All processes killed
========== OTL ==========
No active process named explorer.exe was found!
No active process named firefox.exe was found!
Process ToolbarUpdater.exe killed successfully!
Service vToolbarUpdater15.3.0 stopped successfully!
Service vToolbarUpdater15.3.0 deleted successfully!
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe moved successfully.
Service BBUpdate stopped successfully!
Service BBUpdate deleted successfully!
C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.EXE moved successfully.
Service BBSvc stopped successfully!
Service BBSvc deleted successfully!
C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.EXE moved successfully.
Service avgtp stopped successfully!
Service avgtp deleted successfully!
C:\Windows\SysNative\drivers\avgtpx64.sys moved successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Bar| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{70df8d13-bdd3-448e-944c-efde21b77161} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70df8d13-bdd3-448e-944c-efde21b77161}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\bProtector Start Page| /E : value set successfully!
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{4A723FA9-C490-4703-8740-4CC7D0E88B74}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4A723FA9-C490-4703-8740-4CC7D0E88B74}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6B786243-6612-40AB-84EC-1E295BAB6ED7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B786243-6612-40AB-84EC-1E295BAB6ED7}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{887B1577-E9C3-445D-BDF0-7184CCA5A6E6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{887B1577-E9C3-445D-BDF0-7184CCA5A6E6}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A741E3BF-44A6-45EA-875F-2E16234A2DA2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A741E3BF-44A6-45EA-875F-2E16234A2DA2}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B4A96E76-5F1B-4543-A9A4-4557A84AAEBD}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4A96E76-5F1B-4543-A9A4-4557A84AAEBD}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F26F0CEA-670E-4D08-BB03-12415EBE81D4}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F26F0CEA-670E-4D08-BB03-12415EBE81D4}\ not found.
Prefs.js: support%40lastpass.com:2.0.20 removed from extensions.enabledAddons
Prefs.js: %7B003D3EDC-99B9-4a34-9C20-60CB94F7E829%7D:2010.03 removed from extensions.enabledAddons
Prefs.js: toolbar_ATU4%40apn.ask.com:15.40906 removed from extensions.enabledAddons
Prefs.js: ascsurfingprotection%40iobit.com:1.0 removed from extensions.enabledAddons
Prefs.js: 05dd836e-2cbd-4204-9ff3-2f8a8665967d%40a8876730-fb0c-4057-a2fc-f9c09d438e81.com:0.91.3 removed from extensions.enabledAddons
Prefs.js: %7BBBDA0591-3099-440a-AA10-41764D9DB4DB%7D:11.3.0.9%20-%205 removed from extensions.enabledAddons
Prefs.js: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0 removed from extensions.enabledAddons
64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@adobe.com/FlashPlayer\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
C:\Users\z\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Extensions folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\components folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847} folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}\modules\JAK folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}\modules\components\subclasses\email folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}\modules\components\subclasses folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}\modules\components folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}\modules\classes folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}\modules folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}\META-INF folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}\chrome folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\platform\WINNT_x86_64-msvc\components folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\platform\WINNT_x86_64-msvc folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\platform\WINNT_x86-msvc\components folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\platform\WINNT_x86-msvc folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\platform\Linux_x86_64-gcc3\components folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\platform\Linux_x86_64-gcc3 folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\platform\Linux_x86-gcc3\components folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\platform\Linux_x86-gcc3 folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\platform\Darwin_x86_64-gcc3\components folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\platform\Darwin_x86_64-gcc3 folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\platform\Darwin\components folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\platform\Darwin folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\platform folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\defaults\preferences folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\defaults folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\components folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com\chrome folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\support@lastpass.com folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\ascsurfingprotection@iobit.com\chrome\content folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\ascsurfingprotection@iobit.com\chrome folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\ascsurfingprotection@iobit.com folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\skin folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\locale\en-US folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\locale folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\defaults\preferences folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\defaults folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\extensionCode folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\api folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com folder moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions folder moved successfully.
