Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-01-2014 Ran by admin at 2014-01-07 18:13:14 Run:1 Running from E:\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** IFEO\ccleaner64.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" IFEO\pccompanion.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" IFEO\protoolsse.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" IFEO\real desktop.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" IFEO\setpoint.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" IFEO\setup.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" IFEO\unins000.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" IFEO\uninst.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" IFEO\uninstall pro tools.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" IFEO\wwp.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" Task: {0926EFDE-B990-414B-A01F-1CE06076C689} - System32\Tasks\{339A016E-973C-4D97-A633-F7D138B7E27D} => C:\Users\admin\Desktop\loader\tibialoader.exe Task: {113B77C4-E3F9-4075-A989-CD45CC772D8D} - System32\Tasks\{3A9C9086-77FA-46C6-8BC2-B73F45BDC0C1} => E:\Program Files\Portal 2\portal2.exe [2011-04-19] () Task: {150CDEF3-DC83-4D94-9972-94D1E0DA37AA} - System32\Tasks\{4A1967A5-786D-430C-B1B4-AFDC466C8B8D} => D:\Program Files (x86)\Worms Armageddon\wa.exe Task: {20A3965B-C801-4A3E-9108-E7B033DAD791} - System32\Tasks\{2B632C17-6CDA-4AD8-9E90-B0AC873436A6} => E:\Program Files\Portal 2\portal2.exe [2011-04-19] () Task: {20E410DE-B850-4350-8A0B-D827AC345B2C} - System32\Tasks\{724A23E3-2F5B-4E87-9159-BAF3B7CC62DE} => F:\Setup.exe Task: {4BE8044E-83A0-496E-8615-79ED04B4544A} - System32\Tasks\{B6A4D00E-12EB-4BB6-BC0C-8F7DC61D7882} => F:\Setup.exe Task: {681B4EFB-A5FE-412D-B695-8BA723F8A8D9} - System32\Tasks\{CBDFBE6E-AED8-4CB5-87B6-601AB8ECE42E} => C:\Program Files (x86)\Counter-Strike\cstrike.exe Task: {73C26877-77E8-42A6-8D00-C3A94559B393} - System32\Tasks\{BC7D1D1F-4CD0-4F84-B442-D434755D98B7} => D:\Pinnacle\studio\Setup\setup.exe [2002-12-02] (InstallShield Software Corporation) Task: {8C206789-589B-4D26-A318-7C3DE5D64CE8} - System32\Tasks\{C2EFB835-553F-4A52-AAA2-CC763D941832} => F:\Setup.exe Task: {8DFC0DFA-776F-45F4-A97B-C131E070A446} - System32\Tasks\{949A0043-F4F6-45BF-9C1A-654647851A9B} => D:\Pinnacle\studio\Setup\setup.exe [2002-12-02] (InstallShield Software Corporation) Task: {9223E9C2-A10E-4C0F-A949-D75F150B16B4} - System32\Tasks\{D95C9CF0-6D22-4393-B967-4053DF13B9EC} => E:\uTorrent\VAc\setup.exe Task: {E37F5E5D-ADF8-4906-9266-CA41C020875E} - System32\Tasks\{7926ED8F-192B-434B-B0EB-2ED983AFB3CE} => D:\Pinnacle\studio\Setup\setup.exe [2002-12-02] (InstallShield Software Corporation) Task: {E786F7A7-B75C-498B-AE9C-491EA36C2FDB} - \Program aktualizacji online firmy Adobe. No Task File Task: {FBBBCD01-8640-42B4-9C2F-67FD4029E206} - System32\Tasks\{FD3124E8-6304-4C07-B30C-E3E6AEC30006} => D:\Program Files\coolpro2\StartupTheme\Combat Arms EU\CombatArms.exe Task: {FBBBFE47-1014-4CFE-8320-3B38964EF650} - System32\Tasks\{ED14C6D1-830F-45EA-9070-140FA9DAFAD5} => D:\Program Files (x86)\Worms Armageddon\wa.exe S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] S3 SbieDrv; \??\C:\Program Files\Sandboxie\SbieDrv.sys [x] S3 xhunter1; \??\C:\Windows\xhunter1.sys [x] HKLM-x32\...\Run: [] - [x] SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = http://search.yahoo.com/search?fr=chr-panda&q={searchTerms}&ei=UTF-8&type=PCAFSI1219 BHO-x32: QuickStores-Toolbar - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation) BHO-x32: No Name - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - No File Toolbar: HKLM-x32 - No Name - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - No File Toolbar: HKLM-x32 - QuickStores-Toolbar - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation) Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File FF user.js: detected! => C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\y2uu2708.default\user.js FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\avg-secure-search.xml FF Extension: ArcaBit Ext. - C:\Program Files (x86)\Mozilla Firefox\extensions\arcabit@www.arcabit.pl FF Extension: QuickStores-Toolbar - C:\Program Files (x86)\Mozilla Firefox\extensions\quickstores@quickstores.de AlternateDataStreams: C:\Users\admin\Cookies:jDmh12ImotUdpCWXDa AlternateDataStreams: C:\Users\admin\Cookies:ri48EeI3wYJ2qwMYmD9N AlternateDataStreams: C:\Users\admin\AppData\Local\Temp:6nkmWqbKF4TISWbGKSm AlternateDataStreams: C:\Users\admin\AppData\Local\Temp:YMgrbO9tBOjNi0PxyBFMUnVmFYRxr AlternateDataStreams: