|
Plagegeister aller Art und deren Bekämpfung: seltsame internetabbrüche !Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
29.08.2013, 22:26 | #16 |
/// Winkelfunktion /// TB-Süch-Tiger™ | seltsame internetabbrüche ! Dann bitte jetzt Combofix ausführen: Scan mit Combofix
__________________ Logfiles bitte immer in CODE-Tags posten |
31.08.2013, 12:43 | #17 |
| seltsame internetabbrüche ! Combofix Logfile:
__________________Code:
ATTFilter ComboFix 13-08-30.02 - Agando 31.08.2013 13:28:13.1.8 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8173.5383 [GMT 2:00] ausgeführt von:: c:\users\Agando\Downloads\ComboFix.exe AV: Computer Schutz *Disabled/Updated* {15414183-282E-D62C-CA37-EF24860A2F17} AV: Kaspersky Internet Security *Disabled/Updated* {179979E8-273D-D14E-0543-2861940E4886} FW: Kaspersky Internet Security *Disabled* {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} SP: Computer Schutz *Disabled/Updated* {AE20A067-0E14-D9A2-F087-D456FD8D65AA} SP: Kaspersky Internet Security *Disabled/Updated* {ACF8980C-0107-DEC0-3FF3-1313EF89023B} SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Neuer Wiederherstellungspunkt wurde erstellt . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . C:\CFLog c:\cflog\EPLog.txt c:\users\Agando\AppData\Roaming\Microsoft\Windows\Recent\MSN Nachrichten.url c:\windows\SysWow64\chipxum.dll c:\windows\SysWow64\frapsvid.dll c:\windows\SysWow64\System32\MASetupCleaner.exe c:\windows\SysWow64\System32\muzapp.exe . Infizierte Kopie von c:\windows\SysWow64\userinit.exe wurde gefunden und desinfiziert Kopie von - c:\windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe wurde wiederhergestellt . . ((((((((((((((((((((((( Dateien erstellt von 2013-07-28 bis 2013-08-31 )))))))))))))))))))))))))))))) . . 2013-08-29 20:13 . 2013-05-06 07:13 110176 ----a-w- c:\windows\system32\klfphc.dll 2013-08-29 20:12 . 2013-08-29 20:12 -------- d-----w- c:\windows\ELAMBKUP 2013-08-29 20:12 . 2013-08-31 11:36 -------- d-----w- c:\programdata\Kaspersky Lab 2013-08-29 20:12 . 2013-08-29 20:12 -------- d-----w- c:\program files (x86)\Kaspersky Lab 2013-08-29 20:12 . 2013-08-14 10:40 619616 ----a-w- c:\windows\system32\drivers\klif.sys 2013-08-29 20:12 . 2013-06-08 18:18 112224 ----a-w- c:\windows\system32\drivers\klflt.sys 2013-08-29 19:48 . 2013-08-29 19:48 -------- d-----w- C:\FRST 2013-08-29 00:25 . 2013-08-29 00:25 -------- d-----w- c:\users\Agando\AppData\Roaming\TrojanHunter 2013-08-29 00:25 . 2013-08-29 00:25 -------- d-----w- c:\users\Agando\AppData\Roaming\Simply Super Software 2013-08-29 00:24 . 2013-08-29 00:25 -------- d-----w- c:\program files (x86)\Trojan Remover 2013-08-29 00:24 . 2013-08-29 00:24 -------- d-----w- c:\programdata\Simply Super Software 2013-08-28 22:47 . 2013-08-28 22:47 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2013-08-28 22:47 . 2013-04-04 12:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys 2013-08-28 22:42 . 2013-08-28 22:42 -------- d-----w- c:\programdata\TrojanHunter 2013-08-28 22:41 . 2013-08-29 19:16 -------- d-----w- c:\program files (x86)\TrojanHunter 5.5 2013-08-27 19:48 . 2013-08-27 19:48 -------- d-----w- c:\users\Agando\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z 2013-08-27 19:47 . 2013-08-27 19:47 -------- d-----w- c:\program files (x86)\Delta 2013-08-27 19:46 . 2013-08-27 19:46 -------- d-----w- c:\programdata\Babylon 2013-08-27 19:45 . 2013-08-27 19:45 -------- d-----w- c:\program files (x86)\OpenIt 2013-08-26 15:03 . 2013-08-27 19:54 -------- d-----w- c:\users\Agando\AppData\Roaming\DSite 2013-08-25 22:44 . 2006-09-29 20:21 77824 ----a-w- c:\windows\SysWow64\DriveInfo.dll 2013-08-25 22:44 . 2013-08-27 19:54 -------- d-----w- c:\program files (x86)\CHIP System-Check-Tool 2013-08-25 22:38 . 2013-08-27 19:54 -------- d-----w- c:\program files\CPUID 2013-08-20 13:17 . 2013-08-20 13:17 -------- d-----w- c:\program files\iPod 2013-08-20 13:17 . 2013-08-20 13:17 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-08-20 13:17 . 2013-08-20 13:17 -------- d-----w- c:\program files\iTunes 2013-08-20 13:17 . 2013-08-20 13:17 -------- d-----w- c:\program files (x86)\iTunes 2013-08-15 16:01 . 2013-08-15 16:01 -------- d-----w- c:\program files (x86)\Common Files\DVDVideoSoft 2013-08-15 16:01 . 2013-08-15 16:01 -------- d-----w- c:\program files (x86)\DVDVideoSoft 2013-08-15 00:25 . 2013-07-09 05:52 224256 ----a-w- c:\windows\system32\wintrust.dll 2013-08-15 00:25 . 2013-07-09 05:46 184320 ----a-w- c:\windows\system32\cryptsvc.dll 2013-08-15 00:25 . 2013-07-09 05:46 1472512 ----a-w- c:\windows\system32\crypt32.dll 2013-08-15 00:25 . 2013-07-09 05:46 139776 ----a-w- c:\windows\system32\cryptnet.dll 2013-08-15 00:25 . 2013-07-09 04:52 175104 ----a-w- c:\windows\SysWow64\wintrust.dll 2013-08-15 00:25 . 2013-07-09 04:46 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll 2013-08-15 00:25 . 2013-07-09 04:46 1166848 ----a-w- c:\windows\SysWow64\crypt32.dll 2013-08-15 00:25 . 2013-07-09 04:46 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll 2013-08-15 00:23 . 2013-07-06 06:03 1910208 ----a-w- c:\windows\system32\drivers\tcpip.sys . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-08-31 11:37 . 2012-04-05 10:53 30528 ----a-w- c:\windows\GVTDrv64.sys 2013-08-31 11:37 . 2012-04-05 10:51 25640 ----a-w- c:\windows\gdrv.sys 2013-08-26 10:40 . 2013-07-24 06:14 56016 ----a-w- c:\windows\system32\drivers\fsbts.sys 2013-08-20 20:11 . 2012-04-17 02:14 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-08-20 20:11 . 2012-04-17 02:14 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-08-15 01:02 . 2012-04-17 21:22 78161360 ----a-w- c:\windows\system32\MRT.exe 2013-07-25 03:38 . 2013-07-25 03:38 296448 ----a-w- c:\windows\SysWow64\rzaudiodll.dll 2013-07-16 02:10 . 2013-07-16 02:10 57344 ----a-w- c:\windows\SysWow64\rzdevinfo.dll 2013-07-16 02:10 . 2013-07-16 02:10 154112 ----a-w- c:\windows\SysWow64\rztouchdll.dll 2013-07-16 02:10 . 2013-07-16 02:10 117248 ----a-w- c:\windows\SysWow64\rzdisplaydll.dll 2013-07-16 02:10 . 2013-07-16 02:10 772608 ----a-w- c:\windows\SysWow64\rzdevicedll.dll 2013-07-10 06:29 . 2013-07-10 06:29 137400 ----a-w- c:\windows\system32\drivers\rzudd.sys 2013-07-09 04:45 . 2013-08-15 00:24 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2013-07-03 18:04 . 2013-07-03 18:04 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-07-03 18:03 . 2013-04-03 06:13 867240 ----a-w- c:\windows\SysWow64\npDeployJava1.dll 2013-07-03 18:03 . 2013-04-03 06:13 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll 2013-07-02 08:34 . 2013-07-23 16:58 9460976 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{90C61928-4A98-4A6E-BB40-7F74CA7BD671}\mpengine.dll 2013-06-10 10:27 . 2013-06-10 10:27 30304 ----a-w- c:\windows\system32\drivers\klim6.sys 2013-06-07 06:30 . 2013-06-07 06:30 97280 ----a-w- c:\windows\system32\mshtmled.dll 2013-06-07 06:30 . 2013-06-07 06:30 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll 2013-06-07 06:30 . 2013-06-07 06:30 81408 ----a-w- c:\windows\system32\icardie.dll 2013-06-07 06:30 . 2013-06-07 06:30 762368 ----a-w- c:\windows\system32\ieapfltr.dll 2013-06-07 06:30 . 2013-06-07 06:30 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe 2013-06-07 06:30 . 2013-06-07 06:30 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll 2013-06-07 06:30 . 2013-06-07 06:30 62976 ----a-w- c:\windows\system32\pngfilt.dll 2013-06-07 06:30 . 2013-06-07 06:30 61952 ----a-w- c:\windows\SysWow64\tdc.ocx 2013-06-07 06:30 . 2013-06-07 06:30 599552 ----a-w- c:\windows\system32\vbscript.dll 2013-06-07 06:30 . 2013-06-07 06:30 523264 ----a-w- c:\windows\SysWow64\vbscript.dll 2013-06-07 06:30 . 2013-06-07 06:30 52224 ----a-w- c:\windows\system32\msfeedsbs.dll 2013-06-07 06:30 . 2013-06-07 06:30 51200 ----a-w- c:\windows\system32\imgutil.dll 2013-06-07 06:30 . 2013-06-07 06:30 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll 2013-06-07 06:30 . 2013-06-07 06:30 452096 ----a-w- c:\windows\system32\dxtmsft.dll 2013-06-07 06:30 . 2013-06-07 06:30 441856 ----a-w- c:\windows\system32\html.iec 2013-06-07 06:30 . 2013-06-07 06:30 38400 ----a-w- c:\windows\SysWow64\imgutil.dll 2013-06-07 06:30 . 2013-06-07 06:30 361984 ----a-w- c:\windows\SysWow64\html.iec 2013-06-07 06:30 . 2013-06-07 06:30 281600 ----a-w- c:\windows\system32\dxtrans.dll 2013-06-07 06:30 . 2013-06-07 06:30 27648 ----a-w- c:\windows\system32\licmgr10.dll 2013-06-07 06:30 . 2013-06-07 06:30 270848 ----a-w- c:\windows\system32\iedkcs32.dll 2013-06-07 06:30 . 2013-06-07 06:30 247296 ----a-w- c:\windows\system32\webcheck.dll 2013-06-07 06:30 . 2013-06-07 06:30 235008 ----a-w- c:\windows\system32\url.dll 2013-06-07 06:30 . 2013-06-07 06:30 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll 2013-06-07 06:30 . 2013-06-07 06:30 226304 ----a-w- c:\windows\system32\elshyph.dll 2013-06-07 06:30 . 2013-06-07 06:30 216064 ----a-w- c:\windows\system32\msls31.dll 2013-06-07 06:30 . 2013-06-07 06:30 197120 ----a-w- c:\windows\system32\msrating.dll 2013-06-07 06:30 . 2013-06-07 06:30 185344 ----a-w- c:\windows\SysWow64\elshyph.dll 2013-06-07 06:30 . 2013-06-07 06:30 173568 ----a-w- c:\windows\system32\ieUnatt.exe 2013-06-07 06:30 . 2013-06-07 06:30 167424 ----a-w- c:\windows\system32\iexpress.exe 2013-06-07 06:30 . 2013-06-07 06:30 158720 ----a-w- c:\windows\SysWow64\msls31.dll 2013-06-07 06:30 . 2013-06-07 06:30 1509376 ----a-w- c:\windows\system32\inetcpl.cpl 2013-06-07 06:30 . 2013-06-07 06:30 150528 ----a-w- c:\windows\SysWow64\iexpress.exe 2013-06-07 06:30 . 2013-06-07 06:30 149504 ----a-w- c:\windows\system32\occache.dll 2013-06-07 06:30 . 2013-06-07 06:30 144896 ----a-w- c:\windows\system32\wextract.exe 2013-06-07 06:30 . 2013-06-07 06:30 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl 2013-06-07 06:30 . 2013-06-07 06:30 1400416 ----a-w- c:\windows\system32\ieapfltr.dat 2013-06-07 06:30 . 2013-06-07 06:30 138752 ----a-w- c:\windows\SysWow64\wextract.exe 2013-06-07 06:30 . 2013-06-07 06:30 13824 ----a-w- c:\windows\system32\mshta.exe 2013-06-07 06:30 . 2013-06-07 06:30 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2013-06-07 06:30 . 2013-06-07 06:30 136192 ----a-w- c:\windows\system32\iepeers.dll 2013-06-07 06:30 . 2013-06-07 06:30 12800 ----a-w- c:\windows\SysWow64\mshta.exe 2013-06-07 06:30 . 2013-06-07 06:30 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll 2013-06-07 06:30 . 2013-06-07 06:30 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2013-06-07 06:30 . 2013-06-07 06:30 102912 ----a-w- c:\windows\system32\inseng.dll 2013-06-07 06:30 . 2013-06-07 06:30 12800 ----a-w- c:\windows\system32\msfeedssync.exe 2013-06-07 06:30 . 2013-06-07 06:30 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2013-06-07 06:30 . 2013-06-07 06:30 77312 ----a-w- c:\windows\system32\tdc.ocx 2013-06-07 06:30 . 2013-06-07 06:30 48640 ----a-w- c:\windows\system32\mshtmler.dll 2013-06-07 06:30 . 2013-06-07 06:30 135680 ----a-w- c:\windows\system32\IEAdvpack.dll 2013-06-06 15:38 . 2013-06-06 15:38 178784 ----a-w- c:\windows\system32\drivers\kneps.sys 2013-06-05 03:34 . 2013-07-10 14:07 3153920 ----a-w- c:\windows\system32\win32k.sys 2013-06-04 06:00 . 2013-07-10 14:09 624128 ----a-w- c:\windows\system32\qedit.dll 2013-06-04 04:53 . 2013-07-10 14:09 509440 ----a-w- c:\windows\SysWow64\qedit.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] 2013-08-13 19:36 277512 ----a-w- c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2013-02-15 3093624] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-06-21 19875432] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "Dolby Home Theater v4"="c:\program files (x86)\Dolby Home Theater v4\pcee4.exe" [2011-06-01 506712] "JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-09-07 43608] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576] "Razer Synapse"="c:\program files (x86)\Razer\Synapse\RzSynapse.exe" [2013-07-23 606056] "V0330Mon.exe"="c:\windows\V0330Mon.exe" [2007-04-29 32768] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816] "F-Secure Hoster (47731)"="c:\program files (x86)\Kabel BW\fshoster32.exe" [2013-05-15 191424] "F-Secure Manager"="c:\program files (x86)\Kabel BW\apps\ComputerSecurity\Common\FSM32.EXE" [2013-08-14 310208] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-08-16 152392] "THGuard"="c:\program files (x86)\TrojanHunter 5.5\THGuard.exe" [2012-10-22 1086880] "TrojanScanner"="c:\program files (x86)\Trojan Remover\Trjscan.exe" [2013-07-19 1655568] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce] "EasyTuneVI"="c:\program files (x86)\Gigabyte\ET6\ETCall.exe" [2011-11-24 40960] . c:\users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ CurseClientStartup.ccip [2012-4-17 0] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "mixer9"=wdmaud.drv . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R3 ALSysIO;ALSysIO;c:\users\Agando\AppData\Local\Temp\ALSysIO64.sys;c:\users\Agando\AppData\Local\Temp\ALSysIO64.sys [x] R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x] R3 etdrv;etdrv;c:\windows\etdrv.sys;c:\windows\etdrv.sys [x] R3 FsUsbExDisk;FsUsbExDisk;c:\windows\SysWOW64\FsUsbExDisk.SYS;c:\windows\SysWOW64\FsUsbExDisk.SYS [x] R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x] R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsux64.sys [x] R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x] R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x] R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x] R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys;c:\windows\SYSNATIVE\Drivers\TFsExDisk.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x] R3 X6va008;X6va008;c:\windows\SysWOW64\Drivers\X6va008;c:\windows\SysWOW64\Drivers\X6va008 [x] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x] S0 fsbts;fsbts;c:\windows\system32\Drivers\fsbts.sys;c:\windows\SYSNATIVE\Drivers\fsbts.sys [x] S1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files (x86)\Kabel BW\apps\ComputerSecurity\HIPS\drivers\fshs.sys;c:\program files (x86)\Kabel BW\apps\ComputerSecurity\HIPS\drivers\fshs.sys [x] S1 fsvista;F-Secure Vista Support Driver;c:\program files (x86)\Kabel BW\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys;c:\program files (x86)\Kabel BW\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [x] S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x] S1 klpd;klpd;c:\windows\system32\DRIVERS\klpd.sys;c:\windows\SYSNATIVE\DRIVERS\klpd.sys [x] S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x] S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x] S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x] S2 DRHARD64;DRHARD64;c:\windows\system32\drivers\DRHARD64.sys;c:\windows\SYSNATIVE\drivers\DRHARD64.sys [x] S2 DRHMSR64;DRHMSR64;c:\windows\system32\drivers\DRHMSR64.sys;c:\windows\SYSNATIVE\drivers\DRHMSR64.sys [x] S2 ES lite Service;ES lite Service for program management.;c:\program files (x86)\Gigabyte\EasySaver\ESSVR.EXE;c:\program files (x86)\Gigabyte\EasySaver\ESSVR.EXE [x] S2 fshoster;F-Secure Dll Hoster;c:\program files (x86)\Kabel BW\fshoster32.exe;c:\program files (x86)\Kabel BW\fshoster32.exe [x] S2 FSORSPClient;F-Secure ORSP Client;c:\program files (x86)\Kabel BW\apps\CCF_Reputation\fsorsp.exe;c:\program files (x86)\Kabel BW\apps\CCF_Reputation\fsorsp.exe [x] S2 JMB36X;JMB36X;c:\windows\SysWOW64\XSrvSetup.exe;c:\windows\SysWOW64\XSrvSetup.exe [x] S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x] S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x] S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] S3 AODDriver;AODDriver;c:\program files (x86)\Gigabyte\ET6\amd64\AODDriver.sys;c:\program files (x86)\Gigabyte\ET6\amd64\AODDriver.sys [x] S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys;c:\windows\SYSNATIVE\Drivers\EtronHub3.sys [x] S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys;c:\windows\SYSNATIVE\Drivers\EtronXHCI.sys [x] S3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files (x86)\Kabel BW\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys;c:\program files (x86)\Kabel BW\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [x] S3 fsni;fsni;c:\program files (x86)\Kabel BW\apps\CCF_Scanning\fsni64.sys;c:\program files (x86)\Kabel BW\apps\CCF_Scanning\fsni64.sys [x] S3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys;c:\windows\GVTDrv64.sys [x] S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x] S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x] S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] S3 rzudd;Razer Mouse Driver;c:\windows\system32\DRIVERS\rzudd.sys;c:\windows\SYSNATIVE\DRIVERS\rzudd.sys [x] S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x] S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x] S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x] S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x] S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x] S3 V0330VID;WebCam Vista/Live! Cam Chat VF0330;c:\windows\system32\DRIVERS\V0330Vid.sys;c:\windows\SYSNATIVE\DRIVERS\V0330Vid.sys [x] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - AODDRIVER *NewlyCreated* - WS2IFSL . Inhalt des "geplante Tasks" Ordners . 2013-08-31 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-17 20:11] . 2013-08-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-28 21:37] . 2013-08-31 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-28 21:37] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] 2013-08-13 19:36 336904 ----a-w- c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-08-09 12666984] "RtHDVBg_Dolby"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-08-09 2275944] "Launch LgDeviceAgent"="c:\program files\Logitech\GamePanel Software\LgDevAgt.exe" [2010-08-03 415816] "Launch LGDCore"="c:\program files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" [2010-08-03 4725320] "fssui"="c:\program files (x86)\Windows Live\Family Safety\fsui.exe" [2012-03-08 884584] . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://www.google.com uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm IE: Zu Anti-Banner hinzufügen - c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ie_banner_deny.htm IE: {{07BA1DA9-F501-4796-8728-74D1B91A6CD5} - c:\program files (x86)\PokerStars.EU\PokerStarsUpdate.exe IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll TCP: DhcpNameServer = 192.168.0.1 192.168.0.2 FF - ProfilePath - c:\users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\pam7rq1x.default-1355607406125\ FF - prefs.js: browser.startup.homepage - hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=9CE0F8D111109766&affID=119357&tsp=4987 FF - ExtSQL: 2013-08-27 21:49; ffxtlbr@delta.com; c:\users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\pam7rq1x.default-1355607406125\extensions\ffxtlbr@delta.com FF - ExtSQL: 2013-08-28 07:38; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\pam7rq1x.default-1355607406125\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF - ExtSQL: 2013-08-29 22:12; anti_banner@kaspersky.com; c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com FF - ExtSQL: 2013-08-29 22:12; content_blocker@kaspersky.com; c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com FF - ExtSQL: 2013-08-29 22:12; online_banking@kaspersky.com; c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com FF - ExtSQL: 2013-08-29 22:13; url_advisor@kaspersky.com; c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com FF - ExtSQL: 2013-08-29 22:13; virtual_keyboard@kaspersky.com; c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com FF - user.js: extensions.autoDisableScopes - 0 FF - user.js: extensions.shownSelectionUI - true FF - user.js: extensions.delta.tlbrSrchUrl - FF - user.js: extensions.delta.id - 9ce0b021000000000000f8d111109766 FF - user.js: extensions.delta.appId - {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} FF - user.js: extensions.delta.instlDay - 15944 FF - user.js: extensions.delta.vrsn - 1.8.24.6 FF - user.js: extensions.delta.vrsni - 1.8.24.6 FF - user.js: extensions.delta.vrsnTs - 1.8.24.621:48 FF - user.js: extensions.delta.prtnrId - delta FF - user.js: extensions.delta.prdct - delta FF - user.js: extensions.delta.aflt - babsst FF - user.js: extensions.delta.smplGrp - none FF - user.js: extensions.delta.tlbrId - base FF - user.js: extensions.delta.instlRef - sst FF - user.js: extensions.delta.dfltLng - de FF - user.js: extensions.delta.excTlbr - false FF - user.js: extensions.delta.ffxUnstlRst - true FF - user.js: extensions.delta.admin - false FF - user.js: extensions.delta_i.babTrack - affID=119357&tsp=4987 FF - user.js: extensions.delta_i.babExt - FF - user.js: extensions.delta_i.srcExt - ss FF - user.js: extensions.delta.autoRvrt - false FF - user.js: extensions.delta.rvrt - false FF - user.js: extensions.delta.newTab - false . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Wow6432Node-HKCU-Run-Facebook Update - c:\users\Agando\AppData\Local\Facebook\Update\FacebookUpdate.exe Wow6432Node-HKLM-Run-<NO NAME> - (no file) HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start AddRemove-Streamripper - c:\program files (x86)\Streamripper\Uninstall.exe AddRemove-{520C1D80-935C-42B9-9340-E883849D804F}_is1 - c:\program files (x86)\DriverTuner\unins000.exe . . . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\fshoster] "ImagePath"="\"c:\program files (x86)\Kabel BW\fshoster32.exe\" -hosterid:0" . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va008] "ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va008" . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-2791813957-2553131097-2160486698-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.Email.1" . [HKEY_USERS\S-1-5-21-2791813957-2553131097-2160486698-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.VCard.1" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\F-Secure\My Services Agent\Protected] @Denied: ) (Everyone) "AgentIdentifier"="121c0103-9480-427e-ac3f-4470ddbf0870" "AuthorizationCode"="" "47731_AgentIdentifier"="121c0103-9480-427e-ac3f-4470ddbf0870" . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Weitere laufende Prozesse ------------------------ . c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe c:\program files (x86)\Windows Live\Family Safety\fsssvc.exe c:\program files (x86)\Kabel BW\apps\ComputerSecurity\Anti-Virus\FSGK32.EXE c:\windows\SysWOW64\PnkBstrA.exe c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe c:\program files (x86)\Kabel BW\apps\ComputerSecurity\Common\FSMA32.EXE c:\program files (x86)\Kabel BW\apps\ComputerSecurity\Anti-Virus\fssm32.exe c:\program files (x86)\Gigabyte\ET6\GUI.exe . ************************************************************************** . Zeit der Fertigstellung: 2013-08-31 13:43:06 - PC wurde neu gestartet ComboFix-quarantined-files.txt 2013-08-31 11:43 . Vor Suchlauf: 14 Verzeichnis(se), 582.730.170.368 Bytes frei Nach Suchlauf: 18 Verzeichnis(se), 583.393.112.064 Bytes frei . - - End Of File - - 216F9EB232CC4DE2B34833BCE7DF1142 |
01.09.2013, 15:54 | #18 |
/// Winkelfunktion /// TB-Süch-Tiger™ | seltsame internetabbrüche ! Bitte MBAR runterladen und ein neues Logs damit machen:
__________________Malwarebytes Anti-Rootkit (MBAR) Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________ |
02.09.2013, 11:42 | #19 |
| seltsame internetabbrüche !Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.07.0.1005 www.malwarebytes.org Database version: v2013.09.02.02 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16660 Agando :: AGANDO_HP_PC [administrator] 02.09.2013 12:31:45 mbar-log-2013-09-02 (12-31-45).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 276576 Time elapsed: 8 minute(s), 1 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) Physical Sectors Detected: 0 (No malicious items detected) (end) |
02.09.2013, 11:52 | #20 |
/// Winkelfunktion /// TB-Süch-Tiger™ | seltsame internetabbrüche ! Adware/Junkware/Toolbars entfernen 1. Schritt: adwCleaner Downloade Dir bitte AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
3. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ Logfiles bitte immer in CODE-Tags posten |
02.09.2013, 21:28 | #21 |
| seltsame internetabbrüche !FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-09-2013 05 Ran by Agando (administrator) on AGANDO_HP_PC on 02-09-2013 22:25:48 Running from C:\Users\Agando\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE (F-Secure Corporation) C:\Program Files (x86)\Kabel BW\fshoster32.exe (F-Secure Corporation) C:\Program Files (x86)\Kabel BW\apps\CCF_Reputation\fsorsp.exe (F-Secure Corporation) C:\Program Files (x86)\Kabel BW\apps\ComputerSecurity\Anti-Virus\FSGK32.EXE (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe () C:\Windows\SysWOW64\XSrvSetup.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (F-Secure Corporation) C:\Program Files (x86)\Kabel BW\apps\ComputerSecurity\Common\FSMA32.EXE (F-Secure Corporation) C:\Program Files (x86)\Kabel BW\apps\ComputerSecurity\Anti-Virus\fssm32.exe (F-Secure Corporation) C:\Program Files (x86)\Kabel BW\apps\ComputerSecurity\Common\FSHDLL64.EXE (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe () C:\Program Files (x86)\Gigabyte\ET6\GUI.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe (Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Family Safety\fsui.exe () C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe (Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe (Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe (Creative Technology Ltd.) C:\Windows\V0330Mon.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (F-Secure Corporation) C:\Program Files (x86)\Kabel BW\fshoster32.exe (F-Secure Corporation) C:\Program Files (x86)\Kabel BW\apps\ComputerSecurity\Common\FSM32.EXE (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Mischel Internet Security) C:\Program Files (x86)\TrojanHunter 5.5\THGuard.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe () C:\Program Files\TeamSpeak 3 Client\plugins\ts3overlay\InstallHook.exe (Farbar) C:\Users\Agando\Downloads\FRST64(1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12666984 2011-08-09] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2275944 2011-08-09] (Realtek Semiconductor) HKLM\...\Run: [Launch LgDeviceAgent] - C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe [415816 2010-08-03] (Logitech Inc.) HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [4725320 2010-08-03] (Logitech Inc.) HKLM\...\Run: [fssui] - C:\Program Files (x86)\Windows Live\Family Safety\fsui.exe [884584 2012-03-08] (Microsoft Corporation) HKLM-x32\...\RunOnce: [EasyTuneVI] - C:\Program Files (x86)\Gigabyte\ET6\ETCall.exe [40960 2011-11-24] () HKLM\...\Policies\Explorer: [NoDrives] 0 HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-15] () HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.) HKCU\...\Policies\Explorer: [NoDrives] 0 HKLM-x32\...\Run: [Dolby Home Theater v4] - C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [43608 2010-09-07] () HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [606056 2013-07-23] (Razer Inc.) HKLM-x32\...\Run: [V0330Mon.exe] - C:\Windows\V0330Mon.exe [32768 2007-04-30] (Creative Technology Ltd.) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM-x32\...\Run: [F-Secure Hoster (47731)] - C:\Program Files (x86)\Kabel BW\fshoster32.exe [191424 2013-05-15] (F-Secure Corporation) HKLM-x32\...\Run: [F-Secure Manager] - C:\Program Files (x86)\Kabel BW\apps\ComputerSecurity\Common\FSM32.EXE [310208 2013-08-14] (F-Secure Corporation) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.) HKLM-x32\...\Run: [THGuard] - C:\Program Files (x86)\TrojanHunter 5.5\THGuard.exe [1086880 2012-10-23] (Mischel Internet Security) HKLM-x32\...\Run: [TrojanScanner] - C:\Program Files (x86)\Trojan Remover\Trjscan.exe [1655568 2013-07-19] (Simply Super Software) Startup: C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=9CE0F8D111109766&affID=119357&tsp=4987 BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.) BHO-x32: No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2 FireFox: ======== FF ProfilePath: C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\pam7rq1x.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Agando\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Agando\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ FF Extension: No Name - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ FF HKLM-x32\...\Firefox\Extensions: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com FF HKCU\...\Firefox\Extensions: [{4340308e-3e37-4dd7-9192-8cf05ce9c9f2}] C:\Program Files (x86)\LyriXeeker\130.xpi FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi ==================== Services (Whitelisted) ================= R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-06-17] (Kaspersky Lab ZAO) R2 ES lite Service; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-08-24] () R2 fshoster; C:\Program Files (x86)\Kabel BW\fshoster32.exe [191424 2013-05-15] (F-Secure Corporation) R3 FSMA; C:\Program Files (x86)\Kabel BW\apps\ComputerSecurity\Common\FSMA32.EXE [216000 2013-08-14] (F-Secure Corporation) R2 FSORSPClient; C:\Program Files (x86)\Kabel BW\apps\CCF_Reputation\fsorsp.exe [60352 2013-07-24] (F-Secure Corporation) R2 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [72280 2010-09-07] () R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-04-07] () ==================== Drivers (Whitelisted) ==================== R3 AODDriver; C:\Program Files (x86)\Gigabyte\ET6\amd64\AODDriver.sys [52280 2010-03-12] (Advanced Micro Devices) R3 AODDriver; C:\Program Files (x86)\Gigabyte\ET6\amd64\AODDriver.sys [52280 2010-03-12] (Advanced Micro Devices) S3 dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [20552 2010-09-06] (Devguru Co., Ltd) R2 DRHARD64; C:\Windows\system32\drivers\DRHARD64.sys [21984 2011-11-03] (Licensed for Gebhard Software) R2 DRHMSR64; C:\Windows\system32\drivers\DRHMSR64.sys [14760 2011-12-06] () S3 etdrv; C:\Windows\etdrv.sys [25640 2012-04-12] (Windows (R) Server 2003 DDK provider) S3 etdrv; C:\Windows\etdrv.sys [25640 2012-04-12] (Windows (R) Server 2003 DDK provider) R3 F-Secure Gatekeeper; C:\Program Files (x86)\Kabel BW\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [202176 2013-08-26] (F-Secure Corporation) R3 F-Secure Gatekeeper; C:\Program Files (x86)\Kabel BW\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [202176 2013-08-26] (F-Secure Corporation) R1 F-Secure HIPS; C:\Program Files (x86)\Kabel BW\apps\ComputerSecurity\HIPS\drivers\fshs.sys [68928 2013-07-24] (F-Secure Corporation) R1 F-Secure HIPS; C:\Program Files (x86)\Kabel BW\apps\ComputerSecurity\HIPS\drivers\fshs.sys [68928 2013-07-24] (F-Secure Corporation) R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [56016 2013-08-26] () R3 fsni; C:\Program Files (x86)\Kabel BW\apps\CCF_Scanning\fsni64.sys [80832 2013-04-25] (F-Secure Corporation) R3 fsni; C:\Program Files (x86)\Kabel BW\apps\CCF_Scanning\fsni64.sys [80832 2013-04-25] (F-Secure Corporation) S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] () S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] () R1 fsvista; C:\Program Files (x86)\Kabel BW\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [13248 2013-08-14] () R1 fsvista; C:\Program Files (x86)\Kabel BW\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [13248 2013-08-14] () R3 gdrv; C:\Windows\gdrv.sys [25640 2013-09-02] (Windows (R) Server 2003 DDK provider) R3 gdrv; C:\Windows\gdrv.sys [25640 2013-09-02] (Windows (R) Server 2003 DDK provider) R3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-09-02] () R3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-09-02] () R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-05-06] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [619616 2013-08-14] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2013-06-10] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-05-05] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-05-05] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178784 2013-06-06] (Kaspersky Lab ZAO) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 V0330VID; C:\Windows\System32\DRIVERS\V0330Vid.sys [193408 2009-07-03] (Creative Technology Ltd.) S3 ALSysIO; \??\C:\Users\Agando\AppData\Local\Temp\ALSysIO64.sys [x] U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] U5 klflt; C:\Windows\System32\Drivers\klflt.sys [112224 2013-06-08] (Kaspersky Lab ZAO) S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-02 22:20 - 2013-09-02 22:20 - 00000000 ____D C:\Users\Agando\AppData\Local\{E497D6C2-7D10-4F33-8316-1FA1444C10CD} 2013-09-02 12:31 - 2013-09-02 12:41 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2013-09-02 12:30 - 2013-09-02 12:41 - 00000000 ____D C:\Users\Agando\Desktop\mbar 2013-09-02 12:30 - 2013-09-02 12:30 - 12907592 _____ (Malwarebytes Corp.) C:\Users\Agando\Downloads\mbar-1.07.0.1005.exe 2013-09-02 06:23 - 2013-09-02 06:23 - 00000000 ____D C:\Users\Agando\AppData\Local\{466FC421-33B5-49C0-8239-DF75511F1643} 2013-09-01 16:27 - 2013-09-01 16:27 - 00000000 ____D C:\Users\Agando\AppData\Local\{43AC1DCD-0216-410D-B2C9-022C1EC240AF} 2013-09-01 00:19 - 2013-09-01 00:19 - 00000000 ____D C:\Users\Agando\AppData\Local\{BF63B28B-B8B3-4E54-BC5B-D19D869C7901} 2013-08-31 13:43 - 2013-08-31 13:43 - 00033918 _____ C:\ComboFix.txt 2013-08-31 13:37 - 2013-09-02 22:19 - 00000004 _____ C:\Windows\SysWOW64\GVTunner.ref 2013-08-31 13:26 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2013-08-31 13:26 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2013-08-31 13:26 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-08-31 13:26 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-08-31 13:26 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-08-31 13:26 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2013-08-31 13:26 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2013-08-31 13:26 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2013-08-31 13:25 - 2013-08-31 13:43 - 00000000 ____D C:\Qoobox 2013-08-31 13:25 - 2013-08-31 13:41 - 00000000 ____D C:\Windows\erdnt 2013-08-31 13:24 - 2013-08-31 13:25 - 05117322 ____R (Swearware) C:\Users\Agando\Downloads\ComboFix.exe 2013-08-31 12:15 - 2013-08-31 12:15 - 00000000 ____D C:\Users\Agando\AppData\Local\{E0A8CAF4-31BD-4BAC-8B39-46E697984A75} 2013-08-31 00:13 - 2013-08-31 00:13 - 00000000 ____D C:\Users\Agando\AppData\Local\{57740E8C-E94E-4F5C-AD23-D3BE4988C456} 2013-08-30 12:09 - 2013-08-30 12:10 - 00000000 ____D C:\Users\Agando\AppData\Local\{C4041F35-FC56-4288-89F8-27CC70F8DE20} 2013-08-29 22:17 - 2013-08-29 22:17 - 00027454 _____ C:\Users\Agando\Downloads\Addition.txt 2013-08-29 22:14 - 2013-08-29 22:14 - 00002339 _____ C:\Users\Agando\Desktop\Sicherer Zahlungsverkehr.lnk 2013-08-29 22:14 - 2013-08-29 22:13 - 00001129 _____ C:\Users\Public\Desktop\Kaspersky Internet Security.lnk 2013-08-29 22:13 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll 2013-08-29 22:12 - 2013-09-02 22:19 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-08-29 22:12 - 2013-08-29 22:12 - 00000000 ____D C:\Windows\ELAMBKUP 2013-08-29 22:12 - 2013-08-29 22:12 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-08-29 22:12 - 2013-08-14 12:40 - 00619616 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2013-08-29 22:12 - 2013-06-08 20:18 - 00112224 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2013-08-29 21:48 - 2013-08-29 21:48 - 00000000 ____D C:\FRST 2013-08-29 21:46 - 2013-08-29 21:46 - 01579080 _____ (Farbar) C:\Users\Agando\Downloads\FRST64.exe 2013-08-29 21:28 - 2013-08-29 21:31 - 261894976 _____ C:\Users\Agando\Downloads\kis14.0.0.4651aDE_4890.exe 2013-08-29 21:09 - 2013-08-29 21:09 - 00000000 ____D C:\Users\Agando\AppData\Local\{D73BF8D8-8856-4840-BC7E-F9A32DE2F2AB} 2013-08-29 02:25 - 2013-08-29 02:25 - 00001148 _____ C:\Users\Public\Desktop\Trojan Remover.lnk 2013-08-29 02:25 - 2013-08-29 02:25 - 00000000 ____D C:\Users\Agando\Documents\Simply Super Software 2013-08-29 02:25 - 2013-08-29 02:25 - 00000000 ____D C:\Users\Agando\AppData\Roaming\TrojanHunter 2013-08-29 02:25 - 2013-08-29 02:25 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Simply Super Software 2013-08-29 02:24 - 2013-08-29 02:25 - 00000000 ____D C:\Program Files (x86)\Trojan Remover 2013-08-29 02:24 - 2013-08-29 02:24 - 00000000 ____D C:\ProgramData\Simply Super Software 2013-08-29 01:09 - 2013-08-29 01:10 - 00000000 ____D C:\Users\Agando\AppData\Local\{32317155-CF23-4BB4-AE37-4C1E5DB9D96D} 2013-08-29 00:47 - 2013-08-29 00:47 - 00001118 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-29 00:47 - 2013-08-29 00:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-08-29 00:47 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-08-29 00:46 - 2013-08-29 00:46 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Agando\Downloads\mbam-setup-1.75.0.1300(1).exe 2013-08-29 00:43 - 2013-08-29 00:43 - 23334896 _____ (Simply Super Software ) C:\Users\Agando\Downloads\trjsetup_688.exe 2013-08-29 00:42 - 2013-08-29 00:42 - 00059392 ____R C:\Windows\SysWOW64\streamhlp.dll 2013-08-29 00:42 - 2013-08-29 00:42 - 00001094 _____ C:\Users\Agando\Desktop\TrojanHunter.lnk 2013-08-29 00:42 - 2013-08-29 00:42 - 00000000 ____D C:\ProgramData\TrojanHunter 2013-08-29 00:41 - 2013-08-29 21:16 - 00000000 ____D C:\Program Files (x86)\TrojanHunter 5.5 2013-08-29 00:41 - 2013-08-29 00:41 - 05843488 _____ (Mischel Internet Security ) C:\Users\Agando\Downloads\TrojanHunterSetup_5.5_Build_1003.exe 2013-08-28 23:43 - 2013-08-31 13:36 - 00014812 _____ C:\Windows\PFRO.log 2013-08-28 13:08 - 2013-08-28 13:09 - 00000000 ____D C:\Users\Agando\AppData\Local\{553041C7-DC3C-4A7D-A204-86A6F6FF3B6D} 2013-08-28 13:07 - 2013-09-02 22:18 - 00001512 _____ C:\Windows\setupact.log 2013-08-28 13:07 - 2013-08-28 13:07 - 00000000 _____ C:\Windows\setuperr.log 2013-08-28 08:22 - 2013-09-02 22:18 - 00000144 _____ C:\service.log 2013-08-27 21:58 - 2013-08-27 