Folder C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}\ not found.
Folder C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\ not found.
Folder C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\ not found.
Folder C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\extensionCode\ not found.
File C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\toolbar_ATU4@apn.ask.com.xpi not found.
File C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\torntv2@torntv.com.xpi not found.
File C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\extensions\{003D3EDC-99B9-4a34-9C20-60CB94F7E829}.xpi not found.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\searchplugins\ask-search.xml moved successfully.
C:\Users\z\AppData\Roaming\Mozilla\Firefox\Profiles\bocdlzxg.default\searchplugins\sweetim.xml moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\chrome\icons\default folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\chrome\icons folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\chrome folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\chrome\icons\default folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\chrome\icons folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\chrome folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\browser\extensions folder moved successfully.
Folder C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\ not found.
Use Chrome's Settings page to remove the default_search_provider items.
Use Chrome's Settings page to remove the default_search_provider items.
File C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.2.0\\npsitesafety.dll not found.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh\2.3.1_0\style folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh\2.3.1_0\js folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh\2.3.1_0\img folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh\2.3.1_0 folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\_locales\tr folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\_locales\ru folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\_locales\pt_BR folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\_locales\pl folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\_locales\nl folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\_locales\ja folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\_locales\it folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\_locales\hi folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\_locales\he folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\_locales\fr folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\_locales\es folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\_locales\en folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\_locales\de folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\_locales\ar folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\_locales folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\skin\plugins\resources folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\skin\plugins\images\theme folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\skin\plugins\images\manager-favs folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\skin\plugins\images\info folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\skin\plugins\images\favorites folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\skin\plugins\images\chrome folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\skin\plugins\images folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\skin\plugins\css folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\skin\plugins folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\skin\newtab\images\patterns folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\skin\newtab\images\gallery folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\skin\newtab\images folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\skin\newtab\css folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\skin\newtab folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\skin\external folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\skin folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\resources\preset folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\resources folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\content\newtab folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\content\external folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\content folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0\$chrome folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.0.10_0 folder moved successfully.
File C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnlomafmkpiclmaaekkhpoecnclldmaa\1.23.4_0\crossrider not found.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnlomafmkpiclmaaekkhpoecnclldmaa\1.23.4_0\js\lib\popupResource folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnlomafmkpiclmaaekkhpoecnclldmaa\1.23.4_0\js\lib folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnlomafmkpiclmaaekkhpoecnclldmaa\1.23.4_0\js\app folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnlomafmkpiclmaaekkhpoecnclldmaa\1.23.4_0\js\api folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnlomafmkpiclmaaekkhpoecnclldmaa\1.23.4_0\js folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnlomafmkpiclmaaekkhpoecnclldmaa\1.23.4_0\icons\actions folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnlomafmkpiclmaaekkhpoecnclldmaa\1.23.4_0\icons folder moved successfully.
C:\Users\z\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnlomafmkpiclmaaekkhpoecnclldmaa\1.23.4_0 folder moved successfully.
127.0.0.1 localhost removed from HOSTS file successfully
64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}\ deleted successfully.
C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll moved successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064}\ deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5}\ deleted successfully.
C:\Program Files (x86)\LastPass\LPToolbar_x64.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{70DF8D13-BDD3-448E-944C-EFDE21B77161} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70DF8D13-BDD3-448E-944C-EFDE21B77161}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Del28079275 not found.
File move failed. C:\Windows\SysWOW64\cmd.exe scheduled to be moved on reboot.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Del28079072 not found.
File move failed. C:\Windows\SysWOW64\cmd.exe scheduled to be moved on reboot.
C:\Users\z\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\YoWindow.lnk moved successfully.