C:\Users\admin\AppData\Local\Temporary Internet Files:EJafoc8CZck1XVFfefmwRSC AlternateDataStreams: C:\Users\admin\AppData\Local\Temporary Internet Files:hsgwvlIS2ZiBG3mMHxczyn4vwBxV AlternateDataStreams: C:\Users\admin\AppData\Local\Temporary Internet Files:VNfk8IhWY3ZMK1efBYU AlternateDataStreams: C:\ProgramData\Microsoft:DKwSjTXPHJLY3DqcfUflk62 AlternateDataStreams: C:\ProgramData\Microsoft:gTRfibUZRUrevgaOj AlternateDataStreams: C:\ProgramData\Microsoft:PngkyvdTAXXb9MswQ C:\Users\admin\AppData\Roaming\chrtmp C:\Users\admin\AppData\Roaming\AVG2013 C:\Users\admin\AppData\Roaming\TuneUp Software C:\Users\Default\AppData\Roaming\TuneUp Software C:\Users\Default User\AppData\Roaming\TuneUp Software ***************** HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\ccleaner64.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\pccompanion.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\protoolsse.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\real desktop.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\setpoint.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\setup.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\unins000.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\uninst.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\uninstall pro tools.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\wwp.exe => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0926EFDE-B990-414B-A01F-1CE06076C689} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0926EFDE-B990-414B-A01F-1CE06076C689} => Key deleted successfully. C:\Windows\System32\Tasks\{339A016E-973C-4D97-A633-F7D138B7E27D} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{339A016E-973C-4D97-A633-F7D138B7E27D} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{113B77C4-E3F9-4075-A989-CD45CC772D8D} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{113B77C4-E3F9-4075-A989-CD45CC772D8D} => Key deleted successfully. C:\Windows\System32\Tasks\{3A9C9086-77FA-46C6-8BC2-B73F45BDC0C1} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{3A9C9086-77FA-46C6-8BC2-B73F45BDC0C1} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{150CDEF3-DC83-4D94-9972-94D1E0DA37AA} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{150CDEF3-DC83-4D94-9972-94D1E0DA37AA} => Key deleted successfully. C:\Windows\System32\Tasks\{4A1967A5-786D-430C-B1B4-AFDC466C8B8D} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4A1967A5-786D-430C-B1B4-AFDC466C8B8D} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{20A3965B-C801-4A3E-9108-E7B033DAD791} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{20A3965B-C801-4A3E-9108-E7B033DAD791} => Key deleted successfully. C:\Windows\System32\Tasks\{2B632C17-6CDA-4AD8-9E90-B0AC873436A6} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2B632C17-6CDA-4AD8-9E90-B0AC873436A6} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{20E410DE-B850-4350-8A0B-D827AC345B2C} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{20E410DE-B850-4350-8A0B-D827AC345B2C} => Key deleted successfully. C:\Windows\System32\Tasks\{724A23E3-2F5B-4E87-9159-BAF3B7CC62DE} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{724A23E3-2F5B-4E87-9159-BAF3B7CC62DE} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4BE8044E-83A0-496E-8615-79ED04B4544A} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4BE8044E-83A0-496E-8615-79ED04B4544A} => Key deleted successfully. C:\Windows\System32\Tasks\{B6A4D00E-12EB-4BB6-BC0C-8F7DC61D7882} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B6A4D00E-12EB-4BB6-BC0C-8F7DC61D7882} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{681B4EFB-A5FE-412D-B695-8BA723F8A8D9} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{681B4EFB-A5FE-412D-B695-8BA723F8A8D9} => Key deleted successfully. C:\Windows\System32\Tasks\{CBDFBE6E-AED8-4CB5-87B6-601AB8ECE42E} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{CBDFBE6E-AED8-4CB5-87B6-601AB8ECE42E} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{73C26877-77E8-42A6-8D00-C3A94559B393} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{73C26877-77E8-42A6-8D00-C3A94559B393} => Key deleted successfully. C:\Windows\System32\Tasks\{BC7D1D1F-4CD0-4F84-B442-D434755D98B7} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{BC7D1D1F-4CD0-4F84-B442-D434755D98B7} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8C206789-589B-4D26-A318-7C3DE5D64CE8} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8C206789-589B-4D26-A318-7C3DE5D64CE8} => Key deleted