Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
GVU-Virus vollständig entfernt?

GVU-Virus vollständig entfernt?


Plagegeister aller Art und deren Bekämpfung: GVU-Virus vollständig entfernt?

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Seite 1 von 2 1 2
Alt 09.07.2013, 09:47   #1
ShinyAccount
 
GVU-Virus vollständig entfernt? - Standard

GVU-Virus vollständig entfernt?


Hallo alle zusammen,

meine Schwester hat sich auf ihrem Laptop den GVU-Virus eingefangen. Bevor ich durch googlen diese Forum gefunden habe, habe ich zuerst im abgesicherten Modus durch die Systemwiederherstellung die letzte lauffähige Version wiederhergestellt.

Um auf Nummer sicher zu gehen, dass der Virus wirklich entfernt ist, habe ich mich dazu entschlossen hier zu posten.

Folgende Ausgangssituation:
Beim Hochfahren des Laptops habe ich erstmal festgestellt, dass der Virenscanner (Trend Micro Titanium) deaktiviert ist.
Als nächstes habe ich defogger und OTL durchlaufen lassen. Das ging soweit auch problemlos.
Beim scannen mit GMER ist der Laptop mit bluescreen abgestürzt (jedoch erst nachdem GMER schon gut 1 Stunde gescannt hat). Im abgesicherten Modus ist GMER dann erfolgreich durchgelaufen.

Anbei die logfiles von OTL und Gmer.

Vielen Dank im Voraus für eure Hilfe!

Alt 09.07.2013, 09:51   #2
schrauber
/// the machine
/// TB-Ausbilder
 
GVU-Virus vollständig entfernt? - Standard

GVU-Virus vollständig entfernt?


hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 09.07.2013, 21:49   #3
ShinyAccount
 
GVU-Virus vollständig entfernt? - Standard

GVU-Virus vollständig entfernt?


Hi,

erstmal danke für die Hilfe. Leider waren die Logs zu groß, sodass ich sie nicht durch das #-Symbol direkt einfügen konnte. Siehe Archiv.
__________________
Alt 10.07.2013, 09:05   #4
schrauber
/// the machine
/// TB-Ausbilder
 
GVU-Virus vollständig entfernt? - Standard

GVU-Virus vollständig entfernt?


Teile die Logs bitte und poste sie in den Thread

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 10.07.2013, 09:19   #5
ShinyAccount
 
GVU-Virus vollständig entfernt? - Standard

GVU-Virus vollständig entfernt?


Okay, ich füge das ganze über die code-Funktion ein, aber das Problem ist, dass alleine die FRST Datei über 210.000 Zeichen lang ist und das Forum nur 120.000 Zeichen pro Post zulässt. Daher das ganz nun als mehrere Posts.
Erster Teil des FRST-logs:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-07-2013 01
Ran by Greta (administrator) on 09-07-2013 22:37:22
Running from C:\Users\Greta\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
() C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
() C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jusched.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Spotify Ltd) C:\Users\Greta\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Adobe Systems Incorporated) C:\Users\Greta\AppData\Roaming\Odaqzu\obyxf.exe
(Acronis) C:\Users\Greta\AppData\Roaming\ie_util.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Dropbox, Inc.) C:\Users\Greta\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Sony Corporation) C:\Program Files (x86)\SONY\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBVolumeWatcher.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Sony Corporation) C:\Program Files (x86)\SONY\Marketing Tools\MarketingTools.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [9636896 2009-12-16] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] - %ProgramFiles%\Apoint\Apoint.exe [208384 2009-11-04] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] - "C:\Program Files\Java\jre6\bin\jusched.exe" [171520 2010-06-25] (Sun Microsystems, Inc.)
HKLM\...\Run: [XeroxEndeavorBackgroundTask] - rundll32.exe xrWCbgnd.dll,LaunchBgTask 1 [x]
HKLM\...\Run: [Trend Micro Titanium] - "C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe" -set Silent "1" SplashURL "" [1304296 2012-12-18] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] - "C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe" [213824 2012-02-27] (Trend Micro Inc.)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,
HKCU\...\Run: [msnmsgr] - "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background [4280184 2012-03-08] (Microsoft Corporation)
HKCU\...\Run: [Spotify Web Helper] - "C:\Users\Greta\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [1105408 2013-05-06] (Spotify Ltd)
HKCU\...\Run: [Spotify] - "C:\Users\Greta\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart [4573184 2013-05-06] (Spotify Ltd)
HKCU\...\Run: [Skype] - "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [18678376 2013-04-19] (Skype Technologies S.A.)
HKCU\...\Run: [Oddafyiqi] - C:\Users\Greta\AppData\Roaming\Duepiz\ytepe.exe [x]
HKCU\...\Run: [Liylbicyb] - C:\Users\Greta\AppData\Roaming\Odaqzu\obyxf.exe [286208 2012-08-16] (Adobe Systems Incorporated)
HKCU\...\Run: [IExplorer Util] - C:\Users\Greta\AppData\Roaming\ie_util.exe [55296 2013-06-13] (Acronis)
MountPoints2: D - D:\HTC_Sync_Manager_PC.exe
MountPoints2: {05531d4f-921d-11e2-8d75-f07bcbe0806e} - D:\HTC_Sync_Manager_PC.exe
MountPoints2: {05531d5e-921d-11e2-8d75-f07bcbe0806e} - D:\HTC_Sync_Manager_PC.exe
MountPoints2: {25c80fbe-b1b1-11e2-8d9f-f07bcbe0806e} - D:\HTC_Sync_Manager_PC.exe
MountPoints2: {d4f84194-d339-11e2-93d6-f07bcbe0806e} - D:\HTC_Sync_Manager_PC.exe
MountPoints2: {ea41c0e7-10a8-11e2-b835-f07bcbe0806e} - D:\.\start.bat
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-11-21] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] - "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" [320880 2009-08-26] (Sony Corporation)
HKLM-x32\...\Run: [NortonOnlineBackupReminder] - "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED [538472 2009-06-17] (Symantec Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [597792 2009-10-24] (Sony Corporation)
HKLM-x32\...\Run: [MarketingTools] - C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe [26624 2010-06-25] (Sony Corporation)
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [102400 2010-09-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [38872 2012-07-31] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [919008 2012-07-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [254896 2012-09-17] (Sun Microsystems, Inc.)
HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
AppInit_DLLs-x32: c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll c:\progra~3\browse~1\261249~1.132\{c16c1~1\browse~1.dll  [2520016 2013-03-22] ()
Startup: C:\ProgramData\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Greta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Greta\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&affID=119777&babsrc=SP_ss&mntrId=44F07EDD08E19A71
SearchScopes: HKCU - {238538B3-FF14-4E64-B9E5-919139626C59} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-0/4?satitle={searchTerms}
SearchScopes: HKCU - {4134A95E-6FA7-482E-A3CB-12F78B77074A} URL = hxxp://www.zinio.com/search/index.jsp?s={searchTerms}&rf=sonyie8search
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {50744D17-57A6-445F-886A-52236C613712} URL = hxxp://de.shopping.com/?linkin_id=8056363
SearchScopes: HKCU - {9D7E1BEC-0278-4151-8E53-4130416496A2} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=03473355-C22E-4F62-8836-3561D32922B3&apn_sauid=F327542B-8999-4532-8AA9-79CF9A6B91CF
BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1361\6.8.1078\TmIEPlg.dll (Trend Micro Inc.)
BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1104\7.1.1104\TmBpIe64.dll (Trend Micro Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: No Name - {02478D38-C3F9-4efb-9B51-7695ECA05670} -  No File
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1361\6.8.1078\TmIEPlg32.dll (Trend Micro Inc.)
BHO-x32: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll No File
BHO-x32: TSToolbarBHO - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: af0.Adblock.BHO - {90EFF544-3981-4d46-85C9-C0361D0931D6} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1104\7.1.1104\TmBpIe32.dll (Trend Micro Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
DPF: HKLM-x32 {E4CF4E86-D0DC-4864-8F0E-4F6EA2526334} hxxp://img.ui-portal.de/webde/smartdrive/activex/gmxnet_osupload_2002.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1104\7.1.1104\TmBpIe64.dll (Trend Micro Inc.)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1361\6.8.1078\TmIEPlg.dll (Trend Micro Inc.)
Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} -  No File
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1104\7.1.1104\TmBpIe32.dll (Trend Micro Inc.)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1361\6.8.1078\TmIEPlg32.dll (Trend Micro Inc.)
Handler-x32: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)

Chrome: 
=======
CHR HomePage: hxxp://www.search.ask.com/?p2=%5EB2Z%5EYYYYYY%5EYY%5EDE&gct=hp&o=APN10977cr&apn_ptnrs=%5EB2Z&apn_dtid=%5EYYYYYY%5EYY%5EDE&tpid=FF3-V7&apn_dbr=cr_27.0.1453.116&trgb=CR&apn_uid=976C4183-B83D-4BDF-90DF-C7D0382C8000&itbv=12.1.0.437&doi=2013-07-04&psv=
CHR DefaultSearchURL: (Google) - hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
CHR DefaultSuggestURL: (Google) -       "suggest_url": ""
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll ()
CHR Plugin: (         "name": "",) - C:\Users\Greta\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf\1.0.5_0\chromeNPAPI.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U38) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Windows Live0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Trend Micro Titanium) - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension\components\npToolbarChrome.dll (Trend Micro Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.380.5) - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Trend Micro Toolbar) - C:\Users\Greta\AppData\Local\Google\Chrome\User Data\Default\Extensions\heoldelcflnigdllmlopiefhkkobendj\5.4.0.1034_0

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [2787280 2013-03-22] ()
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2012-10-08] ()
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-31] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-31] (Sonic Solutions)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation)
S2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad [x]

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [107048 2012-09-24] (Trend Micro Inc.)
R1 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [173504 2012-09-24] (Trend Micro Inc.)
R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [77184 2012-09-24] (Trend Micro Inc.)
R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [105744 2012-03-03] (Trend Micro Inc.)
S3 TVICHW64; C:\Windows\system32\DRIVERS\TVICHW64.SYS [21200 2011-03-11] (EnTech Taiwan)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-11-12] ()
U2 TMAgent; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-09 22:37 - 2013-07-09 22:37 - 00000000 ____D C:\FRST
2013-07-09 22:36 - 2013-07-09 22:35 - 01776221 ____A (Farbar) C:\Users\Greta\Desktop\FRST64.exe
2013-07-09 22:24 - 2013-07-09 22:24 - 00000000 ____D C:\Users\Greta\AppData\Local\{A915168A-C30A-4F55-AF30-E647174051D5}
2013-07-08 23:16 - 2013-07-08 23:16 - 00000758 ____A C:\Users\Greta\Desktop\Gmer.log
2013-07-08 17:39 - 2013-07-08 17:39 - 00000000 ____D C:\Users\Greta\AppData\Local\{469E166C-6D8E-4ED2-8859-9857404C7079}
2013-07-08 09:11 - 2013-07-08 09:11 - 00454448 ____A C:\Windows\Minidump\070813-17924-01.dmp
2013-07-08 08:39 - 2013-07-08 08:39 - 00000000 ____D C:\Users\Greta\AppData\Local\{02051131-28EF-4E6A-875C-07D0A13BD4CF}
2013-07-08 08:38 - 2013-07-08 08:38 - 00273968 ____A C:\Windows\Minidump\070813-20264-01.dmp
2013-07-07 22:29 - 2013-07-07 22:29 - 00087172 ____A C:\Users\Greta\Desktop\Extras.Txt
2013-07-07 22:26 - 2013-07-07 22:26 - 00117456 ____A C:\Users\Greta\Desktop\OTL.Txt
2013-07-07 22:05 - 2013-07-08 08:41 - 00000472 ____A C:\Users\Greta\Desktop\defogger_disable.log
2013-07-07 22:05 - 2013-07-07 22:05 - 00000000 ____A C:\Users\Greta\defogger_reenable
2013-07-07 22:03 - 2013-07-07 22:04 - 00000000 ____D C:\Users\Greta\Desktop\Anti Virus
2013-07-07 22:03 - 2013-07-07 21:56 - 00377856 ____A C:\Users\Greta\Desktop\gmer_2.1.19163.exe
2013-07-07 22:03 - 2013-07-07 21:54 - 00050477 ____A C:\Users\Greta\Desktop\Defogger.exe
2013-07-07 22:03 - 2013-07-07 21:53 - 00602112 ____A (OldTimer Tools) C:\Users\Greta\Desktop\OTL.exe
2013-07-07 13:27 - 2013-07-07 13:28 - 00000000 ____D C:\Users\Greta\AppData\Local\{776987E3-0601-4476-B4B6-F507696895B3}
2013-07-07 12:58 - 2013-07-07 12:59 - 00000000 ____D C:\Users\Greta\AppData\Local\{EFA189F2-7953-41C8-A9F1-A86DE14D97B9}
2013-07-05 14:21 - 2013-07-05 14:21 - 00003408 ____N C:\bootsqm.dat
2013-07-05 14:03 - 2013-07-05 14:03 - 00000000 ____D C:\Users\Greta\AppData\Local\{586130A9-B0C3-4683-B517-97E4BDA5591B}
2013-07-05 10:48 - 2013-07-05 10:49 - 00000000 ____D C:\Users\Greta\AppData\Local\{5255CE20-0EF5-418E-91A5-73B7E352D8FC}
2013-07-04 23:37 - 2013-07-04 23:37 - 00000000 ____D C:\Users\Greta\Desktop\Zealand
2013-07-04 22:17 - 2013-07-04 22:20 - 00000000 ____D C:\FFOutput
2013-07-04 22:17 - 2013-07-04 22:17 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-07-04 22:17 - 2013-07-04 22:17 - 00000000 ____D C:\ProgramData\APN
2013-07-04 22:17 - 2013-07-04 22:17 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-07-04 22:14 - 2013-07-04 22:14 - 00000000 ____D C:\Program Files (x86)\FreeTime
2013-07-04 20:45 - 2013-07-04 20:46 - 00000000 ____D C:\Users\Greta\Desktop\Fotos
2013-07-04 19:51 - 2013-07-04 19:51 - 03494670 ____A C:\Users\Greta\Desktop\VID-20130704-WA0002.mkv
2013-07-04 19:45 - 2013-07-04 19:45 - 02140696 ____A C:\Users\Greta\Desktop\Kopfgestellt.mkv
2013-07-04 19:45 - 2013-07-04 19:45 - 01206947 ____A C:\Users\Greta\Desktop\Jan.mkv
2013-07-04 19:43 - 2013-07-04 19:43 - 04240304 ____A C:\Users\Greta\Desktop\IMG_2505.mkv
2013-07-04 19:42 - 2013-07-04 19:42 - 02422030 ____A C:\Users\Greta\Desktop\IMG_4041.mkv
2013-07-04 19:42 - 2013-07-04 19:41 - 00964602 ____A C:\Users\Greta\Desktop\Carl.mkv
2013-07-04 19:41 - 2013-07-04 19:41 - 00880060 ____A C:\Users\Greta\Downloads\Film am 03.07.13 um 16.14 _2.mov
2013-07-04 19:26 - 2013-07-04 23:36 - 00000000 ____D C:\Users\Greta\Desktop\Fotoshooting mit Max
2013-07-04 16:44 - 2013-07-04 16:44 - 00000000 ____D C:\Users\Greta\AppData\Local\{51F5ACDD-C357-482E-B095-83615D92D8EB}
2013-07-03 22:08 - 2013-07-03 22:10 - 00746237 ____A C:\Users\Greta\Downloads\CLIL (1).pptx
2013-07-03 17:45 - 2013-07-03 17:45 - 00000000 ____D C:\Users\Greta\AppData\Local\{E603465F-FF71-4D11-9714-97828EB924DC}
2013-07-03 00:28 - 2013-07-03 00:28 - 04075246 ____A C:\Users\Greta\Desktop\simon hauk.mkv
2013-07-03 00:26 - 2013-07-03 00:26 - 02921452 ____A C:\Users\Greta\Desktop\Pärchen.mkv
2013-07-03 00:22 - 2013-07-03 00:22 - 00784270 ____A C:\Users\Greta\Downloads\Video (2).MOV
2013-07-03 00:21 - 2013-07-03 00:21 - 03710618 ____A C:\Users\Greta\Desktop\Oktoberfest.mkv
2013-07-03 00:21 - 2013-07-03 00:21 - 00756493 ____A C:\Users\Greta\Desktop\Video (1).mkv
2013-07-02 14:13 - 2013-07-02 14:13 - 00000000 ____D C:\Users\Greta\AppData\Local\{018754B5-B44D-456D-8D6B-E7F4563C13C9}
2013-07-01 22:30 - 2013-07-01 22:30 - 00000000 ____D C:\Users\Greta\AppData\Local\{48141A5C-D3AE-4D24-84A4-461C5BBE64E3}
2013-06-27 21:39 - 2013-06-27 21:39 - 00000000 ____D C:\Users\Greta\AppData\Local\{13505662-AA1A-4101-833C-0562E4B311B8}
2013-06-27 08:13 - 2013-06-27 08:13 - 00000000 ____D C:\Users\Greta\AppData\Local\{22B1FE82-00EE-43D6-BEFF-4E999D81F58D}
2013-06-27 00:35 - 2013-06-27 00:35 - 01157230 ____A C:\Users\Greta\Downloads\Soul man.pptx
2013-06-26 13:59 - 2013-06-26 13:59 - 00000000 ____D C:\Users\Greta\AppData\Local\{EFCE325A-656A-4696-939D-E7D7EA18815C}
2013-06-25 12:47 - 2013-06-25 12:47 - 00797932 ____A C:\Users\Greta\Downloads\compliments 2.pptx
2013-06-24 23:34 - 2013-06-24 23:52 - 00523177 ____A C:\Users\Greta\Downloads\CLIL.pptx
2013-06-24 23:05 - 2013-06-25 23:53 - 00000000 ____D C:\Users\Greta\AppData\Local\{A65547A2-DBAB-41DD-85ED-B84E2447E897}
2013-06-24 21:57 - 2013-06-24 21:57 - 00117243 ____A C:\Users\Greta\Downloads\Bilingual Lessons.pptx
2013-06-24 11:04 - 2013-06-24 11:04 - 00000000 ____D C:\Users\Greta\AppData\Local\{BB9AE372-75D7-4678-9255-E9DDCC7E05A0}
2013-06-23 18:41 - 2013-06-23 18:41 - 00000000 ____D C:\Users\Greta\AppData\Local\{303BE3BE-B615-4AE0-B8D2-75FCA04C6809}
2013-06-22 07:53 - 2013-06-22 07:53 - 00000000 ____D C:\Users\Greta\AppData\Local\{7293E423-97D3-4984-A5FB-98488C6D8CBF}
2013-06-19 17:26 - 2013-06-20 14:17 - 00000000 ____D C:\Users\Greta\AppData\Local\{36AB6F38-B1B3-4B49-88BE-87371228C655}
2013-06-18 19:03 - 2013-06-18 19:03 - 00659488 ____A (FUSENET) C:\Users\Greta\Downloads\GraboidVideoInstaller-3.89.exe
2013-06-18 16:49 - 2013-06-18 16:49 - 00000000 ____D C:\Users\Greta\AppData\Local\{3DB98836-227E-458D-BA38-110EF1643BE0}
2013-06-17 23:00 - 2013-06-17 23:00 - 00000000 ____D C:\Users\Greta\AppData\Local\{F52F6F7D-0A1F-4843-933B-59B04E8B7869}
2013-06-17 09:34 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-17 09:34 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-17 09:34 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-17 09:34 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-17 09:34 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-17 09:34 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-17 09:34 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-17 09:34 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-17 09:34 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-17 09:34 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-17 09:34 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-17 09:34 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-17 09:29 - 2013-06-17 09:29 - 00000000 ____D C:\Users\Greta\AppData\Local\{C36C7B0B-7CA3-4EA1-8706-F049F163AE6E}
2013-06-15 18:05 - 2013-06-15 18:05 - 00000000 ____D C:\Users\Greta\AppData\Local\{A130005C-9811-4910-8287-144139A2CC24}
2013-06-13 16:38 - 2013-06-13 16:38 - 00055296 ____A (Acronis) C:\Users\Greta\AppData\Roaming\ie_util.exe
2013-06-13 16:37 - 2013-07-07 14:23 - 00000000 ____D C:\Users\Greta\AppData\Roaming\Odaqzu
2013-06-13 16:37 - 2013-07-02 22:54 - 00000000 ____D C:\Users\Greta\AppData\Roaming\Exem
2013-06-13 16:37 - 2013-06-13 16:37 - 00000000 ____D C:\Users\Greta\AppData\Roaming\Dauca
2013-06-12 10:51 - 2013-06-13 00:09 - 00000000 ____D C:\Users\Greta\AppData\Local\{03477C17-64B8-4CFC-958D-01A75C57CB60}
2013-06-12 03:02 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 03:02 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 03:02 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 03:02 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 03:02 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-12 03:02 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-12 03:02 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 03:02 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-12 03:02 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 03:02 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 03:02 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 03:02 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 03:02 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 03:02 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 03:02 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 03:02 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 03:02 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 03:02 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 03:02 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-11 22:05 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-11 22:05 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-11 22:05 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-11 22:05 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-11 22:05 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-11 22:05 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-11 22:05 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-11 22:05 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-11 22:05 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-11 22:05 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-11 22:05 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-11 22:05 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-11 22:05 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-11 22:05 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-11 22:05 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-11 22:05 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-11 22:05 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-11 22:05 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-11 22:05 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-09 19:24 - 2013-06-11 18:56 - 00000000 ____D C:\Users\Greta\AppData\Local\{954A3E30-4963-4719-829B-909C3422B97C}

==================== One Month Modified Files and Folders =======

2013-07-09 22:37 - 2013-07-09 22:37 - 00000000 ____D C:\FRST
2013-07-09 22:36 - 2013-03-14 20:06 - 00000000 ____D C:\Users\Greta\AppData\Roaming\Dropbox
2013-07-09 22:35 - 2013-07-09 22:36 - 01776221 ____A (Farbar) C:\Users\Greta\Desktop\FRST64.exe
2013-07-09 22:29 - 2011-03-11 20:47 - 00001110 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-09 22:29 - 2009-07-14 06:45 - 00014144 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-09 22:29 - 2009-07-14 06:45 - 00014144 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-09 22:25 - 2010-06-26 07:28 - 00665812 ____A C:\Windows\System32\perfh007.dat
2013-07-09 22:25 - 2010-06-26 07:28 - 00133992 ____A C:\Windows\System32\perfc007.dat
2013-07-09 22:25 - 2010-06-25 21:35 - 02001634 ____A C:\Windows\WindowsUpdate.log
2013-07-09 22:25 - 2009-07-14 07:13 - 01529706 ____A C:\Windows\System32\PerfStringBackup.INI
2013-07-09 22:24 - 2013-07-09 22:24 - 00000000 ____D C:\Users\Greta\AppData\Local\{A915168A-C30A-4F55-AF30-E647174051D5}
2013-07-09 22:24 - 2012-12-23 02:43 - 00000000 ____D C:\Users\Greta\AppData\Roaming\Spotify
2013-07-09 22:24 - 2011-03-12 19:34 - 00000000 ____D C:\Users\Greta\AppData\Roaming\Skype
2013-07-09 22:23 - 2011-03-20 22:42 - 00000000 ____D C:\Users\Greta\Tracing
2013-07-09 22:23 - 2011-03-11 20:47 - 00001106 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-09 22:21 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-09 22:21 - 2009-07-14 06:51 - 00089582 ____A C:\Windows\setupact.log
2013-07-08 23:16 - 2013-07-08 23:16 - 00000758 ____A C:\Users\Greta\Desktop\Gmer.log
2013-07-08 17:39 - 2013-07-08 17:39 - 00000000 ____D C:\Users\Greta\AppData\Local\{469E166C-6D8E-4ED2-8859-9857404C7079}
2013-07-08 17:26 - 2013-03-15 20:02 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-08 09:11 - 2013-07-08 09:11 - 00454448 ____A C:\Windows\Minidump\070813-17924-01.dmp
2013-07-08 09:11 - 2012-12-15 17:00 - 00000000 ____D C:\Windows\Minidump
2013-07-08 09:11 - 2012-12-15 16:59 - 683718574 ____A C:\Windows\MEMORY.DMP
2013-07-08 08:41 - 2013-07-07 22:05 - 00000472 ____A C:\Users\Greta\Desktop\defogger_disable.log
2013-07-08 08:39 - 2013-07-08 08:39 - 00000000 ____D C:\Users\Greta\AppData\Local\{02051131-28EF-4E6A-875C-07D0A13BD4CF}
2013-07-08 08:38 - 2013-07-08 08:38 - 00273968 ____A C:\Windows\Minidump\070813-20264-01.dmp
2013-07-07 22:29 - 2013-07-07 22:29 - 00087172 ____A C:\Users\Greta\Desktop\Extras.Txt
2013-07-07 22:26 - 2013-07-07 22:26 - 00117456 ____A C:\Users\Greta\Desktop\OTL.Txt
2013-07-07 22:05 - 2013-07-07 22:05 - 00000000 ____A C:\Users\Greta\defogger_reenable
2013-07-07 22:05 - 2011-03-11 19:53 - 00000000 ____D C:\users\Greta
2013-07-07 22:04 - 2013-07-07 22:03 - 00000000 ____D C:\Users\Greta\Desktop\Anti Virus
2013-07-07 21:56 - 2013-07-07 22:03 - 00377856 ____A C:\Users\Greta\Desktop\gmer_2.1.19163.exe
2013-07-07 21:54 - 2013-07-07 22:03 - 00050477 ____A C:\Users\Greta\Desktop\Defogger.exe
2013-07-07 21:53 - 2013-07-07 22:03 - 00602112 ____A (OldTimer Tools) C:\Users\Greta\Desktop\OTL.exe
2013-07-07 14:23 - 2013-06-13 16:37 - 00000000 ____D C:\Users\Greta\AppData\Roaming\Odaqzu
2013-07-07 14:23 - 2012-03-03 12:06 - 00000000 ____D C:\ProgramData\Trend Micro
2013-07-07 14:23 - 2011-03-13 20:25 - 00000000 __RHD C:\MSOCache
2013-07-07 14:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-07-07 14:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2013-07-07 13:28 - 2013-07-07 13:27 - 00000000 ____D C:\Users\Greta\AppData\Local\{776987E3-0601-4476-B4B6-F507696895B3}
2013-07-07 13:27 - 2013-03-14 20:09 - 00000000 ___RD C:\Users\Greta\Dropbox
2013-07-07 12:59 - 2013-07-07 12:58 - 00000000 ____D C:\Users\Greta\AppData\Local\{EFA189F2-7953-41C8-A9F1-A86DE14D97B9}
2013-07-05 14:21 - 2013-07-05 14:21 - 00003408 ____N C:\bootsqm.dat
2013-07-05 14:03 - 2013-07-05 14:03 - 00000000 ____D C:\Users\Greta\AppData\Local\{586130A9-B0C3-4683-B517-97E4BDA5591B}
2013-07-05 10:49 - 2013-07-05 10:48 - 00000000 ____D C:\Users\Greta\AppData\Local\{5255CE20-0EF5-418E-91A5-73B7E352D8FC}
2013-07-05 00:08 - 2011-06-05 13:36 - 00000000 ____D C:\Users\Greta\AppData\Local\Windows Live
2013-07-04 23:37 - 2013-07-04 23:37 - 00000000 ____D C:\Users\Greta\Desktop\Zealand
2013-07-04 23:36 - 2013-07-04 19:26 - 00000000 ____D C:\Users\Greta\Desktop\Fotoshooting mit Max
2013-07-04 22:20 - 2013-07-04 22:17 - 00000000 ____D C:\FFOutput
2013-07-04 22:17 - 2013-07-04 22:17 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-07-04 22:17 - 2013-07-04 22:17 - 00000000 ____D C:\ProgramData\APN
2013-07-04 22:17 - 2013-07-04 22:17 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-07-04 22:14 - 2013-07-04 22:14 - 00000000 ____D C:\Program Files (x86)\FreeTime
2013-07-04 20:46 - 2013-07-04 20:45 - 00000000 ____D C:\Users\Greta\Desktop\Fotos
2013-07-04 19:51 - 2013-07-04 19:51 - 03494670 ____A C:\Users\Greta\Desktop\VID-20130704-WA0002.mkv
2013-07-04 19:45 - 2013-07-04 19:45 - 02140696 ____A C:\Users\Greta\Desktop\Kopfgestellt.mkv
2013-07-04 19:45 - 2013-07-04 19:45 - 01206947 ____A C:\Users\Greta\Desktop\Jan.mkv
2013-07-04 19:43 - 2013-07-04 19:43 - 04240304 ____A C:\Users\Greta\Desktop\IMG_2505.mkv
2013-07-04 19:42 - 2013-07-04 19:42 - 02422030 ____A C:\Users\Greta\Desktop\IMG_4041.mkv
2013-07-04 19:41 - 2013-07-04 19:42 - 00964602 ____A C:\Users\Greta\Desktop\Carl.mkv
2013-07-04 19:41 - 2013-07-04 19:41 - 00880060 ____A C:\Users\Greta\Downloads\Film am 03.07.13 um 16.14 _2.mov
2013-07-04 16:44 - 2013-07-04 16:44 - 00000000 ____D C:\Users\Greta\AppData\Local\{51F5ACDD-C357-482E-B095-83615D92D8EB}
2013-07-03 22:10 - 2013-07-03 22:08 - 00746237 ____A C:\Users\Greta\Downloads\CLIL (1).pptx
2013-07-03 17:45 - 2013-07-03 17:45 - 00000000 ____D C:\Users\Greta\AppData\Local\{E603465F-FF71-4D11-9714-97828EB924DC}
2013-07-03 00:28 - 2013-07-03 00:28 - 04075246 ____A C:\Users\Greta\Desktop\simon hauk.mkv
2013-07-03 00:26 - 2013-07-03 00:26 - 02921452 ____A C:\Users\Greta\Desktop\Pärchen.mkv
2013-07-03 00:22 - 2013-07-03 00:22 - 00784270 ____A C:\Users\Greta\Downloads\Video (2).MOV
2013-07-03 00:21 - 2013-07-03 00:21 - 03710618 ____A C:\Users\Greta\Desktop\Oktoberfest.mkv
2013-07-03 00:21 - 2013-07-03 00:21 - 00756493 ____A C:\Users\Greta\Desktop\Video (1).mkv
2013-07-02 22:54 - 2013-06-13 16:37 - 00000000 ____D C:\Users\Greta\AppData\Roaming\Exem
2013-07-02 21:49 - 2012-05-05 14:00 - 00235606 ____A C:\test.xml
2013-07-02 14:13 - 2013-07-02 14:13 - 00000000 ____D C:\Users\Greta\AppData\Local\{018754B5-B44D-456D-8D6B-E7F4563C13C9}
2013-07-01 22:30 - 2013-07-01 22:30 - 00000000 ____D C:\Users\Greta\AppData\Local\{48141A5C-D3AE-4D24-84A4-461C5BBE64E3}
2013-07-01 22:29 - 2010-06-25 21:41 - 00000000 ____D C:\Program Files\Google
2013-07-01 22:29 - 2010-06-25 21:41 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-01 22:29 - 2010-06-25 21:32 - 00458356 ____A C:\Windows\PFRO.log
2013-06-27 22:51 - 2011-03-11 20:44 - 00000000 ____D C:\Users\Greta\AppData\Local\Google
2013-06-27 22:51 - 2010-06-25 21:41 - 00000000 ____D C:\ProgramData\Google
2013-06-27 22:50 - 2012-12-23 03:00 - 00000000 ____D C:\Firefox
2013-06-27 22:49 - 2012-04-14 02:21 - 00000000 ____D C:\Users\Greta\AppData\Roaming\BrowserCompanion
2013-06-27 22:49 - 2011-06-05 14:32 - 00000000 ____D C:\Program Files (x86)\AutocompletePro
2013-06-27 21:39 - 2013-06-27 21:39 - 00000000 ____D C:\Users\Greta\AppData\Local\{13505662-AA1A-4101-833C-0562E4B311B8}
2013-06-27 08:13 - 2013-06-27 08:13 - 00000000 ____D C:\Users\Greta\AppData\Local\{22B1FE82-00EE-43D6-BEFF-4E999D81F58D}
2013-06-27 00:35 - 2013-06-27 00:35 - 01157230 ____A C:\Users\Greta\Downloads\Soul man.pptx
2013-06-26 17:29 - 2011-03-12 11:31 - 00000000 ____D C:\Users\Greta\AppData\Local\Microsoft Help
2013-06-26 13:59 - 2013-06-26 13:59 - 00000000 ____D C:\Users\Greta\AppData\Local\{EFCE325A-656A-4696-939D-E7D7EA18815C}
2013-06-25 23:53 - 2013-06-24 23:05 - 00000000 ____D C:\Users\Greta\AppData\Local\{A65547A2-DBAB-41DD-85ED-B84E2447E897}
2013-06-25 12:47 - 2013-06-25 12:47 - 00797932 ____A C:\Users\Greta\Downloads\compliments 2.pptx
2013-06-24 23:52 - 2013-06-24 23:34 - 00523177 ____A C:\Users\Greta\Downloads\CLIL.pptx
2013-06-24 21:57 - 2013-06-24 21:57 - 00117243 ____A C:\Users\Greta\Downloads\Bilingual Lessons.pptx
2013-06-24 14:59 - 2013-05-22 19:40 - 00000000 ____D C:\Users\Greta\Desktop\Bilder
2013-06-24 11:25 - 2013-05-17 15:25 - 00000000 ____D C:\Users\Greta\Desktop\Musik
2013-06-24 11:04 - 2013-06-24 11:04 - 00000000 ____D C:\Users\Greta\AppData\Local\{BB9AE372-75D7-4678-9255-E9DDCC7E05A0}
2013-06-23 18:41 - 2013-06-23 18:41 - 00000000 ____D C:\Users\Greta\AppData\Local\{303BE3BE-B615-4AE0-B8D2-75FCA04C6809}
2013-06-22 11:49 - 2013-06-02 22:46 - 00002183 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-06-22 07:53 - 2013-06-22 07:53 - 00000000 ____D C:\Users\Greta\AppData\Local\{7293E423-97D3-4984-A5FB-98488C6D8CBF}
2013-06-20 14:17 - 2013-06-19 17:26 - 00000000 ____D C:\Users\Greta\AppData\Local\{36AB6F38-B1B3-4B49-88BE-87371228C655}
2013-06-18 19:03 - 2013-06-18 19:03 - 00659488 ____A (FUSENET) C:\Users\Greta\Downloads\GraboidVideoInstaller-3.89.exe
2013-06-18 16:49 - 2013-06-18 16:49 - 00000000 ____D C:\Users\Greta\AppData\Local\{3DB98836-227E-458D-BA38-110EF1643BE0}
2013-06-17 23:00 - 2013-06-17 23:00 - 00000000 ____D C:\Users\Greta\AppData\Local\{F52F6F7D-0A1F-4843-933B-59B04E8B7869}
2013-06-17 09:29 - 2013-06-17 09:29 - 00000000 ____D C:\Users\Greta\AppData\Local\{C36C7B0B-7CA3-4EA1-8706-F049F163AE6E}
2013-06-15 18:05 - 2013-06-15 18:05 - 00000000 ____D C:\Users\Greta\AppData\Local\{A130005C-9811-4910-8287-144139A2CC24}
2013-06-13 16:38 - 2013-06-13 16:38 - 00055296 ____A (Acronis) C:\Users\Greta\AppData\Roaming\ie_util.exe
2013-06-13 16:37 - 2013-06-13 16:37 - 00000000 ____D C:\Users\Greta\AppData\Roaming\Dauca
2013-06-13 00:09 - 2013-06-12 10:51 - 00000000 ____D C:\Users\Greta\AppData\Local\{03477C17-64B8-4CFC-958D-01A75C57CB60}
2013-06-12 19:11 - 2013-03-15 20:02 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 19:11 - 2013-03-15 20:02 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 11:33 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-11 18:56 - 2013-06-09 19:24 - 00000000 ____D C:\Users\Greta\AppData\Local\{954A3E30-4963-4719-829B-909C3422B97C}

ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\O
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\W
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\AlbumArt_{0446F4FA-2465-4581-A855-189C346A67EA}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\AlbumArt_{0446F4FA-2465-4581-A855-189C346A67EA}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\AlbumArt_{B791CF5E-5FEF-4FFF-8BFB-F5A98D4E38CE}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\AlbumArt_{B791CF5E-5FEF-4FFF-8BFB-F5A98D4E38CE}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\AlbumArt_{C2CA2262-1676-44D4-AA00-515B3BB62908}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\AlbumArt_{C2CA2262-1676-44D4-AA00-515B3BB62908}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Beatles
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Bette Midler
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M_
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Britney Spears
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Bryan Adams
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Beatles\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Beatles\White Album (CD 1)
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Beatles\White Album (CD 2)
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Beatles\White Album (CD 1)\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Beatles\White Album (CD 1)\AlbumArt_{4CB46F4F-E60A-481A-B2F2-4FEC0563826E}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Beatles\White Album (CD 1)\AlbumArt_{4CB46F4F-E60A-481A-B2F2-4FEC0563826E}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Beatles\White Album (CD 1)\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Beatles\White Album (CD 1)\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Beatles\White Album (CD 2)\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Beatles\White Album (CD 2)\AlbumArt_{16CED626-F5F0-461B-800C-4F9AAF016AAB}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Beatles\White Album (CD 2)\AlbumArt_{16CED626-F5F0-461B-800C-4F9AAF016AAB}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Beatles\White Album (CD 2)\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Beatles\White Album (CD 2)\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Bette Midler\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Bette Midler\No Frills
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Bette Midler\No Frills\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Bette Midler\No Frills\AlbumArt_{B791CF5E-5FEF-4FFF-8BFB-F5A98D4E38CE}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Bette Midler\No Frills\AlbumArt_{B791CF5E-5FEF-4FFF-8BFB-F5A98D4E38CE}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Bette Midler\No Frills\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Bette Midler\No Frills\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M\More Gold  20 Super Hits, Vol. 2
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M\The Magic Of Boney M [REMST]
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M\More Gold  20 Super Hits, Vol. 2\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M\More Gold  20 Super Hits, Vol. 2\AlbumArt_{A608639E-982F-4AC8-A945-0BCB149E2763}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M\More Gold  20 Super Hits, Vol. 2\AlbumArt_{A608639E-982F-4AC8-A945-0BCB149E2763}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M\More Gold  20 Super Hits, Vol. 2\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M\More Gold  20 Super Hits, Vol. 2\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M\The Magic Of Boney M [REMST]\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M\The Magic Of Boney M [REMST]\AlbumArt_{D6864843-6241-4717-A37A-D6ACC8C81F63}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M\The Magic Of Boney M [REMST]\AlbumArt_{D6864843-6241-4717-A37A-D6ACC8C81F63}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M\The Magic Of Boney M [REMST]\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M\The Magic Of Boney M [REMST]\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M_\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M_\Gold  20 Super Hits
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M_\Gold  20 Super Hits\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M_\Gold  20 Super Hits\AlbumArt_{71AA8E0E-0D3D-45F9-B10C-5ED91D79BCBF}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M_\Gold  20 Super Hits\AlbumArt_{71AA8E0E-0D3D-45F9-B10C-5ED91D79BCBF}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M_\Gold  20 Super Hits\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Boney M_\Gold  20 Super Hits\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Britney Spears\Blackout
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Britney Spears\Circus
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Britney Spears\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Britney Spears\Blackout\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Britney Spears\Blackout\AlbumArt_{83F2E05A-43E2-4E78-B131-0E93584274FB}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Britney Spears\Blackout\AlbumArt_{83F2E05A-43E2-4E78-B131-0E93584274FB}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Britney Spears\Blackout\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Britney Spears\Blackout\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Britney Spears\Circus\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Britney Spears\Circus\AlbumArt_{0446F4FA-2465-4581-A855-189C346A67EA}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Britney Spears\Circus\AlbumArt_{0446F4FA-2465-4581-A855-189C346A67EA}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Britney Spears\Circus\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Britney Spears\Circus\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Bryan Adams\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Bryan Adams\So Far So Good
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Bryan Adams\So Far So Good\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Bryan Adams\So Far So Good\AlbumArt_{55EC8000-889E-4DF4-BEF9-F20064EE6546}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Bryan Adams\So Far So Good\AlbumArt_{55EC8000-889E-4DF4-BEF9-F20064EE6546}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Bryan Adams\So Far So Good\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\B\Bryan Adams\So Far So Good\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\AlbumArt_{5AD78969-42DB-4172-BBF5-916A01C39524}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\AlbumArt_{5AD78969-42DB-4172-BBF5-916A01C39524}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\AlbumArt_{F58DD485-6C36-4CDB-8071-815B649EC535}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\AlbumArt_{F58DD485-6C36-4CDB-8071-815B649EC535}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Chris Rea
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Counting Crows
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Craig David
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Creedence Clearwater Revival
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Cyndi Lauper
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Chris Rea\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Chris Rea\The Best of Chris Rea
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Chris Rea\The Best of Chris Rea\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Chris Rea\The Best of Chris Rea\AlbumArt_{223A857C-FFCB-43AB-8FC3-2D5517D28738}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Chris Rea\The Best of Chris Rea\AlbumArt_{223A857C-FFCB-43AB-8FC3-2D5517D28738}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Chris Rea\The Best of Chris Rea\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Chris Rea\The Best of Chris Rea\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Counting Crows\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Counting Crows\Films About Ghosts  The Best Of... [Bonus Track 2004]
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Counting Crows\no title
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Counting Crows\Films About Ghosts  The Best Of... [Bonus Track 2004]\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Counting Crows\Films About Ghosts  The Best Of... [Bonus Track 2004]\AlbumArt_{F58DD485-6C36-4CDB-8071-815B649EC535}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Counting Crows\Films About Ghosts  The Best Of... [Bonus Track 2004]\AlbumArt_{F58DD485-6C36-4CDB-8071-815B649EC535}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Counting Crows\Films About Ghosts  The Best Of... [Bonus Track 2004]\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Counting Crows\Films About Ghosts  The Best Of... [Bonus Track 2004]\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Counting Crows\no title\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Counting Crows\no title\AlbumArt_{423268D0-BF6E-432D-A21F-B6560B4C9242}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Counting Crows\no title\AlbumArt_{423268D0-BF6E-432D-A21F-B6560B4C9242}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Counting Crows\no title\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Counting Crows\no title\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Craig David\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Craig David\AlbumArt_{90650A56-76B3-4EC6-881D-342D5466131C}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Craig David\AlbumArt_{90650A56-76B3-4EC6-881D-342D5466131C}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Craig David\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Craig David\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Creedence Clearwater Revival\Chronicle
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Creedence Clearwater Revival\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Creedence Clearwater Revival\Chronicle\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Creedence Clearwater Revival\Chronicle\AlbumArt_{1C51E20C-5296-44AB-90CB-8DBB6FDBAB44}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Creedence Clearwater Revival\Chronicle\AlbumArt_{1C51E20C-5296-44AB-90CB-8DBB6FDBAB44}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Creedence Clearwater Revival\Chronicle\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Creedence Clearwater Revival\Chronicle\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Cyndi Lauper\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Cyndi Lauper\She's So Unusual [Bonus Tracks]
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Cyndi Lauper\She's So Unusual [Bonus Tracks]\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Cyndi Lauper\She's So Unusual [Bonus Tracks]\AlbumArt_{5AD78969-42DB-4172-BBF5-916A01C39524}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Cyndi Lauper\She's So Unusual [Bonus Tracks]\AlbumArt_{5AD78969-42DB-4172-BBF5-916A01C39524}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Cyndi Lauper\She's So Unusual [Bonus Tracks]\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\C\Cyndi Lauper\She's So Unusual [Bonus Tracks]\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\AlbumArt_{061154BA-DD5D-4D69-B367-26B2A5B5F1CB}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\AlbumArt_{061154BA-DD5D-4D69-B367-26B2A5B5F1CB}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\AlbumArt_{B14F6885-89BC-4F87-B8D7-8B7372BAE637}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\AlbumArt_{B14F6885-89BC-4F87-B8D7-8B7372BAE637}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\AlbumArt_{CA6465E3-92B8-4969-B053-E091250B3E3E}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\AlbumArt_{CA6465E3-92B8-4969-B053-E091250B3E3E}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\AlbumArt_{D5D51469-8E45-4897-9399-3A156FC2FF83}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\AlbumArt_{D5D51469-8E45-4897-9399-3A156FC2FF83}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\AlbumArt_{DAAE5A7A-D07D-4C7C-AE7B-E926C737721B}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\AlbumArt_{DAAE5A7A-D07D-4C7C-AE7B-E926C737721B}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\AlbumArt_{F87D14E5-4DEB-4169-B9EA-D067EBCD4297}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\AlbumArt_{F87D14E5-4DEB-4169-B9EA-D067EBCD4297}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\David Bowie
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Depeche Mode
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Dido
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\DJ Otzi
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Dj  tzi
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Duffy
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\David Bowie\Best of Bowie CD2
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\David Bowie\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\David Bowie\Best of Bowie CD2\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\David Bowie\Best of Bowie CD2\AlbumArt_{061154BA-DD5D-4D69-B367-26B2A5B5F1CB}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\David Bowie\Best of Bowie CD2\AlbumArt_{061154BA-DD5D-4D69-B367-26B2A5B5F1CB}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\David Bowie\Best of Bowie CD2\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\David Bowie\Best of Bowie CD2\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Depeche Mode\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Depeche Mode\The Best Of Depeche Mode Volume 1
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Depeche Mode\The Best Of Depeche Mode Volume 1\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Depeche Mode\The Best Of Depeche Mode Volume 1\AlbumArt_{6A71A22B-25AD-4013-9F62-ACCD9E4319FF}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Depeche Mode\The Best Of Depeche Mode Volume 1\AlbumArt_{6A71A22B-25AD-4013-9F62-ACCD9E4319FF}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Depeche Mode\The Best Of Depeche Mode Volume 1\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Depeche Mode\The Best Of Depeche Mode Volume 1\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Dido\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Dido\No Angel
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Dido\No Angel\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Dido\No Angel\AlbumArt_{ACF00E8B-3DE6-42FB-9E89-309A0DE57F1C}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Dido\No Angel\AlbumArt_{ACF00E8B-3DE6-42FB-9E89-309A0DE57F1C}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Dido\No Angel\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Dido\No Angel\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\DJ Otzi\Bravo Hits 57
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\DJ Otzi\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\DJ Otzi\Bravo Hits 57\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\DJ Otzi\Bravo Hits 57\AlbumArt_{D5D51469-8E45-4897-9399-3A156FC2FF83}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\DJ Otzi\Bravo Hits 57\AlbumArt_{D5D51469-8E45-4897-9399-3A156FC2FF83}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\DJ Otzi\Bravo Hits 57\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\DJ Otzi\Bravo Hits 57\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Dj  tzi\Apr s Ski-Hits 2000 - Cd 1
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Dj  tzi\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Dj  tzi\Apr s Ski-Hits 2000 - Cd 1\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Dj  tzi\Apr s Ski-Hits 2000 - Cd 1\AlbumArt_{171876D3-3433-4C13-B6D5-21B33C569717}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Dj  tzi\Apr s Ski-Hits 2000 - Cd 1\AlbumArt_{171876D3-3433-4C13-B6D5-21B33C569717}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Dj  tzi\Apr s Ski-Hits 2000 - Cd 1\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Dj  tzi\Apr s Ski-Hits 2000 - Cd 1\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Duffy\Rockferry [Deluxe Edition] Disc 2
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Duffy\Rockferry [Deluxe Edition] Disc 2\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Duffy\Rockferry [Deluxe Edition] Disc 2\AlbumArt_{B14F6885-89BC-4F87-B8D7-8B7372BAE637}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Duffy\Rockferry [Deluxe Edition] Disc 2\AlbumArt_{B14F6885-89BC-4F87-B8D7-8B7372BAE637}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Duffy\Rockferry [Deluxe Edition] Disc 2\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\D\Duffy\Rockferry [Deluxe Edition] Disc 2\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\AlbumArt_{D6F86F6F-C0C0-41DA-A644-C7B3F7E73EE5}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\AlbumArt_{D6F86F6F-C0C0-41DA-A644-C7B3F7E73EE5}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Eddy Grant
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Enrique Iglesias
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Erhardt, Heinz
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Evanescence
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Eddy Grant\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Eddy Grant\Essential Eddy Grant
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Eddy Grant\Killer on the Rampage
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Eddy Grant\Essential Eddy Grant\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Eddy Grant\Essential Eddy Grant\AlbumArt_{8A562F0B-D740-4529-8D9C-C27FBF5894DA}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Eddy Grant\Essential Eddy Grant\AlbumArt_{8A562F0B-D740-4529-8D9C-C27FBF5894DA}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Eddy Grant\Essential Eddy Grant\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Eddy Grant\Essential Eddy Grant\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Eddy Grant\Killer on the Rampage\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Eddy Grant\Killer on the Rampage\AlbumArt_{D6F86F6F-C0C0-41DA-A644-C7B3F7E73EE5}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Eddy Grant\Killer on the Rampage\AlbumArt_{D6F86F6F-C0C0-41DA-A644-C7B3F7E73EE5}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Eddy Grant\Killer on the Rampage\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Eddy Grant\Killer on the Rampage\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Enrique Iglesias\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Enrique Iglesias\Escape
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Enrique Iglesias\Escape\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Enrique Iglesias\Escape\AlbumArt_{1DBCE58C-2F86-4B25-B524-8296683D6442}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Enrique Iglesias\Escape\AlbumArt_{1DBCE58C-2F86-4B25-B524-8296683D6442}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Enrique Iglesias\Escape\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Enrique Iglesias\Escape\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Erhardt, Heinz\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Erhardt, Heinz\Noch'n Gedicht
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Erhardt, Heinz\Noch'n Gedicht\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Erhardt, Heinz\Noch'n Gedicht\AlbumArt_{D22594EB-45B7-457B-B39F-CEF8CADA2FFA}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Erhardt, Heinz\Noch'n Gedicht\AlbumArt_{D22594EB-45B7-457B-B39F-CEF8CADA2FFA}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Erhardt, Heinz\Noch'n Gedicht\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Erhardt, Heinz\Noch'n Gedicht\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Evanescence\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Evanescence\Evanescence   Fallen
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Evanescence\Evanescence   Fallen\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Evanescence\Evanescence   Fallen\AlbumArt_{64AEA83C-5229-487D-86C4-5284D77FC4F0}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Evanescence\Evanescence   Fallen\AlbumArt_{64AEA83C-5229-487D-86C4-5284D77FC4F0}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Evanescence\Evanescence   Fallen\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\E\Evanescence\Evanescence   Fallen\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\AlbumArt_{D2EB3CBD-4AC8-402E-8ED4-5F8F3160F62F}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\AlbumArt_{D2EB3CBD-4AC8-402E-8ED4-5F8F3160F62F}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Feargal Sharkey
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Fergie
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Frank Sinatra
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Einzelhaft
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Emotional
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Greatest Hits
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Meine Schonsten Erfolge
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\The Remix Hit Collection
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Einzelhaft\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Einzelhaft\AlbumArt_{FD097547-30AB-4191-8EAB-FB5359D5DF85}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Einzelhaft\AlbumArt_{FD097547-30AB-4191-8EAB-FB5359D5DF85}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Einzelhaft\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Einzelhaft\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Emotional\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Emotional\AlbumArt_{90C821FA-E817-4124-85B9-52B49AD665A6}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Emotional\AlbumArt_{90C821FA-E817-4124-85B9-52B49AD665A6}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Emotional\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Emotional\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Greatest Hits\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Greatest Hits\AlbumArt_{BD9374B2-B89C-4EB9-ADB3-E71A2D2946CB}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Greatest Hits\AlbumArt_{BD9374B2-B89C-4EB9-ADB3-E71A2D2946CB}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Greatest Hits\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Greatest Hits\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Meine Schonsten Erfolge\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Meine Schonsten Erfolge\AlbumArt_{DBFD14C5-6D7B-4BBA-A01D-A2575FC415FD}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Meine Schonsten Erfolge\AlbumArt_{DBFD14C5-6D7B-4BBA-A01D-A2575FC415FD}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Meine Schonsten Erfolge\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\Meine Schonsten Erfolge\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\The Remix Hit Collection\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\The Remix Hit Collection\AlbumArt_{BCFED18A-CAD6-456B-A441-E2FEFC3E1357}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\The Remix Hit Collection\AlbumArt_{BCFED18A-CAD6-456B-A441-E2FEFC3E1357}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\The Remix Hit Collection\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Falco\The Remix Hit Collection\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Feargal Sharkey\Canna-Power Charts 1986
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Feargal Sharkey\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Feargal Sharkey\Canna-Power Charts 1986\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Feargal Sharkey\Canna-Power Charts 1986\AlbumArt_{3A7FC341-DC33-4BF7-8673-C74C51E4C0DD}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Feargal Sharkey\Canna-Power Charts 1986\AlbumArt_{3A7FC341-DC33-4BF7-8673-C74C51E4C0DD}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Feargal Sharkey\Canna-Power Charts 1986\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Feargal Sharkey\Canna-Power Charts 1986\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Fergie\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Fergie\The Dutchess
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Fergie\The Dutchess\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Fergie\The Dutchess\AlbumArt_{D2EB3CBD-4AC8-402E-8ED4-5F8F3160F62F}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Fergie\The Dutchess\AlbumArt_{D2EB3CBD-4AC8-402E-8ED4-5F8F3160F62F}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Fergie\The Dutchess\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Fergie\The Dutchess\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Frank Sinatra\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Frank Sinatra\New York, New York
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Frank Sinatra\New York, New York\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Frank Sinatra\New York, New York\AlbumArt_{F4DC2CC2-D8ED-4B89-9AA7-5DB9D20A38BD}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Frank Sinatra\New York, New York\AlbumArt_{F4DC2CC2-D8ED-4B89-9AA7-5DB9D20A38BD}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Frank Sinatra\New York, New York\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\F\Frank Sinatra\New York, New York\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Genesis
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Gr nemeyer
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Gwen Stefani
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Genesis\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Genesis\Platinum Collection (disc 1)
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Genesis\Platinum Collection (disc 3)
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Genesis\Platinum Collection (disc 1)\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Genesis\Platinum Collection (disc 1)\AlbumArt_{CE3951FA-6B00-4908-81A0-A0890213B183}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Genesis\Platinum Collection (disc 1)\AlbumArt_{CE3951FA-6B00-4908-81A0-A0890213B183}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Genesis\Platinum Collection (disc 1)\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Genesis\Platinum Collection (disc 1)\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Genesis\Platinum Collection (disc 3)\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Genesis\Platinum Collection (disc 3)\AlbumArt_{80A2EF7A-696D-4E1D-95AC-58540A98059F}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Genesis\Platinum Collection (disc 3)\AlbumArt_{80A2EF7A-696D-4E1D-95AC-58540A98059F}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Genesis\Platinum Collection (disc 3)\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Genesis\Platinum Collection (disc 3)\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Gr nemeyer\ 
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Gr nemeyer\ \AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Gr nemeyer\ \AlbumArt_{5B58EA76-338F-4590-9ECE-1F94DB3B73BE}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Gr nemeyer\ \AlbumArt_{5B58EA76-338F-4590-9ECE-1F94DB3B73BE}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Gr nemeyer\ \desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Gr nemeyer\ \Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Gwen Stefani\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Gwen Stefani\The Sweet Escape
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Gwen Stefani\The Sweet Escape\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Gwen Stefani\The Sweet Escape\AlbumArt_{9EBDBA08-AE07-4F77-A6CD-6E5E0E8FFE71}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Gwen Stefani\The Sweet Escape\AlbumArt_{9EBDBA08-AE07-4F77-A6CD-6E5E0E8FFE71}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Gwen Stefani\The Sweet Escape\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\G\Gwen Stefani\The Sweet Escape\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\Habib Koite & Bamada
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\Habib Koite & Bamada\Muso Ko
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\Habib Koite & Bamada\Muso Ko\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\Habib Koite & Bamada\Muso Ko\AlbumArt_{CA6465E3-92B8-4969-B053-E091250B3E3E}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\Habib Koite & Bamada\Muso Ko\AlbumArt_{CA6465E3-92B8-4969-B053-E091250B3E3E}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\Habib Koite & Bamada\Muso Ko\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD1v4
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD2v4
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD3v4
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD4v4
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD1v4\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD1v4\AlbumArt_{4623B791-33B1-44FD-A75A-9ED0E75B5B62}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD1v4\AlbumArt_{4623B791-33B1-44FD-A75A-9ED0E75B5B62}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD1v4\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD1v4\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD2v4\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD2v4\AlbumArt_{C6D650A3-0920-4323-9EDA-A8DFE157A5B6}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD2v4\AlbumArt_{C6D650A3-0920-4323-9EDA-A8DFE157A5B6}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD2v4\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD2v4\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD3v4\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD3v4\AlbumArt_{F346E20E-BB74-474C-AACF-2B8E3A25952D}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD3v4\AlbumArt_{F346E20E-BB74-474C-AACF-2B8E3A25952D}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD3v4\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD3v4\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD4v4\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD4v4\AlbumArt_{00000000-0000-0000-0000-000000000000}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD4v4\AlbumArt_{00000000-0000-0000-0000-000000000000}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD4v4\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\H\H rb cher\Jules Verne\Reise zum Mittelpunkt der Erde CD4v4\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\AlbumArt_{81244B04-70BE-47F1-9A5E-2026093D598F}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\AlbumArt_{81244B04-70BE-47F1-9A5E-2026093D598F}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\AlbumArt_{CA6465E3-92B8-4969-B053-E091250B3E3E}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\AlbumArt_{CA6465E3-92B8-4969-B053-E091250B3E3E}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\I'm From Barcelona
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ich + Ich
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ike & Tina Turner
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\I'm From Barcelona\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\I'm From Barcelona\Who killed Harry Houdini _
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\I'm From Barcelona\Who killed Harry Houdini _\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\I'm From Barcelona\Who killed Harry Houdini _\AlbumArt_{8873439F-196C-4B1E-8C62-28473FDBED61}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\I'm From Barcelona\Who killed Harry Houdini _\AlbumArt_{8873439F-196C-4B1E-8C62-28473FDBED61}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\I'm From Barcelona\Who killed Harry Houdini _\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\I'm From Barcelona\Who killed Harry Houdini _\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ich + Ich\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ich + Ich\Future Dance Hits Vol.60 Bootleg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ich + Ich\Vom selben Stern
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ich + Ich\Future Dance Hits Vol.60 Bootleg\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ich + Ich\Future Dance Hits Vol.60 Bootleg\AlbumArt_{C51623AA-355D-4633-BCA2-7B67D73C6D05}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ich + Ich\Future Dance Hits Vol.60 Bootleg\AlbumArt_{C51623AA-355D-4633-BCA2-7B67D73C6D05}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ich + Ich\Future Dance Hits Vol.60 Bootleg\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ich + Ich\Future Dance Hits Vol.60 Bootleg\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ich + Ich\Vom selben Stern\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ich + Ich\Vom selben Stern\AlbumArt_{C51623AA-355D-4633-BCA2-7B67D73C6D05}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ich + Ich\Vom selben Stern\AlbumArt_{C51623AA-355D-4633-BCA2-7B67D73C6D05}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ich + Ich\Vom selben Stern\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ich + Ich\Vom selben Stern\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ike & Tina Turner\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ike & Tina Turner\Proud Mary -- The Best of Ike & Tina Turner
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ike & Tina Turner\Proud Mary -- The Best of Ike & Tina Turner\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ike & Tina Turner\Proud Mary -- The Best of Ike & Tina Turner\AlbumArt_{194A3FB0-A0DA-4715-B607-D935311E4D20}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ike & Tina Turner\Proud Mary -- The Best of Ike & Tina Turner\AlbumArt_{194A3FB0-A0DA-4715-B607-D935311E4D20}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ike & Tina Turner\Proud Mary -- The Best of Ike & Tina Turner\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\I\Ike & Tina Turner\Proud Mary -- The Best of Ike & Tina Turner\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\AlbumArt_{D6D6FADC-B55A-4C8B-A639-5F5D428D9770}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\AlbumArt_{D6D6FADC-B55A-4C8B-A639-5F5D428D9770}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\AlbumArt_{FC64B70C-E276-4EF4-8EE7-65D714BBBB4C}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\AlbumArt_{FC64B70C-E276-4EF4-8EE7-65D714BBBB4C}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Jackson, Michael
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\James Morrison Feat.Nelly Furtado
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Jennifer Lopez
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Joe Cocker
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\John Farnham
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\justin timberlake
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Jackson, Michael\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Jackson, Michael\History (CD 1)
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Jackson, Michael\History (CD 1)\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Jackson, Michael\History (CD 1)\AlbumArt_{FFEB8FE9-F724-4D56-A48C-2D2D631D8A69}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Jackson, Michael\History (CD 1)\AlbumArt_{FFEB8FE9-F724-4D56-A48C-2D2D631D8A69}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Jackson, Michael\History (CD 1)\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Jackson, Michael\History (CD 1)\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\James Morrison Feat.Nelly Furtado\Unbekanntes Album
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\James Morrison Feat.Nelly Furtado\Unbekanntes Album\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\James Morrison Feat.Nelly Furtado\Unbekanntes Album\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Jennifer Lopez\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Jennifer Lopez\J.Lo
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Jennifer Lopez\J.Lo\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Jennifer Lopez\J.Lo\AlbumArt_{CD8C042B-40EE-4957-B940-57C4F659CBD7}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Jennifer Lopez\J.Lo\AlbumArt_{CD8C042B-40EE-4957-B940-57C4F659CBD7}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Jennifer Lopez\J.Lo\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Jennifer Lopez\J.Lo\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Joe Cocker\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Joe Cocker\Have a Little Faith
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Joe Cocker\The Best of Joe Cocker
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Joe Cocker\Have a Little Faith\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Joe Cocker\Have a Little Faith\AlbumArt_{DEE6ADDE-3B9D-471E-AAC9-7DB59718BD1C}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Joe Cocker\Have a Little Faith\AlbumArt_{DEE6ADDE-3B9D-471E-AAC9-7DB59718BD1C}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Joe Cocker\Have a Little Faith\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Joe Cocker\Have a Little Faith\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Joe Cocker\The Best of Joe Cocker\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Joe Cocker\The Best of Joe Cocker\AlbumArt_{CB3B37AA-3317-4D30-BF4B-D7FE401001B8}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Joe Cocker\The Best of Joe Cocker\AlbumArt_{CB3B37AA-3317-4D30-BF4B-D7FE401001B8}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Joe Cocker\The Best of Joe Cocker\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\Joe Cocker\The Best of Joe Cocker\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\John Farnham\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\John Farnham\Whispering Jack
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\John Farnham\Whispering Jack\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\John Farnham\Whispering Jack\AlbumArt_{34A38A07-DEDD-493C-97E6-A7E4FF417719}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\John Farnham\Whispering Jack\AlbumArt_{34A38A07-DEDD-493C-97E6-A7E4FF417719}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\John Farnham\Whispering Jack\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\John Farnham\Whispering Jack\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\justin timberlake\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\justin timberlake\Futuresex Lovesound
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\justin timberlake\Futuresex Lovesound\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\justin timberlake\Futuresex Lovesound\AlbumArt_{D6D6FADC-B55A-4C8B-A639-5F5D428D9770}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\justin timberlake\Futuresex Lovesound\AlbumArt_{D6D6FADC-B55A-4C8B-A639-5F5D428D9770}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\justin timberlake\Futuresex Lovesound\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\J\justin timberlake\Futuresex Lovesound\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\AlbumArtSmall.jpg


Alt 10.07.2013, 09:20   #6
ShinyAccount
 
GVU-Virus vollständig entfernt? - Standard

GVU-Virus vollständig entfernt?