C:\Program Files (x86)\YoWindow\yowindow.exe moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Add to Google Photos Screensa&ver\ deleted successfully.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\LastPass\ deleted successfully.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\LastPass vyplňování formulářů\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\LastPass\ not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\LastPass vyplňování formulářů\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{43699cd0-e34f-11de-8a39-0800200c9a66}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{43699cd0-e34f-11de-8a39-0800200c9a66}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{43699cd0-e34f-11de-8a39-0800200c9a66}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{43699cd0-e34f-11de-8a39-0800200c9a66}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\localhost\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\livecall\ deleted successfully.
File Protocol\Handler\livecall - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ deleted successfully.
File Protocol\Handler\ms-help - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-itss\ deleted successfully.
File Protocol\Handler\ms-itss - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msnim\ deleted successfully.
File Protocol\Handler\msnim - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype4com\ deleted successfully.
File Protocol\Handler\skype4com - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ deleted successfully.
File Protocol\Handler\wlmailhtml - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlpg\ deleted successfully.
File Protocol\Handler\wlpg - No CLSID value found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
C:\Windows\SysNative\perfh005.dat moved successfully.
C:\Windows\SysNative\perfh009.dat moved successfully.
C:\Windows\SysNative\perfc005.dat moved successfully.
C:\Windows\SysNative\perfc009.dat moved successfully.
ADS C:\ProgramData\Temp:430C6D84 deleted successfully.
ADS C:\ProgramData\Temp:820563D3 deleted successfully.
ADS C:\ProgramData\Temp:DFC5A2B2 deleted successfully.
========== FILES ==========
File\Folder C:\WINDOWS\System32\*.tmp not found.
File\Folder C:\WINDOWS\*.tmp not found.
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
File\Folder C:\WINDOWS\System32\dllcache\*.tmp not found.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
File\Folder C:\WINDOWS\system32\DUMP*.tmp not found.
c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3834928719-1230591668-3264408331-1000Core.job moved successfully.
c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3834928719-1230591668-3264408331-1000UA.job moved successfully.
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
File\Folder C:\*.tmp not found.
File\Folder C:\WINDOWS\System32\drivers\*.tmp not found.
File\Folder C:\Documents and Settings\All Users\Data aplikací\*.tmp not found.
File\Folder C:\Windows\SysNative\drivers\*.tmp not found.
File\Folder C:\Windows\SysWow64\drivers\*.tmp not found.
File\Folder C:\Program Files (x86)\*.tmp not found.
File\Folder C:\Windows\SysWow64\*.tmp not found.
File\Folder C:\Windows\SysNative\*.tmp not found.
C:\Users\z\AppData\Roaming\Funmoods\UpdateProc folder moved successfully.
C:\Users\z\AppData\Roaming\Funmoods folder moved successfully.
File\Folder C:\Program Files (x86)\Funmoods not found.
C:\ProgramData\SweetIM\Messenger\update folder moved successfully.
C:\ProgramData\SweetIM\Messenger\logs folder moved successfully.
C:\ProgramData\SweetIM\Messenger\data\contentdb folder moved successfully.
C:\ProgramData\SweetIM\Messenger\data folder moved successfully.
C:\ProgramData\SweetIM\Messenger\conf\users folder moved successfully.
C:\ProgramData\SweetIM\Messenger\conf folder moved successfully.
C:\ProgramData\SweetIM\Messenger folder moved successfully.
C:\ProgramData\SweetIM folder moved successfully.
C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources folder moved successfully.
C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\conf folder moved successfully.
C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer folder moved successfully.
C:\Program Files (x86)\SweetIM\Toolbars folder moved successfully.
C:\Program Files (x86)\SweetIM\Messenger\resources\images folder moved successfully.
C:\Program Files (x86)\SweetIM\Messenger\resources folder moved successfully.
C:\Program Files (x86)\SweetIM\Messenger folder moved successfully.
C:\Program Files (x86)\SweetIM folder moved successfully.
C:\ProgramData\Kaspersky Lab folder moved successfully.
C:\Windows\SWREG.exe moved successfully.
C:\Windows\SWSC.exe moved successfully.
C:\Windows\NIRCMD.exe moved successfully.
C:\Qoobox\Quarantine\Registry_backups folder moved successfully.
C:\Qoobox\Quarantine\C\Windows folder moved successfully.