21:58 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Agando\Downloads\tdsskiller.exe 2013-08-27 21:53 - 2013-08-27 21:53 - 00001812 _____ C:\Users\Agando\Desktop\aswMBR2.txt 2013-08-27 21:53 - 2013-08-27 21:53 - 00000512 _____ C:\Users\Agando\Desktop\MBR.dat 2013-08-27 21:48 - 2013-08-27 21:48 - 00000000 ____D C:\Users\Agando\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z 2013-08-27 21:47 - 2013-08-27 21:47 - 00003400 _____ C:\Windows\System32\Tasks\EPUpdater 2013-08-27 21:47 - 2013-08-27 21:47 - 00000000 ____D C:\Program Files (x86)\Delta 2013-08-27 21:46 - 2013-08-27 21:46 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam 2013-08-27 21:46 - 2013-08-27 21:46 - 00000000 ____D C:\ProgramData\Babylon 2013-08-27 21:45 - 2013-08-27 21:45 - 00001119 _____ C:\Users\Public\Desktop\Open It!.lnk 2013-08-27 21:45 - 2013-08-27 21:45 - 00000000 ____D C:\Program Files (x86)\OpenIt 2013-08-27 21:12 - 2013-08-27 21:12 - 00000000 ____D C:\Users\Agando\AppData\Local\{DE1C6A1E-553C-416A-A913-00CEF9273C60} 2013-08-27 21:12 - 2013-08-27 21:12 - 00000000 ____D C:\Users\Agando\AppData\Local\{9844E0F3-A72E-4491-AA37-159A131C69DD} 2013-08-27 09:10 - 2013-08-27 09:10 - 00000000 ____D C:\Users\Agando\AppData\Local\{BE7BAD09-38C3-4DD9-B140-370BAF9BE03F} 2013-08-27 09:09 - 2013-08-27 09:10 - 00000000 ____D C:\Users\Agando\AppData\Local\{B2686250-ECA9-4D46-B244-F3FF37E8ECE8} 2013-08-26 21:08 - 2013-08-26 21:08 - 00000000 ____D C:\Users\Agando\AppData\Local\{427BEE33-37BD-424D-ABF7-6456CA35BFE3} 2013-08-26 21:07 - 2013-08-26 21:08 - 00000000 ____D C:\Users\Agando\AppData\Local\{BFC99E60-B005-4DCD-AD30-EC4E6426AC01} 2013-08-26 19:03 - 2013-08-30 20:08 - 00000055 _____ C:\Users\Agando\AppData\Roaming\WB.CFG 2013-08-26 19:03 - 2013-08-30 20:08 - 00000005 _____ C:\Users\Agando\AppData\Roaming\WBPU-TTL.DAT 2013-08-26 17:03 - 2013-08-27 21:54 - 00000000 ____D C:\Users\Agando\AppData\Roaming\DSite 2013-08-26 16:56 - 2013-08-26 16:57 - 117478104 _____ C:\Users\Agando\Downloads\avast_free_antivirus_setup.exe 2013-08-26 12:14 - 2013-08-26 12:14 - 00000000 ____D C:\Users\Agando\AppData\Local\{98909EFF-070B-4528-9875-64AD4A24FE62} 2013-08-26 12:13 - 2013-08-26 12:14 - 00000000 ____D C:\Users\Agando\AppData\Local\{7FB4754F-F322-4E9B-8BF4-8B25E411951A} 2013-08-26 00:44 - 2013-08-27 21:54 - 00000000 ____D C:\Program Files (x86)\CHIP System-Check-Tool 2013-08-26 00:44 - 2013-08-26 00:44 - 00001114 _____ C:\Users\Agando\Desktop\CHIP System-Check-Tool.lnk 2013-08-26 00:44 - 2006-09-29 22:21 - 00077824 _____ C:\Windows\SysWOW64\DriveInfo.dll 2013-08-26 00:40 - 2013-08-26 00:40 - 05603998 _____ (CHIP, Winfuture, Green Crystal Software ) C:\Users\Agando\Downloads\chip_sct_11915.exe 2013-08-26 00:39 - 2013-08-26 00:39 - 00000874 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk 2013-08-26 00:38 - 2013-08-27 21:54 - 00000000 ____D C:\Program Files\CPUID 2013-08-26 00:38 - 2013-08-26 00:38 - 01458776 _____ ( ) C:\Users\Agando\Downloads\cpu-z_1.66-setup-en.exe 2013-08-25 10:50 - 2013-08-25 22:57 - 00000000 ____D C:\Users\Agando\AppData\Local\{5922E8B5-2CF0-426A-A70C-C8B4B155A3EF} 2013-08-24 16:07 - 2013-08-24 16:07 - 00000000 ____D C:\Users\Agando\AppData\Local\{DC695043-AC67-4EAA-9EEA-54008B4B6702} 2013-08-24 00:04 - 2013-08-24 00:05 - 00000000 ____D C:\Users\Agando\AppData\Local\{4F381444-BB2D-4460-B338-CFE3103BA21C} 2013-08-23 12:03 - 2013-08-23 12:03 - 00000000 ____D C:\Users\Agando\AppData\Local\{4B9CE7DB-E151-4DA8-9399-D65D88DA68C3} 2013-08-22 21:57 - 2013-08-22 21:57 - 00000000 ____D C:\Users\Agando\AppData\Local\{2399E245-AC4B-4D43-9F3F-DE2FA3345E12} 2013-08-22 01:47 - 2013-08-22 01:47 - 00000000 ____D C:\Users\Agando\AppData\Local\{4D52FD10-12E5-4D40-99E5-EB2DAD028EC0} 2013-08-21 13:40 - 2013-08-21 13:40 - 00000000 ____D C:\Users\Agando\AppData\Local\{ADFA1044-F9F8-422F-904F-D3952B78DF33} 2013-08-21 01:39 - 2013-08-21 01:40 - 00000000 ____D C:\Users\Agando\AppData\Local\{C70081E7-0A5E-414F-AE7A-EF389B526381} 2013-08-20 15:17 - 2013-08-20 15:17 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-08-20 15:17 - 2013-08-20 15:17 - 00000000 ____D C:\Program Files\iTunes 2013-08-20 15:17 - 2013-08-20 15:17 - 00000000 ____D C:\Program Files\iPod 2013-08-20 15:17 - 2013-08-20 15:17 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-08-20 13:38 - 2013-08-20 13:38 - 00000000 ____D C:\Users\Agando\AppData\Local\{860A5D48-4C6A-4415-B616-5B58D66D3A85} 2013-08-19 13:31 - 2013-08-20 01:38 - 00000000 ____D C:\Users\Agando\AppData\Local\{B8A6886B-D253-4011-A753-81BD69E510E1} 2013-08-18 13:23 - 2013-08-19 01:29 - 00000000 ____D C:\Users\Agando\AppData\Local\{F5EAF9F6-80A6-4CFA-8851-57F8DD46C28B} 2013-08-17 18:25 - 2013-08-17 18:25 - 00000000 ____D C:\Users\Agando\AppData\Local\{0F23E30A-6AB5-4A83-9B5A-84FF20D369D4} 2013-08-17 06:45 - 2013-08-27 21:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-17 06:24 - 2013-08-17 06:24 - 00000000 ____D C:\Users\Agando\AppData\Local\{B3616181-C42D-47C6-9987-668F84C45B4D} 2013-08-16 18:23 - 2013-08-16 18:24 - 00000000 ____D C:\Users\Agando\AppData\Local\{D5E3A7A7-703A-4B5E-92C7-787FDA940717} 2013-08-16 06:23 - 2013-08-16 06:23 - 00000000 ____D C:\Users\Agando\AppData\Local\{E8D2D88B-F446-41C2-BCA0-73740D7543D3} 2013-08-15 18:01 - 2013-08-15 18:01 - 00001407 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk 2013-08-15 18:01 - 2013-08-15 18:01 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-08-15 12:21 - 2013-08-15 12:22 - 00000000 ____D C:\Users\Agando\AppData\Local\{B587A9E0-38A4-4067-BFFB-8A070E1CAD36} 2013-08-15 03:09 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-15 03:09 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-15 03:09 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-15 03:09 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-15 03:09 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-15 03:09 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-15 03:09 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-15 03:09 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-15 03:09 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-15 03:09 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-15 03:09 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-15 03:09 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-15 03:09 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-15 03:09 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-15 03:09 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-15 03:09 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-15 03:09 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-15 03:09 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-15 03:09 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-15 03:09 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-15 03:09 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-15 03:09 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-15 03:09 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-15 03:09 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-15 03:09 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-15 03:09 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-15 03:09 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-15 03:09 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-15 03:09 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-15 03:09 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-15 03:09 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-15 02:25 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-15 02:25 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-15 02:25 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-15 02:25 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-15 02:25 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-08-15 02:25 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-08-15 02:25 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-08-15 02:25 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-08-15 02:24 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-15 02:24 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-08-15 02:24 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-15 02:24 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-08-15 02:24 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-15 02:24 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-15 02:24 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-08-15 02:24 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-15 02:24 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-08-15 02:24 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-08-15 02:24 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-08-15 02:24 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-08-15 02:24 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-08-15 02:24 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-08-15 02:24 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-08-15 02:24 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-08-15 02:24 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-08-15 02:24 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-08-15 02:23 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-14 22:10 - 2013-08-14 22:11 - 00000000 ____D C:\Users\Agando\AppData\Local\{89AC9439-8554-42FB-B45C-258D11053358} 2013-08-14 10:10 - 2013-08-14 10:10 - 00000000 ____D C:\Users\Agando\AppData\Local\{627B12DF-36A2-4897-8738-88D98B870A75} 2013-08-13 22:07 - 2013-08-13 22:07 - 00000000 ____D C:\Users\Agando\AppData\Local\{BEC9840F-D132-401C-96E6-5978AAB17A29} 2013-08-13 07:01 - 2013-08-13 07:01 - 00000000 ____D C:\Users\Agando\AppData\Local\{F67B89CC-CD8C-44E1-B37B-11188CDA5FE6} 2013-08-12 23:28 - 2013-08-20 15:17 - 00001788 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-08-12 19:00 - 2013-08-12 19:00 - 00000000 ____D C:\Users\Agando\AppData\Local\{C1604270-57B9-4F67-A805-5723BEADF638} 2013-08-12 06:28 - 2013-08-12 06:29 - 00000000 ____D C:\Users\Agando\AppData\Local\{36801FA9-1960-4E48-8196-2340CA3379A5} 2013-08-11 16:04 - 2013-08-11 16:05 - 00000000 ____D C:\Users\Agando\AppData\Local\{49A59F05-B79F-4903-BDE3-3D7C967EF3AB} 2013-08-10 15:58 - 2013-08-11 04:04 - 00000000 ____D C:\Users\Agando\AppData\Local\{A919BF10-5945-45AC-984E-51B5384AC3B0} 2013-08-10 01:21 - 2013-08-10 01:21 - 00000000 ____D C:\Users\Agando\AppData\Local\{DC5FDB96-7BBD-41CA-A0D7-A768384C6EE9} 2013-08-09 13:16 - 2013-08-09 13:16 - 00000000 ____D C:\Users\Agando\AppData\Local\{86F010DE-4FFD-40DC-8E1B-0C451DA568C5} 2013-08-09 01:16 - 2013-08-09 01:16 - 00000000 ____D C:\Users\Agando\AppData\Local\{5AAF48FE-A2CF-4C2F-BC98-A7080FE0012A} 2013-08-08 13:12 - 2013-08-08 13:12 - 00000000 ____D C:\Users\Agando\AppData\Local\{5A9402CD-C443-4EF1-8717-17C658E23B01} 2013-08-07 19:51 - 2013-08-07 19:52 - 00000000 ____D C:\Users\Agando\AppData\Local\{EA517739-83EB-4343-B3C7-41FDCFA5ED95} 2013-08-07 00:55 - 2013-08-07 00:56 - 00000000 ____D C:\Users\Agando\AppData\Local\{6BAAF9C1-AB73-4905-9A6B-FF9671156CFB} 2013-08-06 12:54 - 2013-08-06 12:54 - 00000000 ____D C:\Users\Agando\AppData\Local\{131E6AEB-9E42-4D13-8FB5-D7769B70C902} 2013-08-06 00:53 - 2013-08-06 00:53 - 00000000 ____D C:\Users\Agando\AppData\Local\{40D6185E-1888-4C66-928E-F3542E74F198} 2013-08-05 12:48 - 2013-08-05 12:49 - 00000000 ____D C:\Users\Agando\AppData\Local\{0125EB95-FD5D-473D-A44B-7429BE2E8BBC} 2013-08-04 09:29 - 2013-08-04 21:35 - 00000000 ____D C:\Users\Agando\AppData\Local\{181AB8F7-6146-43A2-96EE-A6734447E417} 2013-08-03 19:37 - 2013-08-03 19:38 - 00000000 ____D C:\Users\Agando\AppData\Local\{782139E8-878B-4CF7-B65F-112A688423B8} 2013-08-03 07:34 - 2013-08-03 07:34 - 00000000 ____D C:\Users\Agando\AppData\Local\{70FD5476-30E2-4C67-8EA3-2860A02F74E9} ==================== One Month Modified Files and Folders ======= 2013-09-02 22:25 - 2012-05-02 06:43 - 00000000 ____D C:\Users\Agando\AppData\Local\PMB Files 2013-09-02 22:23 - 2012-04-17 03:54 - 00000000 ____D C:\Users\Agando\AppData\Roaming\TS3Client 2013-09-02 22:23 - 2012-04-17 03:19 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Skype 2013-09-02 22:21 - 2012-07-12 20:33 - 00000000 ____D C:\Users\Agando\AppData\Local\Windows Live 2013-09-02 22:20 - 2013-09-02 22:20 - 00000000 ____D C:\Users\Agando\AppData\Local\{E497D6C2-7D10-4F33-8316-1FA1444C10CD} 2013-09-02 22:19 - 2013-08-31 13:37 - 00000004 _____ C:\Windows\SysWOW64\GVTunner.ref 2013-09-02 22:19 - 2013-08-29 22:12 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-09-02 22:19 - 2012-07-28 23:37 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-09-02 22:19 - 2012-04-05 12:53 - 00030528 _____ C:\Windows\GVTDrv64.sys 2013-09-02 22:19 - 2012-04-05 12:51 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys 2013-09-02 22:18 - 2013-08-28 13:07 - 00001512 _____ C:\Windows\setupact.log 2013-09-02 22:18 - 2013-08-28 08:22 - 00000144 _____ C:\service.log 2013-09-02 22:18 - 2012-04-22 17:27 - 00000000 ____D C:\ProgramData\NVIDIA 2013-09-02 22:18 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-02 12:42 - 2012-04-05 11:36 - 01851675 _____ C:\Windows\WindowsUpdate.log 2013-09-02 12:41 - 2013-09-02 12:31 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2013-09-02 12:41 - 2013-09-02 12:30 - 00000000 ____D C:\Users\Agando\Desktop\mbar 2013-09-02 12:30 - 2013-09-02 12:30 - 12907592 _____ (Malwarebytes Corp.) C:\Users\Agando\Downloads\mbar-1.07.0.1005.exe 2013-09-02 12:27 - 2012-07-28 23:37 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-09-02 12:11 - 2012-04-17 04:14 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-09-02 12:07 - 2009-07-14 06:45 - 00021856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-02 12:07 - 2009-07-14 06:45 - 00021856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-02 06:23 - 2013-09-02 06:23 - 00000000 ____D C:\Users\Agando\AppData\Local\{466FC421-33B5-49C0-8239-DF75511F1643} 2013-09-01 16:27 - 2013-09-01 16:27 - 00000000 ____D C:\Users\Agando\AppData\Local\{43AC1DCD-0216-410D-B2C9-022C1EC240AF} 2013-09-01 00:19 - 2013-09-01 00:19 - 00000000 ____D C:\Users\Agando\AppData\Local\{BF63B28B-B8B3-4E54-BC5B-D19D869C7901} 2013-08-31 13:43 - 2013-08-31 13:43 - 00033918 _____ C:\ComboFix.txt 2013-08-31 13:43 - 2013-08-31 13:25 - 00000000 ____D C:\Qoobox 2013-08-31 13:43 - 2012-04-17 04:11 - 00000000 ____D C:\Users\Agando\AppData\Local\Apps\2.0 2013-08-31 13:41 - 2013-08-31 13:25 - 00000000 ____D C:\Windows\erdnt 2013-08-31 13:37 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2013-08-31 13:36 - 2013-08-28 23:43 - 00014812 _____ C:\Windows\PFRO.log 2013-08-31 13:25 - 2013-08-31 13:24 - 05117322 ____R (Swearware) C:\Users\Agando\Downloads\ComboFix.exe 2013-08-31 13:12 - 2012-04-17 04:11 - 00000000 ____D C:\Users\Agando\AppData\Local\Deployment 2013-08-31 12:15 - 2013-08-31 12:15 - 00000000 ____D C:\Users\Agando\AppData\Local\{E0A8CAF4-31BD-4BAC-8B39-46E697984A75} 2013-08-31 06:55 - 2013-03-15 07:54 - 00000000 ____D C:\Users\Agando\Desktop\Laden 2013-08-31 00:13 - 2013-08-31 00:13 - 00000000 ____D C:\Users\Agando\AppData\Local\{57740E8C-E94E-4F5C-AD23-D3BE4988C456} 2013-08-30 20:08 - 2013-08-26 19:03 - 00000055 _____ C:\Users\Agando\AppData\Roaming\WB.CFG 2013-08-30 20:08 - 2013-08-26 19:03 - 00000005 _____ C:\Users\Agando\AppData\Roaming\WBPU-TTL.DAT 2013-08-30 12:10 - 2013-08-30 12:09 - 00000000 ____D C:\Users\Agando\AppData\Local\{C4041F35-FC56-4288-89F8-27CC70F8DE20} 2013-08-29 22:24 - 2013-07-24 21:49 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk 2013-08-29 22:24 - 2012-04-17 03:19 - 00000000 ____D C:\ProgramData\Skype 2013-08-29 22:17 - 2013-08-29 22:17 - 00027454 _____ C:\Users\Agando\Downloads\Addition.txt 2013-08-29 22:14 - 2013-08-29 22:14 - 00002339 _____ C:\Users\Agando\Desktop\Sicherer Zahlungsverkehr.lnk 2013-08-29 22:13 - 2013-08-29 22:14 - 00001129 _____ C:\Users\Public\Desktop\Kaspersky Internet Security.lnk 2013-08-29 22:12 - 2013-08-29 22:12 - 00000000 ____D C:\Windows\ELAMBKUP 2013-08-29 22:12 - 2013-08-29 22:12 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-08-29 21:48 - 2013-08-29 21:48 - 00000000 ____D C:\FRST 2013-08-29 21:46 - 2013-08-29 21:46 - 01579080 _____ (Farbar) C:\Users\Agando\Downloads\FRST64.exe 2013-08-29 21:31 - 2013-08-29 21:28 - 261894976 _____ C:\Users\Agando\Downloads\kis14.0.0.4651aDE_4890.exe 2013-08-29 21:16 - 2013-08-29 00:41 - 00000000 ____D C:\Program Files (x86)\TrojanHunter 5.5 2013-08-29 21:09 - 2013-08-29 21:09 - 00000000 ____D C:\Users\Agando\AppData\Local\{D73BF8D8-8856-4840-BC7E-F9A32DE2F2AB} 2013-08-29 02:25 - 2013-08-29 02:25 - 00001148 _____ C:\Users\Public\Desktop\Trojan Remover.lnk 2013-08-29 02:25 - 2013-08-29 02:25 - 00000000 ____D C:\Users\Agando\Documents\Simply Super Software 2013-08-29 02:25 - 2013-08-29 02:25 - 00000000 ____D C:\Users\Agando\AppData\Roaming\TrojanHunter 2013-08-29 02:25 - 2013-08-29 02:25 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Simply Super Software 2013-08-29 02:25 - 2013-08-29 02:24 - 00000000 ____D C:\Program Files (x86)\Trojan Remover 2013-08-29 02:24 - 2013-08-29 02:24 - 00000000 ____D C:\ProgramData\Simply Super Software 2013-08-29 01:10 - 2013-08-29 01:09 - 00000000 ____D C:\Users\Agando\AppData\Local\{32317155-CF23-4BB4-AE37-4C1E5DB9D96D} 2013-08-29 00:47 - 2013-08-29 00:47 - 00001118 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-29 00:47 - 2013-08-29 00:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-08-29 00:46 - 2013-08-29 00:46 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Agando\Downloads\mbam-setup-1.75.0.1300(1).exe 2013-08-29 00:43 - 2013-08-29 00:43 - 23334896 _____ (Simply Super Software ) C:\Users\Agando\Downloads\trjsetup_688.exe 2013-08-29 00:42 - 2013-08-29 00:42 - 00059392 ____R C:\Windows\SysWOW64\streamhlp.dll 2013-08-29 00:42 - 2013-08-29 00:42 - 00001094 _____ C:\Users\Agando\Desktop\TrojanHunter.lnk 2013-08-29 00:42 - 2013-08-29 00:42 - 00000000 ____D C:\ProgramData\TrojanHunter 2013-08-29 00:41 - 2013-08-29 00:41 - 05843488 _____ (Mischel Internet Security ) C:\Users\Agando\Downloads\TrojanHunterSetup_5.5_Build_1003.exe 2013-08-28 13:09 - 2013-08-28 13:08 - 00000000 ____D C:\Users\Agando\AppData\Local\{553041C7-DC3C-4A7D-A204-86A6F6FF3B6D} 2013-08-28 13:07 - 2013-08-28 13:07 - 00000000 _____ C:\Windows\setuperr.log 2013-08-28 07:03 - 2013-04-14 19:41 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Spotify 2013-08-28 07:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2013-08-28 07:02 - 2012-07-12 21:23 - 00000000 ____D C:\Users\Agando\Tracing 2013-08-28 00:05 - 2012-04-18 13:21 - 00000000 ____D C:\Users\Agando\AppData\Roaming\SoftGrid Client 2013-08-27 21:58 - 2013-08-27 21:58 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Agando\Downloads\tdsskiller.exe 2013-08-27 21:54 - 2013-08-26 17:03 - 00000000 ____D C:\Users\Agando\AppData\Roaming\DSite 2013-08-27 21:54 - 2013-08-26 00:44 - 00000000 ____D C:\Program Files (x86)\CHIP System-Check-Tool 2013-08-27 21:54 - 2013-08-26 00:38 - 