Zweiter Teil vom FRST:
Code:
ATTFilter
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\AlbumArt_{0B5F1FE5-C942-4323-930F-A95BD4BF247F}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\AlbumArt_{0B5F1FE5-C942-4323-930F-A95BD4BF247F}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\AlbumArt_{8A223ECC-2FCF-483D-88AB-EEF01EB95137}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\AlbumArt_{8A223ECC-2FCF-483D-88AB-EEF01EB95137}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Karsh Kale
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Kuschelrock, Vol. 13 Disc 1
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Kylie Minogue
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Karsh Kale\Realize
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Karsh Kale\Realize\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Karsh Kale\Realize\AlbumArt_{DAAE5A7A-D07D-4C7C-AE7B-E926C737721B}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Karsh Kale\Realize\AlbumArt_{DAAE5A7A-D07D-4C7C-AE7B-E926C737721B}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Karsh Kale\Realize\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Bruckner
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Requiem In D Minor
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Bruckner\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Bruckner\Symphonie Nr. 7
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Bruckner\Symphony No.4 ''Romantische''
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Bruckner\Symphonie Nr. 7\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Bruckner\Symphonie Nr. 7\AlbumArt_{36F41278-223F-4086-935F-DF0079E2D0D2}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Bruckner\Symphonie Nr. 7\AlbumArt_{36F41278-223F-4086-935F-DF0079E2D0D2}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Bruckner\Symphonie Nr. 7\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Bruckner\Symphonie Nr. 7\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Bruckner\Symphony No.4 ''Romantische''\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Bruckner\Symphony No.4 ''Romantische''\Herbert von Karajan - Berliner Philharmoniker
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Bruckner\Symphony No.4 ''Romantische''\Herbert von Karajan - Berliner Philharmoniker\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Bruckner\Symphony No.4 ''Romantische''\Herbert von Karajan - Berliner Philharmoniker\AlbumArt_{8AA9E18F-7188-4C04-95A7-F1AFF73F86D8}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Bruckner\Symphony No.4 ''Romantische''\Herbert von Karajan - Berliner Philharmoniker\AlbumArt_{8AA9E18F-7188-4C04-95A7-F1AFF73F86D8}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Bruckner\Symphony No.4 ''Romantische''\Herbert von Karajan - Berliner Philharmoniker\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Bruckner\Symphony No.4 ''Romantische''\Herbert von Karajan - Berliner Philharmoniker\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Requiem In D Minor\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Requiem In D Minor\AlbumArt_{6E1D1FA8-D72E-4B2D-AEAD-08D49747FE61}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Requiem In D Minor\AlbumArt_{6E1D1FA8-D72E-4B2D-AEAD-08D49747FE61}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Requiem In D Minor\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Klassik\Requiem In D Minor\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Kuschelrock, Vol. 13 Disc 1\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Kuschelrock, Vol. 13 Disc 1\AlbumArt_{275EBB61-2F7D-48EC-9639-BEE5255F3DE8}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Kuschelrock, Vol. 13 Disc 1\AlbumArt_{275EBB61-2F7D-48EC-9639-BEE5255F3DE8}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Kuschelrock, Vol. 13 Disc 1\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Kuschelrock, Vol. 13 Disc 1\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Kylie Minogue\2 Hearts CDM
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Kylie Minogue\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Kylie Minogue\2 Hearts CDM\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Kylie Minogue\2 Hearts CDM\AlbumArt_{8A223ECC-2FCF-483D-88AB-EEF01EB95137}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Kylie Minogue\2 Hearts CDM\AlbumArt_{8A223ECC-2FCF-483D-88AB-EEF01EB95137}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Kylie Minogue\2 Hearts CDM\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\K\Kylie Minogue\2 Hearts CDM\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\AlbumArt_{81244B04-70BE-47F1-9A5E-2026093D598F}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\AlbumArt_{81244B04-70BE-47F1-9A5E-2026093D598F}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\AlbumArt_{D394A1B2-A082-4B9B-BC07-36494034787E}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\AlbumArt_{D394A1B2-A082-4B9B-BC07-36494034787E}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Laith Al-Deen
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Las Ketchup
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\lay down sally eric
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Leona Lewis
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Linkin Park - Minutes to midnight
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lionel Richie
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lisa Stansfield
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Los del Rio
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Luciana Souza
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Ludwig van Beethoven
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Laith Al-Deen\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Laith Al-Deen\Die Liebe zum Detail
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Laith Al-Deen\Die Liebe zum Detail\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Laith Al-Deen\Die Liebe zum Detail\AlbumArt_{5060F469-3751-4AE0-843B-9038AB736073}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Laith Al-Deen\Die Liebe zum Detail\AlbumArt_{5060F469-3751-4AE0-843B-9038AB736073}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Laith Al-Deen\Die Liebe zum Detail\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Laith Al-Deen\Die Liebe zum Detail\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Las Ketchup\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Las Ketchup\Las Ketchup
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Las Ketchup\Las Ketchup\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Las Ketchup\Las Ketchup\AlbumArt_{E46EE50A-62D1-4CE4-9496-5DF4D44F2685}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Las Ketchup\Las Ketchup\AlbumArt_{E46EE50A-62D1-4CE4-9496-5DF4D44F2685}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Las Ketchup\Las Ketchup\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Las Ketchup\Las Ketchup\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\lay down sally eric\20th Century Masters - The Millennium Collection  The Best of Er
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\lay down sally eric\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\lay down sally eric\20th Century Masters - The Millennium Collection  The Best of Er\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\lay down sally eric\20th Century Masters - The Millennium Collection  The Best of Er\AlbumArt_{87361D64-F503-4D03-91C2-B9021D9F4AD2}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\lay down sally eric\20th Century Masters - The Millennium Collection  The Best of Er\AlbumArt_{87361D64-F503-4D03-91C2-B9021D9F4AD2}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\lay down sally eric\20th Century Masters - The Millennium Collection  The Best of Er\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\lay down sally eric\20th Century Masters - The Millennium Collection  The Best of Er\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Leona Lewis\Spirit
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Leona Lewis\Spirit\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Leona Lewis\Spirit\AlbumArt_{E7934039-4872-41E5-A227-2342DBBA64E9}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Leona Lewis\Spirit\AlbumArt_{E7934039-4872-41E5-A227-2342DBBA64E9}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Leona Lewis\Spirit\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Leona Lewis\Spirit\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Linkin Park - Minutes to midnight\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Linkin Park - Minutes to midnight\AlbumArt_{EA445DCD-D5E0-42C7-B659-8675D562EFB3}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Linkin Park - Minutes to midnight\AlbumArt_{EA445DCD-D5E0-42C7-B659-8675D562EFB3}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Linkin Park - Minutes to midnight\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Linkin Park - Minutes to midnight\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lionel Richie\Bravo Hits Vol. 55
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lionel Richie\Can't Slow Down
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lionel Richie\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lionel Richie\Bravo Hits Vol. 55\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lionel Richie\Bravo Hits Vol. 55\AlbumArt_{CFB1F260-7F65-44F2-9FDB-696C0BF5A2AB}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lionel Richie\Bravo Hits Vol. 55\AlbumArt_{CFB1F260-7F65-44F2-9FDB-696C0BF5A2AB}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lionel Richie\Bravo Hits Vol. 55\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lionel Richie\Bravo Hits Vol. 55\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lionel Richie\Can't Slow Down\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lionel Richie\Can't Slow Down\AlbumArt_{10BBCF1F-CBBE-4AD2-B362-4549B0BC8C6C}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lionel Richie\Can't Slow Down\AlbumArt_{10BBCF1F-CBBE-4AD2-B362-4549B0BC8C6C}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lionel Richie\Can't Slow Down\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lionel Richie\Can't Slow Down\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lisa Stansfield\Affection
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lisa Stansfield\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lisa Stansfield\Affection\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lisa Stansfield\Affection\AlbumArt_{40A024EB-832B-4369-AAAC-D64C0C4D6B17}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lisa Stansfield\Affection\AlbumArt_{40A024EB-832B-4369-AAAC-D64C0C4D6B17}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lisa Stansfield\Affection\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Lisa Stansfield\Affection\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Los del Rio\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Los del Rio\Macarena Non Stop
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Los del Rio\Macarena Non Stop\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Los del Rio\Macarena Non Stop\AlbumArt_{591992C4-AA93-4ABA-9F12-985F3D4A5AF5}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Los del Rio\Macarena Non Stop\AlbumArt_{591992C4-AA93-4ABA-9F12-985F3D4A5AF5}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Los del Rio\Macarena Non Stop\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Los del Rio\Macarena Non Stop\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Luciana Souza\Duos II
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Luciana Souza\Duos II\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Luciana Souza\Duos II\AlbumArt_{2BEDE989-0477-48C8-8E85-D5FC97494EC0}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Luciana Souza\Duos II\AlbumArt_{2BEDE989-0477-48C8-8E85-D5FC97494EC0}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Luciana Souza\Duos II\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Luciana Souza\Duos II\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Ludwig van Beethoven\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Ludwig van Beethoven\The Best of Beethoven
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Ludwig van Beethoven\The Best of Beethoven\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Ludwig van Beethoven\The Best of Beethoven\AlbumArt_{208F236E-B511-4949-BDF9-3791602ED53A}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Ludwig van Beethoven\The Best of Beethoven\AlbumArt_{208F236E-B511-4949-BDF9-3791602ED53A}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Ludwig van Beethoven\The Best of Beethoven\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\L\Ludwig van Beethoven\The Best of Beethoven\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\AlbumArt_{1C8DA443-C3EA-4800-8677-4949285219DC}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\AlbumArt_{1C8DA443-C3EA-4800-8677-4949285219DC}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\AlbumArt_{403B2F2B-26E2-45D0-9E2C-967B2869D70F}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\AlbumArt_{403B2F2B-26E2-45D0-9E2C-967B2869D70F}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\AlbumArt_{8205C33D-CEC5-4C86-BCF2-E5135FC4E3F9}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\AlbumArt_{8205C33D-CEC5-4C86-BCF2-E5135FC4E3F9}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Madonna
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Maria Mena
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Melanie C
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Michael Jackson
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mika
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Modern Talking
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Monrose
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Madonna\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Madonna\Music
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Madonna\Music\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Madonna\Music\AlbumArt_{B745A9F8-8B5E-4AD8-BDF3-3AAA27EBD662}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Madonna\Music\AlbumArt_{B745A9F8-8B5E-4AD8-BDF3-3AAA27EBD662}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Madonna\Music\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Madonna\Music\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Maria Mena\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Maria Mena\neueinsteiger 2008   41
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Maria Mena\neueinsteiger 2008   41\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Maria Mena\neueinsteiger 2008   41\AlbumArt_{8205C33D-CEC5-4C86-BCF2-E5135FC4E3F9}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Maria Mena\neueinsteiger 2008   41\AlbumArt_{8205C33D-CEC5-4C86-BCF2-E5135FC4E3F9}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Maria Mena\neueinsteiger 2008   41\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Maria Mena\neueinsteiger 2008   41\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Melanie C\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Melanie C\Northern Star
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Melanie C\Northern Star\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Melanie C\Northern Star\AlbumArt_{095422AA-6DCE-4093-889E-C93BE70F4E65}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Melanie C\Northern Star\AlbumArt_{095422AA-6DCE-4093-889E-C93BE70F4E65}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Melanie C\Northern Star\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Melanie C\Northern Star\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Michael Jackson\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Michael Jackson\HIStory  Past, Present and Future, Book 1 (disc 1  HIStory Begin
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Michael Jackson\HIStory  Past, Present and Future, Book 1 (disc 1  HIStory Begin\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Michael Jackson\HIStory  Past, Present and Future, Book 1 (disc 1  HIStory Begin\AlbumArt_{FFEB8FE9-F724-4D56-A48C-2D2D631D8A69}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Michael Jackson\HIStory  Past, Present and Future, Book 1 (disc 1  HIStory Begin\AlbumArt_{FFEB8FE9-F724-4D56-A48C-2D2D631D8A69}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Michael Jackson\HIStory  Past, Present and Future, Book 1 (disc 1  HIStory Begin\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Michael Jackson\HIStory  Past, Present and Future, Book 1 (disc 1  HIStory Begin\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mika\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mika\no title
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mika\no title\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mika\no title\AlbumArt_{88536029-C7DA-411D-A241-0EEBFD6CE37F}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mika\no title\AlbumArt_{88536029-C7DA-411D-A241-0EEBFD6CE37F}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mika\no title\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mika\no title\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{00000000-0000-0000-0000-000000000000}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{00000000-0000-0000-0000-000000000000}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{047EBCD0-1649-4505-9D0D-5F4CEAF53DAD}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{047EBCD0-1649-4505-9D0D-5F4CEAF53DAD}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{05280AB1-6E24-4A87-8F8B-07820A7FE78A}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{05280AB1-6E24-4A87-8F8B-07820A7FE78A}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{07586BBA-68F9-4095-8431-ABD24E323192}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{07586BBA-68F9-4095-8431-ABD24E323192}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{1D121BA1-3AEA-44A4-8EE8-41A8071B6F12}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{1D121BA1-3AEA-44A4-8EE8-41A8071B6F12}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{206CAA4D-19FE-4B30-AAFC-72AA63C610C5}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{206CAA4D-19FE-4B30-AAFC-72AA63C610C5}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{210BA361-9E50-4BBB-A99E-4463AA4B1A1E}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{210BA361-9E50-4BBB-A99E-4463AA4B1A1E}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{258ED739-A3AE-4145-A752-39CEFAB7F00B}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{258ED739-A3AE-4145-A752-39CEFAB7F00B}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{2B8BE857-48A2-45BD-A102-01316E483867}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{2B8BE857-48A2-45BD-A102-01316E483867}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{47B6ADE3-F939-46ED-8F7A-C20CD846DA95}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{47B6ADE3-F939-46ED-8F7A-C20CD846DA95}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{487B9288-8C7E-4282-91A9-762C96732BCA}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{487B9288-8C7E-4282-91A9-762C96732BCA}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{4DB6054D-7750-49AF-860B-154B2EA79FDB}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{4DB6054D-7750-49AF-860B-154B2EA79FDB}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{51E9E3F6-9AD6-43F7-9785-5E7F0E9FD058}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{51E9E3F6-9AD6-43F7-9785-5E7F0E9FD058}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{53C529D7-4470-465F-971F-D08CB1805D9D}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{53C529D7-4470-465F-971F-D08CB1805D9D}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{56E45FFE-E39F-46EC-937F-DE2A8B162F63}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{56E45FFE-E39F-46EC-937F-DE2A8B162F63}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{6108B2E6-FF51-46A0-95B5-30F041E63CCB}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{6108B2E6-FF51-46A0-95B5-30F041E63CCB}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{62422F01-1B20-42ED-A501-BE11F741D548}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{62422F01-1B20-42ED-A501-BE11F741D548}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{66078879-9C38-4D4F-8993-21CF8E18784F}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{66078879-9C38-4D4F-8993-21CF8E18784F}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{6C1BC35A-CCA3-4F22-ABD2-8A011624B7B5}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{6C1BC35A-CCA3-4F22-ABD2-8A011624B7B5}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{714BEA56-C063-45E6-A08F-18EEF38C4C52}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{714BEA56-C063-45E6-A08F-18EEF38C4C52}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{7182EE55-14AE-4AF9-A804-1FE32DB1D32C}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{7182EE55-14AE-4AF9-A804-1FE32DB1D32C}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{73094B9D-B43D-4CB6-A6BE-FF8B2EFF37C9}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{73094B9D-B43D-4CB6-A6BE-FF8B2EFF37C9}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{7595A3B2-BAA1-4B6F-BC80-4230EEA46FEF}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{7595A3B2-BAA1-4B6F-BC80-4230EEA46FEF}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{7BC24CC9-3196-4BD6-8FC3-DE8C8AE4713F}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{7BC24CC9-3196-4BD6-8FC3-DE8C8AE4713F}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{8025577B-366C-401F-B92B-94D612E1A6F8}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{8025577B-366C-401F-B92B-94D612E1A6F8}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{80E585EC-70F9-4E47-8DF7-4A83D7E52B43}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{80E585EC-70F9-4E47-8DF7-4A83D7E52B43}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{94845A15-410F-4932-A1ED-858F249A52C0}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{94845A15-410F-4932-A1ED-858F249A52C0}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{A740F139-CF5C-42D3-81D8-9AA6410943F2}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{A740F139-CF5C-42D3-81D8-9AA6410943F2}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{A9F5DC5B-9BE7-492B-AA4B-7F096756ECD7}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{A9F5DC5B-9BE7-492B-AA4B-7F096756ECD7}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{B0896B3E-1473-4133-A692-7E8A5B877F24}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{B0896B3E-1473-4133-A692-7E8A5B877F24}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{B0F304C1-5781-4630-8A10-E2A99BD33D1B}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{B0F304C1-5781-4630-8A10-E2A99BD33D1B}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{C206BBD6-6615-4CE3-BA37-0093651FD503}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{C206BBD6-6615-4CE3-BA37-0093651FD503}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{C41A6798-D721-48A6-92B2-73A587E01277}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{C41A6798-D721-48A6-92B2-73A587E01277}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{C811D8E6-E10C-4363-A999-84ACEA540C38}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{C811D8E6-E10C-4363-A999-84ACEA540C38}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{CB41246A-ECB1-4F58-86A7-BF0D57CF219D}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{CB41246A-ECB1-4F58-86A7-BF0D57CF219D}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{CD4ABEA0-6A28-472A-A1E6-534353E30BC0}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{CD4ABEA0-6A28-472A-A1E6-534353E30BC0}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{DC1E55D5-A7E8-47E9-A2E4-66D47E953B4C}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{DC1E55D5-A7E8-47E9-A2E4-66D47E953B4C}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{E041348E-D18A-4CA2-95FC-6854714954DD}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{E041348E-D18A-4CA2-95FC-6854714954DD}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{E8DB5B7C-7876-47A1-B180-B12B6E4C69E6}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{E8DB5B7C-7876-47A1-B180-B12B6E4C69E6}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{FBB0B888-5D1A-4493-ACDC-D047721BB733}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\AlbumArt_{FBB0B888-5D1A-4493-ACDC-D047721BB733}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\Auswahl
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\Auswahl\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\Auswahl\AlbumArt_{00000000-0000-0000-0000-000000000000}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\Auswahl\AlbumArt_{00000000-0000-0000-0000-000000000000}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\Auswahl\AlbumArt_{16303897-68AC-4334-A0EB-37DD1314937F}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\Auswahl\AlbumArt_{16303897-68AC-4334-A0EB-37DD1314937F}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\Auswahl\AlbumArt_{210BA361-9E50-4BBB-A99E-4463AA4B1A1E}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\Auswahl\AlbumArt_{210BA361-9E50-4BBB-A99E-4463AA4B1A1E}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\Auswahl\AlbumArt_{6C9A2A64-B8E4-409B-A4E9-97B242EB3E91}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\Auswahl\AlbumArt_{6C9A2A64-B8E4-409B-A4E9-97B242EB3E91}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\Auswahl\AlbumArt_{7D0AE6AD-A33B-44D0-87F6-A38B2533EE66}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\Auswahl\AlbumArt_{7D0AE6AD-A33B-44D0-87F6-A38B2533EE66}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\Auswahl\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Mix\Auswahl\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Modern Talking\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Modern Talking\The Collection
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Modern Talking\The Collection\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Modern Talking\The Collection\AlbumArt_{F2A6E3C8-840D-408E-8F78-FF5316D62955}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Modern Talking\The Collection\AlbumArt_{F2A6E3C8-840D-408E-8F78-FF5316D62955}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Modern Talking\The Collection\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Modern Talking\The Collection\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Monrose\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Monrose\Temptation
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Monrose\Temptation\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Monrose\Temptation\AlbumArt_{1C8DA443-C3EA-4800-8677-4949285219DC}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Monrose\Temptation\AlbumArt_{1C8DA443-C3EA-4800-8677-4949285219DC}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Monrose\Temptation\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\M\Monrose\Temptation\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\AlbumArt_{033D1EB7-074A-46D2-BA8A-17D0065BFBF3}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\AlbumArt_{033D1EB7-074A-46D2-BA8A-17D0065BFBF3}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\AlbumArt_{FF1D2E96-DE54-444F-B327-0339F70B3F0E}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\AlbumArt_{FF1D2E96-DE54-444F-B327-0339F70B3F0E}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nancy Sinatra
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nelly
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nelly Furtado
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nickelback
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\No Doubt
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\NSYNC
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nancy Sinatra\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nancy Sinatra\Lightning's Girl  Greatest Hits 1965-1971
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nancy Sinatra\Lightning's Girl  Greatest Hits 1965-1971\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nancy Sinatra\Lightning's Girl  Greatest Hits 1965-1971\AlbumArt_{AD852774-6943-492B-8110-4FB1A157EC8D}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nancy Sinatra\Lightning's Girl  Greatest Hits 1965-1971\AlbumArt_{AD852774-6943-492B-8110-4FB1A157EC8D}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nancy Sinatra\Lightning's Girl  Greatest Hits 1965-1971\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nancy Sinatra\Lightning's Girl  Greatest Hits 1965-1971\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nelly\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nelly\Nellyville
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nelly\Nellyville\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nelly\Nellyville\AlbumArt_{132D51D9-5B25-450C-86D8-34268B44D9E4}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nelly\Nellyville\AlbumArt_{132D51D9-5B25-450C-86D8-34268B44D9E4}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nelly\Nellyville\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nelly\Nellyville\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nelly Furtado\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nelly Furtado\Loose
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nelly Furtado\Loose\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nelly Furtado\Loose\AlbumArt_{033D1EB7-074A-46D2-BA8A-17D0065BFBF3}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nelly Furtado\Loose\AlbumArt_{033D1EB7-074A-46D2-BA8A-17D0065BFBF3}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nelly Furtado\Loose\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nelly Furtado\Loose\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nickelback\All The Right Reasons
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nickelback\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nickelback\All The Right Reasons\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nickelback\All The Right Reasons\AlbumArt_{FF1D2E96-DE54-444F-B327-0339F70B3F0E}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nickelback\All The Right Reasons\AlbumArt_{FF1D2E96-DE54-444F-B327-0339F70B3F0E}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nickelback\All The Right Reasons\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\Nickelback\All The Right Reasons\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\No Doubt\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\No Doubt\The Singles 1992-2003
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\No Doubt\The Singles 1992-2003\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\No Doubt\The Singles 1992-2003\AlbumArt_{8DB0E0CE-6536-4AF7-BCB9-AB43972D317D}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\No Doubt\The Singles 1992-2003\AlbumArt_{8DB0E0CE-6536-4AF7-BCB9-AB43972D317D}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\No Doubt\The Singles 1992-2003\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\No Doubt\The Singles 1992-2003\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\NSYNC\Celebrity
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\NSYNC\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\NSYNC\Celebrity\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\NSYNC\Celebrity\AlbumArt_{8CDB7DA4-18F9-47AA-A3E0-D400BFD62326}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\NSYNC\Celebrity\AlbumArt_{8CDB7DA4-18F9-47AA-A3E0-D400BFD62326}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\NSYNC\Celebrity\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\N\NSYNC\Celebrity\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\O\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\O\AlbumArt_{2BEDE989-0477-48C8-8E85-D5FC97494EC0}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\O\AlbumArt_{2BEDE989-0477-48C8-8E85-D5FC97494EC0}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\O\AlbumArt_{BB802325-39F3-4C11-B9B3-DC09C68B522C}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\O\AlbumArt_{BB802325-39F3-4C11-B9B3-DC09C68B522C}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\O\AlbumArt_{D4213C57-0F32-4AED-82E0-A6560E1EA35F}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\O\AlbumArt_{D4213C57-0F32-4AED-82E0-A6560E1EA35F}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\O\AlbumArt_{DAAE5A7A-D07D-4C7C-AE7B-E926C737721B}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\O\AlbumArt_{DAAE5A7A-D07D-4C7C-AE7B-E926C737721B}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\O\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\O\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\AlbumArt_{57F3A7F1-00BB-4F90-B59C-C12C1771FEDC}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\AlbumArt_{57F3A7F1-00BB-4F90-B59C-C12C1771FEDC}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Paul Young
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Peter Gabriel
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Phantom der Oper
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Phil Collins
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Pink
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Prince
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Paul Young\S3l3kta
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Paul Young\S3l3kta\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Paul Young\S3l3kta\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Peter Gabriel\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Peter Gabriel\Secret World Live (disc 1)
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Peter Gabriel\Secret World Live (disc 2)
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Peter Gabriel\Secret World Live (disc 1)\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Peter Gabriel\Secret World Live (disc 1)\AlbumArt_{3EF2DE06-F647-4A67-9991-5D1C557BE7C0}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Peter Gabriel\Secret World Live (disc 1)\AlbumArt_{3EF2DE06-F647-4A67-9991-5D1C557BE7C0}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Peter Gabriel\Secret World Live (disc 1)\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Peter Gabriel\Secret World Live (disc 1)\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Peter Gabriel\Secret World Live (disc 2)\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Peter Gabriel\Secret World Live (disc 2)\AlbumArt_{AB21160A-9C8C-4753-B747-4089393932B6}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Peter Gabriel\Secret World Live (disc 2)\AlbumArt_{AB21160A-9C8C-4753-B747-4089393932B6}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Peter Gabriel\Secret World Live (disc 2)\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Peter Gabriel\Secret World Live (disc 2)\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Phantom der Oper\CD2
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Phantom der Oper\CD2\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Phantom der Oper\CD2\AlbumArt_{00000000-0000-0000-0000-000000000000}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Phantom der Oper\CD2\AlbumArt_{00000000-0000-0000-0000-000000000000}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Phantom der Oper\CD2\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Phantom der Oper\CD2\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Phil Collins\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Phil Collins\Serious Hits... Live!
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Phil Collins\Serious Hits... Live!\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Phil Collins\Serious Hits... Live!\AlbumArt_{73094B9D-B43D-4CB6-A6BE-FF8B2EFF37C9}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Phil Collins\Serious Hits... Live!\AlbumArt_{73094B9D-B43D-4CB6-A6BE-FF8B2EFF37C9}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Phil Collins\Serious Hits... Live!\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Phil Collins\Serious Hits... Live!\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Pink\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Pink\Missundaztood
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Pink\Missundaztood\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Pink\Missundaztood\AlbumArt_{03DF8AD2-813C-4F97-BD9F-3946A239F850}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Pink\Missundaztood\AlbumArt_{03DF8AD2-813C-4F97-BD9F-3946A239F850}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Pink\Missundaztood\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Pink\Missundaztood\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Prince\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Prince\The Very Best of Prince
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Prince\The Very Best of Prince\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Prince\The Very Best of Prince\AlbumArt_{E7A9EE2B-5AE8-446F-ABEF-93284F10B60B}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Prince\The Very Best of Prince\AlbumArt_{E7A9EE2B-5AE8-446F-ABEF-93284F10B60B}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Prince\The Very Best of Prince\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\P\Prince\The Very Best of Prince\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q\Queen
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q\Queen\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q\Queen\Greatest Hits
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q\Queen\Queen
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q\Queen\Greatest Hits\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q\Queen\Greatest Hits\AlbumArt_{D3BBA5B7-F8EE-4174-BA82-D369FFA86FF1}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q\Queen\Greatest Hits\AlbumArt_{D3BBA5B7-F8EE-4174-BA82-D369FFA86FF1}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q\Queen\Greatest Hits\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q\Queen\Greatest Hits\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q\Queen\Queen\A Kind of Magic
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q\Queen\Queen\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q\Queen\Queen\A Kind of Magic\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q\Queen\Queen\A Kind of Magic\AlbumArt_{E702EE40-9C7A-47F2-B683-18CAA993DC69}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q\Queen\Queen\A Kind of Magic\AlbumArt_{E702EE40-9C7A-47F2-B683-18CAA993DC69}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q\Queen\Queen\A Kind of Magic\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\Q\Queen\Queen\A Kind of Magic\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\AlbumArt_{0AC5E8E5-1276-4A04-BFAC-6B3E86ABE229}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\AlbumArt_{0AC5E8E5-1276-4A04-BFAC-6B3E86ABE229}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\AlbumArt_{7FC660C9-6298-4528-8AC0-C3C018E73441}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\AlbumArt_{7FC660C9-6298-4528-8AC0-C3C018E73441}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\R. Kelly
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Rihanna
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Roxette
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\R. Kelly\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\R. Kelly\Tp-2.Com
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\R. Kelly\Tp-2.Com\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\R. Kelly\Tp-2.Com\AlbumArt_{F62EF243-F051-43D7-BC4B-22C89A586C8E}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\R. Kelly\Tp-2.Com\AlbumArt_{F62EF243-F051-43D7-BC4B-22C89A586C8E}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\R. Kelly\Tp-2.Com\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\R. Kelly\Tp-2.Com\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Rihanna\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Rihanna\Good Girl Gone Bad
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Rihanna\Good Girl Gone Bad\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Rihanna\Good Girl Gone Bad\AlbumArt_{7FC660C9-6298-4528-8AC0-C3C018E73441}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Rihanna\Good Girl Gone Bad\AlbumArt_{7FC660C9-6298-4528-8AC0-C3C018E73441}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Rihanna\Good Girl Gone Bad\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Rihanna\Good Girl Gone Bad\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Roxette\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Roxette\Roxette's Greatest Hits  Don't Bore Us - Get to the Chorus!
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Roxette\Roxette's Greatest Hits  Don't Bore Us - Get to the Chorus!\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Roxette\Roxette's Greatest Hits  Don't Bore Us - Get to the Chorus!\AlbumArt_{57EF7653-6755-4A59-B8EE-8DE3FD5FF385}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Roxette\Roxette's Greatest Hits  Don't Bore Us - Get to the Chorus!\AlbumArt_{57EF7653-6755-4A59-B8EE-8DE3FD5FF385}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Roxette\Roxette's Greatest Hits  Don't Bore Us - Get to the Chorus!\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\R\Roxette\Roxette's Greatest Hits  Don't Bore Us - Get to the Chorus!\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\AlbumArt_{208F236E-B511-4949-BDF9-3791602ED53A}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\AlbumArt_{208F236E-B511-4949-BDF9-3791602ED53A}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\AlbumArt_{5B5FC021-848C-4AE6-901C-6FFF869DD7D4}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\AlbumArt_{5B5FC021-848C-4AE6-901C-6FFF869DD7D4}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Scissor Sisters
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Shaggy
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Shakira
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sheryl Crow
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Simple Minds
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Soundtrack
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Stevie Wonder
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sting
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sugababes
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Scissor Sisters\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Scissor Sisters\The Dome Vol. 40
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Scissor Sisters\The Dome Vol. 40\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Scissor Sisters\The Dome Vol. 40\AlbumArt_{EA725ACA-26B1-4712-96DA-67A8F0B0161C}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Scissor Sisters\The Dome Vol. 40\AlbumArt_{EA725ACA-26B1-4712-96DA-67A8F0B0161C}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Scissor Sisters\The Dome Vol. 40\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Scissor Sisters\The Dome Vol. 40\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Shaggy\boombastic (maxi)
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Shaggy\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Shaggy\boombastic (maxi)\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Shaggy\boombastic (maxi)\AlbumArt_{5B5FC021-848C-4AE6-901C-6FFF869DD7D4}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Shaggy\boombastic (maxi)\AlbumArt_{5B5FC021-848C-4AE6-901C-6FFF869DD7D4}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Shaggy\boombastic (maxi)\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Shaggy\boombastic (maxi)\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Shakira\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Shakira\Oral Fixation Vol 2 (Retail)
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Shakira\Oral Fixation Vol 2 (Retail)\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Shakira\Oral Fixation Vol 2 (Retail)\AlbumArt_{8B0EF322-21D2-4D3D-B48C-8320702A46C8}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Shakira\Oral Fixation Vol 2 (Retail)\AlbumArt_{8B0EF322-21D2-4D3D-B48C-8320702A46C8}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Shakira\Oral Fixation Vol 2 (Retail)\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Shakira\Oral Fixation Vol 2 (Retail)\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sheryl Crow\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sheryl Crow\Tuesday Night Music Club
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sheryl Crow\Tuesday Night Music Club\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sheryl Crow\Tuesday Night Music Club\AlbumArt_{D33981ED-F30B-40A5-8D56-E61EE0489C85}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sheryl Crow\Tuesday Night Music Club\AlbumArt_{D33981ED-F30B-40A5-8D56-E61EE0489C85}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sheryl Crow\Tuesday Night Music Club\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sheryl Crow\Tuesday Night Music Club\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Simple Minds\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Simple Minds\Glittering Prize 81 92
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Simple Minds\Glittering Prize 81 92\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Simple Minds\Glittering Prize 81 92\AlbumArt_{49FDA8E8-13AA-455F-AF2E-91FDE66D7FB5}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Simple Minds\Glittering Prize 81 92\AlbumArt_{49FDA8E8-13AA-455F-AF2E-91FDE66D7FB5}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Simple Minds\Glittering Prize 81 92\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Simple Minds\Glittering Prize 81 92\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Soundtrack\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Soundtrack\Withnail and I
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Soundtrack\Withnail and I\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Soundtrack\Withnail and I\AlbumArt_{A5083E73-4FDD-43D7-8F0B-501051A2E435}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Soundtrack\Withnail and I\AlbumArt_{A5083E73-4FDD-43D7-8F0B-501051A2E435}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Soundtrack\Withnail and I\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Soundtrack\Withnail and I\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Stevie Wonder\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Stevie Wonder\Song Review  A Greatest Hits Collection
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Stevie Wonder\Song Review  A Greatest Hits Collection\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Stevie Wonder\Song Review  A Greatest Hits Collection\AlbumArt_{EDB7EB3E-2BD9-40D7-9173-6B021E9731BD}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Stevie Wonder\Song Review  A Greatest Hits Collection\AlbumArt_{EDB7EB3E-2BD9-40D7-9173-6B021E9731BD}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Stevie Wonder\Song Review  A Greatest Hits Collection\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Stevie Wonder\Song Review  A Greatest Hits Collection\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sting\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sting\Fields of Gold  The Best of Sting 1984-1994
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sting\Unknown CD for MusicBrainz and FreeDB
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sting\Fields of Gold  The Best of Sting 1984-1994\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sting\Fields of Gold  The Best of Sting 1984-1994\AlbumArt_{D249A762-A47C-46AC-9813-A44C5025249C}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sting\Fields of Gold  The Best of Sting 1984-1994\AlbumArt_{D249A762-A47C-46AC-9813-A44C5025249C}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sting\Fields of Gold  The Best of Sting 1984-1994\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sting\Fields of Gold  The Best of Sting 1984-1994\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sting\Unknown CD for MusicBrainz and FreeDB\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sting\Unknown CD for MusicBrainz and FreeDB\AlbumArt_{318448BE-9D03-4EB2-A01C-B4FB7C1916C3}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sting\Unknown CD for MusicBrainz and FreeDB\AlbumArt_{318448BE-9D03-4EB2-A01C-B4FB7C1916C3}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sting\Unknown CD for MusicBrainz and FreeDB\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sting\Unknown CD for MusicBrainz and FreeDB\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sugababes\Barbie Girls 2
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sugababes\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sugababes\One Touch
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sugababes\Barbie Girls 2\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sugababes\Barbie Girls 2\AlbumArt_{78B75E64-23DB-44E4-820B-7D00803FFCE9}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sugababes\Barbie Girls 2\AlbumArt_{78B75E64-23DB-44E4-820B-7D00803FFCE9}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sugababes\Barbie Girls 2\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sugababes\Barbie Girls 2\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sugababes\One Touch\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sugababes\One Touch\AlbumArt_{7252DC87-F010-4E24-A6BC-5BC09DBE2C0A}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sugababes\One Touch\AlbumArt_{7252DC87-F010-4E24-A6BC-5BC09DBE2C0A}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sugababes\One Touch\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\S\Sugababes\One Touch\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\AlbumArt_{8D2ED76A-CE29-4F22-99E4-F6D4912B72BE}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\AlbumArt_{8D2ED76A-CE29-4F22-99E4-F6D4912B72BE}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Take That
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\texas lightning
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Bloodhound Gang
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Lion King
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Pogues
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Police
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Posies
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\the pussycat dolls
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Rolling Stones
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Verve
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\timbaland
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Tina Turner
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\TLC
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Toten Hosen
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Take That\Beautiful World
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Take That\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Take That\Beautiful World\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Take That\Beautiful World\AlbumArt_{A6100231-1051-4447-99C8-40403CC8C00C}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Take That\Beautiful World\AlbumArt_{A6100231-1051-4447-99C8-40403CC8C00C}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Take That\Beautiful World\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Take That\Beautiful World\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\texas lightning\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\texas lightning\Meanwhile, Back at the Ranch.._
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\texas lightning\Meanwhile, Back at the Ranch.._\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\texas lightning\Meanwhile, Back at the Ranch.._\AlbumArt_{65C07495-EEB3-4B83-846A-2DABBCA705EE}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\texas lightning\Meanwhile, Back at the Ranch.._\AlbumArt_{65C07495-EEB3-4B83-846A-2DABBCA705EE}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\texas lightning\Meanwhile, Back at the Ranch.._\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\texas lightning\Meanwhile, Back at the Ranch.._\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Abbey Road
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Let It Be
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Past Masters, Vol. 2
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\The Beatles 1
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Abbey Road\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Abbey Road\AlbumArt_{E50EF3A8-4000-4519-B01F-7D0549A6190D}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Abbey Road\AlbumArt_{E50EF3A8-4000-4519-B01F-7D0549A6190D}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Abbey Road\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Abbey Road\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Let It Be\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Let It Be\AlbumArt_{DE1F9292-2D68-423A-A834-3301F6139660}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Let It Be\AlbumArt_{DE1F9292-2D68-423A-A834-3301F6139660}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Let It Be\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Let It Be\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Past Masters, Vol. 2\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Past Masters, Vol. 2\AlbumArt_{FCD42225-0414-4BB9-9A58-5B3EC30B1FAA}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Past Masters, Vol. 2\AlbumArt_{FCD42225-0414-4BB9-9A58-5B3EC30B1FAA}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Past Masters, Vol. 2\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\Past Masters, Vol. 2\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\The Beatles 1\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\The Beatles 1\AlbumArt_{C544350D-AF2A-4173-8948-9AB913E1957E}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\The Beatles 1\AlbumArt_{C544350D-AF2A-4173-8948-9AB913E1957E}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\The Beatles 1\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Beatles\The Beatles 1\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Bloodhound Gang\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Bloodhound Gang\Hooray for Boobies
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Bloodhound Gang\Hooray for Boobies\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Bloodhound Gang\Hooray for Boobies\AlbumArt_{4CCC10E6-6FA2-4BA8-B800-1CBC1EACC587}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Bloodhound Gang\Hooray for Boobies\AlbumArt_{4CCC10E6-6FA2-4BA8-B800-1CBC1EACC587}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Bloodhound Gang\Hooray for Boobies\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Bloodhound Gang\Hooray for Boobies\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Lion King\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Lion King\AlbumArt_{F5E3F3EE-BC84-4A1B-A3FA-233F10162C66}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Lion King\AlbumArt_{F5E3F3EE-BC84-4A1B-A3FA-233F10162C66}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Lion King\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Lion King\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Lion King\Thumbs.db
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Pogues\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Pogues\Pogue Mahone
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Pogues\Pogue Mahone\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Pogues\Pogue Mahone\AlbumArt_{7451AB3C-CD10-4F7E-898B-4DCAC3CC79DF}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Pogues\Pogue Mahone\AlbumArt_{7451AB3C-CD10-4F7E-898B-4DCAC3CC79DF}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Pogues\Pogue Mahone\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Pogues\Pogue Mahone\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Police\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Police\The Police
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Police\The Police\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Police\The Police\AlbumArt_{D0FE1530-1087-410E-8ED9-91B4988192B3}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Police\The Police\AlbumArt_{D0FE1530-1087-410E-8ED9-91B4988192B3}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Police\The Police\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Police\The Police\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Posies\Every Kind of Light
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Posies\Every Kind of Light\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Posies\Every Kind of Light\AlbumArt_{81244B04-70BE-47F1-9A5E-2026093D598F}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Posies\Every Kind of Light\AlbumArt_{81244B04-70BE-47F1-9A5E-2026093D598F}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Posies\Every Kind of Light\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\the pussycat dolls\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\the pussycat dolls\PCD
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\the pussycat dolls\PCD\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\the pussycat dolls\PCD\AlbumArt_{57F3A7F1-00BB-4F90-B59C-C12C1771FEDC}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\the pussycat dolls\PCD\AlbumArt_{57F3A7F1-00BB-4F90-B59C-C12C1771FEDC}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\the pussycat dolls\PCD\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\the pussycat dolls\PCD\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Rolling Stones\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Rolling Stones\The Rolling Stones (England's Newest Hit Makers)
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Rolling Stones\Through the Past, Darkly (Big Hits, Vol. 2)
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Rolling Stones\The Rolling Stones (England's Newest Hit Makers)\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Rolling Stones\The Rolling Stones (England's Newest Hit Makers)\AlbumArt_{434D98C7-B439-4AE9-83A4-6EEA1991C3A3}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Rolling Stones\The Rolling Stones (England's Newest Hit Makers)\AlbumArt_{434D98C7-B439-4AE9-83A4-6EEA1991C3A3}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Rolling Stones\The Rolling Stones (England's Newest Hit Makers)\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Rolling Stones\The Rolling Stones (England's Newest Hit Makers)\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Rolling Stones\Through the Past, Darkly (Big Hits, Vol. 2)\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Rolling Stones\Through the Past, Darkly (Big Hits, Vol. 2)\AlbumArt_{BDF5030E-DB6C-45EA-BBF0-09A1C83CDE88}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Rolling Stones\Through the Past, Darkly (Big Hits, Vol. 2)\AlbumArt_{BDF5030E-DB6C-45EA-BBF0-09A1C83CDE88}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Rolling Stones\Through the Past, Darkly (Big Hits, Vol. 2)\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Rolling Stones\Through the Past, Darkly (Big Hits, Vol. 2)\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Verve\Cruel Intentions
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Verve\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Verve\Cruel Intentions\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Verve\Cruel Intentions\AlbumArt_{8D2ED76A-CE29-4F22-99E4-F6D4912B72BE}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Verve\Cruel Intentions\AlbumArt_{8D2ED76A-CE29-4F22-99E4-F6D4912B72BE}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Verve\Cruel Intentions\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\The Verve\Cruel Intentions\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\timbaland\Timbaland Presents Shock Value
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\timbaland\Timbaland Presents Shock Value\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\timbaland\Timbaland Presents Shock Value\AlbumArt_{CE3D377F-3069-4C47-90AD-43020456D2E0}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\timbaland\Timbaland Presents Shock Value\AlbumArt_{CE3D377F-3069-4C47-90AD-43020456D2E0}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\timbaland\Timbaland Presents Shock Value\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\timbaland\Timbaland Presents Shock Value\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Tina Turner\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Tina Turner\Simply the Best
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Tina Turner\Simply the Best\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Tina Turner\Simply the Best\AlbumArt_{5E22B0A5-F215-4A4D-97FA-150C8D61BDCF}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Tina Turner\Simply the Best\AlbumArt_{5E22B0A5-F215-4A4D-97FA-150C8D61BDCF}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Tina Turner\Simply the Best\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Tina Turner\Simply the Best\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\TLC\Collections
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\TLC\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\TLC\Collections\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\TLC\Collections\AlbumArt_{78D377FC-F814-4914-969D-AE9C0CE30ABD}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\TLC\Collections\AlbumArt_{78D377FC-F814-4914-969D-AE9C0CE30ABD}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\TLC\Collections\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\TLC\Collections\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Toten Hosen\1986 - Damenwahl
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Toten Hosen\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Toten Hosen\1986 - Damenwahl\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Toten Hosen\1986 - Damenwahl\AlbumArt_{63CC3D70-D39C-4374-B0CF-4AA8F904A61F}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Toten Hosen\1986 - Damenwahl\AlbumArt_{63CC3D70-D39C-4374-B0CF-4AA8F904A61F}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Toten Hosen\1986 - Damenwahl\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\T\Toten Hosen\1986 - Damenwahl\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\UB40
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\Unbekannter Interpret
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2\AlbumArt_{3F06BFCE-7CA9-403B-A5B2-D47DDFF4DA4A}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2\AlbumArt_{3F06BFCE-7CA9-403B-A5B2-D47DDFF4DA4A}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2\The Best of 1980-1990
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2\U218 Singles
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2\The Best of 1980-1990\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2\The Best of 1980-1990\AlbumArt_{68010DC8-A746-4AEF-A6D7-4D1F9F7BDB06}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2\The Best of 1980-1990\AlbumArt_{68010DC8-A746-4AEF-A6D7-4D1F9F7BDB06}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2\The Best of 1980-1990\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2\The Best of 1980-1990\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2\U218 Singles\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2\U218 Singles\AlbumArt_{3F06BFCE-7CA9-403B-A5B2-D47DDFF4DA4A}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2\U218 Singles\AlbumArt_{3F06BFCE-7CA9-403B-A5B2-D47DDFF4DA4A}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\U2\U218 Singles\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\UB40\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\UB40\Promises and Lies
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\UB40\Promises and Lies\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\UB40\Promises and Lies\AlbumArt_{4877650F-534A-415A-8EAF-AC4D6F8BD148}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\UB40\Promises and Lies\AlbumArt_{4877650F-534A-415A-8EAF-AC4D6F8BD148}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\UB40\Promises and Lies\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\UB40\Promises and Lies\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\Unbekannter Interpret\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\Unbekannter Interpret\Greatest Hits, Vol. 2
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\Unbekannter Interpret\The Freddie Mercury Album
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\Unbekannter Interpret\Greatest Hits, Vol. 2\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\Unbekannter Interpret\Greatest Hits, Vol. 2\AlbumArt_{820C1FC3-8C1F-47B9-80D9-F7FE4F5BA938}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\Unbekannter Interpret\Greatest Hits, Vol. 2\AlbumArt_{820C1FC3-8C1F-47B9-80D9-F7FE4F5BA938}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\Unbekannter Interpret\Greatest Hits, Vol. 2\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\Unbekannter Interpret\Greatest Hits, Vol. 2\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\Unbekannter Interpret\The Freddie Mercury Album\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\Unbekannter Interpret\The Freddie Mercury Album\AlbumArt_{1AEE3753-5420-4785-8816-13C3F70777EF}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\Unbekannter Interpret\The Freddie Mercury Album\AlbumArt_{1AEE3753-5420-4785-8816-13C3F70777EF}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\Unbekannter Interpret\The Freddie Mercury Album\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\Unbekannter Interpret\The Freddie Mercury Album\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep\summer of love
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep\us5
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep\summer of love\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep\summer of love\AlbumArt_{D1974790-66DC-4D8C-A2C8-559B29A93DE5}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep\summer of love\AlbumArt_{D1974790-66DC-4D8C-A2C8-559B29A93DE5}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep\summer of love\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep\summer of love\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep\us5\Usher
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep\us5\Usher\Confessions
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep\us5\Usher\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep\us5\Usher\Confessions\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep\us5\Usher\Confessions\AlbumArt_{649EC46E-839C-4AF3-AA8D-0AF5F5ABED83}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep\us5\Usher\Confessions\AlbumArt_{649EC46E-839C-4AF3-AA8D-0AF5F5ABED83}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep\us5\Usher\Confessions\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\U\uriaha heep\us5\Usher\Confessions\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\40 Hits  1995-1998 Disc 1
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Billboard Top Hits of the 90's
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Bravo Hits 30
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Bravo Hits 33
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Casablanca Records Greatest Hits
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Das Ist Die NDW 4
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock 10 (disc 1)
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock 10 (disc 2)
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock Vol 21
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL. 12   DISC 1
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL. 12   DISC 2
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL.11
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL.15   CD2
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock, Vol. 13 Disc 1
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Lektionen in Demut
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Most Wanted  Latino Superstars
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Reggae (Media Markt Collection) - CD 1
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Scrubs Season 4
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\The World of Salsa 1
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\The World of salsa 2 Disc 2
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\40 Hits  1995-1998 Disc 1\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\40 Hits  1995-1998 Disc 1\AlbumArt_{5CAD32B3-E6B7-4A8C-A82E-20F1A43E2A25}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\40 Hits  1995-1998 Disc 1\AlbumArt_{5CAD32B3-E6B7-4A8C-A82E-20F1A43E2A25}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\40 Hits  1995-1998 Disc 1\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\40 Hits  1995-1998 Disc 1\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Billboard Top Hits of the 90's\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Billboard Top Hits of the 90's\AlbumArt_{0AC5E8E5-1276-4A04-BFAC-6B3E86ABE229}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Billboard Top Hits of the 90's\AlbumArt_{0AC5E8E5-1276-4A04-BFAC-6B3E86ABE229}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Billboard Top Hits of the 90's\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Billboard Top Hits of the 90's\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Bravo Hits 30\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Bravo Hits 30\AlbumArt_{A07B4F7A-1D9E-4B59-B65C-966ACCFE0043}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Bravo Hits 30\AlbumArt_{A07B4F7A-1D9E-4B59-B65C-966ACCFE0043}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Bravo Hits 30\AlbumArt_{D01A1CE0-1E1F-436D-9A12-509917711349}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Bravo Hits 30\AlbumArt_{D01A1CE0-1E1F-436D-9A12-509917711349}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Bravo Hits 30\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Bravo Hits 30\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Bravo Hits 33\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Bravo Hits 33\AlbumArt_{8C0A02B4-BE47-4AA3-82C2-ACC423783D1C}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Bravo Hits 33\AlbumArt_{8C0A02B4-BE47-4AA3-82C2-ACC423783D1C}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Bravo Hits 33\AlbumArt_{CF0CDD55-81FE-419E-BC65-E70BCF8F2BEF}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Bravo Hits 33\AlbumArt_{CF0CDD55-81FE-419E-BC65-E70BCF8F2BEF}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Bravo Hits 33\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Bravo Hits 33\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Casablanca Records Greatest Hits\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Casablanca Records Greatest Hits\AlbumArt_{854D372B-A863-4FE1-A53B-11EA74E9246A}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Casablanca Records Greatest Hits\AlbumArt_{854D372B-A863-4FE1-A53B-11EA74E9246A}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Casablanca Records Greatest Hits\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Casablanca Records Greatest Hits\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Das Ist Die NDW 4\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Das Ist Die NDW 4\AlbumArt_{4A96CAC0-BAD7-4B03-B072-E95FC96375D9}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Das Ist Die NDW 4\AlbumArt_{4A96CAC0-BAD7-4B03-B072-E95FC96375D9}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Das Ist Die NDW 4\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Das Ist Die NDW 4\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock 10 (disc 1)\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock 10 (disc 1)\AlbumArt_{54974CF4-A019-4906-ACB0-976C825AF335}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock 10 (disc 1)\AlbumArt_{54974CF4-A019-4906-ACB0-976C825AF335}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock 10 (disc 1)\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock 10 (disc 1)\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock 10 (disc 2)\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock 10 (disc 2)\AlbumArt_{13ECA817-84F7-4765-A306-0BDA89384739}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock 10 (disc 2)\AlbumArt_{13ECA817-84F7-4765-A306-0BDA89384739}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock 10 (disc 2)\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock 10 (disc 2)\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock Vol 21\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock Vol 21\AlbumArt_{A44609A1-2FBA-4C01-8CA1-F3C11050539F}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock Vol 21\AlbumArt_{A44609A1-2FBA-4C01-8CA1-F3C11050539F}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock Vol 21\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock Vol 21\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL. 12   DISC 1\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL. 12   DISC 1\AlbumArt_{7E35E2AA-7C27-4A31-AB29-8A8D9FC965CB}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL. 12   DISC 1\AlbumArt_{7E35E2AA-7C27-4A31-AB29-8A8D9FC965CB}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL. 12   DISC 1\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL. 12   DISC 1\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL. 12   DISC 2\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL. 12   DISC 2\AlbumArt_{1AF64EF0-19DE-4633-8E17-C140F6E7D334}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL. 12   DISC 2\AlbumArt_{1AF64EF0-19DE-4633-8E17-C140F6E7D334}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL. 12   DISC 2\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL. 12   DISC 2\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL.11\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL.11\AlbumArt_{B20585F1-04CE-4D49-9C99-37B4E0E653EB}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL.11\AlbumArt_{B20585F1-04CE-4D49-9C99-37B4E0E653EB}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL.11\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL.11\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL.15   CD2\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL.15   CD2\AlbumArt_{3FBD3B8F-5FAE-4C5D-9E3B-1964DE6556C3}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL.15   CD2\AlbumArt_{3FBD3B8F-5FAE-4C5D-9E3B-1964DE6556C3}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL.15   CD2\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\KUSCHELROCK VOL.15   CD2\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock, Vol. 13 Disc 1\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock, Vol. 13 Disc 1\AlbumArt_{275EBB61-2F7D-48EC-9639-BEE5255F3DE8}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock, Vol. 13 Disc 1\AlbumArt_{275EBB61-2F7D-48EC-9639-BEE5255F3DE8}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock, Vol. 13 Disc 1\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Kuschelrock, Vol. 13 Disc 1\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Lektionen in Demut\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Lektionen in Demut\AlbumArt_{8C0A02B4-BE47-4AA3-82C2-ACC423783D1C}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Lektionen in Demut\AlbumArt_{8C0A02B4-BE47-4AA3-82C2-ACC423783D1C}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Lektionen in Demut\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Lektionen in Demut\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Most Wanted  Latino Superstars\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Most Wanted  Latino Superstars\AlbumArt_{71AFC4DE-388A-44D1-812C-EFBC71768CD0}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Most Wanted  Latino Superstars\AlbumArt_{71AFC4DE-388A-44D1-812C-EFBC71768CD0}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Most Wanted  Latino Superstars\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Most Wanted  Latino Superstars\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Reggae (Media Markt Collection) - CD 1\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Reggae (Media Markt Collection) - CD 1\AlbumArt_{CF9FCF05-40E9-454B-BA1F-B42655167F83}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Reggae (Media Markt Collection) - CD 1\AlbumArt_{CF9FCF05-40E9-454B-BA1F-B42655167F83}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Reggae (Media Markt Collection) - CD 1\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Reggae (Media Markt Collection) - CD 1\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Scrubs Season 4\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Scrubs Season 4\AlbumArt_{403B2F2B-26E2-45D0-9E2C-967B2869D70F}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Scrubs Season 4\AlbumArt_{403B2F2B-26E2-45D0-9E2C-967B2869D70F}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Scrubs Season 4\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\Scrubs Season 4\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\The World of Salsa 1\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\The World of Salsa 1\AlbumArt_{00000000-0000-0000-0000-000000000000}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\The World of Salsa 1\AlbumArt_{00000000-0000-0000-0000-000000000000}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\The World of Salsa 1\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\The World of Salsa 1\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\The World of salsa 2 Disc 2\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\The World of salsa 2 Disc 2\AlbumArt_{00000000-0000-0000-0000-000000000000}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\The World of salsa 2 Disc 2\AlbumArt_{00000000-0000-0000-0000-000000000000}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\The World of salsa 2 Disc 2\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\V\Various Artists\The World of salsa 2 Disc 2\Folder.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\W\AlbumArtSmall.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\W\AlbumArt_{04939267-EC6B-4A31-87B1-B6C1562C829C}_Large.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\W\AlbumArt_{04939267-EC6B-4A31-87B1-B6C1562C829C}_Small.jpg
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\W\desktop.ini
C:\$Recycle.Bin\S-1-5-21-588735612-334352253-2863246850-1000\$RLIENY9\W\Folder.jpg