C:\Qoobox\Quarantine\C\Program Files (x86)\Common Files folder moved successfully.
C:\Qoobox\Quarantine\C\Program Files (x86) folder moved successfully.
C:\Qoobox\Quarantine\C folder moved successfully.
C:\Qoobox\Quarantine folder moved successfully.
Folder move failed. C:\Qoobox\BackEnv scheduled to be moved on reboot.
C:\Qoobox folder moved successfully.
C:\Program Files (x86)\hosts folder moved successfully.
C:\Users\z\AppData\Roaming\pctsGui folder moved successfully.
C:\ProgramData\FullRemove.exe moved successfully.
C:\Users\z\AppData\Local\funmoods_speedial_v9.0.10.crx moved successfully.
C:\Users\z\AppData\Local\funmoods_2.3.1.crx moved successfully.
C:\Windows\SysNative\drivers\lvuvc.hs moved successfully.
C:\Windows\SysNative\cc_20130707_214102.reg moved successfully.
C:\Windows\DeleteOnReboot.bat moved successfully.
C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml moved successfully.
File\Folder C:\Windows\SysNative\drivers\avgtpx64.sys not found.
File\Folder C:\Users\z\AppData\Local\funmoods_speedial_v9.0.10.crx not found.
File\Folder C:\Users\z\AppData\Local\funmoods_2.3.1.crx not found.
C:\Windows\PEV.exe moved successfully.
C:\Windows\MBR.exe moved successfully.
C:\Windows\sed.exe moved successfully.
C:\Windows\grep.exe moved successfully.
C:\Windows\zip.exe moved successfully.
File\Folder C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml not found.
C:\Windows\SysWow64\qttask.exe moved successfully.
C:\Users\z\AppData\Roaming\wklnhst.dat moved successfully.
C:\Users\z\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini moved successfully.
File\Folder C:\Users\z\AppData\Roaming\Funmoods not found.
File\Folder C:\Users\z\AppData\Roaming\pctsGui not found.
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command\\""|""%1" %*" /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\\{41545534-0076-A76A-76A7-A758B70B0A00} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{41545534-0076-A76A-76A7-A758B70B0A00}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\\{86D4B82A-ABED-442A-BE86-96357B70F4FE} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\\{8C13BEE4-E7CE-4E46-BD13-8F41DAD00FEF} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8C13BEE4-E7CE-4E46-BD13-8F41DAD00FEF}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\\funmoods not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\\hosts not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\\SP_f2a323db not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\\{79A765E1-C399-405B-85AF-466F52E918B0} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{79A765E1-C399-405B-85AF-466F52E918B0}\ not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Public
->Temp folder emptied: 0 bytes
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: z
->Temp folder emptied: 1181 bytes
->Temporary Internet Files folder emptied: 7143 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 4365214 bytes
->Google Chrome cache emptied: 7544447 bytes
->Flash cache emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 245101 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 12,00 mb
[EMPTYFLASH]
User: All Users
User: Default
User: Default User
User: Public
User: UpdatusUser
User: z
->Flash cache emptied: 0 bytes
Total Flash Files Cleaned = 0,00 mb
OTL by OldTimer - Version 3.2.69.0 log created on 07112013_095546
Files\Folders moved on Reboot...
File move failed. C:\Windows\SysWOW64\cmd.exe scheduled to be moved on reboot.
File\Folder C:\Qoobox\BackEnv not found!
File move failed. C:\Users\z\AppData\Local\Temp\FXSAPIDebugLogFile.txt scheduled to be moved on reboot.
File move failed. C:\Users\z\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
File move failed. C:\Windows\temp\logishrd\LVPrcInj01.dll scheduled to be moved on reboot.
File move failed. C:\Windows\temp\logishrd\LVPrcInj02.dll scheduled to be moved on reboot.