00000000 ____D C:\Program Files\CPUID 2013-08-27 21:54 - 2013-08-17 06:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-27 21:54 - 2013-07-24 07:54 - 00000000 ____D C:\Program Files (x86)\Kabel BW 2013-08-27 21:54 - 2012-05-09 02:13 - 00000000 ____D C:\Program Files (x86)\Steam 2013-08-27 21:54 - 2012-04-17 01:45 - 00000000 ____D C:\ProgramData\AVAST Software 2013-08-27 21:54 - 2012-04-17 01:45 - 00000000 ____D C:\Program Files\AVAST Software 2013-08-27 21:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2013-08-27 21:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat 2013-08-27 21:53 - 2013-08-27 21:53 - 00001812 _____ C:\Users\Agando\Desktop\aswMBR2.txt 2013-08-27 21:53 - 2013-08-27 21:53 - 00000512 _____ C:\Users\Agando\Desktop\MBR.dat 2013-08-27 21:48 - 2013-08-27 21:48 - 00000000 ____D C:\Users\Agando\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z 2013-08-27 21:47 - 2013-08-27 21:47 - 00003400 _____ C:\Windows\System32\Tasks\EPUpdater 2013-08-27 21:47 - 2013-08-27 21:47 - 00000000 ____D C:\Program Files (x86)\Delta 2013-08-27 21:46 - 2013-08-27 21:46 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam 2013-08-27 21:46 - 2013-08-27 21:46 - 00000000 ____D C:\ProgramData\Babylon 2013-08-27 21:45 - 2013-08-27 21:45 - 00001119 _____ C:\Users\Public\Desktop\Open It!.lnk 2013-08-27 21:45 - 2013-08-27 21:45 - 00000000 ____D C:\Program Files (x86)\OpenIt 2013-08-27 21:12 - 2013-08-27 21:12 - 00000000 ____D C:\Users\Agando\AppData\Local\{DE1C6A1E-553C-416A-A913-00CEF9273C60} 2013-08-27 21:12 - 2013-08-27 21:12 - 00000000 ____D C:\Users\Agando\AppData\Local\{9844E0F3-A72E-4491-AA37-159A131C69DD} 2013-08-27 21:10 - 2012-04-05 11:34 - 00000000 ____D C:\Users\Agando 2013-08-27 09:10 - 2013-08-27 09:10 - 00000000 ____D C:\Users\Agando\AppData\Local\{BE7BAD09-38C3-4DD9-B140-370BAF9BE03F} 2013-08-27 09:10 - 2013-08-27 09:09 - 00000000 ____D C:\Users\Agando\AppData\Local\{B2686250-ECA9-4D46-B244-F3FF37E8ECE8} 2013-08-26 21:08 - 2013-08-26 21:08 - 00000000 ____D C:\Users\Agando\AppData\Local\{427BEE33-37BD-424D-ABF7-6456CA35BFE3} 2013-08-26 21:08 - 2013-08-26 21:07 - 00000000 ____D C:\Users\Agando\AppData\Local\{BFC99E60-B005-4DCD-AD30-EC4E6426AC01} 2013-08-26 20:49 - 2011-04-12 09:54 - 00000000 ___RD C:\Users\Public\Recorded TV 2013-08-26 17:02 - 2013-06-28 00:43 - 00000175 _____ C:\Windows\system32\Drivers\aswVmm.sys.sum 2013-08-26 17:02 - 2013-06-27 02:58 - 00000175 _____ C:\Windows\system32\Drivers\aswSP.sys.sum 2013-08-26 17:02 - 2013-06-27 02:58 - 00000175 _____ C:\Windows\system32\Drivers\aswSnx.sys.sum 2013-08-26 17:02 - 2012-04-17 01:46 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2013-08-26 16:57 - 2013-08-26 16:56 - 117478104 _____ C:\Users\Agando\Downloads\avast_free_antivirus_setup.exe 2013-08-26 12:40 - 2013-07-24 08:14 - 00056016 _____ C:\Windows\system32\Drivers\fsbts.sys 2013-08-26 12:33 - 2013-07-24 08:13 - 00019828 _____ C:\Windows\prodsett_copy.ini 2013-08-26 12:14 - 2013-08-26 12:14 - 00000000 ____D C:\Users\Agando\AppData\Local\{98909EFF-070B-4528-9875-64AD4A24FE62} 2013-08-26 12:14 - 2013-08-26 12:13 - 00000000 ____D C:\Users\Agando\AppData\Local\{7FB4754F-F322-4E9B-8BF4-8B25E411951A} 2013-08-26 00:56 - 2013-07-13 21:40 - 00000000 ____D C:\Program Files (x86)\Biet-O-Matic 2013-08-26 00:56 - 2013-02-07 19:07 - 00000000 ____D C:\ProgramData\tmp 2013-08-26 00:56 - 2012-09-09 16:37 - 00000000 ____D C:\Program Files (x86)\PokerStars.EU 2013-08-26 00:56 - 2012-04-05 12:29 - 00000000 ____D C:\Windows\Panther 2013-08-26 00:56 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2013-08-26 00:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Msdtc 2013-08-26 00:44 - 2013-08-26 00:44 - 00001114 _____ C:\Users\Agando\Desktop\CHIP System-Check-Tool.lnk 2013-08-26 00:44 - 2011-04-12 09:43 - 00697594 _____ C:\Windows\system32\perfh007.dat 2013-08-26 00:44 - 2011-04-12 09:43 - 00148818 _____ C:\Windows\system32\perfc007.dat 2013-08-26 00:44 - 2009-07-14 07:13 - 01614880 _____ C:\Windows\system32\PerfStringBackup.INI 2013-08-26 00:40 - 2013-08-26 00:40 - 05603998 _____ (CHIP, Winfuture, Green Crystal Software ) C:\Users\Agando\Downloads\chip_sct_11915.exe 2013-08-26 00:39 - 2013-08-26 00:39 - 00000874 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk 2013-08-26 00:38 - 2013-08-26 00:38 - 01458776 _____ ( ) C:\Users\Agando\Downloads\cpu-z_1.66-setup-en.exe 2013-08-25 22:57 - 2013-08-25 10:50 - 00000000 ____D C:\Users\Agando\AppData\Local\{5922E8B5-2CF0-426A-A70C-C8B4B155A3EF} 2013-08-24 16:07 - 2013-08-24 16:07 - 00000000 ____D C:\Users\Agando\AppData\Local\{DC695043-AC67-4EAA-9EEA-54008B4B6702} 2013-08-24 00:05 - 2013-08-24 00:04 - 00000000 ____D C:\Users\Agando\AppData\Local\{4F381444-BB2D-4460-B338-CFE3103BA21C} 2013-08-23 12:03 - 2013-08-23 12:03 - 00000000 ____D C:\Users\Agando\AppData\Local\{4B9CE7DB-E151-4DA8-9399-D65D88DA68C3} 2013-08-22 21:57 - 2013-08-22 21:57 - 00000000 ____D C:\Users\Agando\AppData\Local\{2399E245-AC4B-4D43-9F3F-DE2FA3345E12} 2013-08-22 01:47 - 2013-08-22 01:47 - 00000000 ____D C:\Users\Agando\AppData\Local\{4D52FD10-12E5-4D40-99E5-EB2DAD028EC0} 2013-08-21 13:40 - 2013-08-21 13:40 - 00000000 ____D C:\Users\Agando\AppData\Local\{ADFA1044-F9F8-422F-904F-D3952B78DF33} 2013-08-21 01:40 - 2013-08-21 01:39 - 00000000 ____D C:\Users\Agando\AppData\Local\{C70081E7-0A5E-414F-AE7A-EF389B526381} 2013-08-20 22:11 - 2012-04-17 04:14 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-08-20 22:11 - 2012-04-17 04:14 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-08-20 22:11 - 2012-04-17 04:14 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-08-20 22:01 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-08-20 15:17 - 2013-08-20 15:17 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-08-20 15:17 - 2013-08-20 15:17 - 00000000 ____D C:\Program Files\iTunes 2013-08-20 15:17 - 2013-08-20 15:17 - 00000000 ____D C:\Program Files\iPod 2013-08-20 15:17 - 2013-08-20 15:17 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-08-20 15:17 - 2013-08-12 23:28 - 00001788 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-08-20 13:38 - 2013-08-20 13:38 - 00000000 ____D C:\Users\Agando\AppData\Local\{860A5D48-4C6A-4415-B616-5B58D66D3A85} 2013-08-20 01:38 - 2013-08-19 13:31 - 00000000 ____D C:\Users\Agando\AppData\Local\{B8A6886B-D253-4011-A753-81BD69E510E1} 2013-08-19 01:29 - 2013-08-18 13:23 - 00000000 ____D C:\Users\Agando\AppData\Local\{F5EAF9F6-80A6-4CFA-8851-57F8DD46C28B} 2013-08-17 18:25 - 2013-08-17 18:25 - 00000000 ____D C:\Users\Agando\AppData\Local\{0F23E30A-6AB5-4A83-9B5A-84FF20D369D4} 2013-08-17 18:21 - 2012-05-02 19:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-08-17 06:24 - 2013-08-17 06:24 - 00000000 ____D C:\Users\Agando\AppData\Local\{B3616181-C42D-47C6-9987-668F84C45B4D} 2013-08-16 18:24 - 2013-08-16 18:23 - 00000000 ____D C:\Users\Agando\AppData\Local\{D5E3A7A7-703A-4B5E-92C7-787FDA940717} 2013-08-16 08:33 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-08-16 06:23 - 2013-08-16 06:23 - 00000000 ____D C:\Users\Agando\AppData\Local\{E8D2D88B-F446-41C2-BCA0-73740D7543D3} 2013-08-15 18:01 - 2013-08-15 18:01 - 00001407 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk 2013-08-15 18:01 - 2013-08-15 18:01 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-08-15 18:01 - 2012-12-21 13:40 - 00000000 ____D C:\Users\Agando\AppData\Roaming\DVDVideoSoftIEHelpers 2013-08-15 18:01 - 2012-12-21 13:40 - 00000000 ____D C:\Users\Agando\AppData\Roaming\DVDVideoSoft 2013-08-15 12:22 - 2013-08-15 12:21 - 00000000 ____D C:\Users\Agando\AppData\Local\{B587A9E0-38A4-4067-BFFB-8A070E1CAD36} 2013-08-15 03:04 - 2013-08-01 03:08 - 00000000 ____D C:\Windows\system32\MRT 2013-08-15 03:02 - 2012-04-17 23:22 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-08-15 01:05 - 2012-10-05 15:16 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Apple Computer 2013-08-14 22:11 - 2013-08-14 22:10 - 00000000 ____D C:\Users\Agando\AppData\Local\{89AC9439-8554-42FB-B45C-258D11053358} 2013-08-14 12:40 - 2013-08-29 22:12 - 00619616 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2013-08-14 10:10 - 2013-08-14 10:10 - 00000000 ____D C:\Users\Agando\AppData\Local\{627B12DF-36A2-4897-8738-88D98B870A75} 2013-08-13 22:07 - 2013-08-13 22:07 - 00000000 ____D C:\Users\Agando\AppData\Local\{BEC9840F-D132-401C-96E6-5978AAB17A29} 2013-08-13 07:01 - 2013-08-13 07:01 - 00000000 ____D C:\Users\Agando\AppData\Local\{F67B89CC-CD8C-44E1-B37B-11188CDA5FE6} 2013-08-12 23:23 - 2012-10-05 15:14 - 00000000 ____D C:\Program Files\Common Files\Apple 2013-08-12 19:00 - 2013-08-12 19:00 - 00000000 ____D C:\Users\Agando\AppData\Local\{C1604270-57B9-4F67-A805-5723BEADF638} 2013-08-12 06:29 - 2013-08-12 06:28 - 00000000 ____D C:\Users\Agando\AppData\Local\{36801FA9-1960-4E48-8196-2340CA3379A5} 2013-08-11 16:05 - 2013-08-11 16:04 - 00000000 ____D C:\Users\Agando\AppData\Local\{49A59F05-B79F-4903-BDE3-3D7C967EF3AB} 2013-08-11 04:04 - 2013-08-10 15:58 - 00000000 ____D C:\Users\Agando\AppData\Local\{A919BF10-5945-45AC-984E-51B5384AC3B0} 2013-08-10 21:49 - 2012-04-17 02:48 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client 2013-08-10 01:21 - 2013-08-10 01:21 - 00000000 ____D C:\Users\Agando\AppData\Local\{DC5FDB96-7BBD-41CA-A0D7-A768384C6EE9} 2013-08-09 13:16 - 2013-08-09 13:16 - 00000000 ____D C:\Users\Agando\AppData\Local\{86F010DE-4FFD-40DC-8E1B-0C451DA568C5} 2013-08-09 01:16 - 2013-08-09 01:16 - 00000000 ____D C:\Users\Agando\AppData\Local\{5AAF48FE-A2CF-4C2F-BC98-A7080FE0012A} 2013-08-08 13:12 - 2013-08-08 13:12 - 00000000 ____D C:\Users\Agando\AppData\Local\{5A9402CD-C443-4EF1-8717-17C658E23B01} 2013-08-07 19:52 - 2013-08-07 19:51 - 00000000 ____D C:\Users\Agando\AppData\Local\{EA517739-83EB-4343-B3C7-41FDCFA5ED95} 2013-08-07 08:54 - 2012-04-17 22:55 - 00000000 ____D C:\Users\Agando\AppData\Local\Adobe 2013-08-07 00:56 - 2013-08-07 00:55 - 00000000 ____D C:\Users\Agando\AppData\Local\{6BAAF9C1-AB73-4905-9A6B-FF9671156CFB} 2013-08-06 21:18 - 2013-02-01 18:35 - 00000000 ____D C:\Users\Agando\AppData\Roaming\vlc 2013-08-06 21:16 - 2012-04-17 01:46 - 00000000 ____D C:\Users\Agando\AppData\Local\Google 2013-08-06 21:16 - 2012-04-17 01:46 - 00000000 ____D C:\Program Files (x86)\Google 2013-08-06 21:14 - 2013-02-18 11:30 - 00000000 ____D C:\Program Files (x86)\Camfrog 2013-08-06 12:54 - 2013-08-06 12:54 - 00000000 ____D C:\Users\Agando\AppData\Local\{131E6AEB-9E42-4D13-8FB5-D7769B70C902} 2013-08-06 00:53 - 2013-08-06 00:53 - 00000000 ____D C:\Users\Agando\AppData\Local\{40D6185E-1888-4C66-928E-F3542E74F198} 2013-08-05 12:49 - 2013-08-05 12:48 - 00000000 ____D C:\Users\Agando\AppData\Local\{0125EB95-FD5D-473D-A44B-7429BE2E8BBC} 2013-08-04 21:35 - 2013-08-04 09:29 - 00000000 ____D C:\Users\Agando\AppData\Local\{181AB8F7-6146-43A2-96EE-A6734447E417} 2013-08-03 19:38 - 2013-08-03 19:37 - 00000000 ____D C:\Users\Agando\AppData\Local\{782139E8-878B-4CF7-B65F-112A688423B8} 2013-08-03 07:34 - 2013-08-03 07:34 - 00000000 ____D C:\Users\Agando\AppData\Local\{70FD5476-30E2-4C67-8EA3-2860A02F74E9} ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-01 00:58 ==================== End Of Log ============================ |
02.09.2013, 21:50 | #22 |
/// Winkelfunktion /// TB-Süch-Tiger™ | seltsame internetabbrüche ! Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM) Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren! Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt: ESET Online Scanner
__________________ Logfiles bitte immer in CODE-Tags posten |
02.09.2013, 22:33 | #23 |
| seltsame internetabbrüche ! JRT Logfile: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 5.5.7 (09.01.2013:1) OS: Windows 7 Home Premium x64 Ran by Agando on 02.09.2013 at 22:30:39,44 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{09C554C3-109B-483C-A06B-F14172F1A947} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{39CB8175-E224-4446-8746-00566302DF8D} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escort.dll Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escortapp.dll Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escorteng.dll Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escortlbr.dll Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\esrv.exe Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\priam_bho.dll Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\secman.dll Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\delta Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\delta ltd Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\dsiteproducts Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\wajam Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\lyrixeeker Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylontoolbar Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\delta Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\performersoft Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\wajam Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\wajam.wajamdownloader Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\wajam.wajamdownloader.1 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\openit open it! Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_curse-client_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_curse-client_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_scribus_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_scribus_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_curse-client_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_curse-client_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_scribus_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_scribus_RASMANCS Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip" ~~~ Files Successfully deleted: [File] "C:\Users\Public\Desktop\open it!.lnk" Successfully deleted: [File] "C:\Users\Agando\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\user pinned\startmenu\startfenster.lnk" Successfully deleted: [File] "C:\Users\Agando\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\user pinned\taskbar\startfenster.lnk" ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\babylon" Successfully deleted: [Folder] "C:\Users\Agando\AppData\Roaming\dsite" Successfully deleted: [Folder] "C:\Users\Agando\AppData\Roaming\dvdvideosoftiehelpers" Successfully deleted: [Folder] "C:\Program Files (x86)\delta" Successfully deleted: [Folder] "C:\Program Files (x86)\openit" Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\open it!" Successfully deleted: [Folder] "C:\Users\Agando\AppData\Roaming\microsoft\windows\start menu\programs\wajam" Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin" Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0101280F-3DF3-43B1-B316-1E14CD58F6AF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0125EB95-FD5D-473D-A44B-7429BE2E8BBC} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0208B3D3-B418-4CAE-8541-3CDA36ECDD60} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{02113D35-EA7E-46B1-B720-D155CBFE4E2E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{02CB61D0-F12D-47DB-AE87-30DB6F7B729C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{031B9ACB-ABCC-48AB-B70B-4C7A4FE858EA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0358F377-42CD-4403-9B9A-83DC5B5AF48D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{03C1B1DB-1B4F-4887-A191-C3798ED6A010} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0473BF54-1D3B-4E2B-9A01-7272809044E9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{05264391-7AC5-4CCA-AFF3-6E46EC655038} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0665CC6E-C6B5-4121-8B88-2C257F65B491} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{06953D8A-4560-4C9D-BEB4-62EB41D40618} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0697268D-54FC-4573-835D-3B6CE4F1D761} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{06B9E706-D9A8-437A-944D-B4D4FCB0B935} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{06E49220-BCC4-46BF-A895-16DC0A447C73} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{076DCAB1-1227-4D68-A938-17E4E812F4E1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{07798C6C-6139-4D14-8FF0-95C41C54F374} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{077EA61F-9038-41C3-ADFB-3C2EA4534120} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{07ECF5B7-6C42-4329-AEA9-9FCCE95B08D7} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0815EE53-07C6-4D00-8F39-819AB6D661C8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0882B537-620C-4FC8-8B79-2D61BD30E8E2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{089CF2FF-858F-4F99-844D-567C47F2D240} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{091D27E9-5208-40FE-8640-910D54EFD37C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{09422D2E-FF0F-4AEB-8D4B-39B3DBE2F40D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{09EDC96B-3442-4550-9178-6FA3350769B5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0A668D38-76C7-4D7C-A77B-1153F23CC65C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0ACC0CBC-7A1B-41A8-BB26-9229A8C6575F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0AD2EF9F-587C-4789-B6A7-589853F0B911} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0B246BF1-01E8-4480-BAF1-1F7A054E0AB4} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0B5B9B31-51C9-4CC7-BC52-0D4ED292C59C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0B93ADF6-B307-46A6-BECF-595083B376E9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0BC3B3B5-658A-4667-9DCD-4F7FAB74A287} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0C1A244B-070E-4F0F-BA10-1623355BBBF3} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0C40B7A3-AEBE-4225-BA6F-1D93E68ECD0A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0C5A97D1-BC1D-4D05-9ED7-6FD53D2EC474} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0C7AFFFC-5B9E-4218-9AC0-CBB8F43A1FB5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0D1656FF-8551-41FC-BB18-8799828C6142} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0D731D8F-04FD-439B-919C-490B8FD321A1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0D7E66DA-73B8-414B-B33F-9047543D3C4F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0D8E970D-0E8C-4183-87F3-2BDC06F99C8A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0D8FCD1F-DCEE-4C46-9C07-A2429EAD9014} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0D9ABB2D-3625-4D4D-BE6A-C8E2E97A41DB} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0DC82D92-23E0-4DD1-BF42-AA9FE028DBEF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0DF65508-912A-4A69-8537-218F83B0A3F3} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0F23E30A-6AB5-4A83-9B5A-84FF20D369D4} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0FCC3975-CABB-4B12-8ECC-A4CD2294986A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{0FD687B4-E92C-404C-99D9-7F24675A4023} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{10F123C1-F298-4CFB-B83B-1B34DFF41160} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{114B3A13-1759-4370-A2ED-0E182BC4A917} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{114C8343-A147-4D59-9E54-6A3AFEE2E73E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{116C9FC9-D803-45EE-BA6B-539CFD85DEFC} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{11E54C0D-753C-4673-8C67-D38306AEE6FB} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{11F8977D-8DC7-43EE-99E1-FD790F0AB35F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{12929F2D-7DDC-419D-B7C4-CE0D03AB3446} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{12984BF7-FB00-4F98-80C6-59243B643D9F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{12D9D660-BFEF-4541-B978-E1DCEFA1E452} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{12E8B8A9-E03D-493A-851C-63FDEB36E43D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{12EB4F16-5ACE-4010-94A7-BBDC09ED0AC9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{131E6AEB-9E42-4D13-8FB5-D7769B70C902} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1334F29B-010D-46B9-909C-A9CF86851F82} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1364B027-524E-408D-90B7-4D74137DFDC9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1381FF4B-BCBB-42A6-9825-D9DBD31C285B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{13D8DB87-C494-4DD7-A705-AE9DE0BF0A54} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{14BDD171-705D-46BF-98ED-1503677D77D0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{14F6E19C-331E-4440-A4EC-B22AAD78D47F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{156F5E5C-4C08-4696-AFA3-54BAF5D00FAE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{16177632-D4A8-4976-8749-52F6BEE47E38} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{16282684-25E3-4048-A83F-E3D196EB920C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{173C12DB-B24A-4AC3-AD0F-57B7AF081509} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{17871D50-24BE-4AF1-AE5A-A206067678C1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{17CB5127-E39C-4C62-AD62-86583A516417} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1813F227-6DC0-4F98-A13C-05A1B842F740} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{181AB8F7-6146-43A2-96EE-A6734447E417} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{192E7730-79AC-45E3-99F3-AF462F4FEDEF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{19333BD0-9967-45A6-8D37-092BC48DFD60} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{19FD0BEC-8B91-4455-9E5F-CA1C577B8E6A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1A78EB58-1F13-4D3A-BED6-B029805ED303} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1A805876-1C30-40A0-94BA-078F011EF20E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1A842556-3645-4B57-B392-7A43DF031E24} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1A888E61-CE32-4181-B99C-B6B77A399A1C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1AF58EA3-81AB-4C39-9FF4-B48D40A5751A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1AF6922A-A965-4B5D-B084-4BD73C81FCA7} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1B01EBCA-B98F-4C41-8416-6CB0B65CED86} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1BE7514A-EFF0-4A99-85C1-9BAE4A3E481E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1D34F459-5E09-462F-B898-F4259BD3BDD9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1EDD0C29-3F30-41B6-9F2B-8AEBF2A6722E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1EDF5A25-5AA7-4B6F-B96D-6A8359B66A37} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1F1DC3EC-5FFD-453B-95B2-E9C57F3F3F2A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{1F695F5A-695F-4F84-91DD-B7CFE1A0421F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{207B6F22-B5E0-44B0-B0A6-8BA1150FE98E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{21A44618-F49D-481B-B406-FDCA6298837B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{21A4E440-49CE-417A-B526-59F8280386FA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{221D990F-ECE3-40F6-99A3-4B6F4D335787} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{227E9F4D-64B9-4A78-A272-2518DF8B1D73} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{22F7C8BF-9FD2-42B2-A811-7C82F3DE45A1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{23017FA3-BDDA-469C-BFDB-97F283135899} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{23389D6A-5AB5-4762-A858-5C6AB3D65DE3} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{233DA5D8-D9D9-4EE6-9818-5B08978F0A6E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{233DDA38-FA3B-40A4-BBD5-32A9CBAB959F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{237321CE-0DE5-4147-95B5-D2A4DB45AFA8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{23892595-0088-4C4E-8F41-C1E3212FF4AC} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2399E245-AC4B-4D43-9F3F-DE2FA3345E12} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{24825068-E855-4E21-8151-D0922F3F6DFA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{24A8A4F1-837C-4999-A51D-2C08ADDC14BD} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{25134704-A9EB-4819-A9C9-5BDC1AE09C19} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2529152A-8CBE-466C-9107-860F172E67AA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{25CBD69B-FBA0-4E5B-8B3D-EA1C346476F5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{25D8E7C4-344B-44B9-9317-3B1A21965443} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{25E283B7-AD68-4B59-9266-B07763F93EE2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{262CD375-A2C0-4056-8819-D0420B15EDD8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{26574425-9709-41F6-BD2E-BDC5C5E9A146} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2671EA42-B4DD-4585-9334-3493891E85FE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{26856B3D-CDA1-4350-8D4B-4C76463FFBF0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{26906916-15DF-4487-90FF-8C740B7EC6AE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{26D76DF5-5621-4076-913F-9D717442E37C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{27AFD71B-94B8-4FFA-ABED-5AC88A6F72FD} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{27B7973E-1E24-42A8-9669-6163DC8FA345} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{27DAD87C-1FCB-441E-B407-291BFF87DEBE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{283F6E94-E1D7-4BAB-9571-A5AD4F2C397B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{28AB53FB-795F-47B0-9E9C-C4D8CBA610E9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{291B18F5-94C8-44A1-8605-A88F74227CF4} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2983AF89-7772-4E43-871C-F3F65130E126} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{29DA5C9E-3F1F-4F0E-8962-1EC4D4702E1F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{29F74863-F7CE-4E1B-A7D0-DB6B5BBE542D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2A680208-8437-4BEE-9E44-908AB733D059} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2A72BDC0-9C80-44DC-B971-9CFAF2199A14} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2A8B9AF3-AB0F-4131-9D5E-F9D4CB4834C7} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2A9C45CF-B780-4541-B0B7-7EBA29E5FF8B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2AD69C18-13CB-42F8-AC52-5523C5195258} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2B54028C-BB56-4CD6-9D0F-6FB8CAFE6F7B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2B832A35-F67B-4135-8BF5-BAA3075F9868} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2D360DE5-40FD-43F8-8DAE-230D5C47E2BE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2D4C23FA-9797-4DB5-A4E4-477503F9D21B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2D62E7EC-05B3-4F6F-B021-71408D8CC5DB} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2D87AB2E-1928-4CC2-9D2C-7F38AD958A51} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2DC3FC3A-0343-4153-9957-03461E7A09C1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2DEEFF5D-E487-497F-BFE4-83C67E0C31E6} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2E6A8034-DD21-45F8-B6CD-B1143277F596} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2E79C347-0649-40A6-8FF6-BD166BEBAEAF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2F211907-8DB9-46C6-9D6B-053A8EBB32A1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2F471169-E46C-432D-ACCB-E55EE2FAF051} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{2FDCE0D9-E79C-44AF-B066-755EA5127A1F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{306C1A08-BE00-4885-832D-5D38243A0933} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{30FC0643-4F3E-4084-8C0B-71AE4AC0AFC0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{31061C3A-E0C2-4BBE-A1C3-AC141312B1E8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{31C41259-6FA8-450C-8ABF-8DB1AA8937BC} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{32317155-CF23-4BB4-AE37-4C1E5DB9D96D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{323D0ECD-FBBB-436B-8EBF-5CCB32FEFECA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{326ADADE-66B7-4DF1-97BF-12ABF5BC76BC} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{326F7DBE-0D2E-456A-ADD3-7122EC76F517} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{332CA334-473D-4810-8A08-3D7CC5E41676} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{33C4DA70-9348-4DB6-B5BB-CA8E548C5B57} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{34D1A535-2AF7-48FB-B53F-FE5B879E11F8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{34EEC2F1-F098-4A1B-99C1-A6A60F74E63A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{359CC474-3B4F-454F-8F49-67AB59F9333A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{35B0D19F-5E1E-4849-9EBD-C658D0E4D74F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{36278C68-DDC4-401E-B208-EAF25AE0B277} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{36801FA9-1960-4E48-8196-2340CA3379A5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{36DCE7D9-5DB3-4C5B-A3A5-2DF7DFD02266} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{36F6C5D5-C14A-4A8C-BDFB-E09B624F2728} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3714F777-FB6C-409D-A828-1FAEBE9BF9D3} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{373F3740-504B-4BA0-A7A3-2809FC618B9B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{374E6E60-75A9-425D-AD53-2269E1869302} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{38024DC9-D192-4BD0-8903-87F520F7455E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{38229893-9390-495A-9B1B-124852B8612B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{38778AE5-AAFD-4C26-8A24-86298E9460A2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{38A06852-504B-4789-82ED-D69A6BE32353} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{38F74C1D-84A7-4E94-B93F-F2B24488B433} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3915147B-0D89-4A02-8F00-35D263614949} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3A45DE4E-1D1F-4B55-8215-C03AA608A644} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3AFB656D-F6A1-4CDC-838D-0EC427DA7348} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3B2BCF2D-01D3-4395-8A6D-E6FE0BF671FC} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3B8A9F04-5586-4121-B84B-61580A268B03} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3BCCCC82-55A2-447B-B4FC-7535A0FE97C9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3D8D9D4A-A314-4314-873C-C6A42504DA26} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3DED81CA-E365-41EC-B143-3746C3D49D20} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3E2BA636-4575-4767-B9A8-20B29212A0B0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3E51B536-529F-456C-B3FE-B2BA6A77D7F7} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3E615AD5-3AFD-4CFC-95A8-A45836987F12} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3E6E98F0-FE02-4724-814A-7D6FC980712A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3F677ADC-7B07-4E1B-9982-87E7417BB67D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3F925766-E795-4E07-A923-1F20EFE9ECA8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3FD96D91-EDCF-4EB0-BB95-C2D54A40FC69} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{3FEF1943-8638-4473-9864-CB7535F8BD45} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4043DA4E-87B1-4120-8566-2D7FE2755DBD} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{40458366-83F1-439B-8B64-F94435FBEBF6} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{405F4031-9A5A-42E0-B761-B68006D993BA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{406AF47A-F0CB-4EAD-90F8-AED1D134B023} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{409D533D-5FEC-40BF-A350-73BCDCAD66ED} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{40AB2D91-42C5-43CF-9661-0681DF076FB3} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{40D6185E-1888-4C66-928E-F3542E74F198} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{413D5EE6-180C-4C18-8D7B-75FDEBE6A426} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{427BEE33-37BD-424D-ABF7-6456CA35BFE3} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{42B64B63-9E88-4B87-ADA6-7747D978CC3F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4309BA91-4A10-4EF3-9588-BA732483E5B2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4317A680-6CF6-49EA-B54B-7CF534F4EC29} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{43AC1DCD-0216-410D-B2C9-022C1EC240AF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{43BA7145-0FFA-46AE-938D-D63EA69568AB} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{43EA8117-1F9F-4AF4-A4C9-9BE1F6EA7B27} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{43F222AB-7C5B-4AEC-AC44-7CEB8D0414DC} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4459C3A7-6013-4EE9-8917-EA7ACDB2E4CD} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{45721C60-ED89-43C4-B4DD-7F15D5A1D2B5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{45F649AC-4E16-48D4-83B4-49479E341AAB} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{460B91F9-B2C4-4EE6-8FCA-17A1068BE06D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{463DFDA7-BA26-48BE-8102-8D8840235B87} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4650DE8D-B711-4821-982D-E64DB25833E8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4654F7D6-8EDB-4248-91F4-DB30F9A4E31B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4656B8CC-5D78-41D4-AC4C-6FEC866924EE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{466FC421-33B5-49C0-8239-DF75511F1643} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{46D30E2A-9401-4B61-92B9-252574B66123} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{46E7DA4B-5E74-4503-91E8-006AEE58112B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4730239B-42AA-41D2-B0C3-5B1D0867C060} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{474491C4-B2C2-4453-B4B4-9632B29213ED} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{47A3ADF9-64FC-42C3-B910-60F765DE73A8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{47C4AE0F-1BFB-471A-BC5C-53EC323074CA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{47C964BB-7A14-4663-849D-0A6716644BAE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{47FBDBB1-B2AB-40C5-9511-984374556350} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{487F6BE2-21A0-4B0D-92ED-F4D169EE0EA7} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4916DE93-3E53-4854-90E3-4FB6ED16ADCA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{491B8AB2-1803-408A-A4B4-365A6DA478EF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{496D5CC1-7363-4691-AFB8-C7AA4207E9BB} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{49A59F05-B79F-4903-BDE3-3D7C967EF3AB} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{49D9C819-1323-4017-B364-34B98BA69623} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{49F2F962-F3F8-4FA4-9827-D659AE9B313E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4A311F27-8850-436C-80AE-5575D0EDE2F2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4AB09B32-C064-46A4-ACA1-A4EB1B85EB05} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4AB4DD93-8A07-4DCF-9E1E-1C49E2334CE6} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4AF9BB1E-8840-42B6-BCB0-4F24AF07AFB9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4B2822D0-43D3-45DF-8F6C-67D5DA24CDCB} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4B5E7FE7-82E2-4939-8360-E41468AAB97F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4B9972AC-97CE-461B-B55E-D40C67966694} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4B9CE7DB-E151-4DA8-9399-D65D88DA68C3} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4BD36536-E08C-4929-A734-23D39CA889B4} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4C5E953E-BBE0-4B54-9B46-538A087EE5DF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4C76C719-08CC-4959-9344-9EB651710C79} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4D52FD10-12E5-4D40-99E5-EB2DAD028EC0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4DD6F275-AFA7-4B1A-A7FF-F40B64404876} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4E1F75BD-42DA-4575-9F68-D2EA3E452C17} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4E275BF5-152B-4E8A-89DF-6D2B50857886} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4F381444-BB2D-4460-B338-CFE3103BA21C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4F4A35E1-5B93-453C-B11C-EF6A147A950F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4F579647-2EC5-4020-A9A3-F52BB7347A38} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4F8076DA-DCB9-41E9-9058-C1655C8D5F7F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4F84897E-9FFE-4175-A059-5305284D3F01} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{4FC7054A-BD6B-4666-9B2D-0499F8A9B93D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{500020FE-A743-4F83-BBF1-DD380E43BB1C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5021A66C-7251-4F6D-BFE5-ED4FA5E7D93D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{50C2E825-F32C-4A3D-8BA3-B604949FA2CA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{51614170-8328-4072-87D0-F2A63CADC633} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{521090C4-E3E0-4DA5-A3EA-0A235D1C8AD1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{52C7422C-DA89-4F20-AC08-4CE498B96E4C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{53395CBF-3F80-444E-8D5D-78724B8D3DC1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5343BF7C-0B4E-422E-BA9C-3285A1582700} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{53696183-7504-4DA6-8004-371A03D16B67} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{536EA179-9464-46C4-8950-378127A8ACA6} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{53D41567-2804-4127-BE04-27821BEAB166} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5468077B-F346-45BB-9199-748D8CACFCA9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{54716A53-CD8C-4714-B204-3D672F591ED0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