Files to move or delete:
====================
C:\Users\Greta\AppData\Roaming\skype.dat

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-04 01:02

==================== End Of Log ============================

Alt 10.07.2013, 09:21   #7
ShinyAccount
 
GVU-Virus vollständig entfernt? - Standard

GVU-Virus vollständig entfernt?


Und die Addition:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-07-2013 01
Ran by Greta at 2013-07-09 22:40:45
Running from C:\Users\Greta\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
4500_G510nz_Help (x32 Version: 000.0.439.000)
4500G510nz (x32 Version: 000.0.439.000)
4500G510nz_Software_Min (x32 Version: 000.0.423.000)
64 Bit HP CIO Components Installer (Version: 7.2.8)
AdblockIE (x32 Version: 1.2)
Adobe Flash Player 10 Plugin (x32 Version: 10.0.42.34)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Reader 9.5.2 - Deutsch (x32 Version: 9.5.2)
Alps Pointing-device for VAIO
ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.1.85)
ArcSoft WebCam Companion 3 (x32 Version: 3.0.21.278)
ATI Catalyst Install Manager (Version: 3.0.769.0)
BufferChm (x32 Version: 130.0.331.000)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2010.0920.2143.37117)
Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0920.2143.37117)
Catalyst Control Center Graphics Full New (x32 Version: 2010.0920.2143.37117)
Catalyst Control Center Graphics Light (x32 Version: 2010.0920.2143.37117)
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0920.2143.37117)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0920.2143.37117)
Catalyst Control Center InstallProxy (x32 Version: 2010.0113.2257.41150)
Catalyst Control Center InstallProxy (x32 Version: 2010.0920.2143.37117)
Catalyst Control Center Localization All (x32 Version: 2010.0920.2143.37117)
CCC Help Chinese Standard (x32 Version: 2010.0920.2142.37117)
CCC Help Chinese Traditional (x32 Version: 2010.0920.2142.37117)
CCC Help Czech (x32 Version: 2010.0920.2142.37117)
CCC Help Danish (x32 Version: 2010.0920.2142.37117)
CCC Help Dutch (x32 Version: 2010.0920.2142.37117)
CCC Help English (x32 Version: 2010.0920.2142.37117)
CCC Help Finnish (x32 Version: 2010.0920.2142.37117)
CCC Help French (x32 Version: 2010.0920.2142.37117)
CCC Help German (x32 Version: 2010.0920.2142.37117)
CCC Help Greek (x32 Version: 2010.0920.2142.37117)
CCC Help Hungarian (x32 Version: 2010.0920.2142.37117)
CCC Help Italian (x32 Version: 2010.0920.2142.37117)
CCC Help Japanese (x32 Version: 2010.0920.2142.37117)
CCC Help Korean (x32 Version: 2010.0920.2142.37117)
CCC Help Norwegian (x32 Version: 2010.0920.2142.37117)
CCC Help Polish (x32 Version: 2010.0920.2142.37117)
CCC Help Portuguese (x32 Version: 2010.0920.2142.37117)
CCC Help Russian (x32 Version: 2010.0920.2142.37117)
CCC Help Spanish (x32 Version: 2010.0920.2142.37117)
CCC Help Swedish (x32 Version: 2010.0920.2142.37117)
CCC Help Thai (x32 Version: 2010.0920.2142.37117)
CCC Help Turkish (x32 Version: 2010.0920.2142.37117)
ccc-core-static (x32 Version: 2010.0920.2143.37117)
ccc-utility64 (Version: 2010.0920.2143.37117)
Corel WinDVD (x32 Version: 10.0.5.804)
D3DX10 (x32 Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
Destinations (x32 Version: 130.0.0.0)
DeviceDiscovery (x32 Version: 130.0.372.000)
DocMgr (x32 Version: 130.0.000.000)
DocProc (x32 Version: 13.0.0.0)
dows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (Version: 07/28/2009 6.2.0.9800)
Dropbox (HKCU Version: 2.0.22)
Einstellungen für VAIO-Inhaltsüberwachung (x32 Version: 2.6.0.11050)
Evernote (x32 Version: 3.5.0.545)
Fax (x32 Version: 130.0.418.000)
Free WAV to MP3 Converter (x32 Version: 1.0)
Free WMA to MP3 Converter 1.16 (x32)
GIMP 2.6.11 (x32 Version: 2.6.11)
Google Chrome (x32 Version: 27.0.1453.116)
Google Earth (x32 Version: 7.0.3.8542)
Google Update Helper (x32 Version: 1.3.21.145)
GPBaseService2 (x32 Version: 130.0.371.000)
HP Customer Participation Program 13.0 (Version: 13.0)
HP Document Manager 2.0 (Version: 2.0)
HP Imaging Device Functions 13.0 (Version: 13.0)
HP Officejet 4500 G510n-z (Version: 13.0)
HP Smart Web Printing 4.5 (Version: 4.5)
HP Solution Center 13.0 (Version: 13.0)
HP Update (x32 Version: 4.000.011.006)
HPProductAssistant (x32 Version: 130.0.371.000)
HPSSupply (x32 Version: 130.0.371.000)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel(R) Rapid Storage Technology (x32 Version: 9.5.4.1001)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.00.01.1002)
IPTInstaller (x32 Version: 4.0.4)
Java Auto Updater (x32 Version: 2.0.7.2)
Java(TM) 6 Update 16 (64-bit) (Version: 6.0.160)
Java(TM) 6 Update 38 (x32 Version: 6.0.380)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
MAGIX Online Druck Service (x32 Version: 3.4.3.0)
MAGIX Screenshare (x32 Version: 4.3.6.1987)
MarketResearch (x32 Version: 130.0.374.000)
Media Gallery (x32 Version: 1.1.1.11200)
Mesh Runtime (x32 Version: 15.4.5722.2)
Messenger Companion (x32 Version: 15.4.3502.0922)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook Connector (x32 Version: 14.0.5118.5000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (x32 Version: 14.0.5120.5000)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft SQL Server Compact 3.5 SP1 English (x32 Version: 3.5.5692.0)
Microsoft SQL Server Compact 3.5 SP1 x64 English (Version: 3.5.5692.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Movie2KDownloader (x32 Version: 2.1 Build 26473)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MusicStation (x32 Version: 2.0.4.1199)
Network64 (Version: 130.0.374.000)
Network64 (Version: 140.0.221.000)
Norton Online Backup (x32 Version: 1.2.20.0)
OCR Software by I.R.I.S. 13.0 (Version: 13.0)
PMB (x32 Version: 5.0.00.10260)
PMB VAIO Edition Plug-in (Version: 1.5.10.05300)
PMB VAIO Edition Plug-in (x32 Version: 1.5.10.06150)
Quick Web Access (x32 Version: 1.4.7.0)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.5992)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5992)
Roxio Central Audio (x32 Version: 3.8.0)
Roxio Central Copy (x32 Version: 3.8.0)
Roxio Central Core (x32 Version: 3.8.0)
Roxio Central Data (x32 Version: 3.8.0)
Roxio Central Tools (x32 Version: 3.8.0)
Roxio Easy Media Creator 10 LJ (x32 Version: 10.3)
Roxio Easy Media Creator Home (x32 Version: 10.3.183)
Scan (x32 Version: 13.0.0.0)
Setting Utility Series (x32 Version: 5.1.0.11200)
Setup_msm_VCMS_x64 (Version: 2.6.0.06040)
Setup_msm_VOFS_x64 (Version: 2.3.0.09270)
Shop for HP Supplies (Version: 13.0)
Skype Click to Call (x32 Version: 5.9.9216)
Skype™ 6.3 (x32 Version: 6.3.107)
SmartWebPrinting (x32 Version: 130.0.373.000)
SOHLib Merge Module (x32 Version: 2.2.0.11240)
SolutionCenter (x32 Version: 130.0.373.000)
Sony Home Network Library (x32 Version: 2.0.1.10160)
Sony Home Network Library (x32 Version: 2.2.0.11240)
Spotify (HKCU Version: 0.9.0.133.gd18ed589)
Status (x32 Version: 130.0.373.000)
Toolbox (x32 Version: 130.0.648.000)
TrayApp (x32 Version: 130.0.376.000)
Trend Micro Titanium (Version: 5.00)
Trend Micro Titanium Maximum Security 2012 (Version: 5.4)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft Office 2010 (KB2494150) (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
VAIO - PMB VAIO Edition Guide (x32 Version: 1.5.00.03020)
VAIO - PMB VAIO Edition Plug-in (x32 Version: 1.6.10.11160)
VAIO Care (x32 Version: 6.4.2.11150)
VAIO Content Metadata Intelligent Analyzing Manager (Version: 3.9.20.08110)
VAIO Content Metadata Intelligent Analyzing Manager (x32 Version: 3.6.0.09250)
VAIO Content Metadata Intelligent Network Service Manager (Version: 3.9.20.08110)
VAIO Content Metadata Manager Settings (Version: 3.9.20.08110)
VAIO Content Metadata XML Interface Library (Version: 3.9.20.08110)
VAIO Control Center (x32 Version: 4.1.1.07160)
VAIO Data Restore Tool (x32 Version: 1.2.0.09150)
VAIO DVD Menu Data (x32 Version: 2.4.00.05300)
VAIO Energie Verwaltung (x32 Version: 5.0.0.11300)
VAIO Event Service (x32 Version: 5.1.0.12010)
VAIO Gate (x32 Version: 2.4.1.09230)
VAIO Gate Default (x32 Version: 1.0.0.10290)
VAIO Hardware Diagnostics (x32 Version: 3.9.1)
VAIO Marketing Tools (x32)
VAIO Media plus (x32 Version: 2.0.1.10160)
VAIO Media plus Opening Movie (x32 Version: 1.2.0.09100)
VAIO Movie Story Template Data (x32 Version: 2.0.00.09240)
VAIO Movie Story Template Data (x32 Version: 2.5.00.05300)
VAIO Original Funktion Einstellungen (x32 Version: 2.3.0.11240)
VAIO Personalization Manager (Version: 3.0.2.05260)
VAIO Premium Partners (x32 Version: 1.0)
VAIO screensaver (x32 Version: 1.0.0.0)
VAIO Smart Network (x32 Version: 3.3.1.08110)
VAIO Update (x32 Version: 6.1.1.10250)
VAIO Wallpaper Contents (x32 Version: 2.0.0.06010)
VAIO-Support für Übertragungen (x32 Version: 1.1.2.06030)
VU5x64 (Version: 1.1.0)
VU5x86 (x32 Version: 1.0.0)
VU5x86 (x32 Version: 1.1.0)
WebReg (x32 Version: 130.0.132.017)
WIDCOMM Bluetooth Software (Version: 6.2.1.500)
Windows Driver Package - Broadcom Bluetooth  (09/09/2009 6.2.0.9405) (Version: 09/09/2009 6.2.0.9405)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Family Safety (Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.01 (64-Bit) (Version: 4.01.0)