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
Odinstalace Qvo6 Vyřešeno
-
- Level 2
- Příspěvky: 186
- Registrován: červenec 09
- Pohlaví:
- Stav:
Offline
-
- Level 2
- Příspěvky: 186
- Registrován: červenec 09
- Pohlaví:
- Stav:
Offline
Re: Odinstalace Qvo6
Rkill 2.5.4 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html
Invalid arguments ignored: (1).com
Program started at: 07/11/2013 10:06:53 AM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1
Checking for Windows services to stop:
* No malware services found to stop.
Checking for processes to terminate:
* C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (PID: 1680) [AU-HEUR]
1 proccess terminated!
Checking Registry for malware related settings:
* No issues found in the Registry.
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
Performing miscellaneous checks:
* Windows Defender Disabled
[HKLM\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware" = dword:00000001
Checking Windows Service Integrity:
* Windows Defender (WinDefend) is not Running.
Startup Type set to: Manual
Searching for Missing Digital Signatures:
* No issues found.
Checking HOSTS File:
* HOSTS file entries found:
ÿþ1 2 7 . 0 . 0 . 1 l o c a l h o s t
: : 1 l o c a l h o s t
Program finished at: 07/11/2013 10:07:55 AM
Execution time: 0 hours(s), 1 minute(s), and 1 seconds(s)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html
Invalid arguments ignored: (1).com
Program started at: 07/11/2013 10:06:53 AM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1
Checking for Windows services to stop:
* No malware services found to stop.
Checking for processes to terminate:
* C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (PID: 1680) [AU-HEUR]
1 proccess terminated!
Checking Registry for malware related settings:
* No issues found in the Registry.
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
Performing miscellaneous checks:
* Windows Defender Disabled
[HKLM\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware" = dword:00000001
Checking Windows Service Integrity:
* Windows Defender (WinDefend) is not Running.
Startup Type set to: Manual
Searching for Missing Digital Signatures:
* No issues found.
Checking HOSTS File:
* HOSTS file entries found:
ÿþ1 2 7 . 0 . 0 . 1 l o c a l h o s t
: : 1 l o c a l h o s t
Program finished at: 07/11/2013 10:07:55 AM
Execution time: 0 hours(s), 1 minute(s), and 1 seconds(s)
-
- Level 2
- Příspěvky: 186
- Registrován: červenec 09
- Pohlaví:
- Stav:
Offline
Re: Odinstalace Qvo6
# AdwCleaner v2.304 - Log vytvooen 11/07/2013 v 10:15:25
# Aktualizováno 03/07/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : z - Z-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\z\Downloads\adwcleaner (1).exe
# Volba [Prohledat]
***** [Služby] *****
***** [Soubory / Složky] *****
# Aktualizováno 03/07/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : z - Z-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\z\Downloads\adwcleaner (1).exe
# Volba [Prohledat]
***** [Služby] *****
***** [Soubory / Složky] *****
-
- Level 2
- Příspěvky: 186
- Registrován: červenec 09
- Pohlaví:
- Stav:
Offline
Re: Odinstalace Qvo6
Opět se AdwCleaner "nedodělal". Opět ta hláška kterou uvádíš.
-
- Level 2
- Příspěvky: 186
- Registrován: červenec 09
- Pohlaví:
- Stav:
Offline
Re: Odinstalace Qvo6
AVG Secure Search, AVG a AVG SiteSafety plugin jsem nenašel, PC Tools jsem před několika dny vymazával pomocí Revo Uninstaller, tak nevím, jak to že je ještě něco z něj vidět, prosím tě, ten Advanced SystemCare 6 mi tam nech, nedávno jsem si ho kupoval a skenuju a mažu tím pomalu každý den.
Naposledy upravil(a) romankovarik31 dne 11 črc 2013 14:14, celkem upraveno 2 x.
-
- Level 2
- Příspěvky: 186
- Registrován: červenec 09
- Pohlaví:
- Stav:
Offline
Re: Odinstalace Qvo6
C:\Users\z\AppData\Roaming\1O1L1I1PtF1F1C1N je nějaký Adobe Flash Player ActiveX Free Download Packages, ty další složky nevím co jsou, neotevřou se mi.