{54A9B1D0-AE06-46C9-96B0-AE0C7A18B9D5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{553041C7-DC3C-4A7D-A204-86A6F6FF3B6D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5548F769-26C9-4C1C-9E5C-5DE5FAC81B9A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{55C99B19-9F56-482B-928E-9539C8B29FDA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{55E9063E-AFEC-4728-8542-419DC162E999} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{56AA0949-11B3-48C6-90DB-CB7FDCB45124} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{56AB431B-3EAC-4117-B629-3833ABFEE620} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5725BFCE-F65D-4EE4-A660-D1AF93826DD6} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{57740E8C-E94E-4F5C-AD23-D3BE4988C456} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{57CAD7D4-F910-4394-B47C-4448C4D4F6FC} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{582455FB-2E19-483D-87FF-E2046E94F90F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{584FD78B-E368-4CDC-A990-4CB20C6DEAA4} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{58AB55EF-31E3-403A-8350-A0B16D36BC84} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5922E8B5-2CF0-426A-A70C-C8B4B155A3EF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{59598ABD-05F0-4630-AC83-9FF04563F6D3} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5970AB41-79CC-409F-8FC1-A74A48827718} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{59F38010-2141-46A7-9926-1D4F648A46DD} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5A71A412-EC4F-4114-B066-C26BB12F28D6} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5A9402CD-C443-4EF1-8717-17C658E23B01} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5AAF48FE-A2CF-4C2F-BC98-A7080FE0012A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5B06762B-0D97-4B96-A7BE-5B8BFA6A5867} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5B7D11C3-7E2F-4EC5-BE5B-105D3EC4F876} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5B8CF0A3-CEB4-415E-92FD-A7987E81BD12} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5BDD53C2-1B57-4E1C-B7F0-C4814BDC4725} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5BE3EE3E-E82E-4A30-952D-512E2826BEA0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5C2B02C4-016A-464C-BC63-D1A3BCCF0C35} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5D45024F-73FD-4E78-9BFB-FB46769233A2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5D4757CE-5987-4FD8-B683-B6CB8FA1D410} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5D8C9C04-D4C4-4B13-BA82-FEF33582DC5A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5DC343A2-7340-4E28-A23D-C7B0EA3313D0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5E2E6ED5-D643-4416-B9EC-11F21C8CE16D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5EC62A1E-C647-4598-A675-A2B91B3826A2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{5FCD0D6B-02E8-45D6-A69C-6DF389D67F15} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{60E44869-211D-4BD6-99D5-8C40A8E110B9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{60FD5C80-14DC-420F-BF0D-A4C353033F00} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{614981E0-74D1-4732-A87D-DD33AEFD07E1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{617F7D81-EC44-4EFE-BE96-CF0048B4F74E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6191FAB4-66D8-4D7A-BDCE-53B6F667AEAA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{619CA30F-AD60-4F9E-8B5B-6C2F73A1E3CE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6208EC4A-2F30-4E6A-B4D9-C6C98931779E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6276D117-28FB-4C16-8C84-80B4F14EB214} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{627B12DF-36A2-4897-8738-88D98B870A75} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{62F988BF-F29C-4E5E-AA32-D822A159F832} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{631ADD57-07E2-4D55-811F-DBECCEB6316D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{634B0361-CF3C-4A2E-83FE-26ED53C2DCAB} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{63944C35-0B8D-4DCB-9282-42F953E0AF81} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{640EEAB5-3AE7-4E9E-ABBD-68D961FAF32E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{64292FA7-F758-4696-BAA8-01C77F5FE813} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6500C6E7-E77C-49E5-A55B-BE9D37FE01B5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{65066D40-4423-4B28-8CEB-E60E801E3EAD} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6556DE1C-CC2E-42AC-836E-1C55236D3537} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6564C089-3367-4D1A-A807-8526E0B7D11B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{657807F1-72A6-4FEC-8539-907EF21F508D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{657C6BAB-CD61-4D64-A062-29D4158A19A8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{65A40BA0-23C0-4AF1-AD7B-137A7A64641F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{65C7A14A-6494-4E75-891E-0DF1996D420E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{65ECDB79-EF59-4F1A-BAD5-26BC8F31F849} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{679212F5-0031-47FC-9ABC-A4D9C9D1D514} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{67F9F6F1-0D92-4C54-8BAB-17D898494190} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{68196913-286B-4475-BE5C-E071D12D3368} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{68600CFC-2896-4076-A0A4-D963578943C3} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6881EF9A-3399-4BCB-862E-63832D1AD3D3} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{68DD2704-5C07-41E1-BE52-DB752F97EA49} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6932F9C1-DEA3-40F7-A891-73F696303CC5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{69EB65DC-6C1A-4508-827C-A484499BA772} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6A1252B0-3F3F-49B6-AF68-71425087FE1C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6A6753FA-8727-4128-BAF3-B8FEFC589DAE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6A688FEB-B83D-4764-8A48-1E935031075F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6A98D6EC-CBEF-4E3F-94B5-6B26F4621F37} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6A9FD74F-085F-449D-9572-DF456EF9B210} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6B236302-4062-4247-9DFC-1A915DD76E4D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6BAAF9C1-AB73-4905-9A6B-FF9671156CFB} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6BE89D11-0C0F-4D24-9EEC-07FCECFC1895} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6C1EF1FC-042B-41A5-AD8D-D62BE67F836A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6C8AAD70-2A36-423D-AC55-1A6735BFE42C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6C92485C-AE2D-4C03-9755-1A3837311391} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6CA7A32A-E778-4987-A30D-42A23786BC93} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6CAB2BFB-6789-42E7-8BFE-955C39DDCBE5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6D4C0F11-1DC0-4327-ACBF-7043879F0564} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6D79A15C-D76F-4A5D-985C-60AE8927C082} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6D7A7035-B8EF-4091-A392-0B02CCEF1128} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6DE13108-BB06-4FE4-97D0-A76DC12D85E1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6E10FBC6-8497-420C-895B-3A3B4EEF9ACD} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6EFC93F5-09EB-4A68-9AB0-3204257F3F9F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6F267335-7014-4DDE-92B5-25B77B529EC0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{6F51EDE5-AF63-4D11-BBDD-E01E43A09538} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7012D02A-71FE-4F74-B9AF-470648728B0E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7087F3EC-1944-4A7C-9192-8EB28827FE94} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{70E2BB80-34E9-4923-A454-00C7B3D7785D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{70FD5476-30E2-4C67-8EA3-2860A02F74E9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{714DD279-29CD-48C0-AA21-D8481A603E5F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{71739DD4-6BF5-4610-B432-9B9B19AAEF8A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{71A490FC-EA84-4874-97D9-CAA94395F0DF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{71A5F4E1-56C3-42F3-90B5-DAE9F5538A04} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{71ACF0B4-B7CD-4CB7-99F7-61B16FA76AF8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{71B99037-6AB9-44AD-BF7B-B4A924D66F03} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{71EA5E46-F9AA-43F5-A0AD-A9F27B7F1468} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{72C70E93-87DA-449D-8FB4-4F8A0C7020A0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{75891AE9-843D-492A-A2FD-3B50B4D9290C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{75C1D0F0-2F27-43E2-9AD3-8F56E16F271F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{761ACDE8-95F6-4A20-8FC2-D37DB0585520} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7689AD1F-2BD7-4C85-86C5-3C881A79CEFC} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{76DB582C-BDF7-47C3-B689-2E4935533BB5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{774FAEB2-59AF-4CBE-99BA-2E98E31505FE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{77629A94-3AA6-4A59-AF6B-E8D8859D2222} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{782139E8-878B-4CF7-B65F-112A688423B8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7828019C-B52C-4F9E-A59B-54B901EAFDC0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{78293462-6E8F-41C9-ABAC-62A92DE2544C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{789391AC-96DD-4498-9A04-F22D72868DBB} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{79FD3A7D-1F19-463D-94ED-CD7A44CF81B9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7A0B2B7C-BAF7-42D0-8A29-FE999E6D39B1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7A39F239-70A5-4CAC-AE82-D575B32F62D3} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7AB8298A-18A9-486B-8ABA-3E32F7889CDF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7B8BAD17-A514-4DED-829A-B5D7F1CF1F6A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7C134F61-3F48-40EC-B086-288731BFE088} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7CC91181-AB92-4A08-B1FF-73073877882C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7CEBCA02-E04A-44F5-AED9-3A515BFF9E91} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7CEFA8FF-B97C-4D50-B6D3-37D67A7C5E7F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7D685CBC-C459-4C6E-967E-1DA4E6BA3D62} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7DAE3745-6B94-4AE9-BE79-FFBEBBA1296F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7DB2A947-21BF-43B6-A400-BE3E99ABA7A7} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7DBA1E6D-F258-4FDB-A6A2-39306C1D4C79} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7DFB16A6-2E48-4727-9421-4C515C8B8D0D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7E377404-3A6E-4BA6-B308-57DC50D4DD44} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7F659B3F-EEB0-41BB-A871-C36FAEC99DF8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7F6DCD19-CB2E-4D11-B60C-C086E13EC177} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{7FB4754F-F322-4E9B-8BF4-8B25E411951A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{801E046D-251C-4E67-A909-290C80020469} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{804B68DD-8D69-4FC7-A0B9-9BBAF2159667} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{80A990D4-302E-434D-BBC6-DF523AE8BE5E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{81D0120A-A472-42B6-8E01-139FA99AB1F7} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{83634995-A807-4480-91C9-91B9D6D9DD05} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{853CC46E-FB87-4337-9AFF-603CA46A011A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8559F2AF-4CBE-4E9E-B026-BAC2C205FFC1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{860A5D48-4C6A-4415-B616-5B58D66D3A85} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{867C9CCA-60C9-426E-82F1-D0018694EEF6} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{86F010DE-4FFD-40DC-8E1B-0C451DA568C5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8720D346-7526-43BB-9128-DB78EBF4B348} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{877E5653-BFE0-4FE5-A2DC-528271DD6831} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{879E49CE-EE01-43DA-9C50-D0668E9A6927} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{87BDB0C4-47B6-4005-B70C-EB1A298ABCC5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{87D3B622-6D6E-43A7-BE07-344732C7E82D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{88811D95-065C-44E0-BCA8-F59CFBFED0C0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{88971209-C740-4CBE-B776-D4C66BFF063B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{889ACD5B-B71B-4823-85F9-B7CC8DC4398A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{892760E7-22D0-4CFD-BE48-BE52336769B0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{894245DE-06C9-4BDA-A50B-270444E8A37E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8962BEC8-9E5A-4472-8F84-DB124F1A159C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{89AC9439-8554-42FB-B45C-258D11053358} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8A5B2582-E073-4024-A154-953E34C2E432} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8A75A00C-4228-44D1-8956-1FBC9D52C47C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8AD9CBE0-406C-4E35-9A26-BA2B85AD8BF9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8B0F6016-80F5-478A-A06C-7A38367AAA09} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8B9DB21E-1A18-429E-A5FA-279E913E8704} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8BA57E7E-64D6-48CC-9AA8-70AE1955E4DF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8C3E028D-9435-4738-B0B1-321037A90434} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8C4F4653-FFA3-40D7-8ACC-1F16A0B01C95} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8CA599CD-3F46-4F6E-8E6C-7D052AEF1754} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8CCCC499-83C9-4476-9B43-E14F68985AB2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8CD8725A-3D5E-47E0-9281-38C51A744178} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8D3F9C3A-E76A-4534-8416-C6E7D64BE33F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8D70E913-6CE5-40AF-BDAF-CE3BF63033E2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8E127D72-346D-42B6-9106-486AB125F235} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8E3F28A2-9835-465C-BAAA-406A34E6286A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8E6670C9-AF43-4BD5-91F2-1B22A6501775} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8E67E2CA-EB11-4696-A0EF-2B54F83A4139} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8FB757A5-742D-4608-936F-FD875BE940CE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{8FFDD888-5309-41C8-BACB-066182BE34CA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9105A5C5-3620-4EBA-B68B-AD9BD41D27AB} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{91B82708-CFB3-4824-B182-9273479CEA36} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{91C8AFE7-3C2B-47B4-B5BC-CC23798DE1E1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{925BB9E0-9561-4391-A85C-80610C957BF9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{925E4847-0E81-4FBC-9C1E-2A85CD23EED1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{92A55DAA-CECA-4C2E-8473-62D95930DF6B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{92C9C6A5-87F4-4D03-A34E-91C2B6AC12BB} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{92EC0F86-82BA-42C9-9726-C6B9F023444A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{92F27955-A221-4CB2-B0E4-A31EAC572437} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{933D2F8F-1BD4-4020-8EE2-30F807471657} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{93605313-C9FF-4C84-AC0F-2E515D78662A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{938056D2-D3EB-41AB-9EA6-D3BD856CBE3C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{93D4A603-9575-44A3-9B07-E8FE87FC86BD} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{93D5A8E1-2262-484B-825A-6B38EC4E4DD5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{94891BAB-6202-4C34-BD22-9BDB96CE1B18} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{94AFEA7D-5143-420B-A481-ADA4EAA231F5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{95833658-E481-457D-9989-BCBBB42E2570} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{95E66FC2-D300-429C-9F73-9513512BB6BA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{95F0FAD9-08C4-45EE-95B1-938388107D91} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{96E830B2-B432-4202-82AE-A484B888F552} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{96EF7FD4-FDE1-4F71-A1A5-FD5CF862F6EA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{970BA925-6372-4C4E-B083-32F20CC7C4E1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9731FFAC-240E-4AE3-9CB5-DE8E4FCDADEF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{97BD2E12-C63E-4879-A87B-E6711EB9B11C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9844E0F3-A72E-4491-AA37-159A131C69DD} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9875E3A0-8C4B-4E89-90EE-2F6E6A670F4B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{987BB4B5-B972-4CFC-8A77-B56EE28C5C3B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{989047B9-7798-4D60-8F16-3876713F8697} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{98909EFF-070B-4528-9875-64AD4A24FE62} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9910E859-228B-40B4-9DDF-A65D9BDDF95B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{99D96BF5-1152-4591-8083-3BC7C6799E32} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9B2D8892-5868-4A65-88BC-EAAB0755A292} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9B3DED36-70F7-4FC6-A966-D171344FBDEB} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9BBAF8EF-B4C1-40AA-94D2-CEE8FD3DB288} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9BE979CB-2722-4689-984E-C910BE38A209} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9C00B8DC-E8F6-4AD0-9FF4-63B3B841D052} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9C011A1B-38EE-41C2-820A-5C892A74F457} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9C203881-49DD-4F8E-A680-DC87FE3DB2AA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9C612FFA-30C5-4B32-95C6-903C82022FC5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9C6B1F80-B950-4896-9D1B-DF6918F73B4C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9CB517C3-9BD0-447C-901B-77CBCB582462} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9CCB51C7-5259-4159-A8AF-65BAD366DDDA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9CFC1A09-C0DB-467A-AF50-CE071FF98F7B