==================== Restore Points  =========================

12-06-2013 01:00:22 Windows Update
17-06-2013 07:33:26 Windows Update
24-06-2013 22:49:21 Geplanter Prüfpunkt
02-07-2013 20:50:06 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {00577224-491A-45FE-A0CB-B54B501A703D} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-09-23] (Sony Corporation)
Task: {02806EB0-23BA-4933-A823-DC16769823BB} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation)
Task: {057CB34C-3A08-425C-9DE3-BE48071F6461} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {387F2E0A-E359-454E-A684-7708271CA959} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2011-09-23] (Sony Corporation)
Task: {3B8CF97E-A751-46F3-A37E-40C94BFCAF10} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {4774CDAB-9A9B-4163-B1FA-FFF1597C069A} - System32\Tasks\User_Feed_Synchronization-{45ABB9B0-7FC6-411E-999B-5752CC8C1324} => C:\Windows\system32\msfeedssync.exe [2013-03-29] (Microsoft Corporation)
Task: {611A41F6-5BAF-47CD-BB50-72EBCFDF59AA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-03-11] (Google Inc.)
Task: {6AFB4495-CC58-49E8-BE69-D4924A40A41C} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate Restart => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-09-23] (Sony Corporation)
Task: {7781E724-749E-41C4-AD2A-6F6654A12137} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-03-11] (Google Inc.)
Task: {790EBDAB-9B41-4F3F-AF38-644B141CEDF6} - System32\Tasks\SONY\SUS-BCF\Level4Daily => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2009-11-20] (Sony Corporation)
Task: {82F9C2A1-440A-4860-89BE-1783FDDAB16D} - System32\Tasks\{491D34DF-C50A-456E-AAC9-EF0BC85B9E80} => C:\Program Files (x86)\Internet Explorer\iexplore.exe [2013-05-17] (Microsoft Corporation)
Task: {84ABC82B-FFA0-40DF-B179-3CF840F37CD5} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation)
Task: {8E1D712A-6948-4307-826D-73119147A579} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation)
Task: {AA4DD9FD-7929-4A34-977C-48AF2845850B} - System32\Tasks\{E3BC7CB9-51FA-4185-BBFC-0531932C59D5} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-04-19] (Skype Technologies S.A.)
Task: {ADE50AA2-0662-42D4-8BAD-308CF17A9904} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2012-10-26] (Sony Corporation)
Task: {B1A74CDF-E090-447D-A5CE-26613373FB73} - System32\Tasks\SONY\SUS-BCF\Level4Month => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2009-11-20] (Sony Corporation)
Task: {B2761D35-1E49-4758-88B8-DD780E1F950E} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2012-10-26] (Sony Corporation)
Task: {BAC7157B-0EDD-48DE-A127-57A3E20CCE67} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation)
Task: {CA49B703-4470-464F-9482-642EEB4F0912} - System32\Tasks\User_Feed_Synchronization-{0E626F3C-8A24-4FFB-84FD-07195C3D7244} => C:\Windows\system32\msfeedssync.exe [2013-03-29] (Microsoft Corporation)
Task: {E3E53E78-D9C5-482A-AEC1-D335D3B15EC7} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {F772DF24-E7F0-4B9C-AD5E-13ACB26809C6} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============

Name: Officejet 4500 G510n-z
Description: Officejet 4500 G510n-z
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Officejet 4500 G510n-z
Description: Officejet 4500 G510n-z
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/04/2013 11:52:23 PM) (Source: Application Hang) (User: )
Description: Programm MovieMaker.exe, Version 15.4.3555.308 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1898

Startzeit: 01ce7900315c138c

Endzeit: 55

Anwendungspfad: C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe

Berichts-ID: fb62782f-e4f3-11e2-b548-f07bcbe0806e

Error: (07/04/2013 10:55:26 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (07/03/2013 00:29:39 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (06/23/2013 06:41:52 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: obyxf.exe, Version: 9.3.0.113, Zeitstempel: 0x51a37fc7
Name des fehlerhaften Moduls: obyxf.exe, Version: 9.3.0.113, Zeitstempel: 0x51a37fc7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00020c2a
ID des fehlerhaften Prozesses: 0xd14
Startzeit der fehlerhaften Anwendung: 0xobyxf.exe0
Pfad der fehlerhaften Anwendung: obyxf.exe1
Pfad des fehlerhaften Moduls: obyxf.exe2
Berichtskennung: obyxf.exe3

Error: (06/23/2013 06:41:05 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: obyxf.exe, Version: 9.3.0.113, Zeitstempel: 0x51a37fc7
Name des fehlerhaften Moduls: obyxf.exe, Version: 9.3.0.113, Zeitstempel: 0x51a37fc7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003fbd0
ID des fehlerhaften Prozesses: 0xd14
Startzeit der fehlerhaften Anwendung: 0xobyxf.exe0
Pfad der fehlerhaften Anwendung: obyxf.exe1
Pfad des fehlerhaften Moduls: obyxf.exe2
Berichtskennung: obyxf.exe3

Error: (06/07/2013 00:32:56 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16576, Zeitstempel: 0x515e30fe
Name des fehlerhaften Moduls: YontooIEClient.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x5180963b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x74eee6f1
ID des fehlerhaften Prozesses: 0x3b50
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (06/03/2013 00:45:47 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16576, Zeitstempel: 0x515e30fe
Name des fehlerhaften Moduls: YontooIEClient.dll, Version: 1.10.1.0, Zeitstempel: 0x5180963b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008ff4
ID des fehlerhaften Prozesses: 0x12f4
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (05/14/2013 00:48:51 AM) (Source: Application Hang) (User: )
Description: Programm IEXPLORE.EXE, Version 10.0.9200.16537 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 38a8

Startzeit: 01ce502b9b5b7ec5

Endzeit: 56

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Berichts-ID:

Error: (05/09/2013 05:40:42 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: atieclxx.exe, Version: 6.14.11.1054, Zeitstempel: 0x4c98109e
Name des fehlerhaften Moduls: atiadlxx.dll, Version: 6.14.10.1054, Zeitstempel: 0x4c98087c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000001ec88
ID des fehlerhaften Prozesses: 0x694
Startzeit der fehlerhaften Anwendung: 0xatieclxx.exe0
Pfad der fehlerhaften Anwendung: atieclxx.exe1
Pfad des fehlerhaften Moduls: atieclxx.exe2
Berichtskennung: atieclxx.exe3

Error: (05/02/2013 03:09:44 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FlashUtil64_11_6_602_180_ActiveX.exe, Version: 11.6.602.180, Zeitstempel: 0x5130146c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000532d0
ID des fehlerhaften Prozesses: 0x108c
Startzeit der fehlerhaften Anwendung: 0xFlashUtil64_11_6_602_180_ActiveX.exe0
Pfad der fehlerhaften Anwendung: FlashUtil64_11_6_602_180_ActiveX.exe1
Pfad des fehlerhaften Moduls: FlashUtil64_11_6_602_180_ActiveX.exe2
Berichtskennung: FlashUtil64_11_6_602_180_ActiveX.exe3


System errors:
=============
Error: (07/09/2013 10:36:47 PM) (Source: DCOM) (User: )
Description: {005A3A96-BAC4-4B0A-94EA-C0CE100EA736}

Error: (07/09/2013 10:21:16 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.

Error: (07/08/2013 11:17:10 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 11:15:32 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 11:15:32 PM) (Source: DCOM) (User: )
Description: 1068fdPHost{D3DCB472-7261-43CE-924B-0704BD730D5F}

Error: (07/08/2013 11:15:32 PM) (Source: DCOM) (User: )
Description: 1068fdPHost{145B4335-FE2A-4927-A040-7C35AD3180EF}

Error: (07/08/2013 06:24:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 06:24:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 06:24:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 06:24:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068


Microsoft Office Sessions:
=========================
Error: (07/04/2013 11:52:23 PM) (Source: Application Hang)(User: )
Description: MovieMaker.exe15.4.3555.308189801ce7900315c138c55C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exefb62782f-e4f3-11e2-b548-f07bcbe0806e

Error: (07/04/2013 10:55:26 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\Users\Greta\downloads\SoftonicDownloader_fuer_magix-foto-manager.exe

Error: (07/03/2013 00:29:39 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\Greta\Downloads\SoftonicDownloader_fuer_magix-foto-manager.exe

Error: (06/23/2013 06:41:52 PM) (Source: Application Error)(User: )
Description: obyxf.exe9.3.0.11351a37fc7obyxf.exe9.3.0.11351a37fc7c000000500020c2ad1401ce70306eb81a5dC:\Users\Greta\AppData\Roaming\Odaqzu\obyxf.exeC:\Users\Greta\AppData\Roaming\Odaqzu\obyxf.exece46423b-dc23-11e2-a78f-f07bcbe0806e

Error: (06/23/2013 06:41:05 PM) (Source: Application Error)(User: )
Description: obyxf.exe9.3.0.11351a37fc7obyxf.exe9.3.0.11351a37fc7c00000050003fbd0d1401ce70306eb81a5dC:\Users\Greta\AppData\Roaming\Odaqzu\obyxf.exeC:\Users\Greta\AppData\Roaming\Odaqzu\obyxf.exeb25eb761-dc23-11e2-a78f-f07bcbe0806e

Error: (06/07/2013 00:32:56 AM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE10.0.9200.16576515e30feYontooIEClient.dll_unloaded0.0.0.05180963bc000000574eee6f13b5001ce6305c74159b5C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEYontooIEClient.dll07f3aadf-cef9-11e2-a64c-f07bcbe0806e

Error: (06/03/2013 00:45:47 AM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE10.0.9200.16576515e30feYontooIEClient.dll1.10.1.05180963bc000000500008ff412f401ce5fe2bf545041C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Program Files (x86)\Yontoo\YontooIEClient.dll2a054aaf-cbd6-11e2-b804-f07bcbe0806e

Error: (05/14/2013 00:48:51 AM) (Source: Application Hang)(User: )
Description: IEXPLORE.EXE10.0.9200.1653738a801ce502b9b5b7ec556C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Error: (05/09/2013 05:40:42 AM) (Source: Application Error)(User: )
Description: atieclxx.exe6.14.11.10544c98109eatiadlxx.dll6.14.10.10544c98087cc0000005000000000001ec8869401ce4bcfa426466fC:\Windows\system32\atieclxx.exeC:\Windows\system32\atiadlxx.dll38f220bd-b85a-11e2-bb83-f07bcbe0806e

Error: (05/02/2013 03:09:44 PM) (Source: Application Error)(User: )
Description: FlashUtil64_11_6_602_180_ActiveX.exe11.6.602.1805130146cntdll.dll6.1.7601.177254ec4aa8ec000000500000000000532d0108c01ce47361a68e3b8C:\Windows\System32\Macromed\Flash\FlashUtil64_11_6_602_180_ActiveX.exeC:\Windows\SYSTEM32\ntdll.dll8e1d8fb5-b329-11e2-9fd0-f07bcbe0806e


CodeIntegrity Errors:
===================================
  Date: 2011-05-18 23:54:30.186
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:30.106
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:29.936
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:29.736
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:29.576
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:29.446
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:29.356
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:28.936
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:28.636
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:28.216
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 37%
Total physical RAM: 3950.1 MB
Available physical RAM: 2460.54 MB
Total Pagefile: 7898.38 MB
Available Pagefile: 6084.51 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:454.63 GB) (Free:172.37 GB) NTFS (Disk=0 Partition=3)
Drive g: () (Removable) (Total:3.68 GB) (Free:3 GB) FAT32 (Disk=2 Partition=1)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: CE0CB71A)
Partition 1: (Not Active) - (Size=11 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=455 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 4 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)

==================== End Of Log ============================

Alt 10.07.2013, 10:52   #8
schrauber
/// the machine
/// TB-Ausbilder
 
GVU-Virus vollständig entfernt? - Standard

GVU-Virus vollständig entfernt?


Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 11.07.2013, 09:33   #9
ShinyAccount
 
GVU-Virus vollständig entfernt? - Standard

GVU-Virus vollständig entfernt?


Hi,
anbei die ComboFix.txt:
Combofix Logfile:
Code:
ATTFilter
ComboFix 13-07-09.01 - Greta 11.07.2013  10:08:11.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3950.2339 [GMT 2:00]
ausgeführt von:: c:\users\Greta\Desktop\ComboFix.exe
AV: Trend Micro Titanium Maximum Security 2012 *Disabled/Updated* {B7599298-8445-728A-A5C7-A26A082C8BDA}
SP: Trend Micro Titanium Maximum Security 2012 *Disabled/Updated* {0C38737C-A27F-7D04-9F77-991873ABC167}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\AutocompletePro
c:\program files (x86)\AutocompletePro\FireFoxExtension.exe
c:\program files (x86)\AutocompletePro\InstTracker.exe
c:\users\Greta\AppData\Roaming\.#
c:\users\Greta\AppData\Roaming\ie_util.exe
c:\users\Greta\AppData\Roaming\Odaqzu
c:\users\Greta\AppData\Roaming\Odaqzu\obyxf.exe
c:\users\Greta\AppData\Roaming\skype.dat
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-06-11 bis 2013-07-11  ))))))))))))))))))))))))))))))
.
.
2013-07-11 08:23 . 2013-07-11 08:23	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-07-09 20:37 . 2013-07-09 20:37	--------	d-----w-	C:\FRST
2013-07-04 20:17 . 2013-07-04 20:20	--------	d-----w-	C:\FFOutput
2013-07-04 20:17 . 2013-07-04 20:17	--------	d-----w-	c:\programdata\AskPartnerNetwork
2013-07-04 20:17 . 2013-07-04 20:17	--------	d-----w-	c:\program files (x86)\AskPartnerNetwork
2013-07-04 20:17 . 2013-07-04 20:17	--------	d-----w-	c:\programdata\APN
2013-07-04 20:14 . 2013-07-04 20:14	--------	d-----w-	c:\program files (x86)\FreeTime
2013-06-13 14:37 . 2013-07-02 20:54	--------	d-----w-	c:\users\Greta\AppData\Roaming\Exem
2013-06-13 14:37 . 2013-06-13 14:37	--------	d-----w-	c:\users\Greta\AppData\Roaming\Dauca
2013-06-11 20:05 . 2013-05-08 06:39	1910632	----a-w-	c:\windows\system32\drivers\tcpip.sys
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-12 17:11 . 2013-03-15 18:02	692104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-12 17:11 . 2013-03-15 18:02	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-02 13:08 . 2012-03-03 10:32	22240	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-04-13 05:49 . 2013-05-15 18:34	135168	----a-w-	c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 18:34	350208	----a-w-	c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 18:34	308736	----a-w-	c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 18:34	111104	----a-w-	c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 18:34	474624	----a-w-	c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 18:34	2176512	----a-w-	c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 19:34	1656680	----a-w-	c:\windows\system32\drivers\ntfs.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-04 22:12	130736	----a-w-	c:\users\Greta\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-04 22:12	130736	----a-w-	c:\users\Greta\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-04 22:12	130736	----a-w-	c:\users\Greta\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="c:\users\Greta\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-05-06 1105408]
"Spotify"="c:\users\Greta\AppData\Roaming\Spotify\Spotify.exe" [2013-05-06 4573184]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-04-19 18678376]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2009-11-20 284696]
"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2009-08-26 320880]
"NortonOnlineBackupReminder"="c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-06-17 538472]
"PMBVolumeWatcher"="c:\program files (x86)\Sony\PMB\PMBVolumeWatcher.exe" [2009-10-24 597792]
"MarketingTools"="c:\program files (x86)\Sony\Marketing Tools\MarketingTools.exe" [2010-06-25 26624]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-09-20 102400]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-07-31 38872]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-11 919008]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-09-17 254896]
.
c:\users\Greta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Greta\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-5-25 27776968]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-9-4 1081632]
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2009-12-01 20:03	98304	----a-w-	c:\windows\System32\VESWinlogon.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll c:\progra~3\browse~1\261339~1.144\{c16c1~1\browserprotect.dll c:\progra~3\browse~1\261249~1.132\{c16c1~1\browserprotect.dll
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 Amsp;Trend Micro Solution Platform;c:\program files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe;c:\program files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys;c:\windows\SYSNATIVE\Drivers\ANDROIDUSB.sys [x]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys;c:\windows\SYSNATIVE\DRIVERS\htcnprot.sys [x]
R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys;c:\windows\SYSNATIVE\drivers\Impcd.sys [x]
R3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
R3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [x]
R3 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [x]
R3 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [x]
R3 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [x]
R3 SpfService;VAIO Entertainment Common Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TVICHW64;TVICHW64;c:\windows\system32\DRIVERS\TVICHW64.SYS;c:\windows\SYSNATIVE\DRIVERS\TVICHW64.SYS [x]
R3 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [x]
R3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [x]
R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [x]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 tmevtmgr;tmevtmgr;c:\windows\system32\DRIVERS\tmevtmgr.sys;c:\windows\SYSNATIVE\DRIVERS\tmevtmgr.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 BrowserProtect;BrowserProtect;c:\programdata\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe;c:\programdata\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [x]
S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [x]
S2 regi;regi;c:\windows\system32\drivers\regi.sys;c:\windows\SYSNATIVE\drivers\regi.sys [x]
S2 rimspci;rimspci;c:\windows\system32\drivers\rimssne64.sys;c:\windows\SYSNATIVE\drivers\rimssne64.sys [x]
S2 risdsnpe;risdsnpe;c:\windows\system32\drivers\risdsne64.sys;c:\windows\SYSNATIVE\drivers\risdsne64.sys [x]
S2 SampleCollector;VAIO Care Performance Service;c:\program files\Sony\VAIO Care\VCPerfService.exe;c:\program files\Sony\VAIO Care\VCPerfService.exe [x]
S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe;c:\program files\Sony\VAIO Smart Network\VSNService.exe [x]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys;c:\windows\SYSNATIVE\DRIVERS\ArcSoftKsUFilter.sys [x]
S3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys;c:\windows\SYSNATIVE\drivers\btusbflt.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\drivers\SFEP.sys;c:\windows\SYSNATIVE\drivers\SFEP.sys [x]
S3 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe;c:\program files\Sony\VAIO Power Management\SPMService.exe [x]
S3 VCService;VCService;c:\program files\Sony\VAIO Care\VCService.exe;c:\program files\Sony\VAIO Care\VCService.exe [x]
S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update\VUAgent.exe;c:\program files\Sony\VAIO Update\VUAgent.exe [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-22 09:47	1165776	----a-w-	c:\program files (x86)\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-07-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-15 17:11]
.
2013-07-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-03-11 18:47]
.
2013-07-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-03-11 18:47]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-04 22:12	164016	----a-w-	c:\users\Greta\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-04 22:12	164016	----a-w-	c:\users\Greta\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-04 22:12	164016	----a-w-	c:\users\Greta\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-04 22:12	164016	----a-w-	c:\users\Greta\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-12-16 9636896]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-06-25 171520]
"XeroxEndeavorBackgroundTask"="xrWCbgnd.dll" [2009-07-14 58368]
"Trend Micro Titanium"="c:\program files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe" [2012-12-18 1304296]
"Trend Micro Client Framework"="c:\program files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe" [2012-02-27 213824]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.de/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} - hxxps://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
DPF: {E4CF4E86-D0DC-4864-8F0E-4F6EA2526334} - hxxp://img.ui-portal.de/webde/smartdrive/activex/gmxnet_osupload_2002.cab
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-Oddafyiqi - c:\users\Greta\AppData\Roaming\Duepiz\ytepe.exe
Wow6432Node-HKCU-Run-Liylbicyb - c:\users\Greta\AppData\Roaming\Odaqzu\obyxf.exe
Wow6432Node-HKCU-Run-IExplorer Util - c:\users\Greta\AppData\Roaming\ie_util.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-Apoint - c:\program files (x86)\Apoint\Apoint.exe
AddRemove-1ClickDownload - c:\program files (x86)\Movie2KDownloader.com\uninst.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\SampleCollector]
"ImagePath"="\"c:\program files\Sony\VAIO Care\VCPerfService.exe\" \"/service\" \"/sstates\" \"/sampleinterval=5000\" \"/procinterval=5\" \"/dllinterval=120\" \"/counter=\Processor(_Total)\% Processor Time:1/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1\" \"/counter=\Network Interface(*)\Bytes Total/sec:1\" \"/expandcounter=\Processor Information(*)\Processor Frequency:1\" \"/expandcounter=\Processor(*)\% Idle Time:1\" \"/expandcounter=\Processor(*)\% C1 Time:1\" \"/expandcounter=\Processor(*)\% C2 Time:1\" \"/expandcounter=\Processor(*)\% C3 Time:1\" \"/expandcounter=\Processor(*)\% Processor Time:1\" \"/directory=c:\programdata\Sony Corporation\VAIO Care\inteldata\""
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-07-11  10:29:59
ComboFix-quarantined-files.txt  2013-07-11 08:29
.
Vor Suchlauf: 14 Verzeichnis(se), 202.915.090.432 Bytes frei
Nach Suchlauf: 20 Verzeichnis(se), 203.902.869.504 Bytes frei
.
- - End Of File - - C05667BA5EEE7EA5882D0BB949D30159
--- --- ---
D41D8CD98F00B204E9800998ECF8427E

[/CODE]

Alt 11.07.2013, 10:58   #10
schrauber
/// the machine
/// TB-Ausbilder
 
GVU-Virus vollständig entfernt? - Standard

GVU-Virus vollständig entfernt?


Combofix-Skript
WARNUNG für die MITLESER:
Folgendes ComboFix Skript ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!

  • Lösche die vorhandene Combofix.exe von deinem Desktop und lade das Programm von folgenden Download-Spiegel neu herunter: Link
  • Speichere es erneut auf dem Desktop (nicht woanders hin, das ist wichtig)!
  • Drücke die Windows + R Taste --> notepad (hinein schreiben) --> OK
  • Kopiere nun den Text aus der folgenden Codebox komplett in das leere Textdokument.
    Code:
    ATTFilter
    Folder::
c:\users\Greta\AppData\Roaming\Exem
c:\users\Greta\AppData\Roaming\Dauca
  • Speichere dies als CFScript.txt auf deinem Desktop.
  • Wichtig: Stelle deine Anti Viren Software temporär ab. Dies kann ComboFix nämlich bei der Arbeit behindern.
    Danach wieder anstellen nicht vergessen!
  • Schließe alle laufenden Programme damit ComboFix ungehindert arbeiten kann.
  • Ziehe CFScript.txt in die ComboFix.exe wie in diesem Bild:
  • Mache nichts am Computer, bewege nicht die Maus über das ComboFix-Fenster oder klicke in dieses hinein. Dies kann dazu führen, dass ComboFix sich aufhängt.
  • Wenn ComboFix fertig ist wird es ein Log erstellen: C:\ComboFix.txt
    Bitte füge es hier als Antwort (in CODE-Tags mit dem #-Button des Editors) ein.

Hinweis:
Suspect:: und Collect::
Falls im Skript diese Anweisungen enthalten sind, sollen Dateien zur Analyse eingeschickt werden. Es erscheint eine Message-Box, nachdem Combofix fertig ist. Klicke OK und folge den Aufforderungen/Anweisungen, um die Dateien hochzuladen. Teile mir unbedingt mit, ob der Upload geklappt hat!


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST Log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 11.07.2013, 13:21   #11
ShinyAccount
 
GVU-Virus vollständig entfernt? - Standard

GVU-Virus vollständig entfernt?


Hier das ComboFix-Log:
Code:
ATTFilter
Combofix Logfile:


	
Code: 

 
ATTFilter


  

	
ComboFix 13-07-09.01 - Greta 11.07.2013  13:23:37.2.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3950.2400 [GMT 2:00]
ausgeführt von:: c:\users\Greta\Desktop\ComboFix.exe
Benutzte Befehlsschalter :: c:\users\Greta\Desktop\CFScript.txt
AV: Trend Micro Titanium Maximum Security 2012 *Disabled/Updated* {B7599298-8445-728A-A5C7-A26A082C8BDA}
SP: Trend Micro Titanium Maximum Security 2012 *Disabled/Updated* {0C38737C-A27F-7D04-9F77-991873ABC167}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Greta\AppData\Roaming\Dauca
c:\users\Greta\AppData\Roaming\Dauca\sapuy.nyi
c:\users\Greta\AppData\Roaming\Exem
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-06-11 bis 2013-07-11  ))))))))))))))))))))))))))))))
.
.
2013-07-11 11:36 . 2013-07-11 11:36	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-07-09 20:37 . 2013-07-09 20:37	--------	d-----w-	C:\FRST
2013-07-04 20:17 . 2013-07-04 20:20	--------	d-----w-	C:\FFOutput
2013-07-04 20:17 . 2013-07-04 20:17	--------	d-----w-	c:\programdata\AskPartnerNetwork
2013-07-04 20:17 . 2013-07-04 20:17	--------	d-----w-	c:\program files (x86)\AskPartnerNetwork
2013-07-04 20:17 . 2013-07-04 20:17	--------	d-----w-	c:\programdata\APN
2013-07-04 20:14 . 2013-07-04 20:14	--------	d-----w-	c:\program files (x86)\FreeTime
2013-06-11 20:05 . 2013-05-08 06:39	1910632	----a-w-	c:\windows\system32\drivers\tcpip.sys
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-12 17:11 . 2013-03-15 18:02	692104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-12 17:11 . 2013-03-15 18:02	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-02 13:08 . 2012-03-03 10:32	22240	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-04-13 05:49 . 2013-05-15 18:34	135168	----a-w-	c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 18:34	350208	----a-w-	c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 18:34	308736	----a-w-	c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 18:34	111104	----a-w-	c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 18:34	474624	----a-w-	c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 18:34	2176512	----a-w-	c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 19:34	1656680	----a-w-	c:\windows\system32\drivers\ntfs.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-04 22:12	130736	----a-w-	c:\users\Greta\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-04 22:12	130736	----a-w-	c:\users\Greta\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-04 22:12	130736	----a-w-	c:\users\Greta\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="c:\users\Greta\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-05-06 1105408]
"Spotify"="c:\users\Greta\AppData\Roaming\Spotify\Spotify.exe" [2013-05-06 4573184]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-04-19 18678376]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2009-11-20 284696]
"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2009-08-26 320880]
"NortonOnlineBackupReminder"="c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-06-17 538472]
"PMBVolumeWatcher"="c:\program files (x86)\Sony\PMB\PMBVolumeWatcher.exe" [2009-10-24 597792]
"MarketingTools"="c:\program files (x86)\Sony\Marketing Tools\MarketingTools.exe" [2010-06-25 26624]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-09-20 102400]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-07-31 38872]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-11 919008]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-09-17 254896]
.
c:\users\Greta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Greta\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-5-25 27776968]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-9-4 1081632]
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2009-12-01 20:03	98304	----a-w-	c:\windows\System32\VESWinlogon.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll c:\progra~3\browse~1\261339~1.144\{c16c1~1\browserprotect.dll c:\progra~3\browse~1\261339~1.144\{c16c1~1\browserprotect.dll c:\progra~3\browse~1\261249~1.132\{c16c1~1\browserprotect.dll
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 Amsp;Trend Micro Solution Platform;c:\program files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe;c:\program files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys;c:\windows\SYSNATIVE\Drivers\ANDROIDUSB.sys [x]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys;c:\windows\SYSNATIVE\DRIVERS\htcnprot.sys [x]
R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys;c:\windows\SYSNATIVE\drivers\Impcd.sys [x]
R3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
R3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [x]
R3 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [x]
R3 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [x]
R3 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [x]
R3 SpfService;VAIO Entertainment Common Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TVICHW64;TVICHW64;c:\windows\system32\DRIVERS\TVICHW64.SYS;c:\windows\SYSNATIVE\DRIVERS\TVICHW64.SYS [x]
R3 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [x]
R3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [x]
R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [x]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 tmevtmgr;tmevtmgr;c:\windows\system32\DRIVERS\tmevtmgr.sys;c:\windows\SYSNATIVE\DRIVERS\tmevtmgr.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 BrowserProtect;BrowserProtect;c:\programdata\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe;c:\programdata\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [x]
S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [x]
S2 regi;regi;c:\windows\system32\drivers\regi.sys;c:\windows\SYSNATIVE\drivers\regi.sys [x]
S2 rimspci;rimspci;c:\windows\system32\drivers\rimssne64.sys;c:\windows\SYSNATIVE\drivers\rimssne64.sys [x]
S2 risdsnpe;risdsnpe;c:\windows\system32\drivers\risdsne64.sys;c:\windows\SYSNATIVE\drivers\risdsne64.sys [x]
S2 SampleCollector;VAIO Care Performance Service;c:\program files\Sony\VAIO Care\VCPerfService.exe;c:\program files\Sony\VAIO Care\VCPerfService.exe [x]
S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe;c:\program files\Sony\VAIO Smart Network\VSNService.exe [x]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys;c:\windows\SYSNATIVE\DRIVERS\ArcSoftKsUFilter.sys [x]
S3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys;c:\windows\SYSNATIVE\drivers\btusbflt.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\drivers\SFEP.sys;c:\windows\SYSNATIVE\drivers\SFEP.sys [x]
S3 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe;c:\program files\Sony\VAIO Power Management\SPMService.exe [x]
S3 VCService;VCService;c:\program files\Sony\VAIO Care\VCService.exe;c:\program files\Sony\VAIO Care\VCService.exe [x]
S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update\VUAgent.exe;c:\program files\Sony\VAIO Update\VUAgent.exe [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-22 09:47	1165776	----a-w-	c:\program files (x86)\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-07-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-15 17:11]
.
2013-07-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-03-11 18:47]
.
2013-07-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-03-11 18:47]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-04 22:12	164016	----a-w-	c:\users\Greta\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-04 22:12	164016	----a-w-	c:\users\Greta\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-04 22:12	164016	----a-w-	c:\users\Greta\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-04 22:12	164016	----a-w-	c:\users\Greta\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-12-16 9636896]
"Apoint"="c:\program files (x86)\Apoint\Apoint.exe" [BU]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-06-25 171520]
"XeroxEndeavorBackgroundTask"="xrWCbgnd.dll" [2009-07-14 58368]
"Trend Micro Titanium"="c:\program files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe" [2012-12-18 1304296]
"Trend Micro Client Framework"="c:\program files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe" [2012-02-27 213824]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.de/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} - hxxps://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
DPF: {E4CF4E86-D0DC-4864-8F0E-4F6EA2526334} - hxxp://img.ui-portal.de/webde/smartdrive/activex/gmxnet_osupload_2002.cab
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
AddRemove-1ClickDownload - c:\program files (x86)\Movie2KDownloader.com\uninst.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\SampleCollector]
"ImagePath"="\"c:\program files\Sony\VAIO Care\VCPerfService.exe\" \"/service\" \"/sstates\" \"/sampleinterval=5000\" \"/procinterval=5\" \"/dllinterval=120\" \"/counter=\Processor(_Total)\% Processor Time:1/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1\" \"/counter=\Network Interface(*)\Bytes Total/sec:1\" \"/expandcounter=\Processor Information(*)\Processor Frequency:1\" \"/expandcounter=\Processor(*)\% Idle Time:1\" \"/expandcounter=\Processor(*)\% C1 Time:1\" \"/expandcounter=\Processor(*)\% C2 Time:1\" \"/expandcounter=\Processor(*)\% C3 Time:1\" \"/expandcounter=\Processor(*)\% Processor Time:1\" \"/directory=c:\programdata\Sony Corporation\VAIO Care\inteldata\""
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-07-11  13:41:21
ComboFix-quarantined-files.txt  2013-07-11 11:41
ComboFix2.txt  2013-07-11 08:30
.
Vor Suchlauf: 19 Verzeichnis(se), 203.685.158.912 Bytes frei
Nach Suchlauf: 20 Verzeichnis(se), 203.385.966.592 Bytes frei
.
- - End Of File - - ED4813DD389B50DEEBA783B2EB19A27A
         
 
--- --- ---
D41D8CD98F00B204E9800998ECF8427E
Hier ADW:
Code:
ATTFilter
# AdwCleaner v2.304 - Datei am 11/07/2013 um 13:57:01 erstellt
# Aktualisiert am 03/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Greta - GRETA-VAIO
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Greta\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****

Gestoppt & Gelöscht : BrowserProtect

***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Users\Greta\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Datei Gelöscht : C:\Users\Greta\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Gelöscht mit Neustart : C:\ProgramData\BrowserProtect
Ordner Gelöscht : C:\Program Files (x86)\AskPartnerNetwork
Ordner Gelöscht : C:\Program Files (x86)\Movie2KDownloader.com
Ordner Gelöscht : C:\ProgramData\APN
Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\AskPartnerNetwork
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Users\Greta\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\Greta\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Greta\AppData\Roaming\BrowserCompanion
Ordner Gelöscht : C:\Users\Greta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movie2KDownloader.com

***** [Registrierungsdatenbank] *****

Daten Gelöscht : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\261249~1.132\{c16c1~1\browserprotect.dll
Daten Gelöscht : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll
Daten Gelöscht : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\261339~1.144\{c16c1~1\browserprotect.dll
Daten Gelöscht : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\261339~1.144\{c16c1~1\browserprotect.dll
Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\AutocompleteProBHO
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\BabylonToolbar
Schlüssel Gelöscht : HKCU\Software\Blabbers
Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKCU\Software\5f288d9b36ebf10
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Movie2KDownloader
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wit4ie.WitBHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wit4ie.WitBHO.2
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\DeviceVM
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\5f288d9b36ebf10
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]

***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16611

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Google Chrome v27.0.1453.116

Datei : C:\Users\Greta\AppData\Local\Google\Chrome\User Data\Default\Preferences

Gelöscht [l.2002] : homepage = "hxxp://www.search.ask.com/?p2=%5EB2Z%5EYYYYYY%5EYY%5EDE&gct=hp&o=APN10977cr&apn_ptnr[...]

*************************

AdwCleaner[S1].txt - [5213 octets] - [11/07/2013 13:57:01]

########## EOF - C:\AdwCleaner[S1].txt - [5273 octets] ##########

Alt 11.07.2013, 13:26   #12
ShinyAccount
 
GVU-Virus vollständig entfernt? - Standard

GVU-Virus vollständig entfernt?


