin\npGarmin.dll - Garmin Communicator Plug-In
6768C724599214E4F9ADD9F8FF5097EB - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java(TM) Platform SE 7 U45
F1CD6E22E5AE5CEEB7712E546A5FC853 - C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll - Java Deployment Toolkit 7.0.450.18
ABF147E21644B4094019F018FD58B5EC - C:\Program Files\QuickTime\Plugins\npqtplugin7.dll - QuickTime Plug-in 7.7.1
CEB481671FDADE6ECA2B6F45F95ED120 - C:\Program Files\QuickTime\Plugins\npqtplugin6.dll - QuickTime Plug-in 7.7.1
0B6CE016084875A998C5B5D35CB2BFEF - C:\Program Files\QuickTime\Plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.1
EAE76FAEFB3DDE4B990DA9506132B3C3 - C:\Program Files\QuickTime\Plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.1
D11EC90E0D361D8EBD6BCB3F29BEF153 - C:\Program Files\QuickTime\Plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.1
C7BE533F805F8AEFE75FC7D7C6D0EBF9 - C:\Program Files\QuickTime\Plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.1
47C3FA43F99202E2F92EFA1EB9BDECF7 - C:\Program Files\QuickTime\Plugins\npqtplugin.dll - QuickTime Plug-in 7.7.1
F0E80E561C3F715DB01ACCC97B72463A - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Photo Gallery


==== Chromium Look ======================

Google Chrome Version: 45.0.2454.101

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
flliilndjeohchalpbbcdekjklbdgfkk - No path found[]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
apdfllckaahabafndbhieahigkjlhalf - C:\Users\think\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx[02.08.2013 16:57]
jmlmanpnnbnpabnonijjmnmplnbfcgbf - C:\Program Files\NetSoftware\chromegem.crx[21.02.2013 16:32]
lmjegmlicamnimmfhcmpkclmigmmcbeh - No path found[]

Angry Birds - think\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj
Google Drive App Launcher - think\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh

==== Chromium Fix ======================

C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.cdnsrv.com_0.localstorage deleted successfully
C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.cdnsrv.com_0.localstorage-journal deleted successfully
C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage deleted successfully
C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully
C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage deleted successfully
C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully
C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage deleted successfully
C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.cz/?gws_rd=ssl"
"Search Page"="http://www.google.com"
"Search Bar"="http://www.google.com/ie"
"Default_Search_URL"="http://www.google.com/ie"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
@="http://www.google.com/search?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com/ie"
"Default_Search_URL"="http://www.google.com/ie"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="https://www.google.cz/?gws_rd=ssl"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/ ... chasst.htm"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0191A6B0-1154-4C22-9182-23A95BBE92D9}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0191A6B0-1154-4C22-9182-23A95BBE92D9} Google Url="http://www.google.com/search?q={searchTerms}&rlz="
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE11SR"
{4F91822A-96F8-42DB-A58B-150FADDD30AB} Google Url="http://www.google.com/search?q={searchT ... =utf8&rlz="
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE11SR"

==== Reset Google Chrome ======================

C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Preferences.bad was reset successfully
C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\FFPDFArchitectConverter@pdfarchitect.com deleted successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4F0EED28BD8194C4984AB0EE5479FD54 deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2B4E13FA-0384-20C6-437F-F7A1A71C037D} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{323E3917-EACD-6613-56A8-DDAE96DD55C0} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4254FDB7-CA18-409F-DCEA-42B856C82357} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{CC03AF0F-829C-8DB1-B2EE-1AAFD1E94DC3} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{EFB039CF-8330-E35D-B898-BA723ECE8E7E} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{82DEE0F4-18DB-4C49-89A4-0BEE4597DF45} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\4F0EED28BD8194C4984AB0EE5479FD54 deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam deleted successfully

==== Empty IE Cache ======================

C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\think\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\think\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\think\AppData\Local\Mozilla\Firefox\Profiles\5gpkw1vx.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\think\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=368 folders=62 79323643 bytes)

==== Empty Temp Folders ======================

C:\Users\Administrator\AppData\Local\Temp emptied successfully
C:\Users\think\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Reset Hosts File ======================

Hosts File Reset Successfully

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\think\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on st 14.10.2015 at 20:20:26,29 ======================