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9D762E79-E48A-4418-99D6-551FA4E8D448} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9DCB2741-827A-4796-A8A0-3032E5E3D2AD} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9E4760DC-0231-4ADB-8988-935ADD8302DC} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9E5CA46E-0B31-4ED9-8D9E-DE02ED15F967} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9E7609D4-AA30-4F6C-8BC2-218F50C1DC7B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9EB2E390-65D2-4281-BC4C-B37FA53C0FA3} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9EBF5362-AB48-4332-BFC4-B2250FDFC168} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9F0775E0-234A-437A-A7E2-B7B886051CBF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9F08CC00-B4E8-4508-9D2F-7ECF73DF76F1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9F303FB7-01A7-4807-84AF-819E8A2DB564} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9F38D49B-687B-46D6-ADAA-27194E5C3DA0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{9F4EE755-3F37-4474-AE2B-C8880FFB3829} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A07EF0A4-6414-4016-B4F9-AEEC0D13F7AD} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A184DA30-33D6-4FFA-87D7-7947F1B4B248} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A20467C7-B6DD-430A-9C17-5C57EDBFA16C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A29D024F-A618-4935-9B4B-6D15FA6C5D14} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A2AFC57E-DA3B-4A5E-A01D-13AD9A3E6731} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A3058154-F764-41CF-9104-1CCF32E48404} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A3169D7D-3122-44A5-B96D-2FB7ED93316F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A334E16D-8906-4033-9E8C-EF9B7795BC2E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A3560239-EAD4-4994-990E-DE4B99933F17} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A35DF57C-C307-488D-9AB0-D3EB0F6CD5AE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A38F9621-CB2A-4033-8C21-D848ED6D9E03} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A48BDE5A-00C6-463F-B188-F32F7B572311} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A4A06E5F-F4D3-41D3-B525-C8C983DA78C7} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A4A63472-CCA1-473D-8A64-15C1794AB2E8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A4B010D4-3F9B-4F2D-8763-C6CB06E65D83} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A5443854-388E-4C74-BA17-AB7A3DC8CF7E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A5C51EBB-D5F7-4E86-B029-AF5CF5A2C91C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A6BEB14D-4B82-48EB-8BB4-A0743A902989} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A6DE0ECE-23D7-4AB6-B3CF-B9AFECEFF6E4} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A8508905-04B0-4CC3-8F86-8A184E5E2024} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A868D650-970F-45C5-ACF7-9371132AB3B5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A894A65B-BC64-41B4-AACF-2E34CF912AEA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A919BF10-5945-45AC-984E-51B5384AC3B0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A937B668-485E-4023-99C3-156BE15BE094} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{A9D7E6B8-040F-452A-89C8-43592257ECF2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{AA2ECD13-8033-4BEB-BD47-8961875BD430} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{AA5EAC76-A274-48BF-9923-5791FCBBC121} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{AA62BA42-38BC-495A-B7BC-1E3AFDA970F4} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{AAF65E27-E7AB-4777-BCA4-CCCB06BBAD06} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{ABB57CC9-86E6-46C7-A04E-F66C262F601F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{AC0693BC-BC98-4045-98BF-AD7390926E17} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{ACC63D0A-3B3D-481C-BD2D-EF4C50533516} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{ACEB41D0-F788-4ECD-A093-EC4346279F36} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{AD299C1A-375B-4652-8B0F-A5BBFDFE9E31} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{AD577A91-D092-4C6F-A75D-B786000A12A2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{AD624F2A-CFE3-424B-B7AC-03D28A97029D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{ADC8CFE9-7DE5-4332-8623-6F8825C45C01} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{ADE54882-E89A-42C6-A5E0-5E56D50D6DE2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{ADFA1044-F9F8-422F-904F-D3952B78DF33} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{ADFC2761-277A-4D36-9A15-88B44416C809} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{AE133A3A-B71F-40C8-9A02-28837FB7294A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{AE678D94-1A61-4846-804A-759C3242067E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{AE93B682-08DA-45AA-909E-5A6592E292FC} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{AEED20C4-E999-4978-A605-030E9B15DBD1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{AEF2BF93-71C1-4262-BC51-5DC3EC1A3778} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{AF9ED9AD-20CF-4779-8C5F-4896E7385229} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{AFB17556-4AB0-40CE-8A78-EB882D44F1AD} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B05B116A-45CE-4C8B-91D9-135430E5B9FF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B05B85A7-3ADA-45B0-B110-3F723EACEB55} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B068EB57-5E43-44A1-B4CA-F20C37A8FA13} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B102FA8A-0270-47C9-B81A-65F1AF58DD3A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B16109A4-7771-4F08-A1DB-371F8B4CE880} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B24AA772-2DFA-48AB-AA1A-CA14D99338CD} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B267A57B-B072-493A-B586-D33CAFC3DDA4} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B2686250-ECA9-4D46-B244-F3FF37E8ECE8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B34CE1A8-32D7-41F0-9617-70AA90FF9244} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B3583829-7F9C-4A84-ABF0-151AD007D314} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B3616181-C42D-47C6-9987-668F84C45B4D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B3AB032E-E5D4-48D3-B227-847CB17FE798} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B3C321FE-CC30-43BE-80E8-C632AB66EE5B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B400D823-2363-4F4B-901C-0404E21003F8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B44D9CE7-DA45-47DB-ABFF-12212E014925} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B4529284-4E73-4425-861D-6418F36D611E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B475C4A5-9015-4CD7-9B81-81738A7DEB85} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B4F4C2E4-500A-443D-A4B0-196AF7E99376} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B587A9E0-38A4-4067-BFFB-8A070E1CAD36} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B5B04738-5544-4F45-95E5-D759E83DF280} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B5C1B274-2C59-4B6E-B00E-0E4BEA1BCF22} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B62DB55B-DD54-45FE-B1F7-5E6FE750A996} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B67D53D5-9E25-4A6D-B5D7-878F47B82990} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B6AFA40E-1C79-4DD2-A4AD-060FBEF89D5C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B6F53CBF-F432-4036-86F6-FE8A3AF2CAEC} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B725F897-3C09-45D3-90ED-F1BEF7D1C9D0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B72CF934-6E23-46BD-9D6A-1CA320BD7E78} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B7674B59-2BAB-42CD-8754-18856D592695} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B77515A7-BC7F-4EF1-A9DA-4C456662910D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B7A167CE-86C7-4010-8237-A5CA04132767} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B7B5C33F-23D9-492C-96EA-878A2DD9BEE4} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B7B8ABCA-121F-40F1-A99E-7E9790170320} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B7F0F08A-7C13-4B82-8D46-365EAAF6DA4E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B8631CE0-63EB-4974-82C2-21DDA1B34D0D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B8A6886B-D253-4011-A753-81BD69E510E1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B9090D4B-701B-47FB-9EB9-7AFD056B27EE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B9276ADB-D406-4DD1-A57C-5CDB90E38B9E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B93AA165-130D-4909-A77E-5CAFE97BAD97} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{B9D934B2-9DB2-44BB-BB11-90C562B1E25A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BA2E0427-8564-4377-9F26-860615195818} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BA72CF0A-67B8-4E32-A665-BB0A8B9D0DDC} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BB05B60E-A8A4-48E6-963C-3C550CED0135} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BB0F83EA-BBB7-4A40-B652-43CD74FB3365} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BBD46773-A32B-45AC-B8B5-D69C9401E49C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BC0728BE-87A1-4468-9EC8-7373675D48CC} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BC453676-4EB3-4EC5-B168-729BC02DC6AF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BC522171-F9B6-4236-9101-0B1D37D0B1DC} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BC74B03A-052C-4F90-AB31-C73FF61A2A4F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BCACEC1B-DEC7-47F6-9075-56B75AEECF51} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BE1A6C12-CCCD-4FF7-8ECA-3E88D7788B01} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BE7BAD09-38C3-4DD9-B140-370BAF9BE03F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BE879779-BE27-4752-9ECC-6D095F5BA48C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BEAD1CC9-E31E-468E-BEDB-8A2990BDD775} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BEB50E5E-1082-4948-B12C-14B1965B7519} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BEC9840F-D132-401C-96E6-5978AAB17A29} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BF63B28B-B8B3-4E54-BC5B-D19D869C7901} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BF9745E1-CB49-42D4-81AE-63C49D8FE69C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BFBD18C5-0FD3-458C-B6A2-997262194BC4} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BFC99E60-B005-4DCD-AD30-EC4E6426AC01} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{BFD9BE09-5F4C-4F00-BFB7-3E44CC0D971F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C000A379-A98D-48EB-9153-864C7ACA3EED} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C052E226-193A-414D-AA04-B80F3E7AB3A2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C0B45979-BECC-44A8-8700-A2F951DCD46E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C0CBD35F-E1EE-4840-AF6E-B6738BFAA02A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C1158B12-857E-492A-8A39-A133F1A337C7} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C1604270-57B9-4F67-A805-5723BEADF638} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C1ACC2A1-9623-46DE-8034-42612F8D8E4B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C1CF89ED-0920-462C-A134-E33599B1BC1B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C235126D-14D2-4938-AD0A-1F81BEFEECDF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C291ED9A-0CCC-49F7-A48B-F86F092CD604} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C298B0A4-9EAF-4DE6-8008-DE7F80B8C56A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C29979A2-579F-47E1-8FC3-211F0C700AB3} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C322C37E-B3D9-4062-B7BA-A69578E4E63C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C35C9F26-FAFF-4D1C-A1C5-F45CBB10462A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C4041F35-FC56-4288-89F8-27CC70F8DE20} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C443849D-12FB-4106-A8DB-FBD167B1B13D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C5AC5B3E-4C79-4BBC-AEA9-088A0CC6997F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C5EB1C8B-2047-475C-A2FA-8AFE11A050E9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C67E4324-FEAA-4AD3-B932-6F5C23AE012C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C70081E7-0A5E-414F-AE7A-EF389B526381} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C71B0CD4-0D5E-4E48-93BA-963514916133} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C74DBCF8-B60C-4F85-A84F-51B3495F6156} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C760C845-2E66-44E0-91C7-21CC77E3020B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C789DC05-0A83-4673-9293-D23153F144AE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C8167558-626E-4ADE-94EA-A99F286B1E54} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C8EEDE9E-7692-42A8-8C05-AEDBECD71810} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C9166ECC-211E-4F8C-971A-AFB32FB32853} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C92672C0-9AD3-4E93-866F-FD5A8E324EED} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C99268F5-732A-4A37-A01E-648CCCB46EF2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{C998E40B-E58A-4BE4-8742-31FD76B7A3E3} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CA45E497-F5E0-40BB-8DCC-14B0EFAC4CA5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CA5D88AE-B57B-48FA-BFD3-2476DF1D20BE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CA6D3CBA-69B4-439A-92AF-EBEC4F1A1492} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CA9230A9-E44A-42C6-BADA-49E9E2849848} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CAA92E4B-1BC0-465D-8571-8B659947BE7C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CB426426-5501-409A-804D-A708B7C6D85C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CB577748-B4DE-417C-BAB5-997873B45623} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CBD72160-EE26-42D0-BFF4-9FC2A1F33E50} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CBEA227B-79F2-47E2-9454-C31C513E5052} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CC0CE357-9589-4CBF-B949-020909267929} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CC12BBFB-454C-4B97-9A34-237839D0FE21} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CC413719-9BF6-4D6F-9D09-2658C52DEC9F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CC55CC6F-3161-409C-AB7C-5878856D6D91} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CC603915-FB57-4C08-AFE6-354EE2007EB1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CC642018-9694-47DA-BCBE-394AB07F5DA6} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CCA77983-85C1-48C6-9820-73D0F18D2908} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CCCFD691-7013-4898-ABA0-48F4FDBE2070} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CD44EBDC-CA12-457F-95B9-EA62C404CE74} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CD63989D-CF62-4E8B-8FEF-188E38A5F652} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CD6F14EF-3453-4C16-8D69-7F16388B5BF0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CDCBA6FB-4AC9-47E8-B793-2988AE2F8B7D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CDE5EB0E-F3F9-466E-83BF-06231AE65FC4} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CE078F81-920D-44F9-B2A5-B629E487552C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CE55B4A5-8463-4190-9507-6ACDC9B1D585} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CE659414-8752-4316-BCB7-9166318EFE34} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CE78D952-1D6D-4BD2-B871-06D95BBE6E61} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CEAC612E-9767-402C-80D8-EBBF4D88C857} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{CFF7087D-C3AF-4118-BA54-12FEE374B8FF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D02AEA61-5EBC-4DE2-9F66-D97E4005D14E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D04C1025-EA22-4B58-9413-2958B2F9047D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D07ECE7D-36EB-4AFE-8911-15CF1A409175} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D0EBA3EA-F7AC-46B5-B33F-70E1A3F9B05F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D1F6CB79-C45A-4E0A-9A82-C82D53DD62D2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D20AAAAF-B394-4735-956D-BDCA53C3F161} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D2444DFE-91D2-40AF-B56A-175B4E6A7FD6} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D262E2AB-9FE7-4DD4-89C8-513258588717} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D2CCF3DD-E8CC-4E67-B5A3-1CB98BAA448F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D40A57E7-24E2-48F2-A0E8-06B516DFC6A9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D4E1686B-5CA8-4768-BD01-0D51582134A8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D5E3A7A7-703A-4B5E-92C7-787FDA940717} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D6DACC34-87A4-4EAC-99AF-1D02EB0F68F6} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D70C529E-4614-43A5-8E1C-3B289EE4C234} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D73BF8D8-8856-4840-BC7E-F9A32DE2F2AB} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D74F1B5E-AAFF-4FD6-B021-F0D25AB68368} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D7519BBF-F34A-413C-A867-498A08678D11} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D790E626-87C5-403C-87FB-317A3DF35BBA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D7BC6E75-42C0-4FCA-9DE2-83B41CBAED51} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D7F77DDC-2656-486D-9B0A-53C766E2686E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D7FBE00A-04E1-4651-9453-415BCBD338CA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D853B4EB-2EA0-4108-B3B8-FB0E0C59C231} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D8F2231C-C607-45E7-BC72-D2882D85A1EE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{D9BDCE57-F3DC-4360-9F49-277220CFE06E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DA5D39C2-D3B6-4168-9FB9-7004DB1BEF43} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DA704E43-F994-4A31-B9C1-C828D4388C50} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DA8A5902-5D9F-4551-9157-CEE933021DA9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DB153A1B-8F34-4D96-8578-2591BDC2C6B6} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DB98B211-C0C6-46BB-B9D9-779E1464C978} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DC08D80E-FD84-40AA-8C6C-12A82C1D5D44} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DC13A918-E222-4A6E-86BA-85276B0A7F1E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DC5FDB96-7BBD-41CA-A0D7-A768384C6EE9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DC640703-E0CD-4AB9-A0A8-661529E5BFC6} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DC695043-AC67-4EAA-9EEA-54008B4B6702} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DC6