Hier JRT:
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.0.7 (07.11.2013:1)
OS: Windows 7 Home Premium x64
Ran by Greta on 11.07.2013 at 14:00:48,76
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\clsid\{80922ee0-8a76-46ae-95d5-bd3c3fe0708d}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{4134A95E-6FA7-482E-A3CB-12F78B77074A}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9D7E1BEC-0278-4151-8E53-4130416496A2}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\browserprotect"
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{005D71A7-27F2-47CD-B0F0-A9275815321D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{007C0053-8860-49B5-96E4-4778D72BC309}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{015F83AB-6532-4DD6-B4D0-8B0DA8B99386}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{018754B5-B44D-456D-8D6B-E7F4563C13C9}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{01ABC693-B6A3-435F-B63E-70D9CE1100F9}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{02051131-28EF-4E6A-875C-07D0A13BD4CF}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{021C5467-1014-45C8-9316-C01530988EB1}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{03477C17-64B8-4CFC-958D-01A75C57CB60}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{040A0735-CB2C-4A16-B170-7B7111129928}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{04B11E87-248E-4EB9-AB67-BC1599034B59}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{060D432F-39CD-4AF5-9F33-093BBACECB28}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{07963BF5-8D77-4260-B89C-099107F8A38B}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{07A89BF9-BEE0-4F9E-8607-87AE729A07DF}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{08244BE6-ED9F-4DA5-B719-4166A351E998}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{0BB1D9CD-BA2F-4F1B-BE11-FB6638CA6370}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{0C8B466E-E3C5-44F2-BECF-3FF7C08E1195}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{0F4464EC-761C-433A-BF0A-D4F0F86A3EF7}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{0FF109EA-817B-465F-89E9-10C1058AC4FE}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{109D354C-CB9C-445D-A703-DF1746E975E2}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{10D03EF7-13AE-4892-A414-AC85E0990722}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{11A03128-82D1-4822-A39A-DAB8BD462ECF}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{11F420C7-2535-4059-B693-87891C6D85CA}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{1205D8F9-893D-4B2B-96EA-50D16CEC48DD}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{127CBA57-DC85-4980-B51A-0EBE13847D86}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{12C84820-17D8-4582-8433-3949DA1CA8FB}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{12C86464-9EE9-4DC3-8298-668CEBA2E67B}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{13505662-AA1A-4101-833C-0562E4B311B8}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{149C7FD6-0BDC-41C0-ADB9-D78D01444361}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{15CA890B-2C91-4A2E-B0E2-61BB569DD1FD}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{15F212AA-2189-4173-9FE2-519B62A92046}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{17C53AFA-8483-4898-96A4-E7987EC60F05}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{188ED451-7AE9-49B1-9D0A-E64F4B6057B5}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{18CE83C0-03B9-4414-A424-A92E3CB732D5}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{193AC492-A484-47A6-9113-8DB2837C33F0}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{1A085CBB-A4A7-4C56-8177-F0771534BBCF}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{1A2A8AA1-148D-4831-993C-7565F5D6D381}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{1B747BD4-DFB6-4B5D-9B71-3CDC729E8B25}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{1BAF9247-FAC8-4F62-A0B8-FB5DDB287155}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{1C0402D7-20EF-4C94-B91C-7DE5605300B0}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{1F4A8D1C-08E5-4EBB-8485-42A750D264E5}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{20247239-0A60-4C2D-8012-88C5EEF146B5}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{2042787A-B440-496E-A612-867A1895BA59}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{2067A9B6-2248-41EB-95CF-815B17628EC1}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{22104829-0E9E-4877-AEF1-E7E3680A4268}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{2280E90B-7557-4494-95A8-F6527C3B8013}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{22B1FE82-00EE-43D6-BEFF-4E999D81F58D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{23299C04-2584-42CB-A400-62BDCECC5D9F}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{235C204F-11D7-44C6-ACEF-73349E22FD4E}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{237CBEF4-CCBD-4487-8C6C-780B23FEC92B}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{243B875C-6900-4092-80FE-08477EFB65CE}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{247FC735-170A-4BAC-BD4A-B7CDAD27B5A9}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{24B17F10-5C08-4C0A-8C43-573434802ED9}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{24C8C0C8-2277-49F0-A893-D7940CDBA17F}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{25451682-31DD-43F5-A7D0-76DE4BD0F88B}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{25EB8C54-7D9F-434A-BA50-3A67A4D96877}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{26E5657D-2780-402F-943B-588BD7A0C09D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{27661931-806C-4BE2-AE3F-7A46E6EA8C98}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{28CB65CB-AA7A-454F-B05D-F8914C4966E5}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{2A693FFA-CA24-4F18-9A63-D11EEB8E165E}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{2AB49878-AB8B-498E-BB03-FA50CDF05AFC}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{2CC166BF-C401-470A-936E-39590DFF4AF1}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{2D4830BF-D34F-479C-8927-6E9A811EC705}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{2D878B36-FF74-48E3-8878-E0D01A26D84A}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{2EA242F3-99C8-472A-B366-CC5DC7AA9704}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{2ED6E480-0083-4101-9DD2-AFBA99888D2E}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{2F10EB58-9DFB-4662-AFFA-C44EAC587355}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{303BE3BE-B615-4AE0-B8D2-75FCA04C6809}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{3208D45A-68D4-4669-9707-DD917CB67CBF}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{32D442AE-22F3-4FAD-810A-CBD98F97D343}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{35BD9AE0-DCE8-4BA9-8D90-9BEBE3091BDC}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{36168466-53DA-4F2C-B61C-20FED0109733}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{363FD209-AB46-4535-8309-2848478000BB}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{36AB6F38-B1B3-4B49-88BE-87371228C655}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{36BF4A46-EDFD-4B53-8DBA-740F845CD73E}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{3758BBF0-4172-4B2F-A418-A602D65314A1}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{378BA46A-48B1-4161-9A92-66BC6100DCD4}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{381FB282-3680-4521-8D49-736DB8C0D39B}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{38513B4C-8BB3-410E-AFA0-85E4633DFF11}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{38B05BE0-CF78-455C-9A76-65BBCA83D6F0}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{38BD9119-457D-4CA9-A455-63178EBFC74F}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{3A577054-6687-41BE-B85F-B7DD377051F9}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{3B08361A-D9DC-427D-8117-2F5E2BEF8B8F}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{3BAED220-47AA-4048-B6C3-CD5CD70FC51D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{3BC4EE07-8B61-4AA1-B74E-B0C3916BBFF8}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{3C127B41-982C-4EE2-A0AB-EBBDC561FDA6}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{3CD31B87-97CC-49DE-B92B-146C6F8D73E9}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{3D3241E6-9968-4381-A304-A5292710C4CF}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{3D490A8B-CD13-4335-B53E-1FC5C62238B4}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{3DB98836-227E-458D-BA38-110EF1643BE0}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{3E0F1913-3FD8-4F47-B07B-45A2C1754D81}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{3E28DBFA-91E9-4560-8802-2886809FFC18}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{41016DA0-40C0-49A0-B393-C7E40D87E6FF}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{415B4FCA-AB19-4E5D-B828-E50254CF3B57}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{431EF7FA-3615-4963-B9A0-261BD8B801F4}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{43F8204F-B66B-4FC4-848B-4CA602D789F7}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{45776503-EAC5-4899-89E6-75E52F33E283}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{461693F2-4CF2-4191-AD21-8F88EE827F27}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{469E166C-6D8E-4ED2-8859-9857404C7079}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{46BDC503-5BCE-4F23-A771-E7006B3D9E4A}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{479B4E8D-E96C-46FD-9BE7-F67A6C01DC9F}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{48141A5C-D3AE-4D24-84A4-461C5BBE64E3}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{4840F4BB-D4DF-4671-A4C9-3F38C087629B}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{4A62E986-62F2-421D-A8F6-DF9E196A9015}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{4C2D9717-875A-456E-9F10-E60A2554C385}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{4CD88630-4D68-4378-B6CA-FED1449A17B6}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{4CE832D1-2A1C-4387-B267-29BC68F8AA1F}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{4CFAD7AE-74A9-4422-A1EF-07C7CDEE48E2}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{4D293806-5109-4950-87BA-5410E798241D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{4E08B175-43F5-4474-867B-D1184E7A0F7C}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{4EDBA121-8681-43B3-BE88-86370E5B2F9A}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{50199797-03A9-4AA4-BE9A-592C1282E0A5}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{5023EC35-FCCE-4377-94F5-2F804840E757}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{50A3F7CE-13D3-430C-82C2-0829B2736B10}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{50D6937A-4C62-4C7F-83F1-D45BD8A4C500}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{5195A08D-9E05-47FF-A488-85B53CFDB0CD}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{51F5ACDD-C357-482E-B095-83615D92D8EB}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{5217FFED-25D4-4B9A-B01A-DB114C110CB9}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{5255CE20-0EF5-418E-91A5-73B7E352D8FC}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{56468F76-20E3-48E1-B57B-F212218EE0B4}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{5692077C-1CFF-4E26-8C13-DC2A04B1A27D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{586130A9-B0C3-4683-B517-97E4BDA5591B}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{597E5BE9-A748-4174-A531-9CCF8A64EE4A}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{59FC9A8B-1C0D-4F9C-888D-36DAE9683491}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{5AD97035-E41C-412A-A031-5FECB31F7518}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{5C0204E2-61D5-4CCE-AA12-929E9D06BAEA}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{5D8AB540-81AA-4271-A973-CC1F990EF63B}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{5DA2EE16-E9D7-468F-ABE4-FCB53BE940E1}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{5DC87871-FF36-406F-AAD4-BB9E99D6C110}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{5EBE84FB-FC9C-4DA4-8B44-7E225D0BA89E}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{60258CCE-0478-4EE8-95F6-25D2140FD45A}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{606D0C2B-B1AC-4072-A10D-659E0DBD7B64}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{60BC3A79-54B6-4614-A229-541EA3CAEEAC}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{621A8BB0-68D3-490D-9380-5EFEAAF35166}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{623F4F7D-22EE-45FE-8511-2ED92A7C8999}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{63CD25E6-65AC-4FFB-A8D9-1B151FAAD172}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{64A98039-9FF4-448D-B206-3E5209799DCD}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{64D95C6A-2FA2-4E36-8EC7-31662DB41D41}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{64DC450B-49CC-499F-99A9-C68F1722539A}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{64E47A8F-DEE1-4EAF-AEDC-6C23C79CDE4E}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{652A27B7-7688-422A-955D-5754CD4BBFC0}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{655E3E00-79B6-46BE-BDAF-8FED89603B74}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{65FF7590-6318-4B1C-A3F4-034D912AB53E}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{66243BD2-9D90-40CA-B041-7DD28113A89B}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{66A32D70-BEB2-40D0-A895-A03A872DBDAC}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{66AFFB11-EDCC-4645-AE2D-78649D9E239F}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{67258D7D-18C0-4FD0-8B1C-5E4419BBC721}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{67FD9C5F-46B4-404E-A69B-10210668350E}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{697CA5D9-5CF2-47FF-A5D9-84636A769DDD}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{6A6AFC6A-1A60-4732-A5D9-5606662A3E53}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{6AB63A64-AEF3-4715-9600-19C898D3A999}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{6B9C9C29-5640-4B19-A625-32C2099E8EA3}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{6BB4CAB0-FDD6-4AC4-8B7D-A6AFBEA8F77D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{6C715716-3CB0-4BD7-8D48-46F52F05AB1F}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{6C99D08B-2C9B-46F8-9846-27DE0008B552}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{6D150D58-4947-46CE-BFAA-7FD292CB35B8}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{6DF13918-5DC2-47AE-96A8-14C9F4176BAE}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{6E95298E-779D-4A90-93A9-605632AE9750}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{6F3070F6-A9AC-4715-AE9B-89BB5A645669}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{70648DA0-059E-4CB2-91F9-7B5B3D719523}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{7073CB6F-1E11-44F1-820C-EED4E2E969AC}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{723EFC4A-7077-4EE3-8E67-46F57D9458B1}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{7293E423-97D3-4984-A5FB-98488C6D8CBF}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{73A36E82-37D4-492F-8BA0-EF4A4FF1D460}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{7663C349-64E7-4ECA-AE71-5055CF2DA029}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{776987E3-0601-4476-B4B6-F507696895B3}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{77A7EBBC-628C-473E-A27B-118F85E16983}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{7916E0CB-A7D0-4EBA-A4D2-998E8953CF3F}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{799EA2E8-0985-499B-BE8B-293394FEADCF}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{7A17AFCE-5362-42FA-8CA1-C739C8D5F42F}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{7ADF414A-4A24-4AC5-9E71-2B4C94ACB2C6}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{7C05A6E2-89D7-403E-ADBA-42584ABD4567}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{7C3B7B3C-463E-45E7-8A85-9641903BB843}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{7DFCCB88-8600-4ED4-9B83-303222982F53}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{7FB5EEE2-FEF6-4CBF-BFFD-DC00A1BEEA24}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{8008DC5D-2F48-4B72-8644-9EE07D4D1053}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{80C0A622-F10C-4701-9D5A-1D30E377B836}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{80CFA483-379D-446D-B0F9-3871968F2159}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{81357C82-869E-479C-82D1-3DE2F4945EA3}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{81E839DC-27D4-443C-8EA0-17C323B740F0}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{81F22C78-8A95-471F-9BCA-309B5BFB59B9}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{8200D825-3BF8-482B-A0DC-495B54ADE3F3}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{8295F99C-BFD3-48AB-8849-BDE302ADC4CB}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{82D7C0E9-184F-4F2F-AE51-1FAC52C37C45}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{830840FD-1430-40D5-A0C8-8E28DB7BD471}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{835F6983-B5E1-4EBB-8A4F-A93C6A4AA6F0}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{8386CBC1-BFA5-4260-BBFA-9E3357A27B38}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{86055146-47D4-4517-967D-4A08E39B54C2}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{86485B4F-4869-43E6-8559-0A105AE7CCD5}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{88A60C94-9AA7-4672-B6E4-934C1185A40D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{89D775F4-A713-4843-8BA1-F27A6E25D857}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{89DA7042-339C-41E4-A7A2-83E5C21AF0B9}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{8A654AEF-D0AA-4CE0-985B-0423E79123C9}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{8AD52B57-588F-4C6A-996C-8542EBBF4923}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{8D2A7D2B-1218-45A3-B183-9EE13CF7D119}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{8E38DBF3-553E-4766-ABEC-92B5526377D1}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{8ED9AB92-E503-4B34-B4BA-7641703E2CB8}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{8F337EEA-C6CA-46A0-A4EB-BE9D33E3EF2D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{91465C92-4900-46CB-9C43-FD5B2B5F46B4}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{9160902C-3942-4414-BD46-B34BB3FF9F12}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{91761A36-4FE0-4BDF-A2A9-4D9C74396B6C}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{91C3664C-9A1E-4B3A-A88D-92B44B4F3E0D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{9203C9DC-65DA-4C49-AAC9-DF24C0D27F53}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{92E9C915-EDBD-4D18-A732-F853917AC46F}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{94499E11-EEB0-4F44-9DC9-7BBBD73492D5}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{954A3E30-4963-4719-829B-909C3422B97C}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{9584D977-E997-4AB8-83B5-4AC000BDFE11}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{96FC8050-B93B-406B-90CF-B082FE2EF277}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{990C4C27-2E6E-4A1D-BB6F-E1AE6517DB0D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{990C8495-BED5-48BE-9B85-8A543268F116}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{996C559F-5542-436E-B010-AB9C8B49C395}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{99966620-51C6-4A99-847D-127F3C774237}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{9CA49D50-EF1E-4AAF-9303-55FA96614C4A}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{9DACEA06-AD1C-44E4-B21A-16EB85254A61}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A0C0FE50-C5CB-4621-9ACB-4DE3AD7C6BE7}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A130005C-9811-4910-8287-144139A2CC24}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A3742363-0419-44F7-8030-C5962880A07F}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A37D6F8A-A68E-4505-8C10-ACC6864F668A}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A4399EFE-A2C3-4191-9978-CE451B08691C}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A51D0A81-92AE-4399-9351-053287A30B50}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A548E790-E556-40F9-8B06-1ECE541F2246}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A6199057-B915-4968-864A-D7C1A68061BE}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A65547A2-DBAB-41DD-85ED-B84E2447E897}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A66E369C-D269-4EA0-B6A3-8EEE64E483F8}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A68A6403-BECF-4B1F-8207-B880EFE24848}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A6B1467F-90EB-4227-A54F-13D9BF7F48F8}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A6CF6536-A86D-4AEA-8944-655E8FB6EDB5}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A729EBC3-E67D-4F48-82E2-0AF08D53386F}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A78CB11A-CD7E-4819-A528-468B100F81F8}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A8157F3F-1E8D-40D1-B67B-F8D1DD724386}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A8E8EAC5-74CB-4B88-94E2-0063E77FAF7A}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A8ED6F8E-ACEF-49B3-9CA9-1741864B9070}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A915168A-C30A-4F55-AF30-E647174051D5}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{A98EB205-84AB-45FE-BB7A-FA47B49CE53E}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{AA14AA05-E6DC-446E-A27C-81498961B4F2}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{AAFD3307-F376-49EC-AFD5-1142DB84E88E}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{AE4521A4-B99A-43B4-95F4-43497F956951}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{AF8579FC-3CE5-46A0-9D4A-8E12FBCA57AA}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{B046DE78-EDB5-4954-B085-566C67D2545D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{B089F4DA-E109-432F-8258-ABF557EF7A12}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{B19F17D9-7A46-41B9-B986-17785FB3B975}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{B2BC7EEB-A132-497E-B95C-8DCA207CBC45}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{B2FC2836-EAAC-4517-931C-18F3DF2BA451}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{B3FF01F7-B3A6-4F4B-9E6A-41DFEC7D7A45}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{B49DF564-F2B2-4A4E-9C71-AF341BD62489}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{B5BACAAA-4AE8-4502-B79B-A7BE74400273}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{B64BC849-D4F0-44DC-A03F-2135EC440B10}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{B6E425E9-DB16-46E5-A9F5-BECA133F744D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{B81F2A5B-7A39-4E17-B6FF-04D758D80253}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{BADA6552-C192-470F-9F66-72AA24BA9E64}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{BB22A897-5BE0-483C-9B84-BDD80BBAC400}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{BB9AE372-75D7-4678-9255-E9DDCC7E05A0}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{BC057D99-56BD-4AAC-ABAB-2A87061C2A83}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{BD072761-0DBC-4098-B588-897F769A699C}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{BD723F14-9FB5-41A4-AF26-54A66E5F2DA9}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{BDB814E7-87EE-4960-9FE2-1E430832EA0D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{BE72D1B4-E439-42DD-BA68-DC54E98A725C}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{BEB909F7-0C90-4AF1-A1A4-18673DF60A75}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{BFDD2BA6-26F3-4072-B7E8-5EA460141082}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{C009CEB1-C586-4495-BB64-A985A990606A}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{C057A966-51E1-49BD-B6EE-7145F1FA6008}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{C07056F4-8901-4F2A-8A5F-4B8EEAC18501}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{C1F63F38-2AC5-4E8C-B8B1-FCAB43650111}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{C21CBAB4-B624-4CD2-BF53-228206F99ABE}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{C30D768A-BFD7-4C31-B1B4-0EE639B11B3E}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{C3452A1F-2475-43E8-9FEB-AD2FBF8DFE8B}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{C36C7B0B-7CA3-4EA1-8706-F049F163AE6E}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{C40300B8-9AA5-4CD8-B771-8EFF9812683F}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{C423CB6E-CDCE-456F-82A5-139315E48987}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{C5F5F1E8-751C-4249-948B-354F96309F3A}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{C91C3AED-401B-4D6D-B51D-415648511174}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{C9D7E8DC-19A0-465A-9652-E75AF1145F48}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{CA9FAF5F-C5B0-48A0-BE33-577826BC35DE}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{CB4C505D-7C4A-4619-AAC9-7EB38BF31BDF}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{CB8BC0D2-AEAB-4901-AF62-B686A28B38A7}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{CB9DC8A3-8A70-4246-8A2E-8E10D1A570AB}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{CBD387F5-8AC1-47D0-AC24-E73809F44511}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{CBEFC86D-18B2-4878-BE53-E7246FFC3417}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{CCB206FA-2A71-4BA6-82D1-CC2D2532324E}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{CE3A1E54-6063-46DE-8EAF-A011BB33DCF6}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{CE7D8A2A-8761-4A83-9D78-FA92A474585D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{CEA87D8B-7091-43BB-B647-14F6B0A04BDC}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{CEDE48D2-64C7-4D74-8E3E-BB1C8B1F6F0F}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{CF7C043A-53D8-4965-97B7-1C68366AA600}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D00B482E-8AC8-474B-B373-4945A8AC349D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D0470540-3945-4A9B-8055-6A07EFB9D545}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D1321597-7682-4204-8878-3400575AFEA2}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D18D1A43-A236-443D-B3C4-F088A8306348}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D1EEEF60-833A-4E01-8B35-649EA4C92832}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D204EBE5-88E4-4DF3-9A5F-A5ADA985BBE6}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D2814872-C625-42FC-B024-B7AAEF9CFD2A}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D318FAE2-786A-4903-A89C-E9AB2FCAEAA9}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D3BE7518-A10E-4B35-88FF-A3E3CE6DFC7A}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D40661C1-182A-438E-8F85-82900134A72E}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D45C8205-4651-4092-ABA7-520735955711}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D5B779CF-4A1E-402E-ABA4-0500ED805294}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D601B23C-2479-4D51-8D93-DEE40CBD16E4}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D6CEAE54-EE9E-4B54-8B9A-3ED955839564}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D74D1453-3FE9-41A1-980E-3C910C6836CF}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D773677E-B561-4F35-9FC4-C55C52C93794}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D7AAB732-B2A5-4A45-9658-62636C13E438}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D7FF4F67-56D3-483A-B077-1052A87C6762}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D8882B40-B734-4588-B49E-97D07A9B4057}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D8B68C85-FA20-4688-8A93-C7679D44DB4D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D8F12393-2FEA-4BC9-89D8-5DA84D7A4F1D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D921D9A3-370D-432C-8B31-F4A47F8003A2}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D925D295-B617-434F-82C1-792E84877D1D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{D94C7286-51CF-4D08-AAA4-7EC41E8CBDCF}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{DA1B7DA5-6BC0-4A9C-A6BA-B08D5F46A74D}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{DA4803CF-A5CE-4EE6-BC73-B34C2136EDF0}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{DA86308F-E62E-4237-9A22-1B35521BC4A5}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{DAF60453-3495-4447-BC43-FAF1D484A20C}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{DCF1F530-023D-4AD8-9957-81E1F683C8B4}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{DD663F05-E0D6-4854-8DFC-1068C95F4F03}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{DDD44038-7662-44D5-AA49-9E5D326C0F63}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{DE5D9A76-4840-4FBB-B027-AEDFDCF10EDB}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{E0B60F57-9C08-4F19-906B-063F41C74F30}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{E0DE23FC-26EF-4694-8D07-C8B470AF32F5}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{E0FC809C-032C-4000-AC1E-4982F753E077}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{E200DE4C-DD26-4E3F-9FDB-13166095F7A7}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{E3486EE7-51A1-4C12-8A01-A4275DB1E895}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{E3D346A7-2BB9-4B0A-AFCD-4DFE3BEAD366}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{E4498B44-CA98-4988-AA2C-CE129A559FBF}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{E52907C2-9FBD-4043-B2B3-1876FF546B98}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{E5BF1381-1E65-433F-B792-E117A1683D9C}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{E603465F-FF71-4D11-9714-97828EB924DC}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{E63DEE51-D845-46AF-BB20-B29385447E8B}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{E86CDE07-7E13-4E02-9196-FF33B6E1CEE6}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{E8765044-3433-458F-A2E9-007834A715C1}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{E88A905F-D20E-4069-A2CE-B4B438067976}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{E8F2454C-8AD7-4953-892F-C5E03283A591}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{EA44C178-003D-4870-A2BB-878053AC971C}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{ECE17AFB-A1E0-4858-8383-D9D008EADDC9}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{ED7F9E5D-78FF-4BAA-8C90-B3DAF1574E74}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{EECEEC2C-A1DB-4625-8355-B9DCC6AF559C}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{EF37EEB3-D2AC-4D2D-AFE3-A57100C9F1D9}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{EFA189F2-7953-41C8-A9F1-A86DE14D97B9}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{EFCE325A-656A-4696-939D-E7D7EA18815C}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{F041732A-EC30-4679-BD48-D9076B80F817}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{F0DF0BEB-2B12-4D2F-999A-C5A6B2A6CB02}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{F133BB10-6769-4416-BBCB-656955618D62}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{F3A58D46-4F91-45A6-A6C5-81958585D8FF}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{F3F17C49-C71D-4FA2-A25F-FFBC39FFFEBD}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{F3F6BFC1-6AC3-457E-83E1-9C5BEC74FAB6}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{F52F6F7D-0A1F-4843-933B-59B04E8B7869}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{F55259EA-EF6E-47B3-ABED-F6800C2B851F}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{F586C350-71FF-44E0-9156-842394D7996C}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{F6CA3600-FB38-4BC3-8742-9EE7BE1192B1}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{F7556C0D-352D-4BD8-87BE-A1D5DD227F61}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{F75AA1F9-D78F-4B43-B4ED-B9C846A0601B}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{F85194E5-2EB4-481D-97D4-2CEE41844990}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{F9416F8B-9A36-4658-928A-F63242CD3285}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{FABBDB1B-95DD-4F1A-B0FF-C5BEAE3CDB45}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{FAFB2C64-DBB0-4D21-BD44-634075C97191}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{FC7E91A2-DFD0-46E9-8482-8405B0F07A23}
Successfully deleted: [Empty Folder] C:\Users\Greta\appdata\local\{FD6F2900-94D2-4867-8054-F247E1B311E0}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 11.07.2013 at 14:09:52,36
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Hier FRST:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-07-2013 01
Ran by Greta (administrator) on 11-07-2013 14:10:44
Running from C:\Users\Greta\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jusched.exe
(Spotify Ltd) C:\Users\Greta\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Dropbox, Inc.) C:\Users\Greta\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Sony Corporation) C:\Program Files (x86)\SONY\ISB Utility\ISBMgr.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBVolumeWatcher.exe
(Sony Corporation) C:\Program Files (x86)\SONY\Marketing Tools\MarketingTools.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [9636896 2009-12-16] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] - %ProgramFiles%\Apoint\Apoint.exe [208384 2009-11-04] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] - "C:\Program Files\Java\jre6\bin\jusched.exe" [171520 2010-06-25] (Sun Microsystems, Inc.)
HKLM\...\Run: [XeroxEndeavorBackgroundTask] - rundll32.exe xrWCbgnd.dll,LaunchBgTask 1 [x]
HKLM\...\Run: [Trend Micro Titanium] - "C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe" -set Silent "1" SplashURL "" [1304296 2012-12-18] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] - "C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe" [213824 2012-02-27] (Trend Micro Inc.)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,
HKCU\...\Run: [Spotify Web Helper] - "C:\Users\Greta\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [1105408 2013-05-06] (Spotify Ltd)
HKCU\...\Run: [Spotify] - "C:\Users\Greta\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart [4573184 2013-05-06] (Spotify Ltd)
HKCU\...\Run: [Skype] - "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [18678376 2013-04-19] (Skype Technologies S.A.)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-11-21] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] - "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" [320880 2009-08-26] (Sony Corporation)
HKLM-x32\...\Run: [NortonOnlineBackupReminder] - "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED [538472 2009-06-17] (Symantec Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [597792 2009-10-24] (Sony Corporation)
HKLM-x32\...\Run: [MarketingTools] - C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe [26624 2010-06-25] (Sony Corporation)
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [102400 2010-09-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [38872 2012-07-31] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [919008 2012-07-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [254896 2012-09-17] (Sun Microsystems, Inc.)
HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
AppInit_DLLs-x32: c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll [97280 2009-07-14] ()
Startup: C:\ProgramData\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Greta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Greta\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKCU - {238538B3-FF14-4E64-B9E5-919139626C59} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-0/4?satitle={searchTerms}
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {50744D17-57A6-445F-886A-52236C613712} URL = hxxp://de.shopping.com/?linkin_id=8056363
BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1361\6.8.1078\TmIEPlg.dll (Trend Micro Inc.)
BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1104\7.1.1104\TmBpIe64.dll (Trend Micro Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1361\6.8.1078\TmIEPlg32.dll (Trend Micro Inc.)
BHO-x32: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll No File
BHO-x32: TSToolbarBHO - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: af0.Adblock.BHO - {90EFF544-3981-4d46-85C9-C0361D0931D6} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1104\7.1.1104\TmBpIe32.dll (Trend Micro Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
DPF: HKLM-x32 {E4CF4E86-D0DC-4864-8F0E-4F6EA2526334} hxxp://img.ui-portal.de/webde/smartdrive/activex/gmxnet_osupload_2002.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1104\7.1.1104\TmBpIe64.dll (Trend Micro Inc.)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1361\6.8.1078\TmIEPlg.dll (Trend Micro Inc.)
Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} -  No File
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1104\7.1.1104\TmBpIe32.dll (Trend Micro Inc.)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1361\6.8.1078\TmIEPlg32.dll (Trend Micro Inc.)
Handler-x32: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR DefaultSearchURL: (Google) - hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
CHR DefaultSuggestURL: (Google) -       "suggest_url": ""
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll ()
CHR Plugin: (         "name": "",) - C:\Users\Greta\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf\1.0.5_0\chromeNPAPI.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U38) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Windows Live0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Trend Micro Titanium) - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension\components\npToolbarChrome.dll (Trend Micro Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.380.5) - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Trend Micro Toolbar) - C:\Users\Greta\AppData\Local\Google\Chrome\User Data\Default\Extensions\heoldelcflnigdllmlopiefhkkobendj\5.4.0.1034_0

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2012-10-08] ()
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-31] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-31] (Sonic Solutions)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation)
S2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad [x]