successfully. C:\Windows\System32\Tasks\{C2EFB835-553F-4A52-AAA2-CC763D941832} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{C2EFB835-553F-4A52-AAA2-CC763D941832} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8DFC0DFA-776F-45F4-A97B-C131E070A446} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8DFC0DFA-776F-45F4-A97B-C131E070A446} => Key deleted successfully. C:\Windows\System32\Tasks\{949A0043-F4F6-45BF-9C1A-654647851A9B} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{949A0043-F4F6-45BF-9C1A-654647851A9B} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9223E9C2-A10E-4C0F-A949-D75F150B16B4} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9223E9C2-A10E-4C0F-A949-D75F150B16B4} => Key deleted successfully. C:\Windows\System32\Tasks\{D95C9CF0-6D22-4393-B967-4053DF13B9EC} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D95C9CF0-6D22-4393-B967-4053DF13B9EC} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E37F5E5D-ADF8-4906-9266-CA41C020875E} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E37F5E5D-ADF8-4906-9266-CA41C020875E} => Key deleted successfully. C:\Windows\System32\Tasks\{7926ED8F-192B-434B-B0EB-2ED983AFB3CE} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7926ED8F-192B-434B-B0EB-2ED983AFB3CE} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E786F7A7-B75C-498B-AE9C-491EA36C2FDB} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E786F7A7-B75C-498B-AE9C-491EA36C2FDB} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Program aktualizacji online firmy Adobe. => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FBBBCD01-8640-42B4-9C2F-67FD4029E206} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FBBBCD01-8640-42B4-9C2F-67FD4029E206} => Key deleted successfully. C:\Windows\System32\Tasks\{FD3124E8-6304-4C07-B30C-E3E6AEC30006} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{FD3124E8-6304-4C07-B30C-E3E6AEC30006} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FBBBFE47-1014-4CFE-8320-3B38964EF650} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FBBBFE47-1014-4CFE-8320-3B38964EF650} => Key deleted successfully. C:\Windows\System32\Tasks\{ED14C6D1-830F-45EA-9070-140FA9DAFAD5} => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{ED14C6D1-830F-45EA-9070-140FA9DAFAD5} => Key deleted successfully. EagleX64 => Service deleted successfully. SbieDrv => Service deleted successfully. xhunter1 => Service deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} => Key deleted successfully. HKCR\CLSID\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} => Key deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} => Value deleted successfully. HKCR\Wow6432Node\CLSID\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} => Value deleted successfully. HKCR\Wow6432Node\CLSID\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} => Value deleted successfully. HKCR\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} => Key not found. C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\y2uu2708.default\user.js => Moved successfully. HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer => Key deleted successfully. C:\Windows\system32\Adobe\Director\np32dsw.dll not found. C:\Program Files (x86)\mozilla firefox\browser\searchplugins\avg-secure-search.xml => Moved successfully. C:\Program Files (x86)\Mozilla Firefox\extensions\arcabit@www.arcabit.pl => Moved successfully. C:\Program Files (x86)\Mozilla Firefox\extensions\quickstores@quickstores.de => Moved successfully. "C:\Users\admin\Cookies" => ":jDmh12ImotUdpCWXDa" ADS not found. "C:\Users\admin\Cookies" => ":ri48EeI3wYJ2qwMYmD9N" ADS not found. C:\Users\admin\AppData\Local\Temp => ":6nkmWqbKF4TISWbGKSm" ADS removed successfully. C:\Users\admin\AppData\Local\Temp => ":YMgrbO9tBOjNi0PxyBFMUnVmFYRxr" ADS removed successfully. "C:\Users\admin\AppData\Local\Temporary Internet Files" => ":EJafoc8CZck1XVFfefmwRSC" ADS not found. "C:\Users\admin\AppData\Local\Temporary Internet Files" => ":hsgwvlIS2ZiBG3mMHxczyn4vwBxV" ADS not found. "C:\Users\admin\AppData\Local\Temporary Internet Files" => ":VNfk8IhWY3ZMK1efBYU" ADS not found. C:\ProgramData\Microsoft => ":DKwSjTXPHJLY3DqcfUflk62" ADS removed successfully. C:\ProgramData\Microsoft => ":gTRfibUZRUrevgaOj" ADS removed successfully. C:\ProgramData\Microsoft => ":PngkyvdTAXXb9MswQ" ADS removed successfully. C:\Users\admin\AppData\Roaming\chrtmp => Moved successfully. C:\Users\admin\AppData\Roaming\AVG2013 => Moved successfully. C:\Users\admin\AppData\Roaming\TuneUp Software => Moved successfully. C:\Users\Default\AppData\Roaming\TuneUp Software => Moved successfully. "C:\Users\Default User\AppData\Roaming\TuneUp Software" => File/Directory not found. ==== End of Fixlog ====