D99D1-EF78-4BA7-91F6-C394409FF542} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DC9E73CD-6F9A-4B49-A99B-EC085C6EFF0B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DD933B88-7A4D-46D2-B716-6E9F5CE885E5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DDB957AF-6C37-434D-B1AC-47768A2727CA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DE0B8610-09F3-4D4C-BD50-D08260B1AA6D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DE1C6A1E-553C-416A-A913-00CEF9273C60} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DE448B40-BD88-4DF5-8B83-76E4416388F9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DEB0E911-1B47-4DFB-A96E-F5EE52F454A0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DEB9480B-6147-4E2F-BE18-945E3DB48959} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DF21AF62-081A-4468-9C0E-E369CEF7DCDF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{DFA9211E-DA8D-45E6-AFC1-DEDB29D5D57C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E0A8CAF4-31BD-4BAC-8B39-46E697984A75} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E1701968-A8A0-453C-8CF2-86EC31EC0BB7} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E21CAFF7-B85A-4EC3-92B0-1B6140A0FED0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E224EEEE-7BA1-43E3-898E-5C0B30DCE6C0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E249E498-769F-433C-B1D7-B7FEE70C46DB} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E293790C-3362-405C-B349-F26C26D8C425} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E2B9CA62-73DA-435A-85A4-2F4556D101B7} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E2C68BC3-E01D-4ECE-A29B-91CD744ABAE7} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E2F9C59B-2131-4350-A265-3F8AE90A095C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E34026BF-9393-4981-B8B2-B85EBE85061E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E3B19BC4-DF6C-4451-90B3-C4121A6C7D20} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E3BF1D63-2A09-4F26-9B77-149F7727AEB5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E3CDF9DF-17EE-4C76-BDE5-6DB31B95671F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E3E48806-48B8-451D-9E21-B9D44CD18EFE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E4355783-C70D-48B9-8F50-B79676B1B3A5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E46E7C4B-33C7-4172-BD03-9B3AE2892527} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E4723389-94EA-4C2F-ABAE-A9A1441EA30F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E497D6C2-7D10-4F33-8316-1FA1444C10CD} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E50A3270-2871-4F45-9B5F-1E454BADBDF1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E5329FE8-251B-4A29-852F-CFD0046E24A5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E53EA77A-C644-426D-B6FA-2B9179948349} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E5930D4A-0CEF-4688-883F-6CDC3E4921F3} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E62761A8-6715-47E4-ACA2-65D110207624} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E62E96E3-427C-4936-BFD9-9EA5FCC10662} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E660D541-F4A6-4A82-858E-90958FFA6F88} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E6B2CB7B-9B8E-4E30-B8A5-0929D0D7FEEF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E7269CB2-FCB9-4759-A339-0BD727FBC730} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E72C64C9-A67C-4627-B541-C248219F9E0A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E8D2D88B-F446-41C2-BCA0-73740D7543D3} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E924A58F-856A-4BB5-97B3-69B950D5C91A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E9275B14-BC02-48E6-9C4C-1DC69A38FC54} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E982D84E-8573-41F8-9374-DA4CF0B3B795} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E9BCF077-6FFB-40AB-B8B4-A80FBB72FDA8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{E9ED5445-FDF0-421D-9F5D-92E22514A5B2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{EA517739-83EB-4343-B3C7-41FDCFA5ED95} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{EADA8E13-CF8A-40F3-B65F-C87754714781} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{EB299DB4-6611-47A4-B82C-7D847E456A80} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{EB5707D2-D86E-41AC-AD6F-72F4CAD199C1} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{EB8970C3-F677-4F12-86F5-4164375741CC} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{EB9BEB38-3DF2-4F76-A7DB-015E131CF35F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{EC2F1667-E42B-481F-AC68-930049856D84} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{ED910D42-2B70-4975-87A3-4235A7A77E4D} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{EDADE0EE-6CF5-4CDC-8192-AFB3970E364C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{EDBF03BF-7368-4D38-A2F9-E7EB30726C5C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{EE5BE3BF-42D3-4A52-9B99-6BC25BC83776} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{EEEF463C-9875-4DFB-85DA-7D3F2FF1F6FE} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{EEF032BF-CDEE-400B-A1FE-1C3077A6DAD5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{EF79902C-496D-4890-9023-8B361546805A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{EF971400-64F9-4415-886F-EEEF3B368FF2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F0DE434B-A340-489F-9942-0121DD0A657E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F18F9E49-C369-4510-A3DA-A42A0FD933F8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F211CDFA-3E17-43CF-9E79-4CC358F6EB7A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F2A0E1DB-E1FE-4249-B63F-C29A0BA2017C} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F2C6630E-B536-4ACD-B3E4-939B36E892DF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F2CE30E2-6677-431B-AA7E-32F90EBBF74E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F324FAE0-F6F3-41F4-834C-76A7D61DCD72} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F35FA04D-97A2-413A-BB61-8BEF3CC480F6} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F3CF945A-5092-448D-9371-66B0D35C20AD} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F402B092-D50A-46A8-BBBA-8445ECAF0C52} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F4139CE9-B2C8-4B26-AC6B-C7A232B852B9} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F44B74CF-0361-42AE-95D1-4BF65259676E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F46BFC4E-EECE-4D66-A675-A64712B6F6A0} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F4AD3060-B2EC-40F0-8133-D931BEAFE4E8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F4C9FDE2-9705-453E-B25F-D73C96F2EE28} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F50D7AB8-5E4A-4171-B7FB-5467415FA992} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F5737366-5392-414E-A1E0-C99510E1E0BF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F5EAF9F6-80A6-4CFA-8851-57F8DD46C28B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F62DEAF6-86EA-4950-98C6-F89D84681B7E} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F661E577-35B7-4549-8AE4-71416FC49F32} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F67B89CC-CD8C-44E1-B37B-11188CDA5FE6} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F6EB9CDB-E7F5-4341-AF10-98B876066C90} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F70F6F1A-2CF1-4CEF-8A65-E07B4EE2F23F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F717E4BC-CE02-413D-9970-2C4A7CD5D21B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F72C6042-C102-425C-B7C7-AA97FFA80D47} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F73F4990-DD59-40DD-8F0C-5FF9F73A4B5A} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F8783C24-2ACC-4DEA-AD31-392D42ADDBB5} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F89373E0-A47E-4F9B-ADE3-8565C9EFB171} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F8AC2091-58DA-492D-AF71-401EDA166D76} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{F9AFDA12-3E86-45BB-BA80-7D45A3E94BEA} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FA148889-1329-439C-9E10-24BA564C26B7} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FA32D6E3-A913-4FBE-BDE1-9582A2743CD8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FB0A1BDB-0E79-4CB1-8CD1-F1E69987B38B} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FB853CB9-4BDF-4F61-822D-89A911728816} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FB8CD3A8-CDA9-4C27-8810-7E7D6284B060} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FBF845A5-D3E2-4549-B641-09EF81CC68E2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FC000B41-5613-4028-A6B7-E735692ECDE8} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FC2825C4-43C9-4108-BB38-1C99EB3AF894} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FC88EC3F-2355-4AC6-BF99-B50DF75BB509} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FCA24882-E540-4026-AB73-34A1114A35BD} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FD5AAEA1-4643-4CA9-B456-DE354ADC6677} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FD9A22D2-2554-4D38-A06B-23E92871C214} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FDCAF5D8-107C-4BD4-BFFA-411B5E9BADEF} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FE154EAF-2E6B-416E-8544-C2C2C3A89436} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FE6D6CA3-22D1-4AA6-8B04-4408FEE30E8F} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FEFD27E7-D439-4605-A4F6-F280A480B2D2} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FF04AFDF-5198-474C-9883-BDA542B40A69} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FF86EA9A-3C56-4963-937E-04DABB3A2124} Successfully deleted: [Empty Folder] C:\Users\Agando\appdata\local\{FFFA2862-DAD9-4156-866F-7A945A96317D} ~~~ FireFox Successfully deleted: [File] C:\Users\Agando\AppData\Roaming\mozilla\firefox\profiles\pam7rq1x.default-1355607406125\user.js Successfully deleted: [Folder] C:\Users\Agando\AppData\Roaming\mozilla\firefox\profiles\pam7rq1x.default-1355607406125\extensions\ffxtlbr@delta.com Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\{acaa314b-eeba-48e4-ad47-84e31c44796c} Successfully deleted the following from C:\Users\Agando\AppData\Roaming\mozilla\firefox\profiles\pam7rq1x.default-1355607406125\prefs.js user_pref("browser.newtab.url", "hxxp://www2.delta-search.com/?babsrc=NT_ss&mntrId=9CE0F8D111109766&affID=119357&tsp=4987"); user_pref("browser.startup.homepage", "hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=9CE0F8D111109766&affID=119357&tsp=4987"); user_pref("extensions.delta.admin", false); user_pref("extensions.delta.aflt", "babsst"); user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); user_pref("extensions.delta.autoRvrt", "false"); user_pref("extensions.delta.bbDpng", "2"); user_pref("extensions.delta.cntry", "DE"); user_pref("extensions.delta.dfltLng", "de"); user_pref("extensions.delta.excTlbr", false); user_pref("extensions.delta.ffxUnstlRst", true); user_pref("extensions.delta.hdrMd5", "C02C98022E3BB7DC4C44912688FABE40"); user_pref("extensions.delta.id", "9ce0b021000000000000f8d111109766"); user_pref("extensions.delta.instlDay", "15944"); user_pref("extensions.delta.instlRef", "sst"); user_pref("extensions.delta.lastVrsnTs", "1.8.24.621:48:36"); user_pref("extensions.delta.newTab", false); user_pref("extensions.delta.prdct", "delta"); user_pref("extensions.delta.prtnrId", "delta"); user_pref("extensions.delta.rvrt", "false"); user_pref("extensions.delta.sg", "czb"); user_pref("extensions.delta.smplGrp", "czb"); user_pref("extensions.delta.tlbrId", "base"); user_pref("extensions.delta.tlbrSrchUrl", ""); user_pref("extensions.delta.vrsn", "1.8.24.6"); user_pref("extensions.delta.vrsnTs", "1.8.24.621:48:36"); user_pref("extensions.delta.vrsni", "1.8.24.6"); user_pref("extensions.delta_i.babExt", ""); user_pref("extensions.delta_i.babTrack", "affID=119357&tsp=4987"); user_pref("extensions.delta_i.srcExt", "ss"); user_pref("extensions.wajam.affiliate_id", "6447"); user_pref("extensions.wajam.firstrun", "false"); user_pref("extensions.wajam.log_send_info", "false"); user_pref("extensions.wajam.mappingListJsonString", "{\"version\":\"0.21087\",\"update_interval\":1228,\"base_url\":\"hxxp:\\/\\/www.wajam.com\\/\",\"update_url\":\"hxxp:\\/\\ user_pref("extensions.wajam.no_trace", "false"); user_pref("extensions.wajam.server_current_mapping_version", "0.21087"); user_pref("extensions.wajam.supported_sites.google.wajam_google_se_js", "try {window['APP_LABEL_NAME'] = 'wajam';window['APP_LABEL_NAME_FULL_UC'] = 'WAJAM';window['WAJAM_APP_L user_pref("extensions.wajam.supported_sites.youtubesearch.wajam_se_js", "try {window['APP_LABEL_NAME'] = 'wajam';window['APP_LABEL_NAME_FULL_UC'] = 'WAJAM';window['WAJAM_APP_L user_pref("extensions.wajam.trace_log", "1377632842245 - onFlagInfoReceived - JSON Received: {\"unique_id\":\"C4A5C66C77417DD8829B92C478DE778F\",\"urls_mapping_version\":\"0.2 user_pref("extensions.wajam.unique_id", "C4A5C66C77417DD8829B92C478DE778F"); user_pref("extensions.wajam.user_current_mapping_version", "0"); user_pref("extensions.wajam.version", "1.26"); Emptied folder: C:\Users\Agando\AppData\Roaming\mozilla\firefox\profiles\pam7rq1x.default-1355607406125\minidumps [383 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 02.09.2013 at 22:37:10,99 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.002 - Bericht erstellt am 02/09/2013 um 23:27:03 # Updated 01/09/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Agando - AGANDO_HP_PC # Gestartet von : C:\Users\Agando\Downloads\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Users\Agando\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z Datei Gelöscht : C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk Datei Gelöscht : C:\Windows\System32\Tasks\EPUpdater ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKCU\Software\OCS Schlüssel Gelöscht : HKLM\Software\PIP Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zip Opener Packages ***** [ Browser ] ***** -\\ Internet Explorer v10.0.9200.16660 -\\ Mozilla Firefox v23.0.1 (de) [ Datei : C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\pam7rq1x.default-1355607406125\prefs.js ] Zeile gelöscht : user_pref("extensions.wajam.mappingListJsonString", "{\"version\":\"0.21087\",\"update_interval\":1228,\"base_url\":\"hxxp:\\/\\/www.wajam.com\\/\",\"update_url\":\"hxxp:\\/\\/www.wajam.com\\/addon\\/[...] Zeile gelöscht : user_pref("extensions.wajam.supported_sites.google.wajam_google_se_js", "try {window['APP_LABEL_NAME'] = 'wajam';window['APP_LABEL_NAME_FULL_UC'] = 'WAJAM';window['WAJAM_APP_LABEL_NAME_UC'] = 'Wajam';[...] Zeile gelöscht : user_pref("extensions.wajam.supported_sites.youtubesearch.wajam_se_js", "try {window['APP_LABEL_NAME'] = 'wajam';window['APP_LABEL_NAME_FULL_UC'] = 'WAJAM';window['WAJAM_APP_LABEL_NAME_UC'] = 'Wajam';[...] Zeile gelöscht : user_pref("extensions.wajam.trace_log", "1377632842245 - onFlagInfoReceived - JSON Received: {\"unique_id\":\"C4A5C66C77417DD8829B92C478DE778F\",\"urls_mapping_version\":\"0.21087\",\"send_debug_info\[...] ************************* AdwCleaner[R0].txt - [4477 octets] - [02/09/2013 23:23:35] AdwCleaner[S0].txt - [4346 octets] - [02/09/2013 23:27:03] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4406 octets] ########## |
03.09.2013, 12:27 | #24 |
/// Winkelfunktion /// TB-Süch-Tiger™ | seltsame internetabbrüche ! Mach bitte die Kontrollscans
__________________ Logfiles bitte immer in CODE-Tags posten |
04.09.2013, 00:22 | #25 |
| seltsame internetabbrüche !Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=bfa8af4ab09a6b499c8bb0ec3e40b1a6 # engine=15001 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-09-03 10:44:36 # local_time=2013-09-04 12:44:36 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1023 16777215 0 0 0 0 0 0 # compatibility_mode=5893 16776574 100 94 3649596 129878126 0 0 # scanned=265034 # found=0 # cleaned=0 # scan_time=8861 Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.09.03.08 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16660 Agando :: AGANDO_HP_PC [Administrator] 04.09.2013 01:00:37 mbam-log-2013-09-04 (01-00-37).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 251418 Laufzeit: 3 Minute(n), 48 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) |
04.09.2013, 10:36 | #26 |
/// Winkelfunktion /// TB-Süch-Tiger™ | seltsame internetabbrüche ! Sieht soweit ok aus Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat. Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie ) Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird. Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?
__________________ Logfiles bitte immer in CODE-Tags posten |
06.09.2013, 23:22 | #27 |
| seltsame internetabbrüche ! hi cosinus Auf den ersten Blick ist alles in Ordnung. Allerdings hab ich leichte Verzögerungen,z.b wenn ich Spiele und streame.Ich streame über xsplit,und sobald diese software offen ist (egal ob Stream läuft oder nicht,Laagt mein Spiel.Latenz ist 10 ms,fps 30+. Ich habe eine zu hohe Cpu Auslastung (+20%) Abeitsspeicher bei 4,3 gb War vorher nie so. |
08.09.2013, 15:37 | #28 |
/// Winkelfunktion /// TB-Süch-Tiger™ | seltsame internetabbrüche ! Malware ist es offensichtlich nicht mehr, das wäre dann ein Fall für unser Windowsbereich. Müsstest da vllt nochmal einen neuen Srang eröffnen. Hier wären wir aber soweit duch. Falls du noch Lob oder Kritik loswerden möchtest => Lob, Kritik und Wünsche - Trojaner-Board Die Programme, die hier zum Einsatz kamen, können alle deinstalliert werden. Helfen kann dir dabei delfix: Die Reihenfolge ist hier entscheidend.
Bitte abschließend noch die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden. Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern. Microsoftupdate Windows XP:Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren. Windows Vista/7: Start, Systemsteuerung, Windows-Update PDF-Reader aktualisieren Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast) Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader. Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers: Prüfen => Adobe - Flash Player Downloadlinks findest du hier => Browsers and Plugins - FilePony.de Alle Plugins im Firefox-Browser kannst du auch ganz einfach hier auf Aktualität prüfen => https://www.mozilla.org/de/plugincheck Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind. Java-Update Veraltete Java-Installationen sind ein großes Sicherheitsrisiko, daher solltest Du die alten Versionen deinstallieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software (bzw. Programme und Funktionen) und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.
__________________ Logfiles bitte immer in CODE-Tags posten |
Themen zu seltsame internetabbrüche ! |
abbrüche, browser, dns, feste, folge, folgendes, gebraucht, hallo zusammen, interne, internet, meldung, minute, minuten, mozilla, nachfrage, neue, neuen, online, problem, seite, seltsame, skype, telekom, win, win7, zusammen |