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [107048 2012-09-24] (Trend Micro Inc.)
R1 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [173504 2012-09-24] (Trend Micro Inc.)
R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [77184 2012-09-24] (Trend Micro Inc.)
R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [105744 2012-03-03] (Trend Micro Inc.)
S3 TVICHW64; C:\Windows\system32\DRIVERS\TVICHW64.SYS [21200 2011-03-11] (EnTech Taiwan)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-11-12] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
U2 TMAgent; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-11 14:09 - 2013-07-11 14:09 - 00038843 ____A C:\Users\Greta\Desktop\JRT.txt
2013-07-11 14:00 - 2013-07-11 14:00 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 14:00 - 2013-07-11 13:16 - 00559306 ____A (Oleg N. Scherbakov) C:\Users\Greta\Desktop\JRT.exe
2013-07-11 13:57 - 2013-07-11 13:57 - 00005336 ____A C:\AdwCleaner[S1].txt
2013-07-11 13:57 - 2013-07-11 13:57 - 00000097 ____A C:\Windows\DeleteOnReboot.bat
2013-07-11 13:41 - 2013-07-11 13:41 - 00024156 ____A C:\ComboFix.txt
2013-07-11 13:18 - 2013-07-11 13:42 - 00000000 ____D C:\Users\Greta\Desktop\Neuer Anti-Viren Kram
2013-07-11 13:18 - 2013-07-11 13:16 - 00650027 ____A C:\Users\Greta\Desktop\adwcleaner.exe
2013-07-11 10:04 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe
2013-07-11 10:04 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe
2013-07-11 10:04 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-07-11 10:04 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-07-11 10:04 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-07-11 10:04 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe
2013-07-11 10:04 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe
2013-07-11 10:04 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe
2013-07-11 10:00 - 2013-07-11 13:41 - 00000000 ____D C:\Qoobox
2013-07-11 09:59 - 2013-07-11 13:15 - 05087643 ____R (Swearware) C:\Users\Greta\Desktop\ComboFix.exe
2013-07-11 09:59 - 2013-07-11 10:26 - 00000000 ____D C:\Windows\erdnt
2013-07-09 22:40 - 2013-07-09 22:42 - 00035471 ____A C:\Users\Greta\Desktop\Addition.txt
2013-07-09 22:37 - 2013-07-09 22:37 - 00000000 ____D C:\FRST
2013-07-09 22:36 - 2013-07-09 22:35 - 01776221 ____A (Farbar) C:\Users\Greta\Desktop\FRST64.exe
2013-07-08 23:16 - 2013-07-08 23:16 - 00000758 ____A C:\Users\Greta\Desktop\Gmer.log
2013-07-08 09:11 - 2013-07-08 09:11 - 00454448 ____A C:\Windows\Minidump\070813-17924-01.dmp
2013-07-08 08:38 - 2013-07-08 08:38 - 00273968 ____A C:\Windows\Minidump\070813-20264-01.dmp
2013-07-07 22:29 - 2013-07-07 22:29 - 00087172 ____A C:\Users\Greta\Desktop\Extras.Txt
2013-07-07 22:26 - 2013-07-07 22:26 - 00117456 ____A C:\Users\Greta\Desktop\OTL.Txt
2013-07-07 22:05 - 2013-07-08 08:41 - 00000472 ____A C:\Users\Greta\Desktop\defogger_disable.log
2013-07-07 22:05 - 2013-07-07 22:05 - 00000000 ____A C:\Users\Greta\defogger_reenable
2013-07-07 22:03 - 2013-07-07 22:04 - 00000000 ____D C:\Users\Greta\Desktop\Anti Virus
2013-07-07 22:03 - 2013-07-07 21:56 - 00377856 ____A C:\Users\Greta\Desktop\gmer_2.1.19163.exe
2013-07-07 22:03 - 2013-07-07 21:54 - 00050477 ____A C:\Users\Greta\Desktop\Defogger.exe
2013-07-07 22:03 - 2013-07-07 21:53 - 00602112 ____A (OldTimer Tools) C:\Users\Greta\Desktop\OTL.exe
2013-07-05 14:21 - 2013-07-05 14:21 - 00003408 ____N C:\bootsqm.dat
2013-07-04 23:37 - 2013-07-04 23:37 - 00000000 ____D C:\Users\Greta\Desktop\Zealand
2013-07-04 22:17 - 2013-07-04 22:20 - 00000000 ____D C:\FFOutput
2013-07-04 22:14 - 2013-07-04 22:14 - 00000000 ____D C:\Program Files (x86)\FreeTime
2013-07-04 20:45 - 2013-07-04 20:46 - 00000000 ____D C:\Users\Greta\Desktop\Fotos
2013-07-04 19:51 - 2013-07-04 19:51 - 03494670 ____A C:\Users\Greta\Desktop\VID-20130704-WA0002.mkv
2013-07-04 19:45 - 2013-07-04 19:45 - 02140696 ____A C:\Users\Greta\Desktop\Kopfgestellt.mkv
2013-07-04 19:45 - 2013-07-04 19:45 - 01206947 ____A C:\Users\Greta\Desktop\Jan.mkv
2013-07-04 19:43 - 2013-07-04 19:43 - 04240304 ____A C:\Users\Greta\Desktop\IMG_2505.mkv
2013-07-04 19:42 - 2013-07-04 19:42 - 02422030 ____A C:\Users\Greta\Desktop\IMG_4041.mkv
2013-07-04 19:42 - 2013-07-04 19:41 - 00964602 ____A C:\Users\Greta\Desktop\Carl.mkv
2013-07-04 19:41 - 2013-07-04 19:41 - 00880060 ____A C:\Users\Greta\Downloads\Film am 03.07.13 um 16.14 _2.mov
2013-07-04 19:26 - 2013-07-04 23:36 - 00000000 ____D C:\Users\Greta\Desktop\Fotoshooting mit Max
2013-07-03 22:08 - 2013-07-03 22:10 - 00746237 ____A C:\Users\Greta\Downloads\CLIL (1).pptx
2013-07-03 00:28 - 2013-07-03 00:28 - 04075246 ____A C:\Users\Greta\Desktop\simon hauk.mkv
2013-07-03 00:26 - 2013-07-03 00:26 - 02921452 ____A C:\Users\Greta\Desktop\Pärchen.mkv
2013-07-03 00:22 - 2013-07-03 00:22 - 00784270 ____A C:\Users\Greta\Downloads\Video (2).MOV
2013-07-03 00:21 - 2013-07-03 00:21 - 03710618 ____A C:\Users\Greta\Desktop\Oktoberfest.mkv
2013-07-03 00:21 - 2013-07-03 00:21 - 00756493 ____A C:\Users\Greta\Desktop\Video (1).mkv
2013-06-27 00:35 - 2013-06-27 00:35 - 01157230 ____A C:\Users\Greta\Downloads\Soul man.pptx
2013-06-25 12:47 - 2013-06-25 12:47 - 00797932 ____A C:\Users\Greta\Downloads\compliments 2.pptx
2013-06-24 23:34 - 2013-06-24 23:52 - 00523177 ____A C:\Users\Greta\Downloads\CLIL.pptx
2013-06-24 21:57 - 2013-06-24 21:57 - 00117243 ____A C:\Users\Greta\Downloads\Bilingual Lessons.pptx
2013-06-18 19:03 - 2013-06-18 19:03 - 00659488 ____A (FUSENET) C:\Users\Greta\Downloads\GraboidVideoInstaller-3.89.exe
2013-06-17 09:34 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-17 09:34 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-17 09:34 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-17 09:34 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-17 09:34 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-17 09:34 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-17 09:34 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-17 09:34 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-17 09:34 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-17 09:34 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-17 09:34 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-17 09:34 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 03:02 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 03:02 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 03:02 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 03:02 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 03:02 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-12 03:02 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-12 03:02 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 03:02 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-12 03:02 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 03:02 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 03:02 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 03:02 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 03:02 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 03:02 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 03:02 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 03:02 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 03:02 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 03:02 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 03:02 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-11 22:05 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-11 22:05 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-11 22:05 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-11 22:05 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-11 22:05 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-11 22:05 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-11 22:05 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-11 22:05 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-11 22:05 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-11 22:05 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-11 22:05 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-11 22:05 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-11 22:05 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-11 22:05 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-11 22:05 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-11 22:05 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-11 22:05 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-11 22:05 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-11 22:05 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll

==================== One Month Modified Files and Folders =======

2013-07-11 14:11 - 2013-03-15 20:02 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-11 14:09 - 2013-07-11 14:09 - 00038843 ____A C:\Users\Greta\Desktop\JRT.txt
2013-07-11 14:05 - 2009-07-14 06:45 - 00014144 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-11 14:05 - 2009-07-14 06:45 - 00014144 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-11 14:02 - 2010-06-25 21:35 - 02042190 ____A C:\Windows\WindowsUpdate.log
2013-07-11 14:00 - 2013-07-11 14:00 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 14:00 - 2011-03-12 19:34 - 00000000 ____D C:\Users\Greta\AppData\Roaming\Skype
2013-07-11 13:59 - 2013-03-14 20:06 - 00000000 ____D C:\Users\Greta\AppData\Roaming\Dropbox
2013-07-11 13:59 - 2012-12-23 02:43 - 00000000 ____D C:\Users\Greta\AppData\Roaming\Spotify
2013-07-11 13:58 - 2011-03-11 20:47 - 00001106 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-11 13:58 - 2010-06-25 21:32 - 00459900 ____A C:\Windows\PFRO.log
2013-07-11 13:58 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-11 13:58 - 2009-07-14 06:51 - 00089750 ____A C:\Windows\setupact.log
2013-07-11 13:57 - 2013-07-11 13:57 - 00005336 ____A C:\AdwCleaner[S1].txt
2013-07-11 13:57 - 2013-07-11 13:57 - 00000097 ____A C:\Windows\DeleteOnReboot.bat
2013-07-11 13:42 - 2013-07-11 13:18 - 00000000 ____D C:\Users\Greta\Desktop\Neuer Anti-Viren Kram
2013-07-11 13:41 - 2013-07-11 13:41 - 00024156 ____A C:\ComboFix.txt
2013-07-11 13:41 - 2013-07-11 10:00 - 00000000 ____D C:\Qoobox
2013-07-11 13:36 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini
2013-07-11 13:29 - 2011-03-11 20:47 - 00001110 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-11 13:16 - 2013-07-11 14:00 - 00559306 ____A (Oleg N. Scherbakov) C:\Users\Greta\Desktop\JRT.exe
2013-07-11 13:16 - 2013-07-11 13:18 - 00650027 ____A C:\Users\Greta\Desktop\adwcleaner.exe
2013-07-11 13:15 - 2013-07-11 09:59 - 05087643 ____R (Swearware) C:\Users\Greta\Desktop\ComboFix.exe
2013-07-11 10:26 - 2013-07-11 09:59 - 00000000 ____D C:\Windows\erdnt
2013-07-11 09:57 - 2011-03-20 22:42 - 00000000 ____D C:\Users\Greta\Tracing
2013-07-09 22:42 - 2013-07-09 22:40 - 00035471 ____A C:\Users\Greta\Desktop\Addition.txt
2013-07-09 22:37 - 2013-07-09 22:37 - 00000000 ____D C:\FRST
2013-07-09 22:35 - 2013-07-09 22:36 - 01776221 ____A (Farbar) C:\Users\Greta\Desktop\FRST64.exe
2013-07-09 22:25 - 2010-06-26 07:28 - 00665812 ____A C:\Windows\System32\perfh007.dat
2013-07-09 22:25 - 2010-06-26 07:28 - 00133992 ____A C:\Windows\System32\perfc007.dat
2013-07-09 22:25 - 2009-07-14 07:13 - 01529706 ____A C:\Windows\System32\PerfStringBackup.INI
2013-07-08 23:16 - 2013-07-08 23:16 - 00000758 ____A C:\Users\Greta\Desktop\Gmer.log
2013-07-08 09:11 - 2013-07-08 09:11 - 00454448 ____A C:\Windows\Minidump\070813-17924-01.dmp
2013-07-08 09:11 - 2012-12-15 17:00 - 00000000 ____D C:\Windows\Minidump
2013-07-08 09:11 - 2012-12-15 16:59 - 683718574 ____A C:\Windows\MEMORY.DMP
2013-07-08 08:41 - 2013-07-07 22:05 - 00000472 ____A C:\Users\Greta\Desktop\defogger_disable.log
2013-07-08 08:38 - 2013-07-08 08:38 - 00273968 ____A C:\Windows\Minidump\070813-20264-01.dmp
2013-07-07 22:29 - 2013-07-07 22:29 - 00087172 ____A C:\Users\Greta\Desktop\Extras.Txt
2013-07-07 22:26 - 2013-07-07 22:26 - 00117456 ____A C:\Users\Greta\Desktop\OTL.Txt
2013-07-07 22:05 - 2013-07-07 22:05 - 00000000 ____A C:\Users\Greta\defogger_reenable
2013-07-07 22:05 - 2011-03-11 19:53 - 00000000 ____D C:\users\Greta
2013-07-07 22:04 - 2013-07-07 22:03 - 00000000 ____D C:\Users\Greta\Desktop\Anti Virus
2013-07-07 21:56 - 2013-07-07 22:03 - 00377856 ____A C:\Users\Greta\Desktop\gmer_2.1.19163.exe
2013-07-07 21:54 - 2013-07-07 22:03 - 00050477 ____A C:\Users\Greta\Desktop\Defogger.exe
2013-07-07 21:53 - 2013-07-07 22:03 - 00602112 ____A (OldTimer Tools) C:\Users\Greta\Desktop\OTL.exe
2013-07-07 14:23 - 2012-03-03 12:06 - 00000000 ____D C:\ProgramData\Trend Micro
2013-07-07 14:23 - 2011-03-13 20:25 - 00000000 ___RD C:\MSOCache
2013-07-07 14:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-07-07 14:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2013-07-07 13:27 - 2013-03-14 20:09 - 00000000 ___RD C:\Users\Greta\Dropbox
2013-07-05 14:21 - 2013-07-05 14:21 - 00003408 ____N C:\bootsqm.dat
2013-07-05 00:08 - 2011-06-05 13:36 - 00000000 ____D C:\Users\Greta\AppData\Local\Windows Live
2013-07-04 23:37 - 2013-07-04 23:37 - 00000000 ____D C:\Users\Greta\Desktop\Zealand
2013-07-04 23:36 - 2013-07-04 19:26 - 00000000 ____D C:\Users\Greta\Desktop\Fotoshooting mit Max
2013-07-04 22:20 - 2013-07-04 22:17 - 00000000 ____D C:\FFOutput
2013-07-04 22:14 - 2013-07-04 22:14 - 00000000 ____D C:\Program Files (x86)\FreeTime
2013-07-04 20:46 - 2013-07-04 20:45 - 00000000 ____D C:\Users\Greta\Desktop\Fotos
2013-07-04 19:51 - 2013-07-04 19:51 - 03494670 ____A C:\Users\Greta\Desktop\VID-20130704-WA0002.mkv
2013-07-04 19:45 - 2013-07-04 19:45 - 02140696 ____A C:\Users\Greta\Desktop\Kopfgestellt.mkv
2013-07-04 19:45 - 2013-07-04 19:45 - 01206947 ____A C:\Users\Greta\Desktop\Jan.mkv
2013-07-04 19:43 - 2013-07-04 19:43 - 04240304 ____A C:\Users\Greta\Desktop\IMG_2505.mkv
2013-07-04 19:42 - 2013-07-04 19:42 - 02422030 ____A C:\Users\Greta\Desktop\IMG_4041.mkv
2013-07-04 19:41 - 2013-07-04 19:42 - 00964602 ____A C:\Users\Greta\Desktop\Carl.mkv
2013-07-04 19:41 - 2013-07-04 19:41 - 00880060 ____A C:\Users\Greta\Downloads\Film am 03.07.13 um 16.14 _2.mov
2013-07-03 22:10 - 2013-07-03 22:08 - 00746237 ____A C:\Users\Greta\Downloads\CLIL (1).pptx
2013-07-03 00:28 - 2013-07-03 00:28 - 04075246 ____A C:\Users\Greta\Desktop\simon hauk.mkv
2013-07-03 00:26 - 2013-07-03 00:26 - 02921452 ____A C:\Users\Greta\Desktop\Pärchen.mkv
2013-07-03 00:22 - 2013-07-03 00:22 - 00784270 ____A C:\Users\Greta\Downloads\Video (2).MOV
2013-07-03 00:21 - 2013-07-03 00:21 - 03710618 ____A C:\Users\Greta\Desktop\Oktoberfest.mkv
2013-07-03 00:21 - 2013-07-03 00:21 - 00756493 ____A C:\Users\Greta\Desktop\Video (1).mkv
2013-07-02 21:49 - 2012-05-05 14:00 - 00235606 ____A C:\test.xml
2013-07-01 22:29 - 2010-06-25 21:41 - 00000000 ____D C:\Program Files\Google
2013-07-01 22:29 - 2010-06-25 21:41 - 00000000 ____D C:\Program Files (x86)\Google
2013-06-27 22:51 - 2011-03-11 20:44 - 00000000 ____D C:\Users\Greta\AppData\Local\Google
2013-06-27 22:51 - 2010-06-25 21:41 - 00000000 ____D C:\ProgramData\Google
2013-06-27 22:50 - 2012-12-23 03:00 - 00000000 ____D C:\Firefox
2013-06-27 00:35 - 2013-06-27 00:35 - 01157230 ____A C:\Users\Greta\Downloads\Soul man.pptx
2013-06-26 17:29 - 2011-03-12 11:31 - 00000000 ____D C:\Users\Greta\AppData\Local\Microsoft Help
2013-06-25 12:47 - 2013-06-25 12:47 - 00797932 ____A C:\Users\Greta\Downloads\compliments 2.pptx
2013-06-24 23:52 - 2013-06-24 23:34 - 00523177 ____A C:\Users\Greta\Downloads\CLIL.pptx
2013-06-24 21:57 - 2013-06-24 21:57 - 00117243 ____A C:\Users\Greta\Downloads\Bilingual Lessons.pptx
2013-06-24 14:59 - 2013-05-22 19:40 - 00000000 ____D C:\Users\Greta\Desktop\Bilder
2013-06-24 11:25 - 2013-05-17 15:25 - 00000000 ____D C:\Users\Greta\Desktop\Musik
2013-06-22 11:49 - 2013-06-02 22:46 - 00002183 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-06-18 19:03 - 2013-06-18 19:03 - 00659488 ____A (FUSENET) C:\Users\Greta\Downloads\GraboidVideoInstaller-3.89.exe
2013-06-12 19:11 - 2013-03-15 20:02 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 19:11 - 2013-03-15 20:02 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 11:33 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-04 01:02

==================== End Of Log ============================
--- --- ---


Und hier die Addition:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-07-2013 01
Ran by Greta at 2013-07-09 22:40:45
Running from C:\Users\Greta\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
4500_G510nz_Help (x32 Version: 000.0.439.000)
4500G510nz (x32 Version: 000.0.439.000)
4500G510nz_Software_Min (x32 Version: 000.0.423.000)
64 Bit HP CIO Components Installer (Version: 7.2.8)
AdblockIE (x32 Version: 1.2)
Adobe Flash Player 10 Plugin (x32 Version: 10.0.42.34)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Reader 9.5.2 - Deutsch (x32 Version: 9.5.2)
Alps Pointing-device for VAIO
ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.1.85)
ArcSoft WebCam Companion 3 (x32 Version: 3.0.21.278)
ATI Catalyst Install Manager (Version: 3.0.769.0)
BufferChm (x32 Version: 130.0.331.000)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2010.0920.2143.37117)
Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0920.2143.37117)
Catalyst Control Center Graphics Full New (x32 Version: 2010.0920.2143.37117)
Catalyst Control Center Graphics Light (x32 Version: 2010.0920.2143.37117)
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0920.2143.37117)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0920.2143.37117)
Catalyst Control Center InstallProxy (x32 Version: 2010.0113.2257.41150)
Catalyst Control Center InstallProxy (x32 Version: 2010.0920.2143.37117)
Catalyst Control Center Localization All (x32 Version: 2010.0920.2143.37117)
CCC Help Chinese Standard (x32 Version: 2010.0920.2142.37117)
CCC Help Chinese Traditional (x32 Version: 2010.0920.2142.37117)
CCC Help Czech (x32 Version: 2010.0920.2142.37117)
CCC Help Danish (x32 Version: 2010.0920.2142.37117)
CCC Help Dutch (x32 Version: 2010.0920.2142.37117)
CCC Help English (x32 Version: 2010.0920.2142.37117)
CCC Help Finnish (x32 Version: 2010.0920.2142.37117)
CCC Help French (x32 Version: 2010.0920.2142.37117)
CCC Help German (x32 Version: 2010.0920.2142.37117)
CCC Help Greek (x32 Version: 2010.0920.2142.37117)
CCC Help Hungarian (x32 Version: 2010.0920.2142.37117)
CCC Help Italian (x32 Version: 2010.0920.2142.37117)
CCC Help Japanese (x32 Version: 2010.0920.2142.37117)
CCC Help Korean (x32 Version: 2010.0920.2142.37117)
CCC Help Norwegian (x32 Version: 2010.0920.2142.37117)
CCC Help Polish (x32 Version: 2010.0920.2142.37117)
CCC Help Portuguese (x32 Version: 2010.0920.2142.37117)
CCC Help Russian (x32 Version: 2010.0920.2142.37117)
CCC Help Spanish (x32 Version: 2010.0920.2142.37117)
CCC Help Swedish (x32 Version: 2010.0920.2142.37117)
CCC Help Thai (x32 Version: 2010.0920.2142.37117)
CCC Help Turkish (x32 Version: 2010.0920.2142.37117)
ccc-core-static (x32 Version: 2010.0920.2143.37117)
ccc-utility64 (Version: 2010.0920.2143.37117)
Corel WinDVD (x32 Version: 10.0.5.804)
D3DX10 (x32 Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
Destinations (x32 Version: 130.0.0.0)
DeviceDiscovery (x32 Version: 130.0.372.000)
DocMgr (x32 Version: 130.0.000.000)
DocProc (x32 Version: 13.0.0.0)
dows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (Version: 07/28/2009 6.2.0.9800)
Dropbox (HKCU Version: 2.0.22)
Einstellungen für VAIO-Inhaltsüberwachung (x32 Version: 2.6.0.11050)
Evernote (x32 Version: 3.5.0.545)
Fax (x32 Version: 130.0.418.000)
Free WAV to MP3 Converter (x32 Version: 1.0)
Free WMA to MP3 Converter 1.16 (x32)
GIMP 2.6.11 (x32 Version: 2.6.11)
Google Chrome (x32 Version: 27.0.1453.116)
Google Earth (x32 Version: 7.0.3.8542)
Google Update Helper (x32 Version: 1.3.21.145)
GPBaseService2 (x32 Version: 130.0.371.000)
HP Customer Participation Program 13.0 (Version: 13.0)
HP Document Manager 2.0 (Version: 2.0)
HP Imaging Device Functions 13.0 (Version: 13.0)
HP Officejet 4500 G510n-z (Version: 13.0)
HP Smart Web Printing 4.5 (Version: 4.5)
HP Solution Center 13.0 (Version: 13.0)
HP Update (x32 Version: 4.000.011.006)
HPProductAssistant (x32 Version: 130.0.371.000)
HPSSupply (x32 Version: 130.0.371.000)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel(R) Rapid Storage Technology (x32 Version: 9.5.4.1001)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.00.01.1002)
IPTInstaller (x32 Version: 4.0.4)
Java Auto Updater (x32 Version: 2.0.7.2)
Java(TM) 6 Update 16 (64-bit) (Version: 6.0.160)
Java(TM) 6 Update 38 (x32 Version: 6.0.380)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
MAGIX Online Druck Service (x32 Version: 3.4.3.0)
MAGIX Screenshare (x32 Version: 4.3.6.1987)
MarketResearch (x32 Version: 130.0.374.000)
Media Gallery (x32 Version: 1.1.1.11200)
Mesh Runtime (x32 Version: 15.4.5722.2)
Messenger Companion (x32 Version: 15.4.3502.0922)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook Connector (x32 Version: 14.0.5118.5000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (x32 Version: 14.0.5120.5000)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft SQL Server Compact 3.5 SP1 English (x32 Version: 3.5.5692.0)
Microsoft SQL Server Compact 3.5 SP1 x64 English (Version: 3.5.5692.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Movie2KDownloader (x32 Version: 2.1 Build 26473)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MusicStation (x32 Version: 2.0.4.1199)
Network64 (Version: 130.0.374.000)
Network64 (Version: 140.0.221.000)
Norton Online Backup (x32 Version: 1.2.20.0)
OCR Software by I.R.I.S. 13.0 (Version: 13.0)
PMB (x32 Version: 5.0.00.10260)
PMB VAIO Edition Plug-in (Version: 1.5.10.05300)
PMB VAIO Edition Plug-in (x32 Version: 1.5.10.06150)
Quick Web Access (x32 Version: 1.4.7.0)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.5992)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5992)
Roxio Central Audio (x32 Version: 3.8.0)
Roxio Central Copy (x32 Version: 3.8.0)
Roxio Central Core (x32 Version: 3.8.0)
Roxio Central Data (x32 Version: 3.8.0)
Roxio Central Tools (x32 Version: 3.8.0)
Roxio Easy Media Creator 10 LJ (x32 Version: 10.3)
Roxio Easy Media Creator Home (x32 Version: 10.3.183)
Scan (x32 Version: 13.0.0.0)
Setting Utility Series (x32 Version: 5.1.0.11200)
Setup_msm_VCMS_x64 (Version: 2.6.0.06040)
Setup_msm_VOFS_x64 (Version: 2.3.0.09270)
Shop for HP Supplies (Version: 13.0)
Skype Click to Call (x32 Version: 5.9.9216)
Skype™ 6.3 (x32 Version: 6.3.107)
SmartWebPrinting (x32 Version: 130.0.373.000)
SOHLib Merge Module (x32 Version: 2.2.0.11240)
SolutionCenter (x32 Version: 130.0.373.000)
Sony Home Network Library (x32 Version: 2.0.1.10160)
Sony Home Network Library (x32 Version: 2.2.0.11240)
Spotify (HKCU Version: 0.9.0.133.gd18ed589)
Status (x32 Version: 130.0.373.000)
Toolbox (x32 Version: 130.0.648.000)
TrayApp (x32 Version: 130.0.376.000)
Trend Micro Titanium (Version: 5.00)
Trend Micro Titanium Maximum Security 2012 (Version: 5.4)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft Office 2010 (KB2494150) (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
VAIO - PMB VAIO Edition Guide (x32 Version: 1.5.00.03020)
VAIO - PMB VAIO Edition Plug-in (x32 Version: 1.6.10.11160)
VAIO Care (x32 Version: 6.4.2.11150)
VAIO Content Metadata Intelligent Analyzing Manager (Version: 3.9.20.08110)
VAIO Content Metadata Intelligent Analyzing Manager (x32 Version: 3.6.0.09250)
VAIO Content Metadata Intelligent Network Service Manager (Version: 3.9.20.08110)
VAIO Content Metadata Manager Settings (Version: 3.9.20.08110)
VAIO Content Metadata XML Interface Library (Version: 3.9.20.08110)
VAIO Control Center (x32 Version: 4.1.1.07160)
VAIO Data Restore Tool (x32 Version: 1.2.0.09150)
VAIO DVD Menu Data (x32 Version: 2.4.00.05300)
VAIO Energie Verwaltung (x32 Version: 5.0.0.11300)
VAIO Event Service (x32 Version: 5.1.0.12010)
VAIO Gate (x32 Version: 2.4.1.09230)
VAIO Gate Default (x32 Version: 1.0.0.10290)
VAIO Hardware Diagnostics (x32 Version: 3.9.1)
VAIO Marketing Tools (x32)
VAIO Media plus (x32 Version: 2.0.1.10160)
VAIO Media plus Opening Movie (x32 Version: 1.2.0.09100)
VAIO Movie Story Template Data (x32 Version: 2.0.00.09240)
VAIO Movie Story Template Data (x32 Version: 2.5.00.05300)
VAIO Original Funktion Einstellungen (x32 Version: 2.3.0.11240)
VAIO Personalization Manager (Version: 3.0.2.05260)
VAIO Premium Partners (x32 Version: 1.0)
VAIO screensaver (x32 Version: 1.0.0.0)
VAIO Smart Network (x32 Version: 3.3.1.08110)
VAIO Update (x32 Version: 6.1.1.10250)
VAIO Wallpaper Contents (x32 Version: 2.0.0.06010)
VAIO-Support für Übertragungen (x32 Version: 1.1.2.06030)
VU5x64 (Version: 1.1.0)
VU5x86 (x32 Version: 1.0.0)
VU5x86 (x32 Version: 1.1.0)
WebReg (x32 Version: 130.0.132.017)
WIDCOMM Bluetooth Software (Version: 6.2.1.500)
Windows Driver Package - Broadcom Bluetooth  (09/09/2009 6.2.0.9405) (Version: 09/09/2009 6.2.0.9405)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Family Safety (Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.01 (64-Bit) (Version: 4.01.0)

==================== Restore Points  =========================

12-06-2013 01:00:22 Windows Update
17-06-2013 07:33:26 Windows Update
24-06-2013 22:49:21 Geplanter Prüfpunkt
02-07-2013 20:50:06 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {00577224-491A-45FE-A0CB-B54B501A703D} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-09-23] (Sony Corporation)
Task: {02806EB0-23BA-4933-A823-DC16769823BB} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation)
Task: {057CB34C-3A08-425C-9DE3-BE48071F6461} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {387F2E0A-E359-454E-A684-7708271CA959} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2011-09-23] (Sony Corporation)
Task: {3B8CF97E-A751-46F3-A37E-40C94BFCAF10} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {4774CDAB-9A9B-4163-B1FA-FFF1597C069A} - System32\Tasks\User_Feed_Synchronization-{45ABB9B0-7FC6-411E-999B-5752CC8C1324} => C:\Windows\system32\msfeedssync.exe [2013-03-29] (Microsoft Corporation)
Task: {611A41F6-5BAF-47CD-BB50-72EBCFDF59AA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-03-11] (Google Inc.)
Task: {6AFB4495-CC58-49E8-BE69-D4924A40A41C} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate Restart => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-09-23] (Sony Corporation)
Task: {7781E724-749E-41C4-AD2A-6F6654A12137} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-03-11] (Google Inc.)
Task: {790EBDAB-9B41-4F3F-AF38-644B141CEDF6} - System32\Tasks\SONY\SUS-BCF\Level4Daily => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2009-11-20] (Sony Corporation)
Task: {82F9C2A1-440A-4860-89BE-1783FDDAB16D} - System32\Tasks\{491D34DF-C50A-456E-AAC9-EF0BC85B9E80} => C:\Program Files (x86)\Internet Explorer\iexplore.exe [2013-05-17] (Microsoft Corporation)
Task: {84ABC82B-FFA0-40DF-B179-3CF840F37CD5} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation)
Task: {8E1D712A-6948-4307-826D-73119147A579} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation)
Task: {AA4DD9FD-7929-4A34-977C-48AF2845850B} - System32\Tasks\{E3BC7CB9-51FA-4185-BBFC-0531932C59D5} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-04-19] (Skype Technologies S.A.)
Task: {ADE50AA2-0662-42D4-8BAD-308CF17A9904} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2012-10-26] (Sony Corporation)
Task: {B1A74CDF-E090-447D-A5CE-26613373FB73} - System32\Tasks\SONY\SUS-BCF\Level4Month => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2009-11-20] (Sony Corporation)
Task: {B2761D35-1E49-4758-88B8-DD780E1F950E} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2012-10-26] (Sony Corporation)
Task: {BAC7157B-0EDD-48DE-A127-57A3E20CCE67} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation)
Task: {CA49B703-4470-464F-9482-642EEB4F0912} - System32\Tasks\User_Feed_Synchronization-{0E626F3C-8A24-4FFB-84FD-07195C3D7244} => C:\Windows\system32\msfeedssync.exe [2013-03-29] (Microsoft Corporation)
Task: {E3E53E78-D9C5-482A-AEC1-D335D3B15EC7} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {F772DF24-E7F0-4B9C-AD5E-13ACB26809C6} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============

Name: Officejet 4500 G510n-z
Description: Officejet 4500 G510n-z
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Officejet 4500 G510n-z
Description: Officejet 4500 G510n-z
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/04/2013 11:52:23 PM) (Source: Application Hang) (User: )
Description: Programm MovieMaker.exe, Version 15.4.3555.308 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1898

Startzeit: 01ce7900315c138c

Endzeit: 55

Anwendungspfad: C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe

Berichts-ID: fb62782f-e4f3-11e2-b548-f07bcbe0806e

Error: (07/04/2013 10:55:26 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (07/03/2013 00:29:39 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (06/23/2013 06:41:52 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: obyxf.exe, Version: 9.3.0.113, Zeitstempel: 0x51a37fc7
Name des fehlerhaften Moduls: obyxf.exe, Version: 9.3.0.113, Zeitstempel: 0x51a37fc7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00020c2a
ID des fehlerhaften Prozesses: 0xd14
Startzeit der fehlerhaften Anwendung: 0xobyxf.exe0
Pfad der fehlerhaften Anwendung: obyxf.exe1
Pfad des fehlerhaften Moduls: obyxf.exe2
Berichtskennung: obyxf.exe3

Error: (06/23/2013 06:41:05 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: obyxf.exe, Version: 9.3.0.113, Zeitstempel: 0x51a37fc7
Name des fehlerhaften Moduls: obyxf.exe, Version: 9.3.0.113, Zeitstempel: 0x51a37fc7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003fbd0
ID des fehlerhaften Prozesses: 0xd14
Startzeit der fehlerhaften Anwendung: 0xobyxf.exe0
Pfad der fehlerhaften Anwendung: obyxf.exe1
Pfad des fehlerhaften Moduls: obyxf.exe2
Berichtskennung: obyxf.exe3

Error: (06/07/2013 00:32:56 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16576, Zeitstempel: 0x515e30fe
Name des fehlerhaften Moduls: YontooIEClient.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x5180963b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x74eee6f1
ID des fehlerhaften Prozesses: 0x3b50
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (06/03/2013 00:45:47 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16576, Zeitstempel: 0x515e30fe
Name des fehlerhaften Moduls: YontooIEClient.dll, Version: 1.10.1.0, Zeitstempel: 0x5180963b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008ff4
ID des fehlerhaften Prozesses: 0x12f4
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (05/14/2013 00:48:51 AM) (Source: Application Hang) (User: )
Description: Programm IEXPLORE.EXE, Version 10.0.9200.16537 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 38a8

Startzeit: 01ce502b9b5b7ec5

Endzeit: 56

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Berichts-ID:

Error: (05/09/2013 05:40:42 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: atieclxx.exe, Version: 6.14.11.1054, Zeitstempel: 0x4c98109e
Name des fehlerhaften Moduls: atiadlxx.dll, Version: 6.14.10.1054, Zeitstempel: 0x4c98087c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000001ec88
ID des fehlerhaften Prozesses: 0x694
Startzeit der fehlerhaften Anwendung: 0xatieclxx.exe0
Pfad der fehlerhaften Anwendung: atieclxx.exe1
Pfad des fehlerhaften Moduls: atieclxx.exe2
Berichtskennung: atieclxx.exe3

Error: (05/02/2013 03:09:44 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FlashUtil64_11_6_602_180_ActiveX.exe, Version: 11.6.602.180, Zeitstempel: 0x5130146c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000532d0
ID des fehlerhaften Prozesses: 0x108c
Startzeit der fehlerhaften Anwendung: 0xFlashUtil64_11_6_602_180_ActiveX.exe0
Pfad der fehlerhaften Anwendung: FlashUtil64_11_6_602_180_ActiveX.exe1
Pfad des fehlerhaften Moduls: FlashUtil64_11_6_602_180_ActiveX.exe2
Berichtskennung: FlashUtil64_11_6_602_180_ActiveX.exe3


System errors:
=============
Error: (07/09/2013 10:36:47 PM) (Source: DCOM) (User: )
Description: {005A3A96-BAC4-4B0A-94EA-C0CE100EA736}

Error: (07/09/2013 10:21:16 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.