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43298
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: Odinstalace Qvo6
romankovarik31 píše:# AdwCleaner v2.304 - Log vytvooen 11/07/2013 v 10:15:25
# Aktualizováno 03/07/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : z - Z-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\z\Downloads\adwcleaner (1).exe
# Volba [Prohledat]
***** [Služby] *****
***** [Soubory / Složky] *****
Prosím Tě , čteš co Ti píšu??
Spuštino z : C:\Users\z\Downloads\adwcleaner (1).exe
Vyjmi si adwcleaner z toho umístění a vlož si ho na plochu!!!
a spusť!
Advanced SystemCare 6 jsem tam nechal..
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
-
- Level 2
- Příspěvky: 186
- Registrován: červenec 09
- Pohlaví:
- Stav:
Offline
Re: Odinstalace Qvo6
Asi mám ten počítač prokletý, udělal jsem to přesně dle tvých instrukcí (vyjmul jsem to z C:\Users\z\Downloads\adwcleaner (1).exe vložil na plochu, pak spustil jako správce) a nic, opět naběhne ta hláška.
-
- Level 2
- Příspěvky: 186
- Registrován: červenec 09
- Pohlaví:
- Stav:
Offline
Re: Odinstalace Qvo6
Použil jsem na vašem fóru též doporučovaný MWAV scanner a toto je výsledek.
Objekt "TROJ/CONHOOK-B downloader Spyware/Adware" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.
Objekt "winlink Spyware/Adware" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.
Objekt "SmitFraud Browser Hijacker" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.
Objekt "SmitFraud Browser Hijacker" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.
Objekt "ImIServer IEPlugin Spyware/Adware" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.
Objekt "AntiSpyware Pro XP Corrupted Adware/Spyware" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.
Soubor C:\Program Files (x86)\Acer\Registration\desktop.ini je infikovaný virem VB.CO.Leftover !! Provedené akce: Ponecháno, neodstraněno!.
Objekt "TROJ/CONHOOK-B downloader Spyware/Adware" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.
Objekt "winlink Spyware/Adware" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.
Objekt "SmitFraud Browser Hijacker" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.
Objekt "SmitFraud Browser Hijacker" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.
Objekt "ImIServer IEPlugin Spyware/Adware" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.
Objekt "AntiSpyware Pro XP Corrupted Adware/Spyware" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.
Soubor C:\Program Files (x86)\Acer\Registration\desktop.ini je infikovaný virem VB.CO.Leftover !! Provedené akce: Ponecháno, neodstraněno!.
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43298
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: Odinstalace Qvo6
romankovarik31 píše:Asi mám ten počítač prokletý, udělal jsem to přesně dle tvých instrukcí (vyjmul jsem to z C:\Users\z\Downloads\adwcleaner (1).exe vložil na plochu, pak spustil jako správce) a nic, opět naběhne ta hláška.
Jaká hláška? Dával si před tím rkill??
Klikni na soubor pravým a vyber:
Odstranit problémy s kompatibilitou.
C:\Program Files (x86)\Acer\Registration\desktop.ini tento soubor smaž , ostatní je OK.
ESET OnlineScan
Poznámka:
Je doporučeno mít během skenu vypnutý antivirový a antispywarový program .Zároveň se doporučuje mít zavřeny všechny ostatní okna , programy a nesurfovat po netu. Po skončení skenu si nezapomeň zase ochrany antiviru a antispywaru zapnout.Je doporučeno použít pro kontrolu prohlížeč Internet Explorer , jinak je nutno nainstalovat ESET Smart Installer a po skončení skenu vše zase řádně odinstalovat.