Error: (07/08/2013 11:17:10 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 11:15:32 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 11:15:32 PM) (Source: DCOM) (User: )
Description: 1068fdPHost{D3DCB472-7261-43CE-924B-0704BD730D5F}

Error: (07/08/2013 11:15:32 PM) (Source: DCOM) (User: )
Description: 1068fdPHost{145B4335-FE2A-4927-A040-7C35AD3180EF}

Error: (07/08/2013 06:24:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 06:24:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 06:24:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (07/08/2013 06:24:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068


Microsoft Office Sessions:
=========================
Error: (07/04/2013 11:52:23 PM) (Source: Application Hang)(User: )
Description: MovieMaker.exe15.4.3555.308189801ce7900315c138c55C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exefb62782f-e4f3-11e2-b548-f07bcbe0806e

Error: (07/04/2013 10:55:26 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\Users\Greta\downloads\SoftonicDownloader_fuer_magix-foto-manager.exe

Error: (07/03/2013 00:29:39 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\Greta\Downloads\SoftonicDownloader_fuer_magix-foto-manager.exe

Error: (06/23/2013 06:41:52 PM) (Source: Application Error)(User: )
Description: obyxf.exe9.3.0.11351a37fc7obyxf.exe9.3.0.11351a37fc7c000000500020c2ad1401ce70306eb81a5dC:\Users\Greta\AppData\Roaming\Odaqzu\obyxf.exeC:\Users\Greta\AppData\Roaming\Odaqzu\obyxf.exece46423b-dc23-11e2-a78f-f07bcbe0806e

Error: (06/23/2013 06:41:05 PM) (Source: Application Error)(User: )
Description: obyxf.exe9.3.0.11351a37fc7obyxf.exe9.3.0.11351a37fc7c00000050003fbd0d1401ce70306eb81a5dC:\Users\Greta\AppData\Roaming\Odaqzu\obyxf.exeC:\Users\Greta\AppData\Roaming\Odaqzu\obyxf.exeb25eb761-dc23-11e2-a78f-f07bcbe0806e

Error: (06/07/2013 00:32:56 AM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE10.0.9200.16576515e30feYontooIEClient.dll_unloaded0.0.0.05180963bc000000574eee6f13b5001ce6305c74159b5C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEYontooIEClient.dll07f3aadf-cef9-11e2-a64c-f07bcbe0806e

Error: (06/03/2013 00:45:47 AM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE10.0.9200.16576515e30feYontooIEClient.dll1.10.1.05180963bc000000500008ff412f401ce5fe2bf545041C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Program Files (x86)\Yontoo\YontooIEClient.dll2a054aaf-cbd6-11e2-b804-f07bcbe0806e

Error: (05/14/2013 00:48:51 AM) (Source: Application Hang)(User: )
Description: IEXPLORE.EXE10.0.9200.1653738a801ce502b9b5b7ec556C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Error: (05/09/2013 05:40:42 AM) (Source: Application Error)(User: )
Description: atieclxx.exe6.14.11.10544c98109eatiadlxx.dll6.14.10.10544c98087cc0000005000000000001ec8869401ce4bcfa426466fC:\Windows\system32\atieclxx.exeC:\Windows\system32\atiadlxx.dll38f220bd-b85a-11e2-bb83-f07bcbe0806e

Error: (05/02/2013 03:09:44 PM) (Source: Application Error)(User: )
Description: FlashUtil64_11_6_602_180_ActiveX.exe11.6.602.1805130146cntdll.dll6.1.7601.177254ec4aa8ec000000500000000000532d0108c01ce47361a68e3b8C:\Windows\System32\Macromed\Flash\FlashUtil64_11_6_602_180_ActiveX.exeC:\Windows\SYSTEM32\ntdll.dll8e1d8fb5-b329-11e2-9fd0-f07bcbe0806e


CodeIntegrity Errors:
===================================
  Date: 2011-05-18 23:54:30.186
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:30.106
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:29.936
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:29.736
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:29.576
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:29.446
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:29.356
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:28.936
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:28.636
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-05-18 23:54:28.216
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 37%
Total physical RAM: 3950.1 MB
Available physical RAM: 2460.54 MB
Total Pagefile: 7898.38 MB
Available Pagefile: 6084.51 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:454.63 GB) (Free:172.37 GB) NTFS (Disk=0 Partition=3)
Drive g: () (Removable) (Total:3.68 GB) (Free:3 GB) FAT32 (Disk=2 Partition=1)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: CE0CB71A)
Partition 1: (Not Active) - (Size=11 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=455 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 4 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)

==================== End Of Log ============================

Alt 11.07.2013, 13:31   #13
schrauber
/// the machine
/// TB-Ausbilder
 
GVU-Virus vollständig entfernt? - Standard

GVU-Virus vollständig entfernt?



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 18.07.2013, 19:26   #14
ShinyAccount
 
GVU-Virus vollständig entfernt? - Standard

GVU-Virus vollständig entfernt?


Hallo schrauber,

sorry, dass ich erst jetzt antworte, ich hatte die Woche relativ viel Stress auf der Arbeit.
Danke schon Mal für die bisherige Hilfe; der Laptop läuft wirklich schon viel besser!
Hier die logs:
ESET:
Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=cbd38c7dcdc3d244b68dbf9c53ebb707
# engine=14358
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-07-11 10:03:55
# local_time=2013-07-12 12:03:55 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 62080373 125210085 0 0
# scanned=310920
# found=9
# cleaned=0
# scan_time=9562
sh=AE51447B8A8EAF0E2DAA7E6734016520475061F3 ft=1 fh=043f99805af8b0d0 vn="Win32/Agent.UJJ trojan" ac=I fn="C:\Qoobox\Quarantine\C\Users\Greta\AppData\Roaming\ie_util.exe.vir"
sh=9C529A926E5D849DE120D7A7E3262F343E1AA78D ft=1 fh=bfc6cdec8b10dbdd vn="a variant of Win32/Kryptik.BFBC trojan" ac=I fn="C:\Qoobox\Quarantine\C\Users\Greta\AppData\Roaming\skype.dat.vir"
sh=47076C3A7B10E3103083815E0B249B6471CCAD2D ft=1 fh=3876fdda647562c2 vn="Win32/Spy.Zbot.AAO trojan" ac=I fn="C:\Qoobox\Quarantine\C\Users\Greta\AppData\Roaming\Odaqzu\obyxf.exe.vir"
sh=0B642149A1C54F25C4B6D0146F30E8E4E86E23F2 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Greta\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\457517d4-20b4a67f"
sh=6B5AFE751E6C746E19EA8485131130BC13A3BDBD ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.OPD trojan" ac=I fn="C:\Users\Greta\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\38072f96-193e526d"
sh=939FA74C88244DFE97FFCF2AAA3217D7F7AFC26C ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Greta\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\69eb0c57-4191c73a"
sh=8108CE7D7985AF166CBA27807922F1DBFAE013DA ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.OMX trojan" ac=I fn="C:\Users\Greta\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\5eccdcef-54667dd8"
sh=9C529A926E5D849DE120D7A7E3262F343E1AA78D ft=1 fh=bfc6cdec8b10dbdd vn="a variant of Win32/Kryptik.BFBC trojan" ac=I fn="C:\Users\Greta\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\35cc66bf-2f950bf1"
sh=A767639FD61B477DDA849D19EFF4DA5DDC615B33 ft=1 fh=abc0484dc05ada27 vn="Win32/Adware.1ClickDownload.AE application" ac=I fn="C:\Users\Greta\Downloads\When_The_levees_broke_part_1_(2006)_.exe"
Security Check:
Code:
ATTFilter
 Results of screen317's Security Check version 0.99.68  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
Trend Micro Titanium Maximum Security 2012   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Java(TM) 6 Update 38  
 Java version out of Date! 
 Adobe Flash Player 10 Flash Player out of Date! 
 Adobe Reader 9 Adobe Reader out of Date! 
 Google Chrome 27.0.1453.116  
 Google Chrome 28.0.1500.72  
````````Process Check: objlist.exe by Laurent````````  
 Trend Micro UniClient UiFrmWrk uiWatchDog.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
FRST:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-07-2013 01 (ATTENTION: FRST version is 9 days old)
Ran by Greta (administrator) on 18-07-2013 20:22:02
Running from C:\Users\Greta\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe
(InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jusched.exe
(Spotify Ltd) C:\Users\Greta\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Dropbox, Inc.) C:\Users\Greta\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Sony Corporation) C:\Program Files (x86)\SONY\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBVolumeWatcher.exe
(Sony Corporation) C:\Program Files (x86)\SONY\Marketing Tools\MarketingTools.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [9636896 2009-12-16] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] - %ProgramFiles%\Apoint\Apoint.exe [208384 2009-11-04] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] - "C:\Program Files\Java\jre6\bin\jusched.exe" [171520 2010-06-25] (Sun Microsystems, Inc.)
HKLM\...\Run: [XeroxEndeavorBackgroundTask] - rundll32.exe xrWCbgnd.dll,LaunchBgTask 1 [x]
HKLM\...\Run: [Trend Micro Titanium] - "C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe" -set Silent "1" SplashURL "" [1304296 2012-12-18] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] - "C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe" [213824 2012-02-27] (Trend Micro Inc.)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,
HKCU\...\Run: [Spotify Web Helper] - "C:\Users\Greta\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [1105408 2013-05-06] (Spotify Ltd)
HKCU\...\Run: [Spotify] - "C:\Users\Greta\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart [4573184 2013-05-06] (Spotify Ltd)
HKCU\...\Run: [Skype] - "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [18678376 2013-04-19] (Skype Technologies S.A.)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-11-21] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] - "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" [320880 2009-08-26] (Sony Corporation)
HKLM-x32\...\Run: [NortonOnlineBackupReminder] - "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED [538472 2009-06-17] (Symantec Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [597792 2009-10-24] (Sony Corporation)
HKLM-x32\...\Run: [MarketingTools] - C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe [26624 2010-06-25] (Sony Corporation)
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [102400 2010-09-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [38872 2012-07-31] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [919008 2012-07-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [254896 2012-09-17] (Sun Microsystems, Inc.)
HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
AppInit_DLLs-x32: c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll [97280 2009-07-14] ()
Startup: C:\ProgramData\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Greta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Greta\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKCU - {238538B3-FF14-4E64-B9E5-919139626C59} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-0/4?satitle={searchTerms}
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {50744D17-57A6-445F-886A-52236C613712} URL = hxxp://de.shopping.com/?linkin_id=8056363
BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1361\6.8.1078\TmIEPlg.dll (Trend Micro Inc.)
BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1104\7.1.1104\TmBpIe64.dll (Trend Micro Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1361\6.8.1078\TmIEPlg32.dll (Trend Micro Inc.)
BHO-x32: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll No File
BHO-x32: TSToolbarBHO - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: af0.Adblock.BHO - {90EFF544-3981-4d46-85C9-C0361D0931D6} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1104\7.1.1104\TmBpIe32.dll (Trend Micro Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
DPF: HKLM-x32 {E4CF4E86-D0DC-4864-8F0E-4F6EA2526334} hxxp://img.ui-portal.de/webde/smartdrive/activex/gmxnet_osupload_2002.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1104\7.1.1104\TmBpIe64.dll (Trend Micro Inc.)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1361\6.8.1078\TmIEPlg.dll (Trend Micro Inc.)
Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} -  No File
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1104\7.1.1104\TmBpIe32.dll (Trend Micro Inc.)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1361\6.8.1078\TmIEPlg32.dll (Trend Micro Inc.)
Handler-x32: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR DefaultSearchURL: (Ask Search) - hxxp://www.search.ask.com/web?p2=%5EB2Z%5EYYYYYY%5EYY%5EDE&gct=&o=APN10977&tpid=FF3-V7&itbv=12.1.0.437&doi=2013-07-04&apn_uid=976C4183-B83D-4BDF-90DF-C7D0382C8000&apn_ptnrs=%5EB2Z&apn_dtid=%5EYYYYYY%5EYY%5EDE&apn_dbr=cr_27.0.1453.116&psv=&trgb=CR&q={searchTerms}
CHR DefaultSuggestURL: (Ask Search) - hxxp://ss.websearch.ask.com/query?qsrc={qsrc}&li=ff&sstype=prefix&q={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll ()
CHR Plugin: (         "name": "",) - C:\Users\Greta\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf\1.0.5_0\chromeNPAPI.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U38) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Windows Live0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Trend Micro Titanium) - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension\components\npToolbarChrome.dll (Trend Micro Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.380.5) - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (Trend Micro Toolbar) - C:\Users\Greta\AppData\Local\Google\Chrome\User Data\Default\Extensions\heoldelcflnigdllmlopiefhkkobendj\5.4.0.1034_0

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2012-10-08] ()
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-31] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-31] (Sonic Solutions)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation)
S2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad [x]

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [107048 2012-09-24] (Trend Micro Inc.)
R1 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [173504 2012-09-24] (Trend Micro Inc.)
R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [77184 2012-09-24] (Trend Micro Inc.)
R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [105744 2012-03-03] (Trend Micro Inc.)
S3 TVICHW64; C:\Windows\system32\DRIVERS\TVICHW64.SYS [21200 2011-03-11] (EnTech Taiwan)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-11-12] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
U2 TMAgent; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-12 03:11 - 2013-06-12 01:43 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-12 03:11 - 2013-06-12 01:43 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-12 03:11 - 2013-06-12 01:43 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-12 03:11 - 2013-06-12 01:43 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-12 03:11 - 2013-06-12 01:43 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-12 03:11 - 2013-06-12 01:43 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-12 03:11 - 2013-06-12 01:42 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-12 03:11 - 2013-06-12 01:42 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-12 03:11 - 2013-06-12 01:42 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-12 03:11 - 2013-06-12 01:42 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-12 03:11 - 2013-06-12 01:42 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-12 03:11 - 2013-06-12 01:26 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-07-12 03:11 - 2013-06-12 01:26 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-07-12 03:11 - 2013-06-12 01:26 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-07-12 03:11 - 2013-06-12 01:25 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-07-12 03:11 - 2013-06-12 01:25 - 02648576 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-07-12 03:11 - 2013-06-12 01:25 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-07-12 03:11 - 2013-06-12 01:25 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-07-12 03:11 - 2013-06-12 01:25 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-07-12 03:11 - 2013-06-12 01:25 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-07-12 03:11 - 2013-06-12 01:25 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-07-12 03:11 - 2013-06-12 01:25 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-07-12 03:11 - 2013-06-12 01:25 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-07-12 03:11 - 2013-06-12 00:51 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-12 03:11 - 2013-06-12 00:50 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-07-12 03:11 - 2013-06-07 05:22 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-07-12 03:11 - 2013-06-07 04:37 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-12 03:10 - 2013-06-12 01:43 - 14329856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-12 03:10 - 2013-06-12 01:42 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-12 03:10 - 2013-06-12 01:25 - 19238912 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-07-12 03:10 - 2013-06-12 01:25 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-07-11 21:39 - 2013-06-05 05:34 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-07-11 21:39 - 2013-06-04 08:00 - 00624128 ____A (Microsoft Corporation) C:\Windows\System32\qedit.dll
2013-07-11 21:39 - 2013-06-04 06:53 - 00509440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-11 21:39 - 2013-05-06 08:03 - 01887744 ____A (Microsoft Corporation) C:\Windows\System32\WMVDECOD.DLL
2013-07-11 21:39 - 2013-05-06 06:56 - 01620480 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-11 21:38 - 2013-04-10 01:34 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-11 21:38 - 2013-04-03 00:51 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-07-11 21:18 - 2013-07-11 21:18 - 00000000 ____D C:\Program Files (x86)\ESET
2013-07-11 14:00 - 2013-07-11 14:00 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 13:57 - 2013-07-11 13:57 - 00005336 ____A C:\AdwCleaner[S1].txt
2013-07-11 13:57 - 2013-07-11 13:57 - 00000097 ____A C:\Windows\DeleteOnReboot.bat
2013-07-11 13:41 - 2013-07-11 13:41 - 00024156 ____A C:\ComboFix.txt
2013-07-11 10:04 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe
2013-07-11 10:04 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe
2013-07-11 10:04 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-07-11 10:04 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-07-11 10:04 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-07-11 10:04 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe
2013-07-11 10:04 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe
2013-07-11 10:04 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe
2013-07-11 10:00 - 2013-07-11 13:41 - 00000000 ____D C:\Qoobox
2013-07-11 09:59 - 2013-07-11 10:26 - 00000000 ____D C:\Windows\erdnt
2013-07-09 22:37 - 2013-07-09 22:37 - 00000000 ____D C:\FRST
2013-07-09 22:36 - 2013-07-09 22:35 - 01776221 ____A (Farbar) C:\Users\Greta\Desktop\FRST64.exe
2013-07-08 09:11 - 2013-07-08 09:11 - 00454448 ____A C:\Windows\Minidump\070813-17924-01.dmp
2013-07-08 08:38 - 2013-07-08 08:38 - 00273968 ____A C:\Windows\Minidump\070813-20264-01.dmp
2013-07-07 22:05 - 2013-07-07 22:05 - 00000000 ____A C:\Users\Greta\defogger_reenable
2013-07-07 22:03 - 2013-07-18 20:21 - 00000000 ____D C:\Users\Greta\Desktop\Anti Virus
2013-07-07 22:03 - 2013-07-07 21:54 - 00050477 ____A C:\Users\Greta\Desktop\Defogger.exe
2013-07-04 23:37 - 2013-07-04 23:37 - 00000000 ____D C:\Users\Greta\Desktop\Zealand
2013-07-04 22:17 - 2013-07-04 22:20 - 00000000 ____D C:\FFOutput
2013-07-04 22:14 - 2013-07-04 22:14 - 00000000 ____D C:\Program Files (x86)\FreeTime
2013-07-04 20:45 - 2013-07-04 20:46 - 00000000 ____D C:\Users\Greta\Desktop\Fotos
2013-07-04 19:51 - 2013-07-04 19:51 - 03494670 ____A C:\Users\Greta\Desktop\VID-20130704-WA0002.mkv
2013-07-04 19:45 - 2013-07-04 19:45 - 02140696 ____A C:\Users\Greta\Desktop\Kopfgestellt.mkv
2013-07-04 19:45 - 2013-07-04 19:45 - 01206947 ____A C:\Users\Greta\Desktop\Jan.mkv
2013-07-04 19:43 - 2013-07-04 19:43 - 04240304 ____A C:\Users\Greta\Desktop\IMG_2505.mkv
2013-07-04 19:42 - 2013-07-04 19:42 - 02422030 ____A C:\Users\Greta\Desktop\IMG_4041.mkv
2013-07-04 19:42 - 2013-07-04 19:41 - 00964602 ____A C:\Users\Greta\Desktop\Carl.mkv
2013-07-04 19:41 - 2013-07-04 19:41 - 00880060 ____A C:\Users\Greta\Downloads\Film am 03.07.13 um 16.14 _2.mov
2013-07-04 19:26 - 2013-07-04 23:36 - 00000000 ____D C:\Users\Greta\Desktop\Fotoshooting mit Max
2013-07-03 22:08 - 2013-07-03 22:10 - 00746237 ____A C:\Users\Greta\Downloads\CLIL (1).pptx
2013-07-03 00:28 - 2013-07-03 00:28 - 04075246 ____A C:\Users\Greta\Desktop\simon hauk.mkv
2013-07-03 00:26 - 2013-07-03 00:26 - 02921452 ____A C:\Users\Greta\Desktop\Pärchen.mkv
2013-07-03 00:22 - 2013-07-03 00:22 - 00784270 ____A C:\Users\Greta\Downloads\Video (2).MOV
2013-07-03 00:21 - 2013-07-03 00:21 - 03710618 ____A C:\Users\Greta\Desktop\Oktoberfest.mkv
2013-07-03 00:21 - 2013-07-03 00:21 - 00756493 ____A C:\Users\Greta\Desktop\Video (1).mkv
2013-06-27 00:35 - 2013-06-27 00:35 - 01157230 ____A C:\Users\Greta\Downloads\Soul man.pptx
2013-06-25 12:47 - 2013-06-25 12:47 - 00797932 ____A C:\Users\Greta\Downloads\compliments 2.pptx
2013-06-24 23:34 - 2013-06-24 23:52 - 00523177 ____A C:\Users\Greta\Downloads\CLIL.pptx
2013-06-24 21:57 - 2013-06-24 21:57 - 00117243 ____A C:\Users\Greta\Downloads\Bilingual Lessons.pptx
2013-06-18 19:03 - 2013-06-18 19:03 - 00659488 ____A (FUSENET) C:\Users\Greta\Downloads\GraboidVideoInstaller-3.89.exe

==================== One Month Modified Files and Folders =======

2013-07-18 20:21 - 2013-07-07 22:03 - 00000000 ____D C:\Users\Greta\Desktop\Anti Virus
2013-07-18 20:15 - 2011-03-12 19:34 - 00000000 ____D C:\Users\Greta\AppData\Roaming\Skype
2013-07-18 20:13 - 2013-06-02 22:46 - 00002183 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-07-18 20:13 - 2011-03-11 20:47 - 00001110 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-18 20:11 - 2013-03-15 20:02 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-18 20:09 - 2011-03-11 20:47 - 00001106 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-18 20:04 - 2013-03-14 20:09 - 00000000 ___RD C:\Users\Greta\Dropbox
2013-07-18 20:04 - 2013-03-14 20:06 - 00000000 ____D C:\Users\Greta\AppData\Roaming\Dropbox
2013-07-18 20:04 - 2012-12-23 02:43 - 00000000 ____D C:\Users\Greta\AppData\Roaming\Spotify
2013-07-18 20:04 - 2010-06-25 21:35 - 01628682 ____A C:\Windows\WindowsUpdate.log
2013-07-18 19:02 - 2009-07-14 06:45 - 00014144 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-18 19:02 - 2009-07-14 06:45 - 00014144 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-18 18:54 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-18 18:54 - 2009-07-14 06:51 - 00089862 ____A C:\Windows\setupact.log
2013-07-12 03:35 - 2009-07-14 06:45 - 00445040 ____A C:\Windows\System32\FNTCACHE.DAT
2013-07-12 03:34 - 2013-03-15 02:42 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-12 03:34 - 2013-03-15 02:42 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-12 03:33 - 2010-05-20 04:02 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-12 03:33 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-12 03:33 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-12 03:18 - 2011-03-12 11:31 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-12 03:15 - 2010-06-26 07:28 - 00665812 ____A C:\Windows\System32\perfh007.dat
2013-07-12 03:15 - 2010-06-26 07:28 - 00133992 ____A C:\Windows\System32\perfc007.dat
2013-07-12 03:15 - 2009-07-14 07:13 - 01551698 ____A C:\Windows\System32\PerfStringBackup.INI
2013-07-11 21:18 - 2013-07-11 21:18 - 00000000 ____D C:\Program Files (x86)\ESET
2013-07-11 14:00 - 2013-07-11 14:00 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 13:58 - 2010-06-25 21:32 - 00459900 ____A C:\Windows\PFRO.log
2013-07-11 13:57 - 2013-07-11 13:57 - 00005336 ____A C:\AdwCleaner[S1].txt
2013-07-11 13:57 - 2013-07-11 13:57 - 00000097 ____A C:\Windows\DeleteOnReboot.bat
2013-07-11 13:41 - 2013-07-11 13:41 - 00024156 ____A C:\ComboFix.txt
2013-07-11 13:41 - 2013-07-11 10:00 - 00000000 ____D C:\Qoobox
2013-07-11 13:36 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini
2013-07-11 10:26 - 2013-07-11 09:59 - 00000000 ____D C:\Windows\erdnt
2013-07-11 09:57 - 2011-03-20 22:42 - 00000000 ____D C:\Users\Greta\Tracing
2013-07-09 22:37 - 2013-07-09 22:37 - 00000000 ____D C:\FRST
2013-07-09 22:35 - 2013-07-09 22:36 - 01776221 ____A (Farbar) C:\Users\Greta\Desktop\FRST64.exe
2013-07-08 09:11 - 2013-07-08 09:11 - 00454448 ____A C:\Windows\Minidump\070813-17924-01.dmp
2013-07-08 09:11 - 2012-12-15 17:00 - 00000000 ____D C:\Windows\Minidump
2013-07-08 09:11 - 2012-12-15 16:59 - 683718574 ____A C:\Windows\MEMORY.DMP
2013-07-08 08:38 - 2013-07-08 08:38 - 00273968 ____A C:\Windows\Minidump\070813-20264-01.dmp
2013-07-07 22:05 - 2013-07-07 22:05 - 00000000 ____A C:\Users\Greta\defogger_reenable
2013-07-07 22:05 - 2011-03-11 19:53 - 00000000 ____D C:\users\Greta
2013-07-07 21:54 - 2013-07-07 22:03 - 00050477 ____A C:\Users\Greta\Desktop\Defogger.exe
2013-07-07 14:23 - 2012-03-03 12:06 - 00000000 ____D C:\ProgramData\Trend Micro
2013-07-07 14:23 - 2011-03-13 20:25 - 00000000 ___RD C:\MSOCache
2013-07-07 14:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-07-07 14:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2013-07-05 00:08 - 2011-06-05 13:36 - 00000000 ____D C:\Users\Greta\AppData\Local\Windows Live
2013-07-04 23:37 - 2013-07-04 23:37 - 00000000 ____D C:\Users\Greta\Desktop\Zealand
2013-07-04 23:36 - 2013-07-04 19:26 - 00000000 ____D C:\Users\Greta\Desktop\Fotoshooting mit Max
2013-07-04 22:20 - 2013-07-04 22:17 - 00000000 ____D C:\FFOutput
2013-07-04 22:14 - 2013-07-04 22:14 - 00000000 ____D C:\Program Files (x86)\FreeTime
2013-07-04 20:46 - 2013-07-04 20:45 - 00000000 ____D C:\Users\Greta\Desktop\Fotos
2013-07-04 19:51 - 2013-07-04 19:51 - 03494670 ____A C:\Users\Greta\Desktop\VID-20130704-WA0002.mkv
2013-07-04 19:45 - 2013-07-04 19:45 - 02140696 ____A C:\Users\Greta\Desktop\Kopfgestellt.mkv
2013-07-04 19:45 - 2013-07-04 19:45 - 01206947 ____A C:\Users\Greta\Desktop\Jan.mkv
2013-07-04 19:43 - 2013-07-04 19:43 - 04240304 ____A C:\Users\Greta\Desktop\IMG_2505.mkv
2013-07-04 19:42 - 2013-07-04 19:42 - 02422030 ____A C:\Users\Greta\Desktop\IMG_4041.mkv
2013-07-04 19:41 - 2013-07-04 19:42 - 00964602 ____A C:\Users\Greta\Desktop\Carl.mkv
2013-07-04 19:41 - 2013-07-04 19:41 - 00880060 ____A C:\Users\Greta\Downloads\Film am 03.07.13 um 16.14 _2.mov
2013-07-03 22:10 - 2013-07-03 22:08 - 00746237 ____A C:\Users\Greta\Downloads\CLIL (1).pptx
2013-07-03 00:28 - 2013-07-03 00:28 - 04075246 ____A C:\Users\Greta\Desktop\simon hauk.mkv
2013-07-03 00:26 - 2013-07-03 00:26 - 02921452 ____A C:\Users\Greta\Desktop\Pärchen.mkv
2013-07-03 00:22 - 2013-07-03 00:22 - 00784270 ____A C:\Users\Greta\Downloads\Video (2).MOV
2013-07-03 00:21 - 2013-07-03 00:21 - 03710618 ____A C:\Users\Greta\Desktop\Oktoberfest.mkv
2013-07-03 00:21 - 2013-07-03 00:21 - 00756493 ____A C:\Users\Greta\Desktop\Video (1).mkv
2013-07-02 21:49 - 2012-05-05 14:00 - 00235606 ____A C:\test.xml
2013-07-01 22:29 - 2010-06-25 21:41 - 00000000 ____D C:\Program Files\Google
2013-07-01 22:29 - 2010-06-25 21:41 - 00000000 ____D C:\Program Files (x86)\Google
2013-06-27 22:51 - 2011-03-11 20:44 - 00000000 ____D C:\Users\Greta\AppData\Local\Google
2013-06-27 22:51 - 2010-06-25 21:41 - 00000000 ____D C:\ProgramData\Google
2013-06-27 22:50 - 2012-12-23 03:00 - 00000000 ____D C:\Firefox
2013-06-27 00:35 - 2013-06-27 00:35 - 01157230 ____A C:\Users\Greta\Downloads\Soul man.pptx
2013-06-26 17:29 - 2011-03-12 11:31 - 00000000 ____D C:\Users\Greta\AppData\Local\Microsoft Help
2013-06-25 12:47 - 2013-06-25 12:47 - 00797932 ____A C:\Users\Greta\Downloads\compliments 2.pptx
2013-06-24 23:52 - 2013-06-24 23:34 - 00523177 ____A C:\Users\Greta\Downloads\CLIL.pptx
2013-06-24 21:57 - 2013-06-24 21:57 - 00117243 ____A C:\Users\Greta\Downloads\Bilingual Lessons.pptx
2013-06-24 14:59 - 2013-05-22 19:40 - 00000000 ____D C:\Users\Greta\Desktop\Bilder
2013-06-24 11:25 - 2013-05-17 15:25 - 00000000 ____D C:\Users\Greta\Desktop\Musik
2013-06-18 19:03 - 2013-06-18 19:03 - 00659488 ____A (FUSENET) C:\Users\Greta\Downloads\GraboidVideoInstaller-3.89.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-04 01:02

==================== End Of Log ============================
--- --- ---
Alt 19.07.2013, 09:20   #15
schrauber
/// the machine
/// TB-Ausbilder
 
GVU-Virus vollständig entfernt? - Standard

GVU-Virus vollständig entfernt?


Java, Flash und Adobe updaten.

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.


Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort
Seite 1 von 2 1 2

Themen zu GVU-Virus vollständig entfernt?
abgesicherten, bluescreen, deaktiviert, entfernt, erfolgreich, festgestellt, forum, gmer, google, gvu - trojaner, gvu-virus, hilfe!, hochfahren, laptop, logfiles, micro, modus, scan, scannen, scanner, systemwiederherstellung, trend, version, virenscan, virenscanner, wirklich, zusammen


« adverplus.com | WebCake 3.00 - komische PC aktivitäten »


Ähnliche Themen: GVU-Virus vollständig entfernt?


  1. crossbrowse u.ä. vollständig entfernt?
    Plagegeister aller Art und deren Bekämpfung - 29.06.2015 (46)
  2. Adware nicht vollständig entfernt
    Plagegeister aller Art und deren Bekämpfung - 24.08.2014 (13)
  3. PC Optimizer Pro vollständig entfernt?
    Plagegeister aller Art und deren Bekämpfung - 01.05.2014 (14)
  4. GVU Trojaner - vollständig entfernt?
    Log-Analyse und Auswertung - 01.11.2012 (6)
  5. GVU-Trojaner - vollständig entfernt?
    Log-Analyse und Auswertung - 18.09.2012 (17)
  6. Incrdibar vollständig entfernt?
    Log-Analyse und Auswertung - 27.04.2012 (1)
  7. My Security Shield Virus vollständig entfernt? OTL Logfiles
    Log-Analyse und Auswertung - 23.04.2012 (8)
  8. Virus wo man 50 Euro zahlen soll, jetzt vollständig entfernt?
    Plagegeister aller Art und deren Bekämpfung - 30.03.2012 (5)
  9. System Check Virus vollständig entfernt?
    Log-Analyse und Auswertung - 30.03.2012 (4)
  10. WIN7 Internet Security 2011 VIRUS! Vollständig entfernt?
    Plagegeister aller Art und deren Bekämpfung - 17.05.2011 (5)
  11. TR/Dropper.Gen vollständig entfernt?
    Plagegeister aller Art und deren Bekämpfung - 13.01.2011 (6)
  12. ThinkPoint vollständig entfernt?
    Plagegeister aller Art und deren Bekämpfung - 18.11.2010 (23)
  13. Virus vollständig entfernt?
    Plagegeister aller Art und deren Bekämpfung - 15.03.2010 (1)
  14. Virus entfernt vollständig?
    Plagegeister aller Art und deren Bekämpfung - 21.10.2009 (6)
  15. Bifrost Virus - Wie kann er vollständig entfernt werden?
    Plagegeister aller Art und deren Bekämpfung - 18.10.2009 (5)
  16. Spylocked 3.3 vollständig entfernt?
    Log-Analyse und Auswertung - 19.04.2007 (15)
  17. Spyware vollständig entfernt???
    Log-Analyse und Auswertung - 01.03.2006 (12)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema GVU-Virus vollständig entfernt? - Hallo alle zusammen, meine Schwester hat sich auf ihrem Laptop den GVU-Virus eingefangen. Bevor ich durch googlen diese Forum gefunden habe, habe ich zuerst im abgesicherten Modus durch die Systemwiederherstellung - GVU-Virus vollständig entfernt?...
Archiv
Du betrachtest: GVU-Virus vollständig entfernt? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131