1. Klikni na ESET OnlineScan
2. Klikni na tlačítko Run ESET Online Scanner
3. Jen pro jiné prohlížeče než je Internet Explorer ( Ti , co mají spuštěn IE mohou toto přeskočit)
3.1. Klikni na esetsmartinstaller_enu.exe ke stáhnutí ESET Smart Installeru , ulož si soubor na svojí plochu.
3.2. Poklepej na ploše na ikonu esetsmartinstaller_enu
4. Dej zatržítko do čtverečku YES , I accept the Terms of Use. ( k potvrzení podmínek užití)
5. Klikni na tlačítko Start
6. Akceptuj další bezpečnostní varování ze svého prohlížeče. Nainstaluj si ovl.prvek ActiveX
7. Dej zatržítko do čtverečku Scan archives
8. Ujisti se , že volba "Remove found threats" je nezaškrtnuta
9. Když se objeví display nastavení skenu počítače , klikni na Advanced settings , a dej zatržítko na :
Enable Anti-Stealth technology (pokud není již zatržena)
10. Klikni na tlačítko Start
11. ESET si pak stáhne svojí aktualizaci , nainstaluje jí a poté začne skenovat Tvůj počítač
12. Když bude sken hotov , klikni na šipku List of found threads
13. Klikni na tlačítko Export to text file , a soubor si ulož pod nějakým jménem na svojí plochu
14. Klikni na tlačítko Back
15. Klikni na tlačítko Finish
Celý obsah textového souboru , který sis uložil na plochu sem prosím vlož.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
-
- Level 2
- Příspěvky: 186
- Registrován: červenec 09
- Pohlaví:
- Stav:
Offline
Re: Odinstalace Qvo6
Rkill 2.5.4 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html
Invalid arguments ignored: (1).com
Program started at: 07/12/2013 09:45:26 PM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1
Checking for Windows services to stop:
* No malware services found to stop.
Checking for processes to terminate:
* C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (PID: 1656) [AU-HEUR]
* C:\Users\z\Desktop\AdwCleaner.exe (PID: 360) [UP-HEUR]
* C:\Users\z\Desktop\AdwCleaner.exe (PID: 5872) [UP-HEUR]
3 proccesses terminated!
Checking Registry for malware related settings:
* No issues found in the Registry.
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
Performing miscellaneous checks:
* Windows Defender Disabled
[HKLM\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware" = dword:00000001
Checking Windows Service Integrity:
* Windows Defender (WinDefend) is not Running.
Startup Type set to: Manual
Searching for Missing Digital Signatures:
* No issues found.
Checking HOSTS File:
* HOSTS file entries found:
ÿþ1 2 7 . 0 . 0 . 1 l o c a l h o s t
: : 1 l o c a l h o s t
Program finished at: 07/12/2013 09:46:10 PM
Execution time: 0 hours(s), 0 minute(s), and 44 seconds(s)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html
Invalid arguments ignored: (1).com
Program started at: 07/12/2013 09:45:26 PM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1
Checking for Windows services to stop:
* No malware services found to stop.
Checking for processes to terminate:
* C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (PID: 1656) [AU-HEUR]
* C:\Users\z\Desktop\AdwCleaner.exe (PID: 360) [UP-HEUR]
* C:\Users\z\Desktop\AdwCleaner.exe (PID: 5872) [UP-HEUR]
3 proccesses terminated!
Checking Registry for malware related settings:
* No issues found in the Registry.
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
Performing miscellaneous checks:
* Windows Defender Disabled
[HKLM\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware" = dword:00000001
Checking Windows Service Integrity:
* Windows Defender (WinDefend) is not Running.
Startup Type set to: Manual
Searching for Missing Digital Signatures:
* No issues found.
Checking HOSTS File:
* HOSTS file entries found:
ÿþ1 2 7 . 0 . 0 . 1 l o c a l h o s t
: : 1 l o c a l h o s t
Program finished at: 07/12/2013 09:46:10 PM
Execution time: 0 hours(s), 0 minute(s), and 44 seconds(s)
-
- Level 2
- Příspěvky: 186
- Registrován: červenec 09
- Pohlaví:
- Stav:
Offline
Re: Odinstalace Qvo6
Tou hláškou jsem myslel C:\Users\z\Downloads\adwcleaner.exe) Error : Variable used without being declared. nyní jsem zkusil odstranit problémy s kompatibilitou, nakonec z toho vyšlo, že je to Nekontabilní aplikace. tak ještě tedy zkusím ten ESET.
Kdo je online